thresh

Of course, static websites is the best solution to that problem.

Our documentation and a main website are not fronted by this protection, so they're still accessible for the scrapers.

You cant really cache the dynamic content produced by the forges like Gitlab and, say, web forums like phpbb. So it means every request gets through the slow path. Media/JS is of course cached on the edge, so it's not an issue.

Even when the amount of AI requests isnt that high - generally it's in hundreds per second tops for our services combined - that's still a load that causes issues for legitimate users/developers. We've seen it grow from somewhat reasonable to pretty much being 99% of responses we serve.

Can it be solved by throwing more hardware at the problem? Sure. But it's not sustainable, and the reasonable approach in our case is to filter off the parasitic traffic.

I'm all ears on how we can fix it otherwise.

Keep in mind that those kinds of services: - should not be MITMed by CDNs - are generally ran by volunteers with zero budget, money and time-wise

We had to set it up on the parts of VideoLAN infra so the service would remain usable.

Otherwise it was under a constant DDoS by the AI bots.

Just use the official packages from https://nginx.org/en/linux_packages.html#Ubuntu

nginx-module-acme is available there, too, so you don't need to compile it manually.

I'm currently working on getting the Trixie packages uploaded. It'll be there this week.

As you've said Debian 13 was released 4 days ago - it takes some time to spin up the infrastructure for a new OS (and we've been busy with other tasks, like getting nginx-acme and 1.29.1 out).

(I work for F5)

Is that correct? My understanding is that the SWIFT transfer will go through a US correspondent bank in this case.

Uh, Siberia and Russian European North.

Hi!

The official nginx docker images ship with HTTP3 module enabled - and we have released the updated ones earlier today - so please update to stay secure.

You can also launch something like: $ docker run -ti --rm nginx:latest nginx -V

to check which modules are compiled in to the binary you're running.

Thanks!

VLC has a port to WebAssembly: https://code.videolan.org/jbk/vlc.js#vlcjs-vlc-for-wasmasmjs

(it's actually usable to some extent)

nginx: https://mailman.nginx.org/pipermail/nginx-devel/2023-October...

Read this: https://mailman.nginx.org/pipermail/nginx-devel/2023-October...

> We will also start asking anyone who reports bugs in AlmaLinux OS to attempt to test and replicate the problem in CentOS Stream as well

So what's the point of running Alma then?

The electricity there isnt just cheap, it's virtually free. They just dont shut you off it you don't pay.

Is HTTP2 in the paid version different than the opensource implementation?

Even the bloomberg article states:

> Already, the summer generates 60% of the tourism intake, according to Garmisch Mayor Sigrid Meierhofer.

Indeed, hiking doesnt require you to spend moneys on rental equipment. It's a bit different for mountain biking - most of the time you need lift passes to enjoy the mountain. And with the explosion of electric bikes rentals in the last years, and there are lots of growth opportunities for generating revenue there as well.

And it's not only about hiking/biking, of course.

Of course, having more places to ski is better than having less places - my main concern is people and their jobs, and not specific resort activities per se.

I don't think there's much culture lost in moving a few ski lifts to a higher altitude place.

So they'll just convert the lower altitude resorts to more "summer" activities like hiking and mountain biking.

Finally they found someone to get sold to. Only 750 customers, so low.

And no info on the price.

No, you should rewrite your CI not to depend on external stuff, if you want sane evenings.

How do people self-hosting gitlab CE for the open-for-all projects fix the spam problem?

"sudo su" is "launch su with superuser privileges", which is eh... weird to say the least. You probably wanted "sudo -i".

Implying US-based companies don't have links to the US government and intelligence services?

Implying US doesnt spy, censor or mind-controls its own citizens?

That does not happen all the time though. I would say geolocation works nicely pretty much all the time.

Not sure why it's not possible to order a taxi, since you're not supposed to provide your own coordinates but rather a point where you want to be picked up.

Why would someone who wants you out help you find another job?

What kind of mess is in the head of a person that thinks everyone owes them a helping hand?

We do that quite easily for all VideoLAN projects, using https://code.videolan.org/videolan/docker-images/tree/master...

It's all fun and games until we realize our web designers put a four megabyte jpeg on the index page.

The MP4 SA is available at http://mailman.nginx.org/pipermail/nginx-announce/2018/00022...

The review doesnt tell you that you cannot upgrade or replace your SSD.