@alexia@mkljczk First time I hear of Iocaine. Goaway has also been mentioned as being preferable over Anubis with the main advantage being that it functions without JavaScript as I understand. What's the pitch for Iocaine over Anubis or Goaway?
@newbyte@mkljczk iocaine works entirely without JS, like Go-Away, but is designed to not even give a challenge to the client to begin with. The idea is that you can have infinitely customizable pattern-matching against the HTTP requests, including a mechanism to store past state, and metrics (through Prometheus) as well for good measure. If things get real bad, you can make it firewall entire IPs away for 4 hours depending on the ruleset which was hit
that doesn't mean there isnt the possibility of presenting a challenge though, the developer's own config ships with one which is especially useful for stuff like Forgejo or GitLab
@newbyte@mkljczk Algernon, the developer, has spent probably too much time analyzing HTTP requests of real browsers to weed out fake ones, and their Nam-Shub-Of-Enki Config is quite powerful as a result
3😭1
