For example an admin page that should not be visited unless with special cookie or query string token. The point being that anyone who tried and failed would likely be with bad intention. Or when the connection has ddos behavior.
Is there a way that if you determine that request is an evil one, you withhold that connection as long as possible, and return a package as large as possible , in a way that is without side effect to the server? Maybe redirecting to other special website? Or other better strategy? (I am using Nginx. But I guess this question is quite general.)