On 11/25/2017 8:38 AM, David Jones wrote:
I too would like to clean up old unused rulesets but Kevin says this
causes some problems. I would think that if there are no DNS entries
pointing to the ruleset, it should no longer be needed and could be
cleaned up from the mirrors. Still it's only ~330 MB so not a big deal.
The scripts that generate the rulesets set the perms. I can look at
updating the scripts to change the perms but this doesn't hurt
anything or cause a security risk,
First, thanks for stepping up. I've been a little overwhelmed with
Thanksgiving festivities but really appreciate all the new sponsors.
Second, there are people using old rulesets so we are leaving them for
now. We moved some older ones to an archive dir and I had some
backchannel notes about issues. So for now, it's a few hundred megs so
I appreciate if you could just ignore them. They are considered release
items so keeping old releases is important.
Third, the permissions are unclean but because rules are crypto signed,
I've never cared too much. Even if they are modified, they will fail.
But it should get fixed. Jens, could you open a bugzilla to do that please?
Fourth, we have several new mirrors. If you haven't please subscribe to
[email protected] mailing list and make sure your cron job is set to no
more than 10 minutes. Tobi, yours has shown stale a few times but the
hiccup will work it's way out. Once that is done with 4 mirrors, we
should raise you to a weight of 10.
Dave, in talks with cPanel a few weeks they also offered help using
their 40+ mirrors worldwide. We should open a ticket and think about
how we can use shorted-path or geolocated algorithms coupled with
weighting to maximize the mirrors. Thoughts?
Regards,
KAM
