On Thu, Apr 24, 2025 at 1:29 PM Jeffrey Wang j@mywikis.com wrote:
Some of us in the MediaWiki Stakeholders’ Group created a Matrix/Element chat as a joint task force to discuss this specific topic further.
You can join with this link: https://matrix.to/#/%23WART%3Amatrix.org
We were going to discuss options like Anubis, HAProxy, Cloudflare, etc., but let’s all pool together our experiences so we don’t have to figure these things out on our own.
aapkaa jeffrey
On Thu, Apr 24, 2025 at 12:13 PM Lewis Cawte via Wikitech-l wikitech-l@lists.wikimedia.org wrote:
As an aside, can I say thank you for the suggestion in this public setting.
I know it's not nessesarily a MediaWiki specific topic, but, can we mention it on MW.org somewhere because I know a few MW site owners who've been getting absolutely hammered by the same problem, and like Bryan, don't want to end up blocking potential legitimate traffic or using third party services.
I've rolled Anubis out today on ShoutWiki and initial results are looking positive - even if the documentation left a bit to be desired.
I think it would be great to see some project on mediawiki.org that tries to collect options and think about best practices for defending MediaWiki deployments against aggressive traffic patterns. I imagine most of the ideas will end up being generally applicable to various HTTP services as MediaWiki itself is a relatively heavy stack to use for edge traffic defense. That is no reason not to think about things from the perspective of our technical community however where there tend to be a lot of shared values about protecting privacy and preserving open solutions as much as possible.
Bryan