[Lazarus] Lazarus server under DDOS

[Michalis Kamburelis]

John,

I'm afraid the issue is still there -- I just rechecked.

That is, using https://github.com/gcarreno/setup-lazarus causes
"Error: getPackageList -- Request timeout: /packagelist.json".  On
both Windows, Linux and macOS GH-hosted runners.

I'm guessing it has a smaller default timeout for requests, so it can
fail even if other ways to access Lazarus website over http(s) now
work OK. I looked into increasing the socketTimeout underneath (
https://github.com/gcarreno/setup-lazarus is using httpclient in JS,
from https://github.com/actions/toolkit/blob/main/packages/http-client/src/interfaces.ts
) but I'm not familiar with httpclient/JS enough to do it
successfully. I also looked to switch to IPv6 (Marc pointed that IPv6
works more reliably for him) but there doesn't seem to be an option to
force IPv6 with this client.

Regards,
Michalis

wt., 1 paź 2024 o 18:12 John Landmesser via lazarus
<lazarus at lists.lazarus-ide.org> napisał(a):
>
> Am 01.10.24 um 17:15 schrieb Michalis Kamburelis via lazarus:
> > Note:
> >
> > As a consequence, the GitHub Action
> > https://github.com/gcarreno/setup-lazarus also fails now. Trying to
> > use it to install FPC+Lazarus results in an error
> >
> >    Error: getPackageList -- Request timeout: /packagelist.json
> >
> > in GitHub Action workflow output. I guess because the action downloads
> > https://packages.lazarus-ide.org/packagelist.json . Which, while it
> > works in the normal browser (like Firefox) (with a considerable
> > delay), but e.g. "wget" (with default timeouts) fails:
> >
> >     $ wget https://packages.lazarus-ide.org/packagelist.json
> >     --2024-10-01 17:09:44--  https://packages.lazarus-ide.org/packagelist.json
> >     Resolving packages.lazarus-ide.org (packages.lazarus-ide.org)...
> > 37.97.187.115, 2a01:7c8:aac1:2f0::1
> >     Connecting to packages.lazarus-ide.org
> > (packages.lazarus-ide.org)|37.97.187.115|:443... failed: Connection
> > timed out.
> >     Connecting to packages.lazarus-ide.org
> > (packages.lazarus-ide.org)|2a01:7c8:aac1:2f0::1|:443... failed:
> > Network is unreachable.
> >
> > ( I understand this, I mean I'm writing above as just "FYI" for people
> > who may be using https://github.com/gcarreno/setup-lazarus , like
> > Castle Game Engine actions do. I was surprised today to see our GitHub
> > Actions fail, but this explains it. I'm not "demanding" any action,
> > sure you need to put limits to protect from DDOS. I'm just making a
> > note to eventually relax these limits to at least enable the above
> > wget again. )
> >
> > Regards,
> > Michalis
> >
> > wt., 1 paź 2024 o 11:00 Marc Weustink via lazarus
> > <lazarus at lists.lazarus-ide.org> napisał(a):
> >> Hi,
> >> The Lazarus server is currently under heavy DDOS. This affects the
> >> Lazarus main site, the Lazarus packages, the Lazarus mailing list
> >> archives and the Lazarus+Freepascal forum.
> >> I've enabled a rate limiter so the sites should be available again (in
> >> the first few seconds it was active, it blocked 10k connection attempts)
> >> but it might have some side effects using the forum.
> >> I hope it gets over soon.
> >>
> >> Marc
> >> --
> >> _______________________________________________
> >> lazarus mailing list
> >> lazarus at lists.lazarus-ide.org
> >> https://lists.lazarus-ide.org/listinfo/lazarus
>
>
> Just downloaded lazarus trunk + compiled useride that took 2m:35s  I
> think that is normal. Living in Germany, Frankfurt am Main
>
> Perhaps this issue is gone ?
>
> --
> _______________________________________________
> lazarus mailing list
> lazarus at lists.lazarus-ide.org
> https://lists.lazarus-ide.org/listinfo/lazarus