Like many services in the software world, our services are subject to disruptive automated requests that overload our servers. You may have noticed this in the form of significant loading delays or even services becoming unavailable.
We have therefore implemented a security system over the past few days that allows us to reject requests we deem inappropriate. This system specifically requires the execution of a JavaScript program, which thwarts a significant number of bots. You may see the following screen appear briefly.
The infrastructure we’ve put in place allows us to restore a very high level of service availability. It will also enable us to make adjustments easily.
However, if you notice that certain features are affected by these measures, please let us know, as this will allow us to make more precise adjustments.
Did notice while downloading an image. Only issue would be the checksums not seen afterwards, but this can be checked by retracing back to the download page with checksum (and halting the 2nd download) – not a big issue, you’ve got bigger fish to fry. Keep up the good work.
But you do know that when you build up walls you don’t keep “them” outside, but you rather cage yourselves in, right?
Maybe it would have been a better solution, if possible, to implement some thresholds, like how many Kilobytes per second per IP, or how many Megabytes per day per IP.
Know that some bots can use millions of different IP addresses. Thus, protection against one IP if not enough.
Pingback: Maatregelen die onze webdiensten beschermen. | Mageia Blog (Nederlands)