Post #1919667

@osm_tech @BalooUriza i noticed this too! for when bots were hammering my git forge, i wrote a small script that would watch the systemd journal for when go-away identified a bot, and add that to an ipset for efficient in-kernel blocking of requests. the default ipset size was too small, but it can handle millions of addresses with no noticeable performance hit. each entry would expire after a configurable duration.