@argv_minus_one CPU cycles for TLS have been the limit on my setup. I mean it's a reasonably sized VM, and I don't want to pay more than 20€ per month to serve some static files. While I could turn off TLS, the next bottle neck is probably network bandwidth. I have a fail2ban rule in place that just bans any IP that does more than ~100 requests per minute for a couple of weeks. I also straight up firewalled the entire IP range of the worst offenders (unless they appeared to be IPs used by ISPs for their customers). Works fine so far. My sites can't be found via goggle anymore (or at least the newer pages won't show up), but their results are shit anyway.