Hi, Am Donnerstag, den 30.01.2020, 14:55 +0000 schrieb Jean-Marc Borer: > > This is bit of a complaint addressed to the NB infra community. When you > are stuck behind corporate proxy that is very aggressively filtering web > content, mirrors are a nightmare for you. In my case we need to whitelist > every single server hosting java binaries otherwise we get empty files. As > such, it is not viable to declare every single mirror (the company won't > accept that). > > So my request is: please for NB IDE updates and their core components, > never ever use mirrors or provide an option to always point to the same > mirrored site. > > This may sound silly, but is really an issue within enterprises and > therefore prevent the adoption of NB IDE far more than the alternatives, > which is really a pity... >
this is a late reply, but I finally managed to get this into a state I'm willing to put into production and get it onto the netbeans-vm1.apache.org server. So that no one can hold this against me: THIS IS EXPERIMENTAL! The problem is, that we have to serve the update catalog from a trusted source, but still want to use the mirror infrastructure to distribute load around the globe. The idea to fix this is to allow the user to choose a mirror, while still fetching the catalog from netbeans-vm. The code can be found here: https://github.com/apache/netbeans-tools The instructions how to use can be found here: https://netbeans-vm1.apache.org/uc-proxy-chooser/mirror-list.php Basicly this URL: https://netbeans-vm1.apache.org/uc/12.2/updates.xml.gz?{$netbeans.hash.code} becomes this: https://netbeans-vm1.apache.org/uc-proxy-chooser/12.2/updates.xml.gz?{$netbeans.hash.code}&mirror=<mirrorkey> The PHP Script behind this uses the original update catalog (with cryptographic hashes) and patches the URLs in it to directly point to the chosen mirror. For anyone with interest in the generated content, I found this command line to be helpful: curl https://doppel-helix.eu/uc-proxy-chooser/12.2/updates.xml.gz?mirror=ftp-stud.hs-esslingen.de | gzip -d | less With this modification, two servers need to be whitelisted: - the chosen mirror host (for active releases) - archive.apache.org (for older releases) I would be interested in feedback. Greetings Matthias --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@netbeans.apache.org For additional commands, e-mail: dev-h...@netbeans.apache.org For further information about the NetBeans mailing lists, visit: https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists
