User talk:MikeMol: Difference between revisions

Content added Content deleted
Line 492: Line 492:
::: And that cloudfront thing is a tough one, since you don't want to enable that http header for people talking to you from IPs they control.
::: And that cloudfront thing is a tough one, since you don't want to enable that http header for people talking to you from IPs they control.
::: But wait.. how can content delivery networks validly act as valid content-providing clients? Perhaps the right thing to do here would be to IP ban all of CloudFront's proxy servers? (At least while they are being advertised as serving in that role?)?? --[[User:Rdm|Rdm]] ([[User talk:Rdm|talk]]) 14:37, 10 April 2015 (UTC)
::: But wait.. how can content delivery networks validly act as valid content-providing clients? Perhaps the right thing to do here would be to IP ban all of CloudFront's proxy servers? (At least while they are being advertised as serving in that role?)?? --[[User:Rdm|Rdm]] ([[User talk:Rdm|talk]]) 14:37, 10 April 2015 (UTC)
:::: We're deliberately using CloudFront as our CDN. rosettacode.org actually points at their servers, and their servers pass requests back to us if they're not already cached. CloudFront does pack a header to identify the client's original source IP, but I've never gotten MW configured to recognize that header as containing the source IP. It's on my TODO list, but said list is very, very, very long, and even older... --[[User:Short Circuit|Michael Mol]] ([[User talk:Short Circuit|talk]]) 14:40, 10 April 2015 (UTC)