Page MenuHomeDevCentral
Differential D3947

Block known datacenter ranges flooding Phabricator
ClosedPublic
Actions

Authored by dereckson on Feb 11 2026, 22:41.
Tags
None
Referenced Files
F48799152: D3947.id10231.diff
Tue, Sep 8, 15:59
F48783030: D3947.id.diff
Tue, Sep 8, 12:33
Unknown Object (File)
Sun, Sep 6, 19:14
Unknown Object (File)
Sun, Sep 6, 02:17
Unknown Object (File)
Sat, Sep 5, 14:08
Unknown Object (File)
Sat, Sep 5, 08:27
Unknown Object (File)
Sat, Sep 5, 07:18
Unknown Object (File)
Sat, Sep 5, 06:36
View All Files
Subscribers
None

Details

Reviewers
ptdradmin
Duranzed
Commits
rOPS92ef1ec2e3d1: Block known datacenter ranges flooding Phabricator
Summary

Phabricator instances receive a very large number of requests
from datacenter servers.

Pending Anubis implementation, this temporary block will mitigate
the current server load.

The ranges2geo.py utility allows to convert a text file containing
CIDR ranges into a geo block for ngx_http_geo_module.

Test Plan

Deploy on docker-002

Diff Detail

Repository
rOPS Nasqueron Operations
Lint
Lint Passed
Unit
No Test Coverage
Branch
flood-phabricator
Build Status
Buildable 6304
Build 6588: arc lint + arc unit

Event Timeline

dereckson requested review of this revision.Feb 11 2026, 22:41
dereckson created this revision.
Harbormaster completed remote builds in B6303: Diff 10227.Feb 11 2026, 22:41
dereckson updated this revision to Diff 10228.Feb 11 2026, 22:42

-os (unused import)

Harbormaster completed remote builds in B6304: Diff 10228.Feb 11 2026, 22:42
dereckson updated this revision to Diff 10231.Feb 11 2026, 22:48

typo

Harbormaster completed remote builds in B6307: Diff 10231.Feb 11 2026, 22:48
dereckson mentioned this in T2193: Investigate Anubis.Feb 11 2026, 23:00
dereckson added a comment.Feb 11 2026, 23:02

Servers log excerpt (2026-02-11)

docker-002 22:58 dereckson: End of nginx deployment. I can confirm an IMMEDIATE impact on DevCentral, it now again serves page very quickly.

docker-002 22:56 dereckson: Deploy previous nginx changes: rm of ssl_trusted_certificate, logs by service

docker-002 22:54 dereckson: Refresh Salt modules

docker-002 22:50 dereckson: Deploy nginx geo_flood_datacenter fix for DevCentral and other Phabricator instances (D3947)

dereckson edited the summary of this revision. (Show Details)Feb 11 2026, 23:03
dereckson added a reviewer: ptdradmin.
Duranzed accepted this revision.Feb 19 2026, 15:07
This revision is now accepted and ready to land.Feb 19 2026, 15:07
Closed by commit rOPS92ef1ec2e3d1: Block known datacenter ranges flooding Phabricator (authored by dereckson). · Explain WhyMar 23 2026, 00:25
This revision was automatically updated to reflect the committed changes.
dereckson added a commit: rOPS92ef1ec2e3d1: Block known datacenter ranges flooding Phabricator.

Revision Contents
Changeset List

PathSize
roles/
paas-docker/
nginx/
files/
vhosts/
7 lines
webserver-core/
nginx/
files/
includes/
2250 lines
utils/
nginx/
54 lines

Diff 10228

View Options

roles/paas-docker/nginx/files/vhosts/phabricator.conf

Loading...
View Options

roles/webserver-core/nginx/files/includes/geo_flood_datacenter

Loading...
View Options

utils/nginx/ranges2geo.py

Loading...
Nasqueron DevCentral · If it had been much bigger the moon would have had a core of ice. · Powered by Phabricator