https://bugzilla.wikimedia.org/show_bug.cgi?id=64622

Antoine "hashar" Musso <has...@free.fr> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |has...@free.fr

--- Comment #19 from Antoine "hashar" Musso <has...@free.fr> ---
From a mail sent to MediaWiki core list:

By looking at the udp2log limiter.log file, the renderfile-nonstandard
limit is reached by:


$ fgrep renderfile limiter.log |cut -d\: -f4|sort|uniq -c|sort -n
    378  10.64.0.168 tripped! mediawiki
    405  10.64.0.167 tripped! mediawiki
    476  10.64.32.92 tripped! mediawiki
    498  10.64.16.150 tripped! mediawiki
$

They are the media server frontends ms-fe1001 to ms-fe1004. We probably
want to restrict the end user IP instead.

I suspect the media servers are not properly passing the X-Forwarded-For
header down to the thumbnail renderer. Seems the logic is in
operations/puppet.git file ./files/swift/SwiftMedia/wmf/rewrite.py


Would need someone with more informations about Swift/Thumb handling
than me :-(

-----------

I have poked Faidon about it, the X-Forwarded-For headers seems to be passed by
the Swift proxies, we need their IP to be trusted by MediaWiki.

-- 
You are receiving this mail because:
You are on the CC list for the bug.
_______________________________________________
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l

Reply via email to