On Wed, Sep 30, 2026 at 11:00:35AM -0500, Maxwell G wrote:
> On 9/30/26 10:57 AM, Maxwell G wrote:
> > On 9/30/26 7:42 AM, Dmitry Belyavskiy via devel wrote:
> > > It looks like Koji web is behaving strangely.
> > > 
> > > I'm running a scratch build. The build page opens normally, but after
> > > several refresh attempts, I'm redirected to Anubis and receive a 403
> > > error. If I just copy the URL and open it in a new tab, it opens normally.
> > > 
> > > If I open this page with a different Google account, I get a 403
> > > immediately.
> > 
> > Hi,
> > 
> > Occasionally, Fedora Infra temporarily blocks certain endpoints on Koji
> > or other services when they are actively under attack from scrapers. I
> > would guess that's the issue behind the 403s; I have seen these today
> > also. I would ask in the Infra Matrix room or issue tracker.
> 
> 
> Earlier, I getting 403s when clicking the "Build Status" links on src.fp.o
> (which hit the Koji search endpoint), but it looks like that's working
> again.

There was another big scraper chud yesterday afternoon and I added some
blocks to mitigate that:

- I blocked anubises opengraph passthrough for koji. Koji doesn't really
  provide useful data there and scrapers were hitting really database 
  expensive endpoints, many of which also resulted in opengraph
  requests. (ie, show all packages in the buildroot used for this f29
  build, then list all the files in each of them).

- I also noticed that a lot of the traffic was sending referrers that
  were 100% the same as the request. So, I blocked that.

If you do see 403's perhaps there's some odd case of the second one
there thats causing them. If you could open a infra ticket and include
the time and exact url you were requesting and any other data that would
be great.

kevin
-- 
_______________________________________________
devel mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/[email protected]
Do not reply to spam, report it: 
https://forge.fedoraproject.org/infra/tickets/issues/new

Reply via email to