Page MenuHomeDevCentral
Differential D3947

Block known datacenter ranges flooding Phabricator
Needs ReviewPublic
Actions

Authored by dereckson on Wed, Feb 11, 22:41.
Tags
None
Referenced Files
F24357102: D3947.diff
Sun, Feb 15, 11:10
F24350050: D3947.diff
Sun, Feb 15, 05:17
Unknown Object (File)
Fri, Feb 13, 23:42
Unknown Object (File)
Fri, Feb 13, 23:42
Unknown Object (File)
Fri, Feb 13, 21:54
Unknown Object (File)
Fri, Feb 13, 21:53
Unknown Object (File)
Fri, Feb 13, 21:53
Unknown Object (File)
Fri, Feb 13, 20:04
View All 23 Files
Subscribers
None

Details

Reviewers
ptdradmin
Summary

Phabricator instances receive a very large number of requests
from datacenter servers.

Pending Anubis implementation, this temporary block will mitigate
the current server load.

The ranges2geo.py utility allows to convert a text file containing
CIDR ranges into a geo block for ngx_http_geo_module.

Test Plan

Deploy on docker-002

Diff Detail

Repository
rOPS Nasqueron Operations
Lint
Lint Errors
SeverityLocationCodeMessage
Errorutils/nginx/ranges2geo.py:11F401flake8 F401
Unit
No Test Coverage
Branch
flood-phabricator
Build Status
Buildable 6303
Build 6587: arc lint + arc unit

Event Timeline

dereckson requested review of this revision.Wed, Feb 11, 22:41
dereckson created this revision.
Harbormaster completed remote builds in B6303: Diff 10227.Wed, Feb 11, 22:41
dereckson updated this revision to Diff 10228.Wed, Feb 11, 22:42

-os (unused import)

Harbormaster completed remote builds in B6304: Diff 10228.Wed, Feb 11, 22:42
dereckson updated this revision to Diff 10231.Wed, Feb 11, 22:48

typo

Harbormaster completed remote builds in B6307: Diff 10231.Wed, Feb 11, 22:48
dereckson mentioned this in T2193: Investigate Anubis.Wed, Feb 11, 23:00
dereckson added a comment.Wed, Feb 11, 23:02

Servers log excerpt (2026-02-11)

docker-002 22:58 dereckson: End of nginx deployment. I can confirm an IMMEDIATE impact on DevCentral, it now again serves page very quickly.

docker-002 22:56 dereckson: Deploy previous nginx changes: rm of ssl_trusted_certificate, logs by service

docker-002 22:54 dereckson: Refresh Salt modules

docker-002 22:50 dereckson: Deploy nginx geo_flood_datacenter fix for DevCentral and other Phabricator instances (D3947)

dereckson edited the summary of this revision. (Show Details)Wed, Feb 11, 23:03
dereckson added a reviewer: ptdradmin.

Revision Contents
Changeset List

PathSize
roles/
paas-docker/
nginx/
files/
vhosts/
7 lines
webserver-core/
nginx/
files/
includes/
2250 lines
utils/
nginx/
55 lines

Diff 10227

View Options

roles/paas-docker/nginx/files/vhosts/phabricator.conf

Loading...
View Options

roles/webserver-core/nginx/files/includes/geo_flood_datacenter

Loading...
View Options

utils/nginx/ranges2geo.py

Loading...
Nasqueron DevCentral · If it had been much bigger the moon would have had a core of ice. · Powered by Phabricator