go-away

go-away sits in between your site and the Internet / upstream proxy. Incoming requests can be selected by rules to be actioned or challenged to filter suspicious requests. The tool is designed highly flexible so the operator can minimize impact to legit users, while surgically targeting heavy endpoints or scrapers. Challenges can be transparent (not shown to user, depends on backend or other logic), non-JavaScript (challenges common browser properties), or custom JavaScript (from Proof of Work to fingerprinting or Captcha is supported)