CrowdSec WAF is connected based on a custom Caddy build. Traffic analysis and blocking occur before the request reaches the service. Whitelist rules are configured for legitimate search and AI bots (Googlebot, GPTBot, Claude, Bing, and others) — they pass without restrictions. The whitelist is updated automatically when new bots appear.