Rubygems.org down for more that 5(?) hours now

ruby-talk
1

Any alternative or workaround for this problem?

···

--
Juanjo Conti
Mi primer novela ya se puede conseguir en:
http://www.juanjoconti.com.ar/xolopes

2

It's probably the outage/ddos attack at dnsimple. They're supposedly close to a fix.

Eigil

···

—
Sent from Mailbox

On Tue, Dec 2, 2014 at 12:53 AM, Juanjo Conti <jjconti@gmail.com> wrote:

Any alternative or workaround for this problem?
--
Juanjo Conti
Mi primer novela ya se puede conseguir en:
juanjoconti.com.ar

3

Yes. It's because of that. So? The community should be prepare for
something like this. Immediately offer a workaround that let people
continue working. Am I so wrong in been shock about this silence?

Thanks,

···

2014-12-01 20:56 GMT-03:00 Eigil Sagafos <eigil@sagafos.no>:

It's probably the outage/ddos attack at dnsimple. They're supposedly close
to a fix.

Eigil

—
Sent from Mailbox <https://www.dropbox.com/mailbox&gt;

On Tue, Dec 2, 2014 at 12:53 AM, Juanjo Conti <jjconti@gmail.com> wrote:

Any alternative or workaround for this problem?

--
Juanjo Conti
Mi primer novela ya se puede conseguir en:
juanjoconti.com.ar

--
Juanjo Conti
Mi primer novela ya se puede conseguir en:

4

cpan.org

I can't understand why with Ruby inherited so much from Perl but left behind it's best feature.

gvim

···

On 01/12/2014 23:52, Juanjo Conti wrote:

Any alternative or workaround for this problem?

5

You're part of "the community" -- what's *your* plan?

···

On Mon, Dec 1, 2014 at 3:59 PM, Juanjo Conti <jjconti@gmail.com> wrote:

Yes. It's because of that. So? The community should be prepare for something
like this. Immediately offer a workaround that let people continue working.

--
Hassan Schroeder ------------------------ hassan.schroeder@gmail.com

twitter: @hassan

6

They did. See https://twitter.com/rubygems_status/status/539513292105187328

···

On Mon, Dec 1, 2014 at 5:59 PM, Juanjo Conti <jjconti@gmail.com> wrote:

Yes. It's because of that. So? The community should be prepare for
something like this. Immediately offer a workaround that let people
continue working. Am I so wrong in been shock about this silence?

Thanks,

2014-12-01 20:56 GMT-03:00 Eigil Sagafos <eigil@sagafos.no>:

It's probably the outage/ddos attack at dnsimple. They're supposedly close

to a fix.

Eigil

—
Sent from Mailbox <https://www.dropbox.com/mailbox&gt;

On Tue, Dec 2, 2014 at 12:53 AM, Juanjo Conti <jjconti@gmail.com> wrote:

Any alternative or workaround for this problem?

--
Juanjo Conti
Mi primer novela ya se puede conseguir en:
http://www.juanjoconti.com.ar/xolopes

--
Juanjo Conti
Mi primer novela ya se puede conseguir en:
http://www.juanjoconti.com.ar/xolopes

7

http://rubygems.org/ is online again.

···

2014-12-01 21:24 GMT-03:00 Justin Coyne <jcoyne@justincoyne.com>:

They did. See
https://twitter.com/rubygems_status/status/539513292105187328

On Mon, Dec 1, 2014 at 5:59 PM, Juanjo Conti <jjconti@gmail.com> wrote:

Yes. It's because of that. So? The community should be prepare for
something like this. Immediately offer a workaround that let people
continue working. Am I so wrong in been shock about this silence?

Thanks,

2014-12-01 20:56 GMT-03:00 Eigil Sagafos <eigil@sagafos.no>:

It's probably the outage/ddos attack at dnsimple. They're supposedly

close to a fix.

Eigil

—
Sent from Mailbox <https://www.dropbox.com/mailbox&gt;

On Tue, Dec 2, 2014 at 12:53 AM, Juanjo Conti <jjconti@gmail.com> wrote:

Any alternative or workaround for this problem?

--
Juanjo Conti
Mi primer novela ya se puede conseguir en:
http://www.juanjoconti.com.ar/xolopes

--
Juanjo Conti
Mi primer novela ya se puede conseguir en:
http://www.juanjoconti.com.ar/xolopes

--
Juanjo Conti
Mi primer novela ya se puede conseguir en:

8

Yeah... I'm new in the community, but I'm already feeling part. I plat to a
a mirror under the company where I work domain. Point our tools to that
domain and let it be used by the community. It's all that I can think of
for my actual knowledge/resources.

···

2014-12-01 22:35 GMT-03:00 Hassan Schroeder <hassan.schroeder@gmail.com>:

On Mon, Dec 1, 2014 at 3:59 PM, Juanjo Conti <jjconti@gmail.com> wrote:
> Yes. It's because of that. So? The community should be prepare for
something
> like this. Immediately offer a workaround that let people continue
working.

You're part of "the community" -- what's *your* plan?

--
Hassan Schroeder ------------------------ hassan.schroeder@gmail.com
Hassan Schroeder | about.me
twitter: @hassan

--
Juanjo Conti
Mi primer novela ya se puede conseguir en:

9

Well, their status updates have been pretty clear on what was going on: DNS
failure because of DDoS.

There's not much anybody can do against DDoS, except for providing even more
machines/bandwidth to raise the bar in terms of bogus requests a DDoS needs to
be successful.

From what I gathered, the RubyGems.org infrastructure is already quite good,
i.e., dedicated DNS hosting and servers running on AWS, so in theory, it
should scale. Still, it seems like a SPOF.

Actual, complete mirrors of rubygems.org would probably help. There's only a
draft wiki site on <Create new page · rubygems/rubygems-mirror Wiki · GitHub, but it was lastly edited 2012, so I've got no idea
how far the efforts on this front actually went. I imagine that there's a
chicken-egg-problem.

For me, since I've got neither time nor resources for setting up a real
production mirror of rubygems.org that would be publicly accessible, its
simply trusting the rubygems.org team and not complaining.

      --- Eric

···

On Monday 01 December 2014, 20:59:58, Juanjo Conti wrote:

Yes. It's because of that. So? The community should be prepare for
something like this. Immediately offer a workaround that let people
continue working. Am I so wrong in been shock about this silence?

10

Is Still Down.

···

--
Rajeev N B
Sent with Sparrow (http://www.sparrowmailapp.com/?sig\)

On Tuesday, 2 December 2014 at 6:25 am, Juanjo Conti wrote:

http://rubygems.org/ is online again.

2014-12-01 21:24 GMT-03:00 Justin Coyne <jcoyne@justincoyne.com (mailto:jcoyne@justincoyne.com)>:
> They did. See https://twitter.com/rubygems_status/status/539513292105187328
>
>
> On Mon, Dec 1, 2014 at 5:59 PM, Juanjo Conti <jjconti@gmail.com (mailto:jjconti@gmail.com)> wrote:
> > Yes. It's because of that. So? The community should be prepare for something like this. Immediately offer a workaround that let people continue working. Am I so wrong in been shock about this silence?
> >
> > Thanks,
> >
> > 2014-12-01 20:56 GMT-03:00 Eigil Sagafos <eigil@sagafos.no (mailto:eigil@sagafos.no)>:
> >
> > > It's probably the outage/ddos attack at dnsimple. They're supposedly close to a fix.
> > >
> > > Eigil
> > >
> > > —
> > > Sent from Mailbox (https://www.dropbox.com/mailbox\)
> > >
> > >
> > > On Tue, Dec 2, 2014 at 12:53 AM, Juanjo Conti <jjconti@gmail.com (mailto:jjconti@gmail.com)> wrote:
> > > > Any alternative or workaround for this problem?
> > > >
> > > > --
> > > > Juanjo Conti
> > > > Mi primer novela ya se puede conseguir en: http://www.juanjoconti.com.ar/xolopes
> >
> >
> >
> > --
> > Juanjo Conti
> > Mi primer novela ya se puede conseguir en: http://www.juanjoconti.com.ar/xolopes

--
Juanjo Conti
Mi primer novela ya se puede conseguir en: http://www.juanjoconti.com.ar/xolopes

11

I got burned by this, just like many other people. While it is unfortunate
that Rubygems.org was impacted and the nature in which it happened appears
to be malicious, honestly this is a fairly simple infrastructure and
tooling problem. It is an infrastructure problem in that your
application/server/whatever shouldn't be dependent on data coming from
Rubygems.org, and if it must, then use a local cache of Rubygems. It is a
tooling problem, IMO, in that things like bundler and perhaps even rubygems
itself don't make this caching functionality on by default.

-jon

···

On Mon, Dec 1, 2014 at 4:57 PM, Rajeev N B <rajeevrvis@gmail.com> wrote:

Is Still Down.

--
Rajeev N B
Sent with Sparrow <http://www.sparrowmailapp.com/?sig&gt;

On Tuesday, 2 December 2014 at 6:25 am, Juanjo Conti wrote:

http://rubygems.org/ is online again.

2014-12-01 21:24 GMT-03:00 Justin Coyne <jcoyne@justincoyne.com>:

They did. See
https://twitter.com/rubygems_status/status/539513292105187328

On Mon, Dec 1, 2014 at 5:59 PM, Juanjo Conti <jjconti@gmail.com> wrote:

Yes. It's because of that. So? The community should be prepare for
something like this. Immediately offer a workaround that let people
continue working. Am I so wrong in been shock about this silence?

Thanks,

2014-12-01 20:56 GMT-03:00 Eigil Sagafos <eigil@sagafos.no>:

It's probably the outage/ddos attack at dnsimple. They're supposedly close
to a fix.

Eigil

—
Sent from Mailbox <https://www.dropbox.com/mailbox&gt;

On Tue, Dec 2, 2014 at 12:53 AM, Juanjo Conti <jjconti@gmail.com> wrote:

Any alternative or workaround for this problem?

--
Juanjo Conti
Mi primer novela ya se puede conseguir en:
juanjoconti.com.ar

--
Juanjo Conti
Mi primer novela ya se puede conseguir en:
juanjoconti.com.ar

--
Juanjo Conti
Mi primer novela ya se puede conseguir en:
juanjoconti.com.ar

12

Hi! How do I go about setting up a local gem cache? Every time I've googled it in the past (I have firewall issues at work which make this something desirable), it's seemed much more complex than I would have thought, making me think I'm simply missing something. I guess it really boils down to three questions:

1) How do I (batch) retrieve the gems?

2) Is there any magic to how I "reveal" them to my local network? (E.g., HTTP, I assume; is the hierarchy obvious? Etc.)

3) How do I tell my "gem install", etc., to go and hit up the local repo?

Thanks for any pointers...

-Ken

···

On 2014-12-01 20:41, Jon Hart wrote:

I got burned by this, just like many other people. While it is
unfortunate that Rubygems.org was impacted and the nature in which it
happened appears to be malicious, honestly this is a fairly simple
infrastructure and tooling problem. It is an infrastructure problem
in that your application/server/whatever shouldn't be dependent on
data coming from Rubygems.org, and if it must, then use a local cache
of Rubygems. It is a tooling problem, IMO, in that things like
bundler and perhaps even rubygems itself don't make this caching
functionality on by default.

-jon

On Mon, Dec 1, 2014 at 4:57 PM, Rajeev N B <rajeevrvis@gmail.com> > wrote:

Is Still Down.

--
Rajeev N B
Sent with Sparrow [1]

On Tuesday, 2 December 2014 at 6:25 am, Juanjo Conti wrote:

http://rubygems.org/ [2] is online again.

2014-12-01 21:24 GMT-03:00 Justin Coyne <jcoyne@justincoyne.com>:

They did.
See https://twitter.com/rubygems_status/status/539513292105187328
[3]

On Mon, Dec 1, 2014 at 5:59 PM, Juanjo Conti <jjconti@gmail.com> >> wrote:

Yes. It's because of that. So? The community should be prepare for
something like this. Immediately offer a workaround that let people
continue working. Am I so wrong in been shock about this silence?

Thanks,

2014-12-01 20:56 GMT-03:00 Eigil Sagafos <eigil@sagafos.no>:

It's probably the outage/ddos attack at dnsimple. They're
supposedly close to a fix.

Eigil

—
Sent from Mailbox [4]

On Tue, Dec 2, 2014 at 12:53 AM, Juanjo Conti <jjconti@gmail.com> >> wrote:

Any alternative or workaround for this problem?

--

Juanjo Conti
Mi primer novela ya se puede conseguir en:
juanjoconti.com.ar [5]

--

Juanjo Conti
Mi primer novela ya se puede conseguir en:
juanjoconti.com.ar [5]

--

Juanjo Conti
Mi primer novela ya se puede conseguir en:
juanjoconti.com.ar [5]

Links:
------
[1] http://www.sparrowmailapp.com/?sig
[2] http://rubygems.org/
[3] https://twitter.com/rubygems_status/status/539513292105187328
[4] https://www.dropbox.com/mailbox
[5] juanjoconti.com.ar

13

I can help with this part.

If you use bundler, edit the Gemfile, if not:

gem source -r https://rubygems.org
gem source -a you_source

Greets!

···

2014-12-01 22:49 GMT-03:00 Ken D'Ambrosio <ken@jots.org>:

3) How do I tell my "gem install", etc., to go and hit up the local repo?

--
Juanjo Conti
Mi primer novela ya se puede conseguir en:

14

% ls $(gem env gemdir)/cache
benchmark-ips-2.0.0.gem minitest-autotest-1.0.0.gem
gist-4.3.0.gem minitest-bisect-1.2.0.gem
hoe-3.13.0.gem minitest-server-1.0.0.gem
hoe-seattlerb-1.3.3.gem racc-1.4.12.gem
isolate-3.2.4.gem rake-10.3.2.gem
json-1.8.1.gem rdoc-4.1.2.gem
minitest-5.4.3.gem rubygems-cleanroom-1.0.1.gem

···

On Dec 1, 2014, at 17:41, Jon Hart <jhart@spoofed.org> wrote:

I got burned by this, just like many other people. While it is unfortunate that Rubygems.org was impacted and the nature in which it happened appears to be malicious, honestly this is a fairly simple infrastructure and tooling problem. It is an infrastructure problem in that your application/server/whatever shouldn't be dependent on data coming from Rubygems.org, and if it must, then use a local cache of Rubygems. It is a tooling problem, IMO, in that things like bundler and perhaps even rubygems itself don't make this caching functionality on by default.

15

You can use rubygems-mirror along with a local copy of bundler-api

···

On Mon, Dec 1, 2014 at 5:49 PM, Ken D'Ambrosio <ken@jots.org> wrote:

Hi! How do I go about setting up a local gem cache? Every time I've
googled it in the past (I have firewall issues at work which make this
something desirable), it's seemed much more complex than I would have
thought, making me think I'm simply missing something. I guess it really
boils down to three questions:

1) How do I (batch) retrieve the gems?

2) Is there any magic to how I "reveal" them to my local network? (E.g.,
HTTP, I assume; is the hierarchy obvious? Etc.)

3) How do I tell my "gem install", etc., to go and hit up the local repo?

Thanks for any pointers...

-Ken

On 2014-12-01 20:41, Jon Hart wrote:

I got burned by this, just like many other people. While it is
unfortunate that Rubygems.org was impacted and the nature in which it
happened appears to be malicious, honestly this is a fairly simple
infrastructure and tooling problem. It is an infrastructure problem
in that your application/server/whatever shouldn't be dependent on
data coming from Rubygems.org, and if it must, then use a local cache
of Rubygems. It is a tooling problem, IMO, in that things like
bundler and perhaps even rubygems itself don't make this caching
functionality on by default.

-jon

On Mon, Dec 1, 2014 at 4:57 PM, Rajeev N B <rajeevrvis@gmail.com> >> wrote:

Is Still Down.

--
Rajeev N B
Sent with Sparrow [1]

On Tuesday, 2 December 2014 at 6:25 am, Juanjo Conti wrote:

http://rubygems.org/ [2] is online again.

2014-12-01 21:24 GMT-03:00 Justin Coyne <jcoyne@justincoyne.com>:

They did.
See https://twitter.com/rubygems_status/status/539513292105187328
[3]

On Mon, Dec 1, 2014 at 5:59 PM, Juanjo Conti <jjconti@gmail.com> >>> wrote:

Yes. It's because of that. So? The community should be prepare for
something like this. Immediately offer a workaround that let people
continue working. Am I so wrong in been shock about this silence?

Thanks,

2014-12-01 20:56 GMT-03:00 Eigil Sagafos <eigil@sagafos.no>:

It's probably the outage/ddos attack at dnsimple. They're
supposedly close to a fix.

Eigil

—
Sent from Mailbox [4]

On Tue, Dec 2, 2014 at 12:53 AM, Juanjo Conti <jjconti@gmail.com> >>> wrote:

Any alternative or workaround for this problem?

--

Juanjo Conti
Mi primer novela ya se puede conseguir en:
juanjoconti.com.ar [5]

--

Juanjo Conti
Mi primer novela ya se puede conseguir en:
juanjoconti.com.ar [5]

--

Juanjo Conti
Mi primer novela ya se puede conseguir en:
juanjoconti.com.ar [5]

Links:
------
[1] http://www.sparrowmailapp.com/?sig
[2] http://rubygems.org/
[3] https://twitter.com/rubygems_status/status/539513292105187328
[4] https://www.dropbox.com/mailbox
[5] juanjoconti.com.ar

--
Tony Arcieri