If you self-host services on the internet, you may have seen waves of crawlers hammering your websites without mercy.

[velvet@pawb.fun]

@Soblow @NafiTheBear @terrencefoxfur

[terrencefoxfur@furryfandom.me]

@velvet @Soblow @NafiTheBear Yup they are the bane of my life. I have an ... aggressive ... filter list, and have absolutely no qualms in just blocking LLM's entirely

[soblow@eldritch.cafe]

I should do an addendum but right now, my main website is getting hammered at rates similar to what my knowledge website used to be hit at.
On the opposite, the "knowledge" website is back at "normal" background noise of <100req/min.

The banlist now contains so many IPs, and yet they still reach 6kreq/min nearly constantly.

At that point, I'm thinking about tinkering my banip tool to compute optimal subnets instead of always crafting /24 subnets.

[puffin@squawk.social]

@Soblow feel like once you have blocked the big data center it just become wack and mole since tools like those exist

Internet Sharing SDKs: a Closer Look at the Emerging App Monetization Method - Proxyway

Internet sharing SDKs are reshaping app monetization. But what do you need to know before adopting them?

Proxyway (proxyway.com)

[lilacperegrine@clockwork.monster]

@Soblow
curious, is the subnet thing using similarities in the ip to ban specific ranges?

computing optimal things sounds like a math problem and if so, im game to try it out

[soblow@eldritch.cafe]

That's frightening.
Like, legitimately, I'm scared of what that means.

I'll try to ratelimit at 10req/min per ip.

[soblow@eldritch.cafe]

@lilacperegrine Are you familiar with the concept of a quadtree?

[lilacperegrine@clockwork.monster]

@Soblow
a data structure where every node has 4 children?
im sorta familiar with it, but i havent used it much

[ifixcoinops@retro.social]

@Soblow I've been following this with interest

[soblow@eldritch.cafe]

@lilacperegrine Well, I have an intuition that the problem I'm looking to solve is akin to the construction of a quadtree:
I have a list of IPv4/32. I want to generalize this list using the properties of subnets (a n subnet contains 2 n+1 subnets).
I don't have an explaination though, and my math skills are rusty...

[eragon@pl.eragon.re]

@Soblow@eldritch.cafe @lilacperegrine@clockwork.monster Seems like a cool thing to do… if only I could use university's time to do that.

[lilacperegrine@clockwork.monster]

@Soblow
so you have a list of ips, and are using a binary(or quad) tree in order to classify them into clean vs dirty?

[soblow@eldritch.cafe]

@lilacperegrine No, not really...
I talked about quadtree because that's something I manipulated and it made met think of it.
Let's take a step back and formalize the problem:

Let's assume I have a list of unique IPv4 adresses.
They are represented on 32 bits.
I want to construct a list of subnets (so still 32 bits) that summarize the list of IPs I have.

For example, if I have 192.168.1.0 and 192.168.1.1, I could generalize this with the 192.168.1.0/31 subnet (if I'm not mistaken), which contains the previous two IPs without containing any other IPs.
If it helps, represent them in binary and find the common upper bits:

11000000.10101000.00000001.00000000 (192.168.1.0)
11000000.10101000.00000001.00000001 (192.168.1.1)

The common part is everything up to the last bit, thus the mask is a `/31` which is 255.255.255.254, or in binary `11111111.11111111.11111111.11111110`.

Now, I have tens of thousands of IPs and I'd like the smallest list of subnets that includes all bad IPs without including good IPs

I'm sure there are academic papers about this, this sounds like a problem folks must already have had

[_syhmac@meow.social]

@Soblow Yeah… last time my website had been bombed like this, I decided that Cloudflare is not such a bad idea… I hope you’ll figure it out.

[stupidcamille@eldritch.cafe]

@Soblow I don't always read a blog post til the end. But when I do, it's always a banger

[soblow@eldritch.cafe]

@StupidCamille Glad you liked it!

[stupidcamille@eldritch.cafe]

@Soblow

[stupidcamille@eldritch.cafe]

@Soblow also, don't be insecure about nginx. I'm still using Apache2 and don't plan on changing anytime soon

[soblow@eldritch.cafe]

@StupidCamille I mean, Apache2 is okay for regular users, using nginx is a professional bias at this point

[nicole4fox@datastream.cortexvoid.net]

@Soblow @StupidCamille i also use nginx mostly and i setup a fail2ban that throws 444 at crawlers