Consider adding proof-of-work to mitigate bots #1635

New Issue

MrUnknownDE · 2026-04-05T19:38:03+02:00

MrUnknownDE commented

2026-04-05 19:38:03 +02:00

Originally created by @shayne on 4/7/2025

I had to temporarily take a service offline after it was overwhelmed by bot traffic. This seems to have been triggered by exposure through TLS transparency logs.

To help mitigate this kind of issue in the future, it would be great if Pangolin offered first-party support for a proof-of-work challenge to help deter automated abuse.

There’s an existing project that demonstrates this approach well: https://github.com/TecharoHQ/anubis.

Thanks!

*Originally created by @shayne on 4/7/2025* I had to temporarily take a service offline after it was overwhelmed by bot traffic. This seems to have been triggered by exposure through TLS transparency logs. To help mitigate this kind of issue in the future, it would be great if Pangolin offered first-party support for a proof-of-work challenge to help deter automated abuse. There’s an existing project that demonstrates this approach well: https://github.com/TecharoHQ/anubis. Thanks!

MrUnknownDE closed this issue

2026-04-05 19:38:03 +02:00

Sign in to join this conversation.

Branches Tags

main

dev

dependabot/npm_and_yarn/dev-minor-updates-b4e5d6b9c5

revert-2766-feature/systemd-install-instructions

dependabot/npm_and_yarn/prod-patch-updates-05702d39f2

dependabot/npm_and_yarn/next-16.2.1

dependabot/npm_and_yarn/recharts-3.8.1

alerting-rules

private-site-ha

dependabot/docker/docker/library/node-25-slim

ssh

delete-account

msg-delivery

org-only-idp

cicd

patch

site-targets-auto-login

No Label

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github/pangolin#1635