web: Ignore GoogleAssociationService assetlinks.json requests

diff --git a/cookbooks/web/templates/default/apache.frontend.erb b/cookbooks/web/templates/default/apache.frontend.erb
index 98097d7d92c8c05d92f80a4180177797b117228b..f05b99b5c860b21b8ce6bc95b08809e6f1e67f5a 100644 (file)
--- a/cookbooks/web/templates/default/apache.frontend.erb
+++ b/cookbooks/web/templates/default/apache.frontend.erb
@@ -2,7 +2,7 @@
 
 #
 # Setup logging
-# 
+#
 SetEnvIfNoCase Authorization "^Basic " AUTH_METHOD=basic
 SetEnvIfNoCase Authorization "^OAuth " AUTH_METHOD=oauth1
 SetEnvIfNoCase Authorization "^Bearer " AUTH_METHOD=oauth2
@@ -108,6 +108,13 @@ ErrorLog /var/log/apache2/error.log
   RewriteCond "%{QUERY_STRING}" "^q=abcde&t=20"
   RewriteRule "^/api/0\.6/notes/search$" - [R=429,L]
 
+  #
+  # Ignore GoogleAssociationService request storm
+  # https://en.osm.town/@osm_tech/114205363076771822
+  #
+  RewriteCond %{HTTP_USER_AGENT} "GoogleAssociationService"
+  RewriteRule "^/\.well-known/assetlinks\.json$" - [R=429,L]
+
   #
   # Force special MIME type for crossdomain.xml files
   #