#dev 2026-09-13

2026-09-13 UTC

tdrayson worth knowing banning in nginx itself doesn't save you much though, the handshake and TLS have already happened by the time nginx checks a blocklist. fail2ban at least drops them in the kernel on the next hit