Nostr Web Client

GM folks. Just sharing this again for Nostr operators in the European time zone.

It is getting worse. I had over 10 million requests on my personal relay yesterday. Several other folks operating Nostr infrastructure have confirmed their servers getting hammered. Coincidentally or not, I’ve been seeing both clients and relays going on and off over the past few days.

nostr:nevent1qqs8u28ef975y9y24ekhs86galvr7a93n0a7aykgrl0e208hqqa6gvcprdmhxue69uhksctkv4hzuctrvd5k7mre9eek7cmfv9kz7q3qa6we08n7zsv2na689whc9hykpq4q6sj3kaauk9c2dm8vj0adlajqxpqqqqqqzdtejsl

Cloudflare seems to be doing jack squat to mitigate the attack so far. So, if you haven’t blocked Cloudflare Workers from reaching your relay yet, I sincerely recommend you do. Also, if possible, keep a list of Workers hitting your infrastructure, remove legitimate traffic as best as you can, and keep reporting it to Cloudflare. At some point, they’ll have to do something about it.

#devstr #cloudflareWorkers #botsBeBotting

jurraca 6mo ago

Consider Anubis? https://github.com/techarohq/anubis

you can set it up to block cloudflare workers.

Reply to this note

Please Login to reply.

Discussion

Anthony Accioly 6mo ago

Anubis is awesome. Thanks for the suggestion. I'm straight returning 444 and dropping requests from Cloudflare Workers as it was hitting my box with over 10m requests and even pfSense couldn't keep it. It's better now, and I may consider Anubis as a more permanent solution to Bots in general (I was using other tarpitting solutions in the past but unfortunately during attacks like this my CPU can't handle it).