Hi, I'm running a CentOS mirror for a couple of years now. (ftp.cc.uoc.gr)
The last 13 days we're seeing a huge spike every night 20:00 - 02:00 EEST for CentOS isos (7/8), which filling up our upload bandwidth of server. Timeframe is always the same.
IP's mainly from CN. It does not seem as an attack, but rather as normal downloads.
Did you change something? Last night is with QOS cap.
Nothing I see has been changed in the last couple of weeks. There have been reports of a couple of CN ip addresses doing this for several mirrors. It is repeat and partial downloads of the same isos over and over again filling up that mirrors bandwidth. Most of the mirrors I know have had to blacklist those ips.
This what's I've also started doing today. blacklisting whole ASNs
thanks for the reply
We had issues a while back on our archive servers where there was constant partial downloads of iso's from an address range in CN. We had to firewall those ips
Metadata Update from @mobrien: - Issue priority set to: Waiting on Reporter (was: Needs Review)
Metadata Update from @arrfab: - Issue close_status updated to: Wrong tracker - Issue status updated to: Closed (was: Open)
Log in to comment on this ticket.