From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id 69D66138359 for ; Wed, 12 Aug 2020 19:10:53 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 52123E0942; Wed, 12 Aug 2020 19:10:52 +0000 (UTC) Received: from mail-ed1-x544.google.com (mail-ed1-x544.google.com [IPv6:2a00:1450:4864:20::544]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 3DA23E0907 for ; Wed, 12 Aug 2020 19:10:52 +0000 (UTC) Received: by mail-ed1-x544.google.com with SMTP id a14so2356851edx.7 for ; Wed, 12 Aug 2020 12:10:52 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gentoo-org.20150623.gappssmtp.com; s=20150623; h=mime-version:references:in-reply-to:from:date:message-id:subject:to; bh=A2gnnZ0YOYGH87dmP4FO6MyWCSxT/rL3ahCDzdVlYE8=; b=E7Sviuw/RCPYLvS3Yvw5fyXXoZxTp45RPeexbv5yatHtkRgnYNkhXfudNEVmGj8qGo /Zr3C9ZBqsMdCvWYGibOS9Dj3qsNgY9WF5F9g1hDqwiagqnO0se9QNLOi4D+spD6cKxq BqxAzzP63Lhkm6g+NpQgMbssPPVzmSwBTg8t1DEtc5nwD0W5NugiJaaHSZ/hcH5OY3bm ZD+Flugv9eq/lX/+M8SV02BA9FlBXF/2laHusi+33LRpIRxCUECeBw47F1IVa3qOM/sN fTBseUuJqbitLtJBLbv/M3oi1orxsRKnrxRa3G39y+phF+47hgHmkVnWJs6SM99b7boY X2Dw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to; bh=A2gnnZ0YOYGH87dmP4FO6MyWCSxT/rL3ahCDzdVlYE8=; b=arFL0zIwW7NolyiA4SdAw/sRCSzFdAahv2sSdyrdGwoabA9AwaTdv5LCaumTDoTYiv BPS3/wewaT5VMcplXFhfyhVh/d9TrSsLVbUqzjXufO6Fp/B0eNs06WfpQUWKjmNQdxBN 725ttI9q+isHn8WWgD8JEYbH6B9pNeIcIAHvzxCA5T1F/wAKoJKufWc/0kxf6xMP1cuO SSbSps+3ZGB+XqR0R6fFX+Q2heCOXd5CKhHHD1sJhoyHvtgIMU2m9SBCp9gaTK4+fSTT TmM2lcudW7bZG1aWWmwVrIic0seA/1tKvGk5yrjbaQS9ZY8pLZmooZ7fkd6IcXcVWABM G5PA== X-Gm-Message-State: AOAM532nUx11OhYL8MSnWDMgKTyNpLClG2VV1kp0ZJlYiBpEm8lLcPZH fJ2daA/SIi4ysdVu+UW0NhU+k6PRIRdYK83SlNSDuVYfMOU= X-Google-Smtp-Source: ABdhPJxn7YHbrxCwpcyIZ4sdiOBZU+y5qjNpswhBLwnwOwdkE+focva8mb7GasII+P9s8z6MC3tCnn5nsb/D8NL0liU= X-Received: by 2002:aa7:cf19:: with SMTP id a25mr1332714edy.67.1597259450317; Wed, 12 Aug 2020 12:10:50 -0700 (PDT) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Project discussion list X-BeenThere: gentoo-project@lists.gentoo.org Reply-To: gentoo-project@lists.gentoo.org X-Auto-Response-Suppress: DR, RN, NRN, OOF, AutoReply MIME-Version: 1.0 References: In-Reply-To: From: Alec Warner Date: Wed, 12 Aug 2020 12:10:39 -0700 Message-ID: Subject: Re: [gentoo-project] [Bugzilla] IP-based limits To: gentoo-project Content-Type: multipart/alternative; boundary="00000000000026942005acb2f2b1" X-Archives-Salt: b9d585c1-14d4-44c0-9242-3aa39ebd9fab X-Archives-Hash: 71773c7cda528b72e3c721055b1d10ee --00000000000026942005acb2f2b1 Content-Type: text/plain; charset="UTF-8" On Wed, Aug 12, 2020 at 11:43 AM Raymond Jennings wrote: > On Wed, Aug 12, 2020 at 11:40 AM Alec Warner wrote: > >> On Wed, Aug 12, 2020 at 11:24 AM Tomas Mozes >> wrote: >> >>> On Wednesday, August 12, 2020, Alec Warner wrote: >>> > Bugzilla now has connection limits per IP. I won't say what the limit >>> is, but if you are crawling bugzilla or using automated tools from a single >>> source IP you may hit the limit and receive 503's for requests over the >>> limit. >>> > This may be a particular problem for users behind things like carrier >>> grade NAT (where many users are multiplexed through a single egress IP.) >>> However we have seen numerous slowdowns from bot traffic and this is a >>> relatively straightforward change to make on our end. If you believe you >>> are being unfairly limited / blocked, please reach out to >>> infra@gentoo.org. >>> > Thanks, >>> > -A >>> >>> Wouldn't 429 be more appropriate? >>> >> >> The limiter doesn't support this, sorry. >> > > For the curious, who wrote the limiter? Is it an upstream feature > provided by the bugzilla maintainers? > It's the apache max IP limiter. The thread was intended to inform people that bugzilla has limits now; it's not intended to solicit advice on how to build the best possible limiter; I'm aware this one is hokey but I'm happy with it ;) -A > > >> -A >> >> >>> >>> Tomas >> >> --00000000000026942005acb2f2b1 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable


=
On Wed, Aug 12, 2020 at 11:43 AM Raym= ond Jennings <shentino@gmail.com> wrote:
On Wed, = Aug 12, 2020 at 11:24 AM Tomas Mozes <hydrapolic@gmail.com> wrote:
On W= ednesday, August 12, 2020, Alec Warner <antarus@gentoo.org> wrote:
> Bugzilla = now has connection limits per IP. I won't say what the limit is, but if= you are crawling bugzilla or using automated tools from a single source IP= you may hit the limit and receive 503's for requests over the limit.> This may be a particular problem for users behind things like carrie= r grade NAT (where many users are multiplexed through a single egress IP.) = However we have seen numerous slowdowns from bot traffic and this is a rela= tively straightforward change to make on our end. If you believe you are be= ing unfairly limited / blocked, please reach out to infra@gentoo.org.
> Thanks,
>= ; -A

Wouldn't 429 be more appropriate?

=
The limiter doesn't support this, sorry.

For the curious, who wrote the limiter?=C2=A0 Is it an = upstream feature provided by the bugzilla maintainers?

It's the apache max IP limiter.
=

The thread was intended to inform people that bugzilla = has limits now; it's not intended to solicit advice on how to build the= best possible limiter; I'm aware this one is hokey but I'm happy w= ith it ;)

-A
=C2=A0
=C2=A0
-A
=C2=A0

Tomas
--00000000000026942005acb2f2b1--