3 ms·
Well, if they rework things so that requests all originate from the same IP address or a small set of addresses, then regular IP-based rate limits should work f
by solid_fuel 2y ago
Well, if they rework things so that requests all originate from the same IP address or a small set of addresses, then regular IP-based rate limits should work fine right?
The point is just to stop what is effectively a DDoS because of shitty web crawlers, not to stop the crawling entirely.
- lifthrasiir 2y ago> Well, if [...], then regular IP-based rate limits should work fine right? I'm not sure. IP-based rate limits have a well-known issue with shared public IPs for example. Technically they are also more resource-intensive than cryptographic approaches too (but I don't think that's not a big issue in IPv4).
- dharmab 2y ago> then regular IP-based rate limits should work fine right? These are also harmful to human users, who are often behind CGNAT and may be sharing a pool of IPs with many thousands of other ISP subscribers.