Hacker Newsnew | past | comments | ask | show | jobs | submit | nodox's commentslogin

Yes please open source. I tried something similar based one your checkboxes game! I never worked with websockets so I’m curious how you designed for scale and stopped spammers. I game was click the button 10M times and of course the script kiddies started immediately which is fun! But not my server keeps getting hammered with requests long after the initial interest. I did not know how to rate limit bots without blocking whole IP ranges.


fwiw I think the biggest single trick there is to group IPV6 addresses at the /48 or /64 level before applying rate limits (you can rate limit IPV4s on a per-ip basis).

It's kind of annoying and expensive to get a bunch of IPv4s to evade limits, but it's really easy to get a TON of IPv6s.

The other Big Trick I know is to persist rate limits after a client disconnects so that they can't disconnect -> reconnect to refresh their limits.


I didn't think anyone would think it was cool or even comment. Thank you for the kind words!

Interesting error you're having because I mostly use chrome and never noticed that bug on that the app. Maybe its a caching issue. Thanks for pointing it out!

Let me know if you have any other issues or feature requests. The app can be fleshed out in a couple areas so your feedback will go directly into shaping the product roadmap. I am Steven Natera on Linkedin and Twitter.

Again you have given me such a gift. I appreciate you!


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: