I mean, I have an nginx revproxy in front of *everything* I could just create a rule that drops a lot of user agents and IP ranges.
That would solve the actual problem I have more efficiently than tarpitting (I'm annoyed about bots being present, yes, on philosophical grounds, yes, but the problem's *urgency* comes from the load placed on the server)