We have experienced some slowness on our instance today, mainly due to mild DDoS attacks from bot armies, AI, and scrapers. I'm thinking of adding Cloudflare protections and anti-bot mechanisms, as blocking bots at the web server level is like a game of whack-a-mole. However, this needs careful planning, as we don't want legitimate users to get blocked by accident.
We also do not intend to block all automation, since I use some myself and we want our API to stay reliable. Additionally, when content is shared on other social media or messaging platforms, we still want previews to generate properly.
I'll share an update on our progress later.