Home → Problems →

China: production.s3.rubygems.org sabotaged?

Admin Functions

• Remove

rekado

16 Oct, 2011 04:29 PM

Hi,

it seems that connections to production.s3.rubygems.org are sabotaged by at least one (probably two) ISPs in Shanghai. I've tested this both with and without proxying requests to Europe and could confirm that connection resets are only received when the request is done locally. http://rubygems.org itself is accessible and I didn't have problems to download gems (though I didn't test it recently).

Is there an official mirror? There used to be different gem repositories; are these all merged now? Access to the above-mentioned resource is required when updating the platform.

I would like to know if there is a network of mirrors that do not rely on Amazon S3, which appears to be blocked, sabotaged or at least inadvertedly restricted by the local ISPs.

1. Support Staff 2 Posted by Nick Quaranto on 04 Aug, 2012 06:47 PM

   

   Sorry, this comment was buried in our spam inbox.

   Is this still happening?

   Admin Functions

   • Remove

2. 3 Posted by rekado on 05 Aug, 2012 01:08 AM

   

   Yes, this is still happening. I'm using ruby.taobao.org now which seems to be a rubygems mirror located in China.

   Admin Functions

   • Split
   • Remove

3. Support Staff 4 Posted by Evan Phoenix on 05 Aug, 2012 07:23 PM

   

   Are you using https://rubygems.org as your source? (note the https). I'd think that they wouldn't be able to sabotage https, so that might be a workaround for you.

   Admin Functions

   • Remove

4. 5 Posted by rekado on 06 Aug, 2012 08:17 AM

   

   rubygems.org itself is not sabotaged, but any connection to production.s3.rubygems.org, which as far as I can tell is a cloud server. "Sabotage" in this case means that any connection to the cloud server is flooded with RST packets. This is true for other services that use Amazon's cloud servers, too.

   Using https://rubygems.org as the source doesn't make any difference as the connection to production.s3.rubygems.org is terminated by the ISP. SSL doesn't protect against resetting the connection which is what appears to happen.

   Admin Functions

   • Split
   • Remove

5. Support Staff 6 Posted by Evan Phoenix on 14 Aug, 2012 03:19 AM

   

   This is the reason that I setup the mirror in tokyo. He's already using it since I'm sending all the traffic from China and Japan to it.

   Admin Functions

   • Remove

6. Evan Phoenix closed this discussion on 14 Aug, 2012 03:19 AM.

Comments are currently closed for this discussion. You can start a new one.