IIS 8 - how to slow down bots so my site isn't overrunWhat outbound HTTP throttling solutions exist?How are these 'bad bots' finding my closed webserver?Blocking 'good' bots in nginx with multiple conditions for certain off-limits URL's where humans can goIIS 8.5 Import Site Bindings?What are the symptoms of an overloaded webserverClassic asp site, randomly slow DB connectionIIS website slow on first hitIIS 8 - Default SSL Site Breaks SNIHow do sites detect bots behind proxies or company networkshow to track down security problems between IIS web servers?

Why doesn't the Earth's acceleration towards the Moon accumulate to push the Earth off its orbit?

Crossword gone overboard

What is the difference between nullifying your vote and not going to vote at all?

Why do Russians call their women expensive ("дорогая")?

Do you play the upbeat when beginning to play a series of notes, and then after?

Can a non-EU citizen travel within schengen zone freely without passport?

Is there an explanation for Austria's Freedom Party virtually retaining its vote share despite recent scandal?

Comment dit-on « I’ll tell you what » ?

Can a wire having a 610-670 THz (frequency of blue light) AC frequency supply, generate blue light?

Employer demanding to see degree after poor code review

Is it possible to change original filename of an exe?

Why do they consider the Ori false gods?

Is this story about US tax office reasonable?

Plot exactly N bounce of a ball

How does an ARM MCU run faster than the external crystal?

Could I be denied entry into Ireland due to medical and police situations during a previous UK visit?

Preserving culinary oils

What's the connection between "kicking a pigeon" and "how a bill becomes a law"?

Smart people send dumb people to a new planet on a space craft that crashes into a body of water

How can I prevent interns from being expendable?

What caused the tendency for conservatives to not support climate change reform?

Transform the partial differential equation with new independent variables

Inverter Power draw from 12V battery

Is a post-climate apocolypse city in which many or most insects have disappeared realistic?



IIS 8 - how to slow down bots so my site isn't overrun


What outbound HTTP throttling solutions exist?How are these 'bad bots' finding my closed webserver?Blocking 'good' bots in nginx with multiple conditions for certain off-limits URL's where humans can goIIS 8.5 Import Site Bindings?What are the symptoms of an overloaded webserverClassic asp site, randomly slow DB connectionIIS website slow on first hitIIS 8 - Default SSL Site Breaks SNIHow do sites detect bots behind proxies or company networkshow to track down security problems between IIS web servers?






.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty height:90px;width:728px;box-sizing:border-box;








0















I am looking for a way to slow down (but preferably not block) bots indexing our website running IIS 8 in order to prevent the site from being overloaded and inaccesible to humans. I would think this need should be common but I cannot seem to google a reasonable solution.



Details of situation:
We are being indexed by number (10-20) of bots simultaneously. Some of the bots are accessing pages that are slow as they involve complex filtering and slow (1-2 seconds of CPU time to generate). With multiple bots indexing them the whole website is basically inaccessible in reasonable was to customers



What I tried:
Static IP blocking is difficult as bots are comming from multiple IPs. Using Dynamic IP restrictions on number of request also seems usless as I think the bots only go for HTML files and images whilst people go for both so people create more requests (by count) than bots. I tried throtling CPU usage to about 10% but that created a long request queue making the human requests time out.



What solution I think could work:
I think we need a system that would determine based on ip, user-agent, headers, URL-s access, session time etc (possible AI based) wheather we're dealing with bot or human and apply some slow down logic to the bot request. I looked for such solution I can't seem to find anyting out there.



Your thought on the topic are very appreciated. Thank you!










share|improve this question




























    0















    I am looking for a way to slow down (but preferably not block) bots indexing our website running IIS 8 in order to prevent the site from being overloaded and inaccesible to humans. I would think this need should be common but I cannot seem to google a reasonable solution.



    Details of situation:
    We are being indexed by number (10-20) of bots simultaneously. Some of the bots are accessing pages that are slow as they involve complex filtering and slow (1-2 seconds of CPU time to generate). With multiple bots indexing them the whole website is basically inaccessible in reasonable was to customers



    What I tried:
    Static IP blocking is difficult as bots are comming from multiple IPs. Using Dynamic IP restrictions on number of request also seems usless as I think the bots only go for HTML files and images whilst people go for both so people create more requests (by count) than bots. I tried throtling CPU usage to about 10% but that created a long request queue making the human requests time out.



    What solution I think could work:
    I think we need a system that would determine based on ip, user-agent, headers, URL-s access, session time etc (possible AI based) wheather we're dealing with bot or human and apply some slow down logic to the bot request. I looked for such solution I can't seem to find anyting out there.



    Your thought on the topic are very appreciated. Thank you!










    share|improve this question
























      0












      0








      0








      I am looking for a way to slow down (but preferably not block) bots indexing our website running IIS 8 in order to prevent the site from being overloaded and inaccesible to humans. I would think this need should be common but I cannot seem to google a reasonable solution.



      Details of situation:
      We are being indexed by number (10-20) of bots simultaneously. Some of the bots are accessing pages that are slow as they involve complex filtering and slow (1-2 seconds of CPU time to generate). With multiple bots indexing them the whole website is basically inaccessible in reasonable was to customers



      What I tried:
      Static IP blocking is difficult as bots are comming from multiple IPs. Using Dynamic IP restrictions on number of request also seems usless as I think the bots only go for HTML files and images whilst people go for both so people create more requests (by count) than bots. I tried throtling CPU usage to about 10% but that created a long request queue making the human requests time out.



      What solution I think could work:
      I think we need a system that would determine based on ip, user-agent, headers, URL-s access, session time etc (possible AI based) wheather we're dealing with bot or human and apply some slow down logic to the bot request. I looked for such solution I can't seem to find anyting out there.



      Your thought on the topic are very appreciated. Thank you!










      share|improve this question














      I am looking for a way to slow down (but preferably not block) bots indexing our website running IIS 8 in order to prevent the site from being overloaded and inaccesible to humans. I would think this need should be common but I cannot seem to google a reasonable solution.



      Details of situation:
      We are being indexed by number (10-20) of bots simultaneously. Some of the bots are accessing pages that are slow as they involve complex filtering and slow (1-2 seconds of CPU time to generate). With multiple bots indexing them the whole website is basically inaccessible in reasonable was to customers



      What I tried:
      Static IP blocking is difficult as bots are comming from multiple IPs. Using Dynamic IP restrictions on number of request also seems usless as I think the bots only go for HTML files and images whilst people go for both so people create more requests (by count) than bots. I tried throtling CPU usage to about 10% but that created a long request queue making the human requests time out.



      What solution I think could work:
      I think we need a system that would determine based on ip, user-agent, headers, URL-s access, session time etc (possible AI based) wheather we're dealing with bot or human and apply some slow down logic to the bot request. I looked for such solution I can't seem to find anyting out there.



      Your thought on the topic are very appreciated. Thank you!







      iis-8 web-crawler throttling






      share|improve this question













      share|improve this question











      share|improve this question




      share|improve this question










      asked May 15 at 7:09









      FilipFilip

      157129




      157129




















          0






          active

          oldest

          votes












          Your Answer








          StackExchange.ready(function()
          var channelOptions =
          tags: "".split(" "),
          id: "2"
          ;
          initTagRenderer("".split(" "), "".split(" "), channelOptions);

          StackExchange.using("externalEditor", function()
          // Have to fire editor after snippets, if snippets enabled
          if (StackExchange.settings.snippets.snippetsEnabled)
          StackExchange.using("snippets", function()
          createEditor();
          );

          else
          createEditor();

          );

          function createEditor()
          StackExchange.prepareEditor(
          heartbeatType: 'answer',
          autoActivateHeartbeat: false,
          convertImagesToLinks: true,
          noModals: true,
          showLowRepImageUploadWarning: true,
          reputationToPostImages: 10,
          bindNavPrevention: true,
          postfix: "",
          imageUploader:
          brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
          contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
          allowUrls: true
          ,
          onDemand: true,
          discardSelector: ".discard-answer"
          ,immediatelyShowMarkdownHelp:true
          );



          );













          draft saved

          draft discarded


















          StackExchange.ready(
          function ()
          StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f967318%2fiis-8-how-to-slow-down-bots-so-my-site-isnt-overrun%23new-answer', 'question_page');

          );

          Post as a guest















          Required, but never shown

























          0






          active

          oldest

          votes








          0






          active

          oldest

          votes









          active

          oldest

          votes






          active

          oldest

          votes















          draft saved

          draft discarded
















































          Thanks for contributing an answer to Server Fault!


          • Please be sure to answer the question. Provide details and share your research!

          But avoid


          • Asking for help, clarification, or responding to other answers.

          • Making statements based on opinion; back them up with references or personal experience.

          To learn more, see our tips on writing great answers.




          draft saved


          draft discarded














          StackExchange.ready(
          function ()
          StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f967318%2fiis-8-how-to-slow-down-bots-so-my-site-isnt-overrun%23new-answer', 'question_page');

          );

          Post as a guest















          Required, but never shown





















































          Required, but never shown














          Required, but never shown












          Required, but never shown







          Required, but never shown

































          Required, but never shown














          Required, but never shown












          Required, but never shown







          Required, but never shown







          Popular posts from this blog

          Wikipedia:Vital articles Мазмуну Biography - Өмүр баян Philosophy and psychology - Философия жана психология Religion - Дин Social sciences - Коомдук илимдер Language and literature - Тил жана адабият Science - Илим Technology - Технология Arts and recreation - Искусство жана эс алуу History and geography - Тарых жана география Навигация менюсу

          Bruxelas-Capital Índice Historia | Composición | Situación lingüística | Clima | Cidades irmandadas | Notas | Véxase tamén | Menú de navegacióneO uso das linguas en Bruxelas e a situación do neerlandés"Rexión de Bruxelas Capital"o orixinalSitio da rexiónPáxina de Bruselas no sitio da Oficina de Promoción Turística de Valonia e BruxelasMapa Interactivo da Rexión de Bruxelas-CapitaleeWorldCat332144929079854441105155190212ID28008674080552-90000 0001 0666 3698n94104302ID540940339365017018237

          What should I write in an apology letter, since I have decided not to join a company after accepting an offer letterShould I keep looking after accepting a job offer?What should I do when I've been verbally told I would get an offer letter, but still haven't gotten one after 4 weeks?Do I accept an offer from a company that I am not likely to join?New job hasn't confirmed starting date and I want to give current employer as much notice as possibleHow should I address my manager in my resignation letter?HR delayed background verification, now jobless as resignedNo email communication after accepting a formal written offer. How should I phrase the call?What should I do if after receiving a verbal offer letter I am informed that my written job offer is put on hold due to some internal issues?Should I inform the current employer that I am about to resign within 1-2 weeks since I have signed the offer letter and waiting for visa?What company will do, if I send their offer letter to another company