Nova WAF includes a powerful IP reputation engine, which can score the behaviour of IP addresses access your servers. If they misbehave, Nova will prevent them from accessing the site for a set amount of time.
IP Reputation Scores
We score an IP addresses reputation in two ways:
- The number of WAF rules its matching
- The rate it is making requests, and receiving errors
When either of these two metrics goes too high, the IP is considered to have a bad reputation for "Block Duration" seconds. It's measured over "Time Slice" seconds.
The rate limit is anything above "Request Threshold", but importantly these are only non-static items. It will not count images, stylesheets and the like.