118

The Arch Linux team has once again been forced to respond to a distributed denial-of-service attack targeting its AUR repository infrastructure. As a result, DDoS protection has been enabled for aur.archlinux.org to help mitigate the ongoing disruption.

While this measure helps keep the AUR website accessible, it has introduced a significant side effect: pushing to the AUR is currently not possible.

you are viewing a single comment's thread
view the rest of the comments
[-] gusgalarnyk@lemmy.world 5 points 1 day ago

Is there anything we can do? Like, pardon my lack of knowledge on the subject, but could I host like a mirror and therefore expand the servers... width (would that be the right word)? That way the bots have to hit even more end points?

[-] mushroommunk@lemmy.today 6 points 1 day ago

You could donate to the project but I don't think a mirror would help.

Mirrors still see a specific instance as the truth and sync to that. A mirror would make it possible for someone to download an update from you while the truth instance is down (or always from you if you're closer and faster) but without that first truth instance there'll be no new updates. There won't be syncing across mirrors. And it wouldn't really impact any DDOS because it's still that first instance being targeted.

DDOS mitigation can take one of two main ways. Add enough server power to overcome the DDOS, this is insanely expensive and out of each for most all but like Amazon and Meta. The second is to cut off whatever is doing the DDOS, either by disabling the specifically protocol or endpoint being used or not allowing certain IPs to connect. These are probably what they are doing already and there's not much you can do as an outsider to help with this either sadly.

[-] gusgalarnyk@lemmy.world 2 points 1 day ago

I already donate but I'll review my contribution and see if I can throw a few more euros their way.

Thanks for the explanation on truth in terms of mirrors, that helps me understand. I was offering server power but that might not be feasible or meaningful. And based on what you've said, it seems like the Disable focused warfare is the best approach.

this post was submitted on 27 Oct 2025
118 points (100.0% liked)

Linux

9924 readers
679 users here now

A community for everything relating to the GNU/Linux operating system (except the memes!)

Also, check out:

Original icon base courtesy of lewing@isc.tamu.edu and The GIMP

founded 2 years ago
MODERATORS