Hi all,
Since October [1], Arch Linux offers TLS encrypted rsync endpoint for
all T1 mirrors that sync directly from T0. The original rsync endpoint
remain unchanged. It is recommended for all T1 mirrors to switch over to
syncing via rsync over TLS. rsync over TLS is enabled on all Arch Linux
managed Geomirrors [3].
Mirrors themselves can also start supporting rsync endpoints over
TLS [2] if they wish to do so for other downstream T2 mirrors . Mirrors
supporting rsync over TLS can be listed on the wiki [4], as archweb does
not support listing them yet.
[1]
https://gitlab.archlinux.org/archlinux/infrastructure/-/merge_requests/1022
[2] https://wiki.archlinux.org/title/DeveloperWiki:NewMirrors#rsync_over_TLS
[3] https://archlinux.org/mirrors/geo.mirror.pkgbuild.com/
[4]
https://wiki.archlinux.org/title/Mirrors#Mirrors_supporting_rsync_over_TLS
Best regards,
Arun