[CentOS-mirror] Abusive repodata downloads

Wed Apr 3 08:21:39 UTC 2024
Carsten Otto <otto at informatik.rwth-aachen.de>

Hi Kevin,

On Tue, Apr 02, 2024 at 05:08:33PM -0700, Kevin Fenzi wrote:
> How are you determining this? From IP address?

Yes.

> Those could be a large number of different machines behind a nat proxy
> no?

Possibly.

> Recent versions of fedora do not even download the filelists unless a
> user requests/looks up something that needs it. For normal install or
> updates, it shouldn't be pulled. Can you tell what OS/versions this is
> happening with?

Great! No, I just see basic file download information. Blocking those
who do it much too often shouldn't be a concern then.

> In general clients should pull the repomd.xml file and check if it's
> changed, if not, use their cached versions.

That's not what I see for quite a lot of peers.

> This should normally already be the case, so I wonder what is happening
> here, could be a bug in some version/os or otherwise something
> unexpected.

That's my guess too.

Bye
Carsten
-- 
Dr. Carsten Otto
http://verify.rwth-aachen.de/otto/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 195 bytes
Desc: not available
URL: <http://lists.centos.org/pipermail/centos-mirror/attachments/20240403/dab25d3a/attachment.sig>