diff options
| author | Laurent Bercot <ska-skaware@skarnet.org> | 2025-04-06 05:07:25 +0000 |
|---|---|---|
| committer | Laurent Bercot <ska@appnovation.com> | 2025-04-06 05:07:25 +0000 |
| commit | 8398ec5d15808c47f55ada65b98eaad4ec8e7665 (patch) | |
| tree | dfab39e46a5803b761a1ed6e985ae84e848c3bd0 /doc | |
| parent | 76dd97c06419565c830323f1a43c147eada5d98a (diff) | |
| download | tipidee-8398ec5d15808c47f55ada65b98eaad4ec8e7665.tar.gz | |
Document tarpitting
Signed-off-by: Laurent Bercot <ska@appnovation.com>
Diffstat (limited to 'doc')
| -rw-r--r-- | doc/tipideed.html | 14 |
1 files changed, 14 insertions, 0 deletions
diff --git a/doc/tipideed.html b/doc/tipideed.html index 5d9a600..8f8e0c2 100644 --- a/doc/tipideed.html +++ b/doc/tipideed.html @@ -186,6 +186,20 @@ be passed as <tt>REMOTE_IDENT</tt> to CGI scripts. </dd> the client and the server. If present, tipideed will assume that the client connection is secure, and will pass <tt>HTTPS=on</tt> to CGI scripts; otherwise, it will assume it is running plaintext HTTP. </dd> + + <dt> TARPIT </dt> + <dd> If this variable is set and contains a positive integer, it is +interpreted as a number of milliseconds, and tipideed will sleep for +that amount before reading each request from that client <em>and</em> before +serving each resource. This can protect your server against abusive bot +crawling. You can set this variable conditionally depending on the client's +IP or resolved host name (or subdomain), for instance by using the <tt>env</tt> +feature of the +<a href="//skarnet.org/software/s6/s6-accessrules-cdb-from-fs.html">TCP +access rules format</a> used by +<a href="//skarnet.org/software/s6-networking/s6-tcpserver-access.html">s6-tcpserver-access</a>. +Of course, you can also use the same access rules database to outright ban +IP ranges or domains. </dd> </dl> <h3> Writing </h3> |