[BlueOnyx:27401] BlueOnyx SVN/Trac issues

[Michael Stauber]

Hi all,

There is currently a DDOS attack running against the webserver 
devel.blueonyx.it, which hosts the Subversion code repository and the 
TRAC frontend for the BlueOnyx source code.

This is an older server which I wanted to modernize anyway. So for the 
moment I have turned off Apache on it. Which essentially makes the 
BlueOnyx source code unreachable for the moment.

This is only a temporary measure until the move of the code repository 
to a more modern environment is finished. I expect it to be up and 
running again within the next 24 hours.

The YUM/DNF mirrors are neither directly nor indirectly affected by 
this. Synchronization of the downstream mirrors with devel.blueonyx.it 
doesn't happen via Apache, but uses RSYNC. And that's still up and 
working for now.

However: When I eventually put the modernized devel.blueonyx.it into 
production? Then there will a brief window during which synchronization 
of the downstream mirrors might briefly fail until I have all ducks 
lined up properly.

As for the DDOS? It's mostly from Chinese IPs and they hit the TRAC web 
frontend of the Subversion repository with such an intensity and 
frequency, that the older architecture of this server has issues coping 
with it. The load caused by this then has negative side effects on other 
virtual servers on the same virtualization node.

Once the move to the newer OS is done, I have more and better tools at 
hand to curb-stomp such attempts.

-- 
With best regards

Michael Stauber