Anubis Protection¶
Beginning with LiteSpeed Web Server 6.4, Anubis is available as an additional method of defense against bots and automated attacks, alongside the existing CAPTCHA protection.
Warning
Anubis is currently available in the v6.4.0RC1 test build. Be sure to test on a non-production server before deploying.
Anubis can be used on its own or together with CAPTCHA verification. When both are enabled, Anubis checks the request first, and CAPTCHA verification follows.
Upgrade to LSWS v6.4.0RC1¶
To upgrade an existing v6.3.x installation to the v6.4.0RC1 test build, run the following command:
/usr/local/lsws/admin/misc/lsup.sh -f -v 6.4.0RC1 -b 0
Install Anubis¶
Anubis is a proof-of-work challenge that filters out automated traffic before it reaches your site. It runs as a backend service that handles all Anubis-related requests.
To install the service, run the setup script, like so:
/usr/local/lsws/admin/misc/setup_anubis.sh
This installs the anubis@lsanubis.service service, which acts as the backend for Anubis requests.
Enable Anubis¶
Use the LsAnubis directive to turn Anubis on or off. It can be set at the Apache-server level or the virtual-host level:
LsAnubis on|off
For example, to enable Anubis, add the following to your Apache-server or virtual-host configuration:
<IfModule LiteSpeed>
LsAnubis on
</IfModule>
Combining Anubis with CAPTCHA¶
Anubis can be used together with CAPTCHA verification (reCAPTCHA, hCaptcha, or ALTCHA). When both are active, Anubis evaluates the request first, and CAPTCHA verification is applied afterward.