Arch Linux

sawntoee

Member

Registered: 2025-10-21

Posts: 6

Meta: Decentralising Arch services

In light of the rampant DDOS attacks, is there anybody looking into decentralisation of critical Arch services? I'm aware that with the dynamic nature of the AUR and forums, this could be really difficult, but it seems like a worthwhile investment.

skunktrader

Member

From: Brisbane, Australia

Registered: 2010-02-14

Posts: 1,661

Re: Meta: Decentralising Arch services

AUR and forums and wiki were not affected by the latest DDOS attack

https://status.archlinux.org

Last edited by skunktrader (2025-12-27 06:20:58)

RedArcher

Member

From: South Africa

Registered: 2009-09-03

Posts: 153

Re: Meta: Decentralising Arch services

I think that it be good to decentralize publishing resources.

I think that hosting and replicating resources over XMPP (AtomSub or Atom Over XMPP) could be a viable solution.

https://journal.woodpeckersnest.eu/post … -internet/

https://xmpp.org/extensions/xep-0060.xml

https://xmpp.org/extensions/xep-0277.xml

https://xmpp.org/extensions/xep-0472.xml

Last edited by RedArcher (2025-12-27 07:13:26)

sawntoee

Member

Registered: 2025-10-21

Posts: 6

Re: Meta: Decentralising Arch services

> AUR and forums and wiki were not affected by the latest DDOS attack

Yes, but the AUR goes down very often and the main website does host important things like the mirrorlist.

gromit

Administrator

From: Germany

Registered: 2024-02-10

Posts: 1,448

Website

Re: Meta: Decentralising Arch services

Yes we are working on decentralizing these services or atleast to create a fallback in order to get rid of this single point of failure

seth

Member

From: Don't DM me only for attention

Registered: 2012-09-03

Posts: 71,642

Re: Meta: Decentralising Arch services

Do you have a legal/hetzner comment about throwing zip bombs (assuming the problem is those fucking ai scrapers)?

Basically enforce compressed content, use a local cache and gzip_static to lower the server processing costs.

Apparently the scrapers shy away from that in fear of zip bombs.
And if that doesn't help and you get legal approval: throw some…

---

How to upload text · How to boot w/o GUI · Disable Windows Fast-Start! · Fix your xinitrc

gromit

Administrator

From: Germany

Registered: 2024-02-10

Posts: 1,448

Website

Re: Meta: Decentralising Arch services

The problem currently is actual attackers and not "just" (these are also really disruptive) AI scrapers, so it's a different category of problem.

system72

Member

Registered: 2025-11-22

Posts: 395

Website

Re: Meta: Decentralising Arch services

i just use anubis to deal with scrapers, stops most of them

Yes we are working on decentralizing these services or atleast to create a fallback in order to get rid of this single point of failure smile

im curious on what that would look like, and how that would work

Last edited by system72 (2025-12-27 16:14:51)

---

7712 0a9f 0e6b F099 091d  438b 8b38 5527 5dfd D001