augustash/ash_facet_protection

Protects Drupal sites from bot abuse of faceted search URLs

Maintainers

Package info

github.com/augustash/drupal-facet-protection

Type:drupal-custom-module

pkg:composer/augustash/ash_facet_protection

Statistics

Installs: 4

Dependents: 0

Suggesters: 0

Stars: 0

Open Issues: 0

Security

Advisories: 0

Aikido package health analysis

1.0.1 2026-04-01 22:54 UTC

Requires

proprietary 40920f374ebe37e94f4dc1e113d84aec76c5ec65

This package is auto-updated.

Last update: 2026-04-01 23:16:17 UTC

README

Protects Drupal sites from bot abuse of faceted search URLs. Bots systematically crawl every combination of facet filter parameters, generating expensive uncached queries and bloating database cache tables.

What it does

  • Validates facet aliases — rejects requests using facet parameters that don't match any configured facet on the site (400 response). Valid aliases are cached and auto-invalidate when facet config changes.
  • Throttles faceted requests — blocks requests with more than 8 facet parameters (429 response)
  • Rate limits per IP — 30 faceted requests per minute per IP
  • Strips tracking params — removes srsltid and similar params that fragment cache keys
  • Blocks crawling — appends robots.txt rules to disallow faceted URLs via Composer Scaffold

All checks run as lightweight HTTP middleware before Drupal fully bootstraps. Invalid alias requests are rejected before they consume rate limit slots.

Setup

composer config --json --merge extra.drupal-scaffold.allowed-packages '["augustash/ash_facet_protection"]' && composer require augustash/ash_facet_protection

Then enable the module:

drush en ash_facet_protection