Post #2686092
2025-05-13 13:15 UTC
@tdp_org@mastodon.social nice, how are you implementing it? RIR dumps in some format with some kind of accelerated lookup (guessing by prefix a la routing trie or similar)?
(off the top of my head I dunno if any popular open source servers have this natively, haven’t had to look for a while, but now I feel like gonna go check all the usual suspects ;D)
Replies (1)
-
@tdp_org@mastodon.social 2025-05-13 14:03
@froztbyte@mastodon.social This is at access log ingest time which runs in a custom pipeline. We have a standard user-agent parsing lib in an enrichment which has been extended to include "known" bots and I recently enhanced this to also include checking of the source AS for such bots where either the vendor publishes what the source AS will be, or where our logs show that clearly and consistently enough.