Re: Followup on today lists.ovirt.org http outage

Le mardi 17 juin 2014 à 16:17 +0200, Sandro Bonazzola a écrit : > Il 17/06/2014 16:13, Michael Scherer ha scritto: >> Le mardi 17 juin 2014 à 15:55 +0200, Ewoud Kohl van Wijngaarden a >> écrit : >>> On Tue, Jun 17, 2014 at 03:47:14PM +0200, Michael Scherer wrote: >>>> Brian pinged me on a failure on lists.ovirt.org around 13h15 UTC. After >>>> scratching my head for a while ( since everything was running fine, >>>> despites regular Out of memory on the server ), it turned out to be a >>>> user trying to get the iso with a download accelerator. I first added >>>> more server, but without luck. >>>> >>>> So as I am more of the kind "shoot first, ask later", I did kill the >>>> connexion with iptables, then limit it with iptables ( but with some >>>> side effect ), then installed mod_limitipconn to limit to 10 tcp >>>> connexion per IP. >>> >>> I'm all in favor of this. Maybe we should mention we have mirrors with >>> MUCH more bandwith in our README. >> >> Or maybe we do not need to tell that to people and use a redirector ? >> ( like mirrorbrain, etc ). > > This won't allow to download packages until mirrors are synced. > Now yum repo files have mirrorlist pointing to mirrors and baseurl pointing to ovirt.org. > Introducing automated redirection won't allow this anymore. It work quite fine for fedora. But we indeed to make sure this doesn't break stuff for people, especially older setup. I guess we also want to still get some download stats. But we do not have much issues or risk with rpms, more on iso download, as they take more bandwidth and for longer time, and I think there is more risk of having a download accelerator for that. So what about just make a redirect for iso (if possible, something smart enough to not redirect if the mirror is not synced), and keep rpms as is ?

_______________________________________________ Infra mailing list Infra(a)ovirt.org http://lists.ovirt.org/mailman/listinfo/infra