robots

"\n\n\n\n\nThe robots exclusion standard, also known as the robots exclusion protocol or simply robots.txt, is a standard used by websites to indicate to visiting web crawlers and other web robots which portions of the site they are allowed to visit.\n\nThis relies on voluntary compliance. Not all robots comply with the standard; email harvesters, spambots, malware and robots that scan for security vulnerabilities may even start with the portions of the website where they have been told to stay out.\n\nThe \"robots.txt\" file can be used in conjunction with sitemaps, another robot inclusion standard for websites.\n

History

\nThe standard was proposed by Martijn Koster,<\/ref><\/ref> when working for Nexor<\/ref> in February 1994\n<\/ref> on the ''www-talk'' mailing list, the main communication channel for WWW-related activities at the time. Charles Stross claims to have provoked Koster to suggest robots.txt, after he wrote a badly-behaved web crawler that inadvertently caused a denial-of-service attack on Koster's server.<\/ref>\n\nIt quickly became a de facto standard that present and future web crawlers were expected to follow; most complied, including those operated by search engines such as WebCrawler, Lycos, and AltaVista.<\/ref>\n\nOn July 1, 2019, Google announced the proposal of the Robots Exclusion Protocol as an official standard under Internet Engineering Task Force.<\/ref> The standard<\/ref> was published in September 2022 as RFC 9309.\n

Standard

\nWhen a site owner wishes to give instructions to web robots they place a text file called in the root of the web site hierarchy (e.g. ). This text file contains the instructions in a specific format (see examples below). Robots that ''choose'' to follow the instructions try to fetch this file and read the instructions before fetching any other file from the website. If this file does not exist, web robots assume that the website owner does not wish to place any limitations on crawling the entire site.\n\nA robots.txt file contains instructions for bots indicating which web pages they can and cannot access. Robots.txt files are particularly important for web crawlers from search engines such as Google.\n\nA robots.txt file on a website will function as a request that specified robots ignore specified files or directories when crawling a site. This might be, for example, out of a preference for privacy from search engine results, or the belief that the content of the selected directories might be misleading or irrelevant to the categorization of the site as a whole, or out of a desire that an application only operates on certain data. Links to pages listed in robots.txt can still appear in search results if they are linked to from a page that is crawled.<\/ref>\n\nA robots.txt file covers one origin. For websites with multiple subdomains, each subdomain must have its own robots.txt file. If had a robots.txt file but did not, the rules that would apply for would not apply to . In addition, each protocol and port needs its own robots.txt file; does not apply to pages under or .\n\nSome major search engines following this standard include Ask,<\/ref> AOL,<\/ref> Baidu,<\/ref> DuckDuckGo,<\/ref> Google,<\/ref> Yahoo!,<\/ref> and Yandex.<\/ref> Bing<\/ref> is still not fully compatible with the standard as it cannot inherit settings from the wildcard (*<\/code>).<\/ref>\n\nThe volunteering group Archive Team explicitly ignores robots.txt directives, using it instead for discovering more links, such as sitemaps.<\/ref> The group views it as an obsolete standard that hinders web archival efforts. According to project leader Jason Scott, \"unchecked, and left alone, the robots.txt file ensures no mirroring or reference for items that may have general use and meaning beyond the website's context.\"<\/ref>\n\nFor some years, the Internet Archive did not crawl sites with robots.txt, but in April 2017, it announced that it would no longer honour directives in the robots.txt files.<\/ref> \"Over time we have observed that the robots.txt files that are geared toward search engine crawlers do not necessarily serve our archival purposes\".<\/ref> This was in response to entire domains being tagged with robots.txt when the content became obsolete.\n

Security

\nDespite the use of the terms \"allow\" and \"disallow\", the protocol is purely advisory and relies on the compliance of the web robot.<\/ref> Malicious web robots are unlikely to honor robots.txt; some may even use the robots.txt as a guide to find disallowed links and go straight to them. While this is sometimes claimed to be a security risk,<\/ref> this sort of security through obscurity is discouraged by standards bodies. The National Institute of Standards and Technology (NIST) in the United States specifically recommends against this practice: \"System security should not depend on the secrecy of the implementation or its components.\"<\/ref> In the context of robots.txt files, security through obscurity is not recommended as a security technique.<\/ref>\n

Alternatives

\nMany robots also pass a special user-agent to the web server when fetching content.<\/ref> A web administrator could also configure the server to automatically return failure (or pass alternative content) when it detects a connection using one of the robots.<\/ref><\/ref>\n\nSome sites, such as Google, host a humans.txt<\/code> file that displays information meant for humans to read.<\/ref> Some sites such as GitHub redirect humans.txt to an about page.<\/ref>\n\nPreviously, Google had a joke file hosted at \/killer-robots.txt<\/code> instructing the Terminator not to kill the company founders Larry Page and Sergey Brin.<\/ref><\/ref>\n

Examples

\nThis example tells all robots that they can visit all files because the wildcard *<\/code> stands for all robots and the Disallow<\/code> directive has no value, meaning no pages are disallowed.\n\n

\nUser-agent: *\nDisallow: \n<\/pre>\n\n
\nUser-agent: *\nAllow: \/\n<\/pre>\n\nThe same result can be accomplished with an empty or missing robots.txt file.\n\nThis example tells all robots to stay out of a website:\n\n
\nUser-agent: *\nDisallow: \/\n<\/pre>\n\nThis example tells all robots not to enter three directories:\n\n
\nUser-agent: *\nDisallow: \/cgi-bin\/\nDisallow: \/tmp\/\nDisallow: \/junk\/\n<\/pre>\n\nThis example tells all robots to stay away from one specific file:\n\n
\nUser-agent: *\nDisallow: \/directory\/file.html\n<\/pre>\n\nAll other files in the specified directory will be processed.\n\n
\nUser-agent: BadBot # replace 'BadBot' with the actual user-agent of the bot\nDisallow: \/\n<\/pre>\n\nThis example tells two specific robots not to enter one specific directory:\n\n
\nUser-agent: BadBot # replace 'BadBot' with the actual user-agent of the bot\nUser-agent: Googlebot\nDisallow: \/private\/\n<\/pre>\n\nExample demonstrating how comments can be used:\n\n
\n# Comments appear after the \"#\" symbol at the start of a line, or after a directive\nUser-agent: * # match all bots\nDisallow: \/ # keep them out\n<\/pre>\n\nIt is also possible to list multiple robots with their own rules. The actual robot string is defined by the crawler. A few robot operators, such as Google, support several user-agent strings that allow the operator to deny access to a subset of their services by using specific user-agent strings.\n\nExample demonstrating multiple user-agents:\n\n
\nUser-agent: googlebot        # all Google services\nDisallow: \/private\/          # disallow this directory\n\nUser-agent: googlebot-news   # only the news service\nDisallow: \/                  # disallow everything\n\nUser-agent: *                # any robot\nDisallow: \/something\/        # disallow this directory\n<\/pre>\n

 Nonstandard extensions
\n

 Crawl-delay directive
\nThe crawl-delay value is supported by some crawlers to throttle their visits to the host. Since this value is not part of the standard, its interpretation is dependent on the crawler reading it. It is used when the multiple burst of visits from bots is slowing down the host. Yandex interprets the value as the number of seconds to wait between subsequent visits. Bing defines crawl-delay as the size of a time window (from 1 to 30 seconds) during which BingBot will access a web site only once.<\/ref> Google provides an interface in its  search console for webmasters, to control the  Googlebot's subsequent visits.<\/ref>\n\n
\nUser-agent: bingbot\nAllow: \/\nCrawl-delay: 10\n<\/pre>\n

 Sitemap
\nSome crawlers support a Sitemap<\/code> directive, allowing multiple  Sitemaps in the same robots.txt<\/samp> in the form Sitemap: ''full-url''<\/code>:<\/ref>\n
Sitemap: http:\/\/www.example.com\/sitemap.xml<\/pre>\n

 Host
\nSome crawlers ( Yandex) support a Host<\/code> directive, allowing websites with multiple mirrors to specify their preferred domain:<\/ref>\n\n
\nHost: hosting.example.com\n<\/pre>\n\nThis is not supported by all crawlers.\n

 Universal \"*\" match
\nThe ''Robot Exclusion Standard'' does not mention the \"*\" character in the Disallow:<\/code> statement.<\/ref>\n

 Meta tags and headers
\nIn addition to root-level robots.txt files, robots exclusion directives can be applied at a more granular level through the use of  Robots meta tags and X-Robots-Tag HTTP headers. The robots meta tag cannot be used for non-HTML files such as images, text files, or PDF documents. On the other hand, the X-Robots-Tag can be added to non-HTML files by using  .htaccess and

 files.<\/ref>\n\n;A \"noindex\" meta tag\n\n\n\n<\/syntaxhighlight>\n\n;A \"noindex\" HTTP response header\n\n\nX-Robots-Tag: noindex\n<\/syntaxhighlight>\n\nThe X-Robots-Tag is only effective after the page has been requested and the server responds, and the robots meta tag is only effective after the page has loaded, whereas robots.txt is effective before the page is requested. Thus if a page is excluded by a robots.txt file, any robots meta tags or X-Robots-Tag headers are effectively ignored because the robot will not see them in the first place.\n\n\nMaximum Size of a Robots.txt File\n\nThe Robots Exclusion Protocol requires crawlers to parse at least 500 kibibytes (KiB) of robots.txt files,<\/ref> which Google maintains as a 500 kibibyte file size restriction for robots.txt files .<\/ref>\n

 See also
\n\n*  ads.txt<\/code>, a standard for listing authorized ad sellers\n* security.txt<\/code>, a file to describe the process for security researchers to follow in order to report security vulnerabilities\n* Automated Content Access Protocol \u2013 a failed proposal to extend robots.txt\n*  BotSeer \u2013 now inactive search engine for robots.txt files\n*  Distributed web crawling\n*  Focused crawler\n* Internet Archive\n*  National Digital Library Program (NDLP)\n*  National Digital Information Infrastructure and Preservation Program (NDIIPP)\n*  Nofollow\n*  Perma.cc\n*  Meta elements for search engines\n*  Sitemaps\n* Spider trap\n* Web archiving\n* Web crawler\n*  noindex\n\n

 References
\n\n

 External links
\n\n\n* \n
Robots Database (list of bot names)
n
Robots.txt checker tool
n
Microsoft bingbot official documentation
n\n\n\n{{DEFAULTSORT:Robots Exclusion Standard\n Search engine optimization"