Re: Amazon AWS cloudfront WAF block

[John Kristoff via NANOG <nanog () lists nanog org>]

On Wed, 28 May 2025 22:07:48 -0400
Andrew Kirch via NANOG <nanog () lists nanog org> wrote:

> Are we really going to repeat the blatant stupidity of spammers 15-20

It may be that some of these modern blocking filters have evolved
beyond "reputation" and into something that might arguably be
suggestive of a "class".

For example, a variety of content and hosting providers are
increasingly making decisions about which specific clients (source IP
addresses) can utilize their service, not necessarily based on any
history of IP address/block abuse, but rather on a third-party
classification (or type) by IP address meta data enrichment providers.

Class or type in this example might be labels such as "residential",
"server", "VPN", "edu", "anycast", "content", etc.

Maybe this is an irrelevant distinction based on case history, but
there does seem to be some nuanced differences operationally.  I
wouldn't be surprised to see someone argue against some types of
blocks on net neutrality grounds.  Given the tussle of regulation in
that space I'm not sure makes the outcome any more clear however.  Just
more tussle.

John
_______________________________________________
NANOG mailing list 
https://lists.nanog.org/archives/list/nanog () lists nanog org/message/QGUNVU77XQEXOO2N4MK5PR66Q2MDFZRT/