@dysfun @beasts @corbet @LWN thing's I do include quickly rejecting no-referer requests on anything other than legit landing pages, rejecting all query params where not legit, rejecting more edge cases when under stress. All (Apache) server config rules.