BBlack added a subscriber: BBlack.
BBlack added a comment.

It would be best to use the header `X-Client-IP` as the notion of the client IP 
address for these sorts of purposes.  This is intended to resolve trusted XFF, 
but has a much shorter list (intended to be improved on), whereas TrustedXFF is 
not usable by the the varnish layer and has a much longer list, but the list is 
not well-maintained.

We don't have any mechanism for giving an explicit parallelism limit 
per-client-IP (which only makes sense for requests that commonly run for long 
times anyways).  What we do have at our disposal currently is ratelimiting 
per-client-IP, and we could even modify the weighting based on response headers 
as well.


TASK DETAIL
  https://phabricator.wikimedia.org/T119917

EMAIL PREFERENCES
  https://phabricator.wikimedia.org/settings/panel/emailpreferences/

To: BBlack
Cc: BBlack, Aklapper, Smalyshev, jkroll, Wikidata-bugs, Jdouglas, aude, 
Deskana, Manybubbles, Mbch331



_______________________________________________
Wikidata-bugs mailing list
Wikidata-bugs@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs

Reply via email to