ekmire docs · by Flux8Labs
docs / proxy/tarpit

Tarpit

How ekmire slows down automated scrapers and scanners.

Overview

Tarpitting serves HTTP 200 responses at 1 byte per second to IPs classified as automated. Real users never trigger it; scrapers waste hours.

Classification heuristics

Sub-millisecond response acceptance, missing browser headers, repeated probing of honeypot URLs, sequential UUID enumeration patterns.

Tuning

EKMIRE_TARPIT_THRESHOLD_MS and EKMIRE_TARPIT_CONSECUTIVE control aggressiveness. The defaults are tuned to avoid false positives on legitimate API clients.