Page MenuHomeDevCentral
Differential D3947

Block known datacenter ranges flooding Phabricator
ClosedPublic
Actions

Authored by dereckson on Feb 11 2026, 22:41.
Tags
None
Referenced Files
Unknown Object (File)
Tue, Mar 24, 11:11
Unknown Object (File)
Mon, Mar 23, 22:07
Unknown Object (File)
Mon, Mar 23, 22:04
Unknown Object (File)
Mon, Mar 23, 22:03
Unknown Object (File)
Fri, Mar 20, 12:18
Unknown Object (File)
Fri, Mar 20, 12:17
Unknown Object (File)
Sat, Mar 14, 01:11
Unknown Object (File)
Sat, Mar 14, 01:05
View All 93 Files
Subscribers
None

Details

Reviewers
ptdradmin
Duranzed
Commits
rOPS92ef1ec2e3d1: Block known datacenter ranges flooding Phabricator
Summary

Phabricator instances receive a very large number of requests
from datacenter servers.

Pending Anubis implementation, this temporary block will mitigate
the current server load.

The ranges2geo.py utility allows to convert a text file containing
CIDR ranges into a geo block for ngx_http_geo_module.

Test Plan

Deploy on docker-002

Diff Detail

Repository
rOPS Nasqueron Operations
Lint
Lint Errors
SeverityLocationCodeMessage
Errorutils/nginx/ranges2geo.py:11F401flake8 F401
Unit
No Test Coverage
Branch
flood-phabricator
Build Status
Buildable 6303
Build 6587: arc lint + arc unit

Event Timeline

dereckson requested review of this revision.Feb 11 2026, 22:41
dereckson created this revision.
Harbormaster completed remote builds in B6303: Diff 10227.Feb 11 2026, 22:41
dereckson updated this revision to Diff 10228.Feb 11 2026, 22:42

-os (unused import)

Harbormaster completed remote builds in B6304: Diff 10228.Feb 11 2026, 22:42
dereckson updated this revision to Diff 10231.Feb 11 2026, 22:48

typo

Harbormaster completed remote builds in B6307: Diff 10231.Feb 11 2026, 22:48
dereckson mentioned this in T2193: Investigate Anubis.Feb 11 2026, 23:00
dereckson added a comment.Feb 11 2026, 23:02

Servers log excerpt (2026-02-11)

docker-002 22:58 dereckson: End of nginx deployment. I can confirm an IMMEDIATE impact on DevCentral, it now again serves page very quickly.

docker-002 22:56 dereckson: Deploy previous nginx changes: rm of ssl_trusted_certificate, logs by service

docker-002 22:54 dereckson: Refresh Salt modules

docker-002 22:50 dereckson: Deploy nginx geo_flood_datacenter fix for DevCentral and other Phabricator instances (D3947)

dereckson edited the summary of this revision. (Show Details)Feb 11 2026, 23:03
dereckson added a reviewer: ptdradmin.
Duranzed accepted this revision.Feb 19 2026, 15:07
This revision is now accepted and ready to land.Feb 19 2026, 15:07
Closed by commit rOPS92ef1ec2e3d1: Block known datacenter ranges flooding Phabricator (authored by dereckson). · Explain WhyMon, Mar 23, 00:25
This revision was automatically updated to reflect the committed changes.
dereckson added a commit: rOPS92ef1ec2e3d1: Block known datacenter ranges flooding Phabricator.

Revision Contents
Changeset List

PathSize
roles/
paas-docker/
nginx/
files/
vhosts/
7 lines
webserver-core/
nginx/
files/
includes/
2250 lines
utils/
nginx/
55 lines

Diff 10227

View Options

roles/paas-docker/nginx/files/vhosts/phabricator.conf

Loading...
View Options

roles/webserver-core/nginx/files/includes/geo_flood_datacenter

Loading...
View Options

utils/nginx/ranges2geo.py

Loading...
Nasqueron DevCentral · If it had been much bigger the moon would have had a core of ice. · Powered by Phabricator