News for hackers. Stuff that matters.

A comment on The GMP library's repository is under attack by a single GitHub user. Parent comment

Re:The GMP library's repository is under attack by a single ... by jeroenhd on Sunday June 18, 2023 @11:23AM (#36381089)
Those 700 clones would all hit at exactly the same time. That's quite a load for a single server, especially since Mercurial can't be cached that easily.
[ Parent | on HN ]
Re:The GMP library's repository is under attack by a single ... by chongli on Sunday June 18, 2023 @11:30AM (#36381143)
So if they're all hitting at exactly the same time, why not set up a firewall rule to block traffic from GitHub at exactly that time of day?
[ Parent | on HN ]
Re:The GMP library's repository is under attack by a single ... by miyuru on Sunday June 18, 2023 @11:52AM (#36381339)
Setting up a rate limiter is the correct way forward, and using IP block as the nuclear option.
[ Parent | on HN ]
Re:The GMP library's repository is under attack by a single ... by Mathiasdm on Monday June 19, 2023 @01:43AM (#36387695)
Mercurial clones can be cached quite easily with 'clonebundles', a Mercurial feature that allows redirecting a clone to instead download a single 'bundle' (which could come from a different server or set of servers).

See https://wiki.mercurial-scm.org/ClonebundlesExtension

[ Parent | on HN ]