Recent content by Jja

I disagree. If you are not on their cloud, then XF shouldn’t be responsible for your hosted site. It’s up to you as the owner to configure it to mitigate issues, or hire someone who knows how to.

Not a problem if you have server access - you can configure to allow only cloudlfare ip list.

I have an issue, which can be replicated here as well. Will take existing topic from here to show what I mean, for example: Migration from Invision 4.7.22 Cloud, not self-hosted In some cases i would like to search all versions for 4.7, when i type in the search 4.7 it shows in suggestions...

Ask your hosting company, xenforo is not the cause, nor responsible for that.

I am perfectly aware of how fail2ban works. I don't see how you manage it successfuly when you have thousands of bot sessions. Your logic - Cloudflare is bad but let's allow bots to scrape.

Why bother with fail2ban and the traffic which still reaches your server? Using Cloudflare you can configure many settings to reduce unwanted spam traffic. I have monitored some of the bot traffic and have placed Amazon's AWS, Microsoft's Azure, Alibaba, Huawei ASNs behind a challenge in the...

"service" is not installed

And then they buy new cloud-services and have new ip address range...

It wont work for "real targeted" attack, but why for situations like these you dont add separate CF WAF rule just for the useragent?

If have no access to server mysql tuning you might try to change xf_session_activity table storage engine to InnoDB

Its not the Xenforo problem itself but server configuration.

Doesnt change the fact. Guests, bots also uses sessions and are stored in the table as well.

Not properly configured (tuned) server for given application/traffic. I would rather ask "how full is full?" Whats the setup of actual mysql config + available resources ? Thats exactly what this table contains.