[CentOS-mirror] Offer new US mirror, but use Cloudflare for proxy?

Wed Mar 31 10:05:08 UTC 2021
Fabian Arrotin <arrfab at centos.org>

On 28/03/2021 05:41, Russell Jones wrote:
> Hello admin,
> 
> I would like to offer a new US CentOS mirror, but I will need to use
> Cloudflare to proxy the requests. I have a gigabit up/down connection
> that will be stable, however the ATT provided gateway/router/modem combo
> chokes on a large amount of different IP addresses coming in at once. I
> have found that if I route the traffic through Cloudflare, it can handle
> the 200 or so unique IP's Cloudflare uses without an issue. I am
> currently hosting EPEL and Fedora Buffet public mirrors without any
> problems this way.
> 
> Any issues with this setup? 
> 
> 
> Thanks!
> 

Hi (sorry for late answer).
We never had any official statement for people putting mirror behind
CDN, as we also use for some services CDNs providers (AWS and CDN77 are
sponsoring the project as one example).

But as you saw in previous answers, you should probably verify first
that it wouldn't be a problem with your CDN (cloudflare here) provider.

Second thing : as said too, we redirect traffic ourselves (through
mirrorlist.centos.org) by using GeoIP at the origin IP level, and
compare that with our lists, including for USA at the state level (for
efficiency).

I don't think you mentioned the State your mirror would be in, but in
fact that means that we'd be hitting cloudflare, so don't even know if
in that case people would still be redirected to correct state, or
instead other PoP in their network.

What do you think ?
-- 
Fabian Arrotin
The CentOS Project | https://www.centos.org
gpg key: 17F3B7A1 | twitter: @arrfab