Static links to raw files vs Anubis? #2155

ltning commented 2025年10月02日 16:52:05 +02:00

Comment

Hola! We (work) wanted to use Codeberg instead of GitHub to host the geofeed[1][2] for our IP networks, but there is some concern about whether Anubis will make fetching of the geofeed files challening. Is there a way to ensure that requests for specific files in their raw form are not subjected to the Anubis challenge, or anything else that might preclude automatic fetching?

A possible, and entirely acceptable, answer would be "we don't want you to do that." I completely understand if you don't want to carve out holes for this kind of traffic, or if you don't want Codeberg used for this purpose in the first place.

Thanks for reading!
/Eirik

[1] https://en.wikipedia.org/wiki/Internet_geolocation#2000-Present
[2] https://www.rfc-editor.org/rfc/rfc8805.txt

### Comment Hola! We (work) wanted to use Codeberg instead of GitHub to host the geofeed[1][2] for our IP networks, but there is some concern about whether Anubis will make fetching of the geofeed files challening. Is there a way to ensure that requests for specific files in their raw form are not subjected to the Anubis challenge, or anything else that might preclude automatic fetching? A possible, and entirely acceptable, answer would be "we don't want you to do that." I completely understand if you don't want to carve out holes for this kind of traffic, or if you don't want Codeberg used for this purpose in the first place. Thanks for reading! /Eirik [1] https://en.wikipedia.org/wiki/Internet_geolocation#2000-Present [2] https://www.rfc-editor.org/rfc/rfc8805.txt

Gusted commented 2025年10月05日 00:19:42 +02:00

@ltning wrote in #2155 (comment):

but there is some concern about whether Anubis will make fetching of the geofeed files challening

We only try to enforce Anubis on heavy endpoints, serving raw files is not one of them (unless someone tries to exhaust our network bandwidth). Also if you know a bit about Anubis, depending on how you are fetching it you can likely bypass the preconditions but I can't share that publicly of course ;)

Also you can always opt to use the API route (https://codeberg.org/api/swagger#/repository/repoGetRawFile) as API routes will not see browser challenges.

@ltning wrote in https://codeberg.org/Codeberg/Community/issues/2155#issue-2471638: > but there is some concern about whether Anubis will make fetching of the geofeed files challening We only try to enforce Anubis on heavy endpoints, serving raw files is not one of them (unless someone tries to exhaust our network bandwidth). Also if you know a bit about Anubis, depending on how you are fetching it you can likely bypass the preconditions but I can't share that publicly of course ;) Also you can always opt to use the API route (https://codeberg.org/api/swagger#/repository/repoGetRawFile) as API routes will not see browser challenges.