This is an interesting concept we'd have to persue. If you want to know,
email me directly and I can look you up and let you know what I see.

We will probably start publishing a list of abusers in a hall of shame
;-)

-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Baptiste
MATHUS
Sent: Tuesday, November 25, 2008 1:54 PM
To: Maven Users List
Subject: Re: [Public service announcement] mirrors of Central and
considerate repo use

2008/11/25 Brian E. Fox <[EMAIL PROTECTED]>

> The central repo has been undergoing significant load lately,

<snip />

> Also, if you are using a repo manager, make sure to correctly
configure
> it to not make requests to public repositories for your internal
> artifacts. Otherwise you are making a ton of requests for things that
> will never be found, increasing the bandwidth usage on your side and
> ours. Also it gives away potentially sensitive information as someone
> could scrape the logs and figure out what you're up to internally
based
> on these requests. Nexus lets you configure routing rules so you could
> exclude com.yourcompany.* from central. Archiva has similar
> functionality, I'm not sure about Artifactory.
>

Hi Brian,

We've configured an internal maven repository manager some months ago
for
now. So, our requests should not be too high on the repo1.maven.org. But
as
we might have missed something in the configuration, wouldn't be
possible to
access logs from central in some way?

I mean, I know there would some privacy/security problems to do that
without
any restrictions. But maybe those logs could be filtered by the
requesting
(public) IP? This way, it would be possible for us to know if our hit
count
is acceptable or not according to say some typical/acceptable value you
would provide?

I know you all already have enough work with maven not to look for new
tasks
:-). Just wanting to detect my potential MRM leakages :-) (or inside
developers that would directly hit central without going through our
internal repo/proxy...).

Cheers.

-- 
Baptiste <Batmat> MATHUS - http://batmat.net
Save a tree,
Eat a beaver!

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to