Bot Detection Audit

[solaris007]

As bot detection employed on CDNs in the context of edge delivery sites may cause performance penalties, we should explore whether we can detect bot detections.

AFAIK there’s no deterministic way to detect “bot detection”. the detections don’t announce themselves expressly, e.g. via http response header. all we could do is test for certain patterns that may indicate bot detection, such as cookies, js challenges or request rejections with unusual user agents, etc.

For reference see https://cq-dev.slack.com/archives/C05A45JBP9N/p1710871764208859