I was able to block them on my silly hobby domains. Most of them were already blocked to begin with from blocking other shenanigans over the years. Even something as simple as blocking anyone that does not support HTTP/2.0 takes out most bots. Adding basic-auth also stops most of what gets through. Blocking TCP-SYN with strange MSS values cuts out many before they can even touch the web daemon.

Then firewall traffic that doesn't come from your local ISP blocks or authenticated users.

>The issue isn’t the actual network connection between people, it is the content.

>>Everyone serving a website is being ddos by AI agents right now.

You’re missing the point, the point is that while mesh networks solve a problem, it’s not required to solve the problem ”I’m tired of the Internet” or ”I’m being indexed”. You can build your own network on top of the Internet with zero new hardware required, with something like wireguard, i2p or whatever.

I don't think they ever claimed that it was the only way to solve the problem, just that they're doing it and it works for them.

Could you just geoblock the USA? Is most/all AI agent scraping from there?

If it's a mesh network your peers are tech savvy enough for a mesh vpn like wireguard, which also doesn't get ai-ddos'ed.

Geoblocking is nontrivial

You could set up two way TLS with client certificates

That isn't good enough and could be DDoS'd as well.

There's a dead comment here saying that OpenAI doesn't just DDoS the internet because it can. That's true. Any supposed DDoS is a side effect or incompetent scraping, and won't affect anything they can't scrape. Not sure why it's dead — it's important to realise this.

Edit: oh, it's probably dead because of the username

Make it private invite only behind Cloudflare

Oh yes, just let Cloudflare solve all of our problems. Fuck this. We shouldn't have to rely on yet another huge company to fix this for us.