Re: [Wikitech-l] [MediaWiki-CVS] SVN: [23823] trunk/phase3

List overview All Threads
Download

newer

older

Translations Box

wikipedia measurements and...

Brion Vibber

9 Jul 2007 9 Jul '07

7:16 p.m.

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 yurik(a)svn.wikimedia.org wrote:

...

+ list( $host, $lag ) = $wgLoadBalancer->getMaxLag(); + $data[] = array ( + 'host' => $host, + 'lag' => $lag);

While we're happy to tell everyone the hostnames of our own database servers here at Wikimedia, as a general rule this would be considered an information disclosure vulnerability. - -- brion vibber (brion @ wikimedia.org)

...PGP SIGNATURE...

-----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.2.2 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFGkomhwRnhpk1wk44RAsOfAKCK6dv3YzvLzk9qOfmC9c1QRTpWtgCfb0K/ HLgK0roZb/p315oG1jXfl7A= =FwHS -----END PGP SIGNATURE-----

Show replies by date

Yuri Astrakhan

9 Jul 9 Jul

7:28 p.m.

New subject: [MediaWiki-CVS] SVN: [23823] trunk/phase3

MediaWiki already exposes the most lagging server in the wiki.php (called from index.php): Any reason to hide others? Either we should hide all the db servers, or expose them all? function checkMaxLag( $maxLag ) { global $wgLoadBalancer; list( $host, $lag ) = $wgLoadBalancer->getMaxLag(); if ( $lag > $maxLag ) { header( 'HTTP/1.1 503 Service Unavailable' ); header( 'Retry-After: ' . max( intval( $maxLag ), 5 ) ); header( 'X-Database-Lag: ' . intval( $lag ) ); header( 'Content-Type: text/plain' ); echo "Waiting for $host: $lag seconds lagged\n"; return false; } else { return true; } } On 7/9/07, Brion Vibber <brion(a)wikimedia.org> wrote:

...

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 yurik(a)svn.wikimedia.org wrote:

+ list( $host, $lag ) = $wgLoadBalancer->getMaxLag(); + $data[] = array ( + 'host' => $host, + 'lag' => $lag);

...PGP SIGNATURE...

_______________________________________________ Wikitech-l mailing list Wikitech-l(a)lists.wikimedia.org http://lists.wikimedia.org/mailman/listinfo/wikitech-l

Brion Vibber

8:14 p.m.

New subject: [MediaWiki-CVS] SVN: [23823] trunk/phase3

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Yuri Astrakhan wrote:

...

MediaWiki already exposes the most lagging server in the wiki.php (called from index.php): Any reason to hide others? Either we should hide all the db servers, or expose them all?

Fix that too. - -- brion vibber (brion @ wikimedia.org)

...PGP SIGNATURE...

-----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.2.2 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFGkpcLwRnhpk1wk44RAmEXAJ4zLJm8GfSoLo/iiTN2Vzp8FEhZOgCgkFih ZUekDXWmbO3W6COSVAC9wjg= =GoK/ -----END PGP SIGNATURE-----

Yuri Astrakhan

8:39 p.m.

New subject: [MediaWiki-CVS] SVN: [23823] trunk/phase3

Would it make sense to have a global var (set to false by default) to relax restrictions? $wgRelaxedRestrictions or something similar? The lag feature would be helpful to tools server as well as help bot frameworks to optimize server posts. On 7/9/07, Brion Vibber <brion(a)wikimedia.org> wrote:

...

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Yuri Astrakhan wrote:

MediaWiki already exposes the most lagging server in the wiki.php (called from index.php): Any reason to hide others? Either we should hide all the db servers, or expose them all?

Fix that too. - -- brion vibber (brion @ wikimedia.org)

...PGP SIGNATURE...

_______________________________________________ Wikitech-l mailing list Wikitech-l(a)lists.wikimedia.org http://lists.wikimedia.org/mailman/listinfo/wikitech-l

Brion Vibber

9:42 p.m.

New subject: [MediaWiki-CVS] SVN: [23823] trunk/phase3

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Yuri Astrakhan wrote:

...

Would it make sense to have a global var (set to false by default) to relax restrictions?

Yep, just as we have $wgShowExceptionDetails etc. - -- brion vibber (brion @ wikimedia.org)

...PGP SIGNATURE...

-----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.2.2 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFGkqvHwRnhpk1wk44RAoptAJ9fa8B9TKt2WHNj1NsYCVLgU/1svgCdECCS NqLy4gLqfcXwMk/9PjiOEiY= =oWOn -----END PGP SIGNATURE-----

Simetrical

10:05 p.m.

New subject: [MediaWiki-CVS] SVN: [23823] trunk/phase3

On 7/9/07, Brion Vibber <brion(a)wikimedia.org> wrote:

...

Yuri Astrakhan wrote:

Would it make sense to have a global var (set to false by default) to relax restrictions?

Yep, just as we have $wgShowExceptionDetails etc.

Yuri Astrakhan

10 Jul 10 Jul

1:50 p.m.

New subject: [MediaWiki-CVS] SVN: [23823] trunk/phase3

I have added $wgShowHostnames to the global settings, set to false by default. API results and HTML comments at the bottom of the page are affected. Please set $wgShowHostnames=true; to the wiki server configuration's LocalSettings.php --Yuri On 7/9/07, Simetrical <Simetrical+wikilist(a)gmail.com> wrote:

...

On 7/9/07, Brion Vibber <brion(a)wikimedia.org> wrote:

Yuri Astrakhan wrote:

Would it make sense to have a global var (set to false by default) to relax restrictions?

Yep, just as we have $wgShowExceptionDetails etc.

Although not $wgRelaxRestrictions, which is kind of vague. :) Make it $wgShowHostnames or something. Actually it would be convenient to have some easy way to $wgTellTheWorldEverything or whatever, for development wikis, so we don't have to set tons of bits and pieces. _______________________________________________ Wikitech-l mailing list Wikitech-l(a)lists.wikimedia.org http://lists.wikimedia.org/mailman/listinfo/wikitech-l

6140

days inactive

6141

days old

wikitech-l@lists.wikimedia.org

Manage subscription

6 comments

3 participants

tags (0)

participants (3)

Brion Vibber
Simetrical
Yuri Astrakhan