service issues: git protocol for git.linaro.org
The Linaro git appear to be getting some very suspicious traffic on our git protocol port. Its causing our servers to fail and effectively DOS us. We are currently trying to block offending IPs. However, the number of malicious IPs is growing and we may have to shut off the git protocol daemon on our servers while we find a way to prevent this. If you are using the "smart" protocol, https://git.linaro.org/ you will not be affected. If you aren't using the smart protocol, it might be a good time to consider updating your .git/config files. -andy ___ linaro-dev mailing list linaro-dev@lists.linaro.org https://lists.linaro.org/mailman/listinfo/linaro-dev
Re: service issues: git protocol for git.linaro.org
On 14 September 2016 at 15:33, Andy Doan wrote: > The Linaro git appear to be getting some very suspicious traffic on our > git protocol port. Its causing our servers to fail and effectively DOS > us. We are currently trying to block offending IPs. However, the number > of malicious IPs is growing and we may have to shut off the git protocol > daemon on our servers while we find a way to prevent this. > > If you are using the "smart" protocol, https://git.linaro.org/ you > will not be affected. If you aren't using the smart protocol, it might > be a good time to consider updating your .git/config files. > > I guess the DOS explains the permission denied I was getting on https and ssh ports earlier then. Graeme ___ linaro-dev mailing list linaro-dev@lists.linaro.org https://lists.linaro.org/mailman/listinfo/linaro-dev
Re: service issues: git protocol for git.linaro.org
Hi Andy, This will affect our old releases where manifests use git protocol to pull the code. Regards, Vishal On 14 September 2016 at 20:11, G Gregory wrote: > > > On 14 September 2016 at 15:33, Andy Doan wrote: > >> The Linaro git appear to be getting some very suspicious traffic on our >> git protocol port. Its causing our servers to fail and effectively DOS >> us. We are currently trying to block offending IPs. However, the number >> of malicious IPs is growing and we may have to shut off the git protocol >> daemon on our servers while we find a way to prevent this. >> >> If you are using the "smart" protocol, https://git.linaro.org/ you >> will not be affected. If you aren't using the smart protocol, it might >> be a good time to consider updating your .git/config files. >> >> I guess the DOS explains the permission denied I was getting on https and > ssh ports earlier then. > > Graeme > > > ___ > linaro-dev mailing list > linaro-dev@lists.linaro.org > https://lists.linaro.org/mailman/listinfo/linaro-dev > > ___ linaro-dev mailing list linaro-dev@lists.linaro.org https://lists.linaro.org/mailman/listinfo/linaro-dev
Re: service issues: git protocol for git.linaro.org
On 09/14/2016 11:03 AM, Vishal Bhoj wrote: > Hi Andy, > > This will affect our old releases where manifests use git protocol to > pull the code. We are currently just blocking on offending IPs and monitoring the situation. ___ linaro-dev mailing list linaro-dev@lists.linaro.org https://lists.linaro.org/mailman/listinfo/linaro-dev
Re: service issues: git protocol for git.linaro.org
> On 14 Sep 2016, at 17:26, Andy Doan wrote: > > On 09/14/2016 11:03 AM, Vishal Bhoj wrote: >> Hi Andy, >> >> This will affect our old releases where manifests use git protocol to >> pull the code. > > We are currently just blocking on offending IPs and monitoring the > situation. This explains a host of Lab problems yesterday afternoon. Dave signature.asc Description: Message signed with OpenPGP using GPGMail ___ linaro-dev mailing list linaro-dev@lists.linaro.org https://lists.linaro.org/mailman/listinfo/linaro-dev
