public inbox for development@lists.ipfire.org
 help / color / mirror / Atom feed
* Re: Oh noes!
       [not found] <4d364274-4a77-438f-902c-f31a653630e9@ipfire.org>
@ 2026-04-30  9:18 ` Michael Tremer
  0 siblings, 0 replies; only message in thread
From: Michael Tremer @ 2026-04-30  9:18 UTC (permalink / raw)
  To: Matthias Fischer; +Cc: IPFire: Development-List, IPFire: Infrastructure-List

[-- Attachment #1: Type: text/plain, Size: 1983 bytes --]

Hello Matthias,

I am adding the list to this conversation… The screenshot just contains a random ID and an error message. That is all.

So, what has happened here is the following:

Since we have so many people attacking us, I have added a large list of providers (mostly from the Middle East) and entire countries to use Anubis. That way, we completely deflect the attack from our web applications and that works well.

I never wanted Anubis to become a SPoF and therefore installed multiple machines that are handling the Anubis traffic. What I thought was stateless is actually not. So the problem that you were seeing was that one instance sent you the PoW challenge and another one received the response from your browser. Since it could not remember what challenge it sent you, it sent you the error message.

I have not made the sessions sticky in the load-balancer and the problem is gone.

As a separate issue, yes, loading the index page of git.ipfire.org <http://git.ipfire.org/> takes a little while. It isn’t very easy to cache. And in fact I have completely removed any kind of caching from git.ipfire.org <http://git.ipfire.org/> because we will only write stuff to disk that will never be read again. And in times of SSD prices that reach the moon, I don’t think we need to break our storage faster than we need to. You can use cgit.ipfire.org <http://cgit.ipfire.org/> which is a bit faster, but offers other features.

Please let me know if there are any problems remaining.

All the best,
-Michael

> On 27 Apr 2026, at 12:06, Matthias Fischer <matthias.fischer@ipfire.org> wrote:
> 
> Hi Michael,
> 
> I'm not sure if the attached screenshot contains any security-sensitive
> information, so I'm sending it to you directly via email instead of
> through the list.
> 
> I tried to open https://git.ipfire.org and was greeted with this message.
> 
> The "Go home"-Link opens GIT, but it takes a while...
> 
> Best
> Matthias

[-- Attachment #2: Oh noes!.pdf --]
[-- Type: application/pdf, Size: 179500 bytes --]

[-- Attachment #3: Type: text/plain, Size: 1 bytes --]



^ permalink raw reply	[flat|nested] only message in thread

only message in thread, other threads:[~2026-04-30  9:18 UTC | newest]

Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
     [not found] <4d364274-4a77-438f-902c-f31a653630e9@ipfire.org>
2026-04-30  9:18 ` Oh noes! Michael Tremer

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox