2 ms·

git over ssh or an email interface are both core sourcehut features that seem like they wouldn't fit into cloudflare's standard https only model

by Macha 3y ago

Alupis 3y ago
That's a fair point. I think specifically for Sourcehut, to survive the DDoS they likely don't need 100% feature parity. Right now you can't even load their webpage - the service is effectively entirely down and users are left guessing what's going on. Getting web services back online would be significant. The point for them would be to get breathing room to figure out a better long term plan. When the immediacy is gone, they'll be in a much better negotiating position with Cloudflare (or alternatives) for non-standard features.
- mroche 3y ago
  Expanding on GP a bit, ssh is not just a core feature for SourceHut the _only_ allowed method of write access to a repository[0]. sr.ht does not support pushing to git repositories over HTTPS with a username+password — SSH keys are mandatory. HTTP access is restricted to read-only operations (clone, pull, etc). [0] https://web.archive.org/web/20231225152845/https://man.sr.ht/tutorials/set-up-account-and-git.md https://web.archive.org/web/20231225152845/https://man.sr.ht...
  - Alupis 3y ago
    That was understood. The point I was attempting to make was a partial outage is better than a complete outage. Restoring web services would allow them to better communicate to their customers what was happening... instead of everything just vanishing from the internet. It appears they restored HTTP services now, so perhaps they ended up taking that route. Their homepage lists details of the ongoing attack/outage and their current efforts. This is what should have been done immediately, I'm afraid to say. Once the attack passes, they will then be in a better position to consider their options and negotiate with providers for long term solutions.
piperswe 3y ago
Cloudflare Spectrum (https://www.cloudflare.com/application-services/products/cloudflare-spectrum/ https://www.cloudflare.com/application-services/products/clo... - available pay-as-you-go by the GB for SSH and Minecraft) could handle git over SSH without an enterprise account. Email would probably require either Email Workers or an enterprise Spectrum plan though.

git over ssh or an email interface are both core sourcehut features that seem like they wouldn't fit into cloudflare's standard https only model

by Macha 3y ago

git over ssh or an email interface are both core sourcehut features that seem like they wouldn't fit into cloudflare's standard https only model

Alupis 3y ago

That's a fair point. I think specifically for Sourcehut, to survive the DDoS they likely don't need 100% feature parity. Right now you can't even load their webpage - the service is effectively entirely down and users are left guessing what's going on. Getting web services back online would be significant. The point for them would be to get breathing room to figure out a better long term plan. When the immediacy is gone, they'll be in a much better negotiating position with Cloudflare (or alternatives) for non-standard features.

mroche 3y ago
Expanding on GP a bit, ssh is not just a core feature for SourceHut the _only_ allowed method of write access to a repository[0]. sr.ht does not support pushing to git repositories over HTTPS with a username+password — SSH keys are mandatory. HTTP access is restricted to read-only operations (clone, pull, etc). [0] https://web.archive.org/web/20231225152845/https://man.sr.ht/tutorials/set-up-account-and-git.md https://web.archive.org/web/20231225152845/https://man.sr.ht...
- Alupis 3y ago
  That was understood. The point I was attempting to make was a partial outage is better than a complete outage. Restoring web services would allow them to better communicate to their customers what was happening... instead of everything just vanishing from the internet. It appears they restored HTTP services now, so perhaps they ended up taking that route. Their homepage lists details of the ongoing attack/outage and their current efforts. This is what should have been done immediately, I'm afraid to say. Once the attack passes, they will then be in a better position to consider their options and negotiate with providers for long term solutions.

piperswe 3y ago

Cloudflare Spectrum (https://www.cloudflare.com/application-services/products/cloudflare-spectrum/ https://www.cloudflare.com/application-services/products/clo... - available pay-as-you-go by the GB for SSH and Minecraft) could handle git over SSH without an enterprise account. Email would probably require either Email Workers or an enterprise Spectrum plan though.