There's decent literature on proxy/vpn detection by network and timing analysis. But I have the impression it's based on the inspection an ISP or MitM is able to do, not really the receiver of a request AFTER it goes…
I've been executing migrations for almost two decades and I only feel safe when I can run them against a replica first, no matter what the automated checks tell. There are state-dependent gotchas every where.
There's decent literature on proxy/vpn detection by network and timing analysis. But I have the impression it's based on the inspection an ISP or MitM is able to do, not really the receiver of a request AFTER it goes…
I've been executing migrations for almost two decades and I only feel safe when I can run them against a replica first, no matter what the automated checks tell. There are state-dependent gotchas every where.