[WordPress] 外掛分享： Bottle

內容簡介

Bottle 是一款用於減少伺服器負載的機器人限流外掛，透過對 HTTP 請求進行多項檢查，當檢測到過多的請求時，會對會話或 IP 進行限流，確保網站對合法使用者的可用性。

【主要功能】
• 限制每個 IP 的會話數量
• 限制每個會話的請求速率
• 限制每個 IP 的請求速率
• 檢查機器人身份的驗證
• 限制特定網站區域的請求
• 排除特定 URL 或 IP 的處理

外掛標籤

開發者團隊

原文外掛簡介

Bottle is a bot throttling plugin. It consists of a set of tools that can be used to reduce server load when excessive bot requests are made to a website.
It works by performing a variety of checks on each HTTP request made to WordPress, and throttling sessions or IPs when thresholds are exceeded. These include:

Too many sessions per IP. Since some bots don’t bother with cookies, Bottle sets a JWT session cookie for each request. If a single IP address creates too many new sessions within a given timeframe, it is likely a bot, and will be throttled.

Too many requests per session. Bottle calculates a request rate for each session. Bots that exceed that rate will be throttled.

Too many requests per IP. Bottle calculates a request rate per IP. For bots that don’t process cookies (and therefore sessions), this can throttle abusive IPs.

Too many requests per bot. Bottle calculates a request rate per bot (based on user agent reported). Since malicious bots forge user agents, this should be combined with other throttling mechanisms.

Bot verification check. Bottle checks bots such as Google, Bing, Meta, etc. against authoritative lists of IP addresses, when possible. Bottle allows for a higher verified bot rate than non-verified rate with the idea that verified bots are likely better behaved.

Overall request rate. Bottle can throttle specific sections of a website that are being abused by bots. (For instance, the courses catalog.) This is useful when a large website is being scraped by a bot network with rotating IPs.

Excessive 404s. If bots are scanning a website, or are misconfigured, excessive 404s can be time-consuming for WordPress to process. Bottle can either throttle all 404 requests, or can block 404s for static files (i.e. images) only.

Exclusions. Bottle can exclude certain URLs, IP addresses, or infrastructure (such as Stripe and Pingdom) from processing to prevent false positives.

When a client is throttled, Bottle can outright throttle it with a 429 response, or can serve a JavaScript-based cryptographic puzzle. If a client is legitimate, it will automatically compute the puzzle’s solution and submit it to the server for verification. (No user input is required.) After it has proven its human-ness, Bottle will permit that user entry to the site. At the moment, some bots, but not all, will solve these puzzles.
When a throttle condition is reached, Bottle terminates WordPress processing, which substantially reduces server load when under attack. Throttles end automatically at the end of their respective measurement windows.
Bottle is not a firewall and will not block or sanitize malicious attacks. However, since such attacks are typically performed in large quantities, Bottle can be effective at slowing such attacks and reducing server load, keeping the website operational for legitimate users.
Overall, Bottle is a set of tools designed to reduce server load with minimal disruption to real users.

延伸相關外掛

Wordfence Security – Firewall, Malware Scan, and Login SecurityWordfence Security 是最受歡迎的 WordPress 安全防護外掛，...Security Optimizer – The All-In-One Protection PluginSecurity Optimizer 是一款全方位的 WordPress 安全外掛，能...Limit Login Attempts Security – Login Security, 2FA, Firewall, Brute Force PreventionLimit Login Attempts Reloaded 是一款強大的安全外掛，旨在...All-In-One Security (AIOS) – Security and FirewallAll-In-One Security (AIOS) 是一款功能全面的 WordPress 安...Sucuri Security – Auditing, Malware Scanner and Security HardeningSucuri Security 外掛旨在保護您的 WordPress 網站，提供全面...MalCare WordPress Security Plugin – Malware Scanner, Cleaner, Security FirewallMalCare 是一款專為 WordPress 網站設計的安全外掛，提供即時...NinjaFirewall (WP Edition) – Advanced Security Plugin and FirewallNinjaFirewall (WP Edition) 是一款先進的網頁應用防火牆，專...Login Lockdown & ProtectionLogin Lockdown & Protection 外掛能夠記錄失敗登入嘗試...WP Ghost (Hide My WP Ghost) – Security & FirewallWP Ghost 是一款專業級的 WordPress 安全解決方案，專注於防...Anti-Malware Security and Brute-Force FirewallAnti-Malware Security and Brute-Force Firewall 外掛旨在保...BBQ Firewall – Fast & Powerful Firewall SecurityBBQ Firewall 是一款輕量級且快速的 WordPress 防火牆外掛，...Defender Security – Malware Scanner, Login Security & FirewallDefender Security 是一款易於設置的企業級安全外掛，能有效...Patchstack – WordPress & Plugins SecurityPatchstack 是一個強大的工具，可幫助您識別所有網站的外掛、...Security Plugin, Firewall & Malware Scanner with Auto Removal這款安全外掛專為 WordPress 設計，提供全面的安全防護，包括...Shield Security – Smart Bot Blocking, Brute-Force Login Protection & File Scanning你一定會喜歡的功能 獨家AntiBot Detection Engine - 強大的...