|
|
Subscribe / Log in / New account

Arch Linux recent service outages

The Arch Linux project has posted an update about recent service outages that have affected its infrastructure:

The Arch Linux Project is currently experiencing an ongoing denial of service attack that primarily impacts our main webpage, the Arch User Repository (AUR), and the Forums.

We are aware of the problems that this creates for our end users and will continue to actively work with our hosting provider to mitigate the attack. We are also evaluating DDoS protection providers while carefully considering factors including cost, security, and ethical standards.

The post contains information on workarounds to use during the service disruption, and notes that Arch is not sharing technical details about the attack or mitigation while the attack is still ongoing.



to post comments

geez

Posted Aug 22, 2025 12:08 UTC (Fri) by daeler (subscriber, #130460) [Link] (4 responses)

It's very sad that there are people DDOS'ing projects like Arch.

geez

Posted Aug 22, 2025 12:41 UTC (Fri) by pizza (subscriber, #46) [Link] (3 responses)

> It's very sad that there are people DDOS'ing projects like Arch.

Welcome to the modern internet, where everyone and their dog has an "AI" crawler that routinely attempts to DDoS everyone, constantly.

(Two days ago I blocked a crawler botnet that had exceeded 1.5 *million* unique IP addresses)

geez

Posted Aug 22, 2025 17:46 UTC (Fri) by wtarreau (subscriber, #51152) [Link]

> (Two days ago I blocked a crawler botnet that had exceeded 1.5 *million* unique IP addresses)

These ones are really painful because in addition they're totally dumb and can retrieve tar.gz from gitweb pages etc. In fact they're stupidly reading more contents than humans would consume, and hope to provide knowledge to humans based on all this noise.

geez

Posted Aug 22, 2025 19:12 UTC (Fri) by 奇跡 (subscriber, #178623) [Link]

Personally recommend HackerFactor's No-NOC Networking blog/video series, have found the advice very useful on my own services

geez

Posted Aug 25, 2025 17:55 UTC (Mon) by smcv (subscriber, #53363) [Link]

I'll be interested to find out whether this is someone with a grudge against Arch intentionally doing damage as their goal, or a scraper botnet merely not caring whether they have accidentally implemented a DDoS as a side-effect. Either seems depressingly plausible.


Copyright © 2025, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds