Page MenuHomeDevCentral
Differential D3947

Block known datacenter ranges flooding Phabricator
AcceptedPublic
Actions

Authored by dereckson on Wed, Feb 11, 22:41.
Tags
None
Referenced Files
Unknown Object (File)
Tue, Mar 3, 22:35
Unknown Object (File)
Tue, Mar 3, 08:08
Unknown Object (File)
Mon, Mar 2, 14:15
Unknown Object (File)
Mon, Mar 2, 14:15
Unknown Object (File)
Mon, Mar 2, 14:15
Unknown Object (File)
Mon, Mar 2, 14:15
Unknown Object (File)
Mon, Mar 2, 07:07
Unknown Object (File)
Sun, Mar 1, 08:20
View All 81 Files
Subscribers
None

Details

Reviewers
ptdradmin
Duranzed
Summary

Phabricator instances receive a very large number of requests
from datacenter servers.

Pending Anubis implementation, this temporary block will mitigate
the current server load.

The ranges2geo.py utility allows to convert a text file containing
CIDR ranges into a geo block for ngx_http_geo_module.

Test Plan

Deploy on docker-002

Diff Detail

Repository
rOPS Nasqueron Operations
Lint
Lint Passed
Unit
No Test Coverage
Branch
flood-phabricator
Build Status
Buildable 6304
Build 6588: arc lint + arc unit

Event Timeline

dereckson requested review of this revision.Wed, Feb 11, 22:41
dereckson created this revision.
Harbormaster completed remote builds in B6303: Diff 10227.Wed, Feb 11, 22:41
dereckson updated this revision to Diff 10228.Wed, Feb 11, 22:42

-os (unused import)

Harbormaster completed remote builds in B6304: Diff 10228.Wed, Feb 11, 22:42
dereckson updated this revision to Diff 10231.Wed, Feb 11, 22:48

typo

Harbormaster completed remote builds in B6307: Diff 10231.Wed, Feb 11, 22:48
dereckson mentioned this in T2193: Investigate Anubis.Wed, Feb 11, 23:00
dereckson added a comment.Wed, Feb 11, 23:02

Servers log excerpt (2026-02-11)

docker-002 22:58 dereckson: End of nginx deployment. I can confirm an IMMEDIATE impact on DevCentral, it now again serves page very quickly.

docker-002 22:56 dereckson: Deploy previous nginx changes: rm of ssl_trusted_certificate, logs by service

docker-002 22:54 dereckson: Refresh Salt modules

docker-002 22:50 dereckson: Deploy nginx geo_flood_datacenter fix for DevCentral and other Phabricator instances (D3947)

dereckson edited the summary of this revision. (Show Details)Wed, Feb 11, 23:03
dereckson added a reviewer: ptdradmin.
Duranzed accepted this revision.Thu, Feb 19, 15:07
This revision is now accepted and ready to land.Thu, Feb 19, 15:07

Revision Contents
Changeset List

PathSize
roles/
paas-docker/
nginx/
files/
vhosts/
7 lines
webserver-core/
nginx/
files/
includes/
2250 lines
utils/
nginx/
54 lines

Diff 10228

View Options

roles/paas-docker/nginx/files/vhosts/phabricator.conf

Loading...
View Options

roles/webserver-core/nginx/files/includes/geo_flood_datacenter

Loading...
View Options

utils/nginx/ranges2geo.py

Loading...
Nasqueron DevCentral · If it had been much bigger the moon would have had a core of ice. · Powered by Phabricator