I would like to protect my server from too many hits from Bots.
Considering a scenario, where in a server (physical) located in a private network and hitting my server continuously. Do i have a mechanism to identify the server behind the hits, say by browser ID, if any, and try to restrict access?
When ever a machine/server requests data from a website, the IP and MAC addresses gets overwritten when they pass through a router/load balancer. Ideally, Bots designers ensure their BOT is behind a load balancer, but there must be a way to locate the physical server address or its mac address, so i could have a limitation on the number of hits allowed.
Or, "Should i scale up the server and allow as many transactions as possible" is the only/ideal choice rather than trying to limit the hits? Considering the complexity of implementing such algorithm.