Page MenuHomeDevCentral

Block known datacenter ranges flooding Phabricator
Needs ReviewPublic

Authored by dereckson on Wed, Feb 11, 22:41.
Tags
None
Referenced Files
F24281803: D3947.id.diff
Thu, Feb 12, 12:46
F24281796: D3947.diff
Thu, Feb 12, 12:45
F24281789: D3947.id10231.diff
Thu, Feb 12, 12:44
F24281788: D3947.id10227.diff
Thu, Feb 12, 12:44
F24281787: D3947.id10228.diff
Thu, Feb 12, 12:44
Subscribers
None

Details

Reviewers
ptdradmin
Summary

Phabricator instances receive a very large number of requests
from datacenter servers.

Pending Anubis implementation, this temporary block will mitigate
the current server load.

The ranges2geo.py utility allows to convert a text file containing
CIDR ranges into a geo block for ngx_http_geo_module.

Test Plan

Deploy on docker-002

Diff Detail

Repository
rOPS Nasqueron Operations
Lint
Lint Passed
Unit
No Test Coverage
Branch
flood-phabricator
Build Status
Buildable 6307
Build 6591: arc lint + arc unit

Event Timeline

dereckson created this revision.

Servers log excerpt (2026-02-11)

docker-002 22:58 dereckson: End of nginx deployment. I can confirm an IMMEDIATE impact on DevCentral, it now again serves page very quickly.

docker-002 22:56 dereckson: Deploy previous nginx changes: rm of ssl_trusted_certificate, logs by service

docker-002 22:54 dereckson: Refresh Salt modules

docker-002 22:50 dereckson: Deploy nginx geo_flood_datacenter fix for DevCentral and other Phabricator instances (D3947)

dereckson added a reviewer: ptdradmin.