Re: Enable choosing mirror for updates.xml (was: Re: Fwd: Update centers based on mirrors are a nightmare to support in an enterprise environment)

[Matthias Bläsing <mb...@doppel-helix.eu>]

Hi,

as there was _zero_ feedback, I just killed the experiment. I'll leave
the code in the tools repository.

Greetings

Matthias

Am Dienstag, dem 02.03.2021 um 20:08 +0100 schrieb Matthias Bläsing:
> Hi,
> 
> Am Donnerstag, den 30.01.2020, 14:55 +0000 schrieb Jean-Marc Borer:
> > 
> > This is bit of a complaint addressed to the NB infra community. When you
> > are stuck behind corporate proxy that is very aggressively filtering web
> > content, mirrors are a nightmare for you. In my case we need to whitelist
> > every single server hosting java binaries otherwise we get empty files. As
> > such, it is not viable to declare every single mirror (the company won't
> > accept that).
> > 
> > So my request is: please for NB IDE updates and their core components,
> > never ever use mirrors or provide an option to always point to the same
> > mirrored site.
> > 
> > This may sound silly, but is really an issue within enterprises and
> > therefore prevent the adoption of NB IDE far more than the alternatives,
> > which is really a pity...
> > 
> 
> this is a late reply, but I finally managed to get this into a state
> I'm willing to put into production and get it onto the 
> netbeans-vm1.apache.org server.
> 
> So that no one can hold this against me: THIS IS EXPERIMENTAL!
> 
> The problem is, that we have to serve the update catalog from a trusted
> source, but still want to use the mirror infrastructure to distribute
> load around the globe. The idea to fix this is to allow the user to
> choose a mirror, while still fetching the catalog from netbeans-vm.
> 
> The code can be found here:
> 
> https://github.com/apache/netbeans-tools
> 
> The instructions how to use can be found here:
> 
> https://netbeans-vm1.apache.org/uc-proxy-chooser/mirror-list.php
> 
> Basicly this URL:
> 
> https://netbeans-vm1.apache.org/uc/12.2/updates.xml.gz?{$netbeans.hash.code}
> 
> becomes this:
> 
> https://netbeans-vm1.apache.org/uc-proxy-chooser/12.2/updates.xml.gz?{$netbeans.hash.code}&mirror=<mirrorkey>
> 
> The PHP Script behind this uses the original update catalog (with
> cryptographic hashes) and patches the URLs in it to directly point to
> the chosen mirror.
> 
> For anyone with interest in the generated content, I found this command
> line to be helpful:
> 
> curl https://doppel-helix.eu/uc-proxy-chooser/12.2/updates.xml.gz?mirror=ftp-stud.hs-esslingen.de | gzip -d | less
> 
> 
> With this modification, two servers need to be whitelisted:
> 
> - the chosen mirror host (for active releases)
> - archive.apache.org (for older releases)
> 
> 
> I would be interested in feedback.
> 
> Greetings
> 
> Matthias
> 
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@netbeans.apache.org
> For additional commands, e-mail: dev-help@netbeans.apache.org
> 
> For further information about the NetBeans mailing lists, visit:
> https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists
> 
> 
> 



---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@netbeans.apache.org
For additional commands, e-mail: dev-help@netbeans.apache.org

For further information about the NetBeans mailing lists, visit:
https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists