Wasn't that the argument against https, namely, that it was too costly to run [1]? I also run fail2ban [2] in my servers and I rarely even notice it's there. I

Wasn't that the argument against https, namely, that it was too costly to run [1]? I also run fail2ban [2] in my servers and I rarely even notice it's there. I'm not saying you should sit down with the iptables manual and start going through the logs, but I can see the idea taking off if all it takes is (say) one apt-get and two config lines. [1] https://stackoverflow.com/questions/1035283/will-it-ever-be-possible-to-run-all-web-traffic-via-https https://stackoverflow.com/questions/1035283/will-it-ever-be-... [2] https://github.com/fail2ban/fail2ban https://github.com/fail2ban/fail2ban