Well, I’ve always tried to make my service available through Tor, but now that I faced an attack of 20,000 RPS distributed over all the exit nodes of the Tor network making requests to a computationally expensive (and non-cacheable) endpoint, and came out with 6x the hosting bill I usually get, I decided to block the entire network.

Maybe there’s an alternative reality where people do the right thing, and in that world I wouldn’t have to block Tor, but I don’t live in that world.