I mean to me the biggest chokepoint is that this blog relies heavily on php for serving what should be static pages. My best strategy against bots has just been optimizing my sites and making as many user requests served static as I can.
Its been far better a payoff than trying to handle endless cases and adding unnecessary complexity.
