cvsup server operation

John Polstra jdp at polstra.com
Fri Oct 10 13:21:10 PDT 2003


On 10-Oct-2003 Vladimir V Egorin wrote:
> 
> After a long downtime, we've brought cvsup15.freebsd.org back
> to life.   I've noticed however something odd in the logs.
> We run updates (update.sh script) once per hour, however there
> are some clients that request updates periodically every 5-10
> minutes, sometimes as often as every 2-3 minutes.   This doesn't
> make any sense to me; this potentially could result in denial
> of updates to other clients if the queue is full of regular
> guests.
> I'd be interested in hearing whether other cvsup sites implement
> any access control mechanism that denies update to clients
> that have requested it very recently in the past, or shall I just
> pay no attention and let it be.

I don't have any automatic rate throttling on the mirrors I manage.
But I check the log files periodically.  Any time I notice somebody
abusing a mirror (e.g., with cronjob updates more frequently than once
an hour) I simply blacklist them in the cvsupd.access file.  I feel no
remorse at all about denying access to greedy jerks.  Likewise, when
I catch people doing simultaneous updates from multiple machines at
their site, I add a rule to cvsupd.access that limits them to 1 update
at a time from their subnet.  I always have a great big smile on my
face when I do that.  No guilt whatsoever. :-)

The scary thing is when you find out how few of these cronjob mirror
abusers even notice that they're not getting updates any more.

John


More information about the freebsd-hubs mailing list