Commit Graph

14 Commits

Author SHA1 Message Date
Michal Konecny
66ea3d1769 [httpd] Re-enable history endpoint on src.fp.o
See https://pagure.io/fedora-infrastructure/issue/13011 for more info.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2026-01-07 09:01:48 +00:00
Kevin Fenzi
ea1a9a5b6b proxies: block /history/ and /blame/ on the web interface of src.
Scrapers are crawling these endpoints and pkgs01 takes a while to call
git on the backend and return data to them. This causes latency to
increase a bunch because it's got all those blame and history requests
it's processing so it can't process more important things.

So, lets just block these for now. Any users who need them can easily
git clone locally and run history/blame just fine.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-12-06 10:10:35 -08:00
Kevin Fenzi
2f76d23a6b proxies: block another fork for now
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-11-23 17:39:50 -08:00
Kevin Fenzi
e8c5b9309f proxies / src: add another fork block
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-11-22 16:40:32 -08:00
Kevin Fenzi
4150f58a00 proxies / src: organize and document fork blocks
I am not sure these are even ai scrapers. If they are, they are broken
and unfit for scraping. They just hit these forks (and nothing else)
over and over via a Distributed pile of ips. They pass anubis
challenges, so probibly residential users who they don't care about.

Anyhow, on high load on pkgs01, see if more blocks need to be added
here.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-11-22 09:26:14 -08:00
Kevin Fenzi
d5e1fa08f2 proxies: drop some requests that use referrer of some forks
there's about... 7million hits a day from sites passing a referrer
of forks/kernel or forks/firefox where they are fetching static content
over and over and over. This may be because before they were blocked
from the forks themselves they were also downloading the js and static
content, and now they are just too dumb to see the 403 and still
want to fetch the old static content. Fortunately, they send a
referrer we can match on.

So, this should cut load another chunk.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-10-15 13:53:28 -07:00
Kevin Fenzi
58c8447d1a proxies / src: block all kernel forks for now
Some scraper(s) were very very agressively crawling kernel fork repos
and causing all kinds of problems for koji and src.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-10-15 07:58:11 -07:00
Nils Philippsen
6c85fda0c9 Mass remove/replace iad2 -> rdu3, 10.3. -> 10.16.
Signed-off-by: Nils Philippsen <nils@redhat.com>
2025-07-03 20:05:02 +02:00
Kevin Fenzi
126e66c736 proxies: also enable proxy for src.stg/src in rdu3
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-06-26 14:36:15 -07:00
Kevin Fenzi
7984b46eb7 The great phx2 pruning run (1st cut).
Since we no longer have any machines in phx2, I have tried to remove
them from ansible. Note that there are still some places where we need
to remove them still: nagios, dhcp, named were not touched, and in cases
where it wasn't pretty clear what a conditional was doing I left it to
be cleaned up later.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-06-14 14:14:31 -07:00
Kevin Fenzi
51a68ea0ae iad2: simplify proxy logic for multiple datacenters and make it one that works
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-05-28 10:12:58 -07:00
Kevin Fenzi
7f6cdda0b2 iad2: adjust more proxy things for iad2: kojipkgs, nagios and certbot for pkgs
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-05-27 21:13:55 -07:00
Patrick Uiterwijk
bc3bbcb5c0 Also return 421 from non-phx2 proxies for src.fp.o
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2017-11-26 21:13:33 +00:00
Patrick Uiterwijk
5482145b93 Disable removing 100-continue
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2017-07-22 11:40:23 +00:00