tobychui / zoraxy

A general purpose HTTP reverse proxy and forwarding tool. Now written in Go!
https://zoraxy.arozos.com
GNU Affero General Public License v3.0
2.66k stars 155 forks source link

[ENHANCEMENTS] Regional Challenge Page #281

Open elBelgg opened 1 month ago

elBelgg commented 1 month ago

Is your feature request related to a problem? Please describe. I would like to be able to block countries, as well as to be able to set a challenge when they are blocked. For example: whitelist only for my country, challenge for the others, and block Asian countries.

Describe the solution you'd like Add a challenge section, in addition to whiteslit and blocking

Describe alternatives you've considered The Challenge could be like Cloudflare's, which first automatically checks if you are a bot, and if it doesn't, it asks you to click on it.

tobychui commented 1 month ago

Hey @elBelgg

This feature request doesn't make sense as the challenge is still initiated from your server / hosts. If you are under attack like DDOS, your server will still need to response to those challenge request and hence, there is no differences if the challenge is there or not in the fist place. Moreover, you can use rate limit to achieve to the same goal if what you want to do is slow down requests?

elBelgg commented 1 month ago

It's not because of ddos ​​attacks, just so that weird people don't get into my services. I'm a legitimate user and I access from my country, but maybe I want to share something with a friend from another country, and I don't want that country to have unrestricted access to my server, so a captcha would be a good solution. Fake users won't do the captcha, but real ones will.

tobychui commented 4 weeks ago

@elBelgg I feel like you are asking for a XY problem here. You think having a captcha will fix your original issue of having "fake users", but there are no "fake users". Either you mean attacks like what I mention earlier, or it is bot / scripts that is crawling your website. You need to give exact context of what you are trying to solve so I can consider if the feature is worth implementing.

elBelgg commented 4 weeks ago

I mean bot / scripts that crawls websites.

GamingForLive commented 2 weeks ago

I would also apreciate this feature and want to add that im estimating ~70-80% of the requests comming into my proxy to be automated bots