> my website is built as a single-page-application
There you go. Ditch it. Make you pages cachable as much as you can.
There you go. Ditch it. Make you pages cachable as much as you can.
That deals 95% of the headache
Some bots would click around and submit data, you need to deal with them anyway.
Don't waste your time on something easily scalable and cache-able. Let CDN/WAF providers do the job for you.