130
Arch Linux AUR Hit by Another DDoS Attack, Port 22 Access Disrupted (linuxiac.com)
submitted 1 year ago by to c/linux@programming.dev
16 comments fedilink hide all child comments
 

The Arch Linux team has once again been forced to respond to a distributed denial-of-service attack targeting its AUR repository infrastructure. As a result, DDoS protection has been enabled for aur.archlinux.org to help mitigate the ongoing disruption.

While this measure helps keep the AUR website accessible, it has introduced a significant side effect: pushing to the AUR is currently not possible.

you are viewing a single comment's thread
view the rest of the comments
[–] 5 points 1 year ago (2 children)

Is there anything we can do? Like, pardon my lack of knowledge on the subject, but could I host like a mirror and therefore expand the servers... width (would that be the right word)? That way the bots have to hit even more end points?

  • permalink
  • fedilink
  • source
  • hideshow 2 child comments
    •
  • [–] 6 points 1 year ago (1 child)

    You could donate to the project but I don't think a mirror would help.

    Mirrors still see a specific instance as the truth and sync to that. A mirror would make it possible for someone to download an update from you while the truth instance is down (or always from you if you're closer and faster) but without that first truth instance there'll be no new updates. There won't be syncing across mirrors. And it wouldn't really impact any DDOS because it's still that first instance being targeted.

    DDOS mitigation can take one of two main ways. Add enough server power to overcome the DDOS, this is insanely expensive and out of each for most all but like Amazon and Meta. The second is to cut off whatever is doing the DDOS, either by disabling the specifically protocol or endpoint being used or not allowing certain IPs to connect. These are probably what they are doing already and there's not much you can do as an outsider to help with this either sadly.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 2 points 1 year ago

    I already donate but I'll review my contribution and see if I can throw a few more euros their way.

    Thanks for the explanation on truth in terms of mirrors, that helps me understand. I was offering server power but that might not be feasible or meaningful. And based on what you've said, it seems like the Disable focused warfare is the best approach.

  • permalink
  • fedilink
  • source
  • parent