General note: If you have concerns about a specific plan right-sizing, reply to the email you received and let us know what your concerns and questions are and we’ll take it from there.
^ I am doing this, and also opened a ticket.
My plan bumped from $125 to $450 which there is no way I can afford. I do not have the time to be scrambling to find a new host.
I use Pantheon all day at work and love it – we are a partner – but this is no good.
(this is a personal site of mine and apparently is getting hit by Chinese and other bots).
From that ticket below:
Our colleague worked on getting the data you requested . He ran two reports, January 23, 2020 and February 6, 2020. On both days, there was a steady amount of foreign bot traffic identified user agents (identify as older Chinese consumer smartphones with outdated versions of Android). These bots generate a lot of unique visitors because they come from a very wide range of IP addresses, bundled with 4 or more user agents. For January 23, these bots contributed to around 98% of the total page visits (unique visitors) recorded.
Unfortunately, we are limited to blocking bots at the platform or Global CDN level, as these can be legitimate user agents that are spoofed, but what makes identifiable is by the volume of requests and IP range in a short amount of time.
The best course of action long-term is to implement a WAF. If you have any troubles finding the right WAF for you, you can always reach out to your account manager or the support team about our Advanced CDN product that can be used to filter these types of requests (GeoIP blocking, whitelist / blacklist IP ranges, etc) prior to reaching the Global CDN.
Alternatively, you can always block these requests at the application level, at the cost of a performance trade-off until a WAF is put in place. If you block IP addresses at the application level, it will break the CDN level caching, requiring Drupal to respond to all requests – which could cause performance during a flood of requests. But any error codes returned by Drupal (400/500) would not be counted in your metrics tab.