From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp11.migadu.com ([2001:41d0:2:bcc0::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms9.migadu.com with LMTPS id kGptBvFQS2QPYwEASxT56A (envelope-from ) for ; Fri, 28 Apr 2023 06:52:01 +0200 Received: from aspmx1.migadu.com ([2001:41d0:2:bcc0::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp11.migadu.com with LMTPS id cExlBvFQS2SpEwAA9RJhRA (envelope-from ) for ; Fri, 28 Apr 2023 06:52:01 +0200 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id BB198D2AC for ; Fri, 28 Apr 2023 06:52:00 +0200 (CEST) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1psG4k-0004qF-G8; Fri, 28 Apr 2023 00:51:18 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1psG4f-0004oY-7b for guix-devel@gnu.org; Fri, 28 Apr 2023 00:51:14 -0400 Received: from relay10.mail.gandi.net ([2001:4b98:dc4:8::230]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1psG4a-00019p-4a for guix-devel@gnu.org; Fri, 28 Apr 2023 00:51:12 -0400 Received: (Authenticated sender: andrew@trop.in) by mail.gandi.net (Postfix) with ESMTPSA id C26D7240006 for ; Fri, 28 Apr 2023 04:51:01 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=trop.in; s=gm1; t=1682657462; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type; bh=Bvhs9iyfkqZbGayWC4ax4jqw4lMgTSnGeiwepmk03pg=; b=ERfO5Cf1YggQ1mTxpa3un0dSXIIAerSJ2p3LtWnX2bLa9gS6f4FH6YWrPZoHL4iaQoTM8x LV+gfP2tFxZRogfEY3y0HkWJ8csGwy8h0uJ45AaDAhyJ1g4SfUjvJJ+NZE2cKCuyNXPrRr Z5aBhi7n7TPKvZXVIXobovGpPNh4D/ibPLbFAbCXfmrq6vfLpJroBHzPmcyfsNfxY1d709 YPmP204XLOrAgyTR2wF6JHU/lYR5YbxTg0DJ8TfN/p/6+HEF8JX3nVJblt5vN61YV2YyPT VtC9uk49XWp8/eeVyHyLgiprhDiwKwaTHmkK8GigDAt5VUR5h7htxF5sAZM+Pw== From: Andrew Tropin To: guix-devel@gnu.org Subject: ci.guix.gnu.org proxy blocked Date: Fri, 28 Apr 2023 08:50:58 +0400 Message-ID: <871qk4a9u5.fsf@trop.in> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" Received-SPF: pass client-ip=2001:4b98:dc4:8::230; envelope-from=andrew@trop.in; helo=relay10.mail.gandi.net X-Spam_score_int: -27 X-Spam_score: -2.8 X-Spam_bar: -- X-Spam_report: (-2.8 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: guix-devel@gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+larch=yhetil.org@gnu.org Sender: guix-devel-bounces+larch=yhetil.org@gnu.org X-Migadu-Flow: FLOW_IN X-Migadu-Country: US ARC-Seal: i=1; s=key1; d=yhetil.org; t=1682657520; a=rsa-sha256; cv=none; b=JvV6SW17oWhY+1H/HZK5vINk8PI64uVStXBqAIzUhxDvK4jlhWaTIKT+UrAkPFFN2jhB2D dpmjyjNKf3BqZ1tBTKpd3bvsjV3TZ8pN+LBE+B/CbKX684LTQ1xIemI43YrKFYCI1Sy1fu g5Sk3XjI0l6PEfYnsxFoZHwBwvUUCyakLvW+z8WcjL4yvpsEBiZZImE1aeoaDzmlLU6XZi 9nS0TbyCglB9PTxX7Fb6WOiPLyUEZMHuJ9cYqvEma16YNkr5GJgk+EFZtLg9VQRMQ8PC1L 0faO8Ks3qosTVB3qryr+BI8DMdOUy8ga91QUjvIslNPSk/6Sji/CsE+83UGUFg== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=pass header.d=trop.in header.s=gm1 header.b=ERfO5Cf1; dmarc=none; spf=pass (aspmx1.migadu.com: domain of "guix-devel-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-devel-bounces+larch=yhetil.org@gnu.org" ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1682657520; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:mime-version:mime-version: content-type:content-type:list-id:list-help:list-unsubscribe: list-subscribe:list-post:dkim-signature; bh=Bvhs9iyfkqZbGayWC4ax4jqw4lMgTSnGeiwepmk03pg=; b=qY289ZDSU4P4T9U0fqr+mWeb1e3BzzeIFION6Dqtbhjzo0IrJHRmvioYpJWRBobIhuFLha LZp79PsymENfWyCbnOv7Id5Nqbj7tQk+YVjjx1SJDk1n6NrmSJY4UqUZJlkuRLA0AdAi62 q5Kk4A+bZ8mSdFaWx/+Uso3gqpaSoV6HXhyamkqY/IAsVlBReu4Pp0qT7p98gaIpij2eXp LUzGWf+XR0auDjkdlAItqMovWgkJcQFerNtagT6vb38ZOT9Et6ltPKLg+45Ro3rKq2PO5e /2eBL4Geybs+xl3C4Ngp2tNX3G0Mx0UGY6WHF2645fAQxxG/X37GD0Wr7TLHQQ== X-Migadu-Scanner: scn1.migadu.com Authentication-Results: aspmx1.migadu.com; dkim=pass header.d=trop.in header.s=gm1 header.b=ERfO5Cf1; dmarc=none; spf=pass (aspmx1.migadu.com: domain of "guix-devel-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-devel-bounces+larch=yhetil.org@gnu.org" X-Migadu-Spam-Score: -6.31 X-Spam-Score: -6.31 X-Migadu-Queue-Id: BB198D2AC X-TUID: Xwz7+/uA4VGS --=-=-= Content-Type: text/plain Content-Transfer-Encoding: quoted-printable Hello guix! ci.guix.gnu.org is not available in some countries and I maintain a nginx proxy for it at ci.guix.trop.in. From=20time to time the proxy host get rate limited with following message from ci.guix.gnu.org: =2D-8<---------------cut here---------------start------------->8---

Blocked because of DoS Attack

Your computer has been blocked because a DoS attack originating from your system was detected. For more information, contact the system administrator.

=2D-8<---------------cut here---------------end--------------->8--- and becomes very slow. Can we workaround it somehow? Also, we provide ci.guix.ygg.trop.in, which make it available over yggdrasil network (which is censorship-resistant and quite fast and also packaged/serviced in guix). https://yggdrasil-network.github.io/ Maybe we can setup yggdrasil node on ci.guix.gnu.org, to make it possible to access it directly and not via proxy? We have a tor node on ci.guix.gnu.org, but it's very slow comparing to yggdrasil. =2D-=20 Best regards, Andrew Tropin --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEKEGaxlA4dEDH6S/6IgjSCVjB3rAFAmRLULIACgkQIgjSCVjB 3rCgDw//Vi9DraRhI5GqPG0dkDLPNM3M3pumegnnfRdPIlGH+H6msEUneevThONS O0bLX3GiPmIqSOmvjgN0Uj0ueMWDxqUpj2WK7SLoSDdH32+hsy7X1LFfpKNPQXT3 yGpX1GVJMWwNxCZBXLx4rC4o16pKvqijCoI6Fwc96Z1oyC8dfKsfLMYAV3enQU3X JPMdIc3AwIVD1XQHsBPh/gmvNCwIz530jaRxXr9iNGjwtdqiM6E5a+YhIQXkZtTo LAhx1/0+mPnbJ6DB+UwTxmRx93LZ2IfyI7ybYuOIflCe4xtyyoFTdw0AK40z0oXm +zomQ6beDJRBQqTrSy0UPxXZymXdtP4gPFO4yXofv9CrH9hMboBRdPugNBbhvDd0 YwUgGEhxTJgaZyL4tec/TFiY2VAvf0cbn1/yse8tK0SRR/06RQl4e+cJM28MOkjG X2UTNLnvcbPy3qmVumpBafnSLNTxYIMCx4i+mzmC2yOm9mHmooX9IANVIfg01+En 8YfBJGAS5mLCL6GF60Xz4ByDDP7X8ctLcBpXEWYKMqqRlJrwWZhYE16dUzTTmnRL ZMDYYPKVofiQ7SjLMgXXwPEUytmfphnYGzU3EoOQ+IhDkkczHcdn2RZY+6hcYhQv NtR1R5J8g5RrEngeKYxvqjOBi8oal9ZbILrROomsN/Pb9/S5NH0= =nPbT -----END PGP SIGNATURE----- --=-=-=--