In the end I just asked chatgpt to write a script to parse my nginx log files and to call the depreciated firewall api to block the IP. I see the modern WAF way is to create a list (accounts get 1 single list, not 1 list per domain) and add IPs to that and use a rule from the WAF. I suspect maybe there might be a way to do it with workers but I'll re-visit it in the future. But yes, an edge of network fail2ban would be very cool. For now I'm happy with the workaround (until the depreciated API is removed!)
What will cloudflare do if the TLS 1.3 PoW draft is approved? Will we get an implementation? I think it would an amazing way of stopping DDoS attacks, the delay for users would be minimal (even less if it only activates when the site is under attack), but for attackers it would add up very quickly and make the computational power necessary to affect the origin way higher as before. For example with the proof of work implemented, you might need 100-200x the amount of compute for every request, so an attack that would do 20k RPS would only do 100 to 200 RPS, and it would be almost invisible to the user, with only a slight delay for page load, but way better than having the site offline or having a JS challenge, I think the best implementation would be to add it on the challenge platform as an additional challenge (that you can for example select in the rules) and it could be also triggered by default on HTTP-DDOS as a global measure to protect the origin in case of an attack
Hello guys , i want to know , how can i automatize a process in my saas , where users can create websites from the website builder with a subdomaine or a specific domaine , there is any solution that can help me