User talk:MikeMol: Difference between revisions
Content added Content deleted
(→Spam Deletion: CDNs) |
(→Spam Deletion: CloudFlare and direct access.) |
||
| Line 493: | Line 493: | ||
::: But wait.. how can content delivery networks validly act as valid content-providing clients? Perhaps the right thing to do here would be to IP ban all of CloudFront's proxy servers? (At least while they are being advertised as serving in that role?)?? --[[User:Rdm|Rdm]] ([[User talk:Rdm|talk]]) 14:37, 10 April 2015 (UTC) |
::: But wait.. how can content delivery networks validly act as valid content-providing clients? Perhaps the right thing to do here would be to IP ban all of CloudFront's proxy servers? (At least while they are being advertised as serving in that role?)?? --[[User:Rdm|Rdm]] ([[User talk:Rdm|talk]]) 14:37, 10 April 2015 (UTC) |
||
:::: We're deliberately using CloudFront as our CDN. rosettacode.org actually points at their servers, and their servers pass requests back to us if they're not already cached. CloudFront does pack a header to identify the client's original source IP, but I've never gotten MW configured to recognize that header as containing the source IP. It's on my TODO list, but said list is very, very, very long, and even older... --[[User:Short Circuit|Michael Mol]] ([[User talk:Short Circuit|talk]]) 14:40, 10 April 2015 (UTC) |
:::: We're deliberately using CloudFront as our CDN. rosettacode.org actually points at their servers, and their servers pass requests back to us if they're not already cached. CloudFront does pack a header to identify the client's original source IP, but I've never gotten MW configured to recognize that header as containing the source IP. It's on my TODO list, but said list is very, very, very long, and even older... --[[User:Short Circuit|Michael Mol]] ([[User talk:Short Circuit|talk]]) 14:40, 10 April 2015 (UTC) |
||
::::: Oh, and I have direct access to RC's origin servers firewalled off from anywhere except CloudFlare. Nobody is supposed to be able to access RC's server (except via SSH) except through them. --[[User:Short Circuit|Michael Mol]] ([[User talk:Short Circuit|talk]]) 14:50, 10 April 2015 (UTC) |
|||