Pushing to the AUR currently not possible
Hello everyone, as we were the target of yet another DDoS attack we have enabled DDoS protection for aur.archlinux.org, which does not yet properly handle incoming connections on port 22 (yet). We are working with our provider to resolve this issue but wanted to ensure service reachability for everyone in the meantime. Please check https://status.archlinux.org/ for updates on the situation! Cheers, Chris for the Arch Linux DevOps Team
On 10/26/25 7:51 AM, gromit wrote:
Hello everyone,
as we were the target of yet another DDoS attack we have enabled DDoS protection for aur.archlinux.org, which does not yet properly handle incoming connections on port 22 (yet).
We are working with our provider to resolve this issue but wanted to ensure service reachability for everyone in the meantime.
Please check https://status.archlinux.org/ for updates on the situation!
Cheers, Chris for the Arch Linux DevOps Team
Thanks, Seems this may be worse than past DDoS attacks. Beginning roughly 12 hours ago, connections were degraded, but you could still reach AUR. Currently, you cannot even connect to download a source package, e.g. $ wg https://aur.archlinux.org/cgit/aur.git/snapshot/vscodium-bin.tar.gz wget --no-check-certificate --progress=bar https://aur.archlinux.org/cgit/aur.git/snapshot/vscodium-bin.tar.gz --2025-10-26 14:30:20-- https://aur.archlinux.org/cgit/aur.git/snapshot/vscodium-bin.tar.gz Loaded CA certificate '/etc/ssl/certs/ca-certificates.crt' Resolving aur.archlinux.org (aur.archlinux.org)... 209.126.35.78, 2604:cac0:a104:d::2 Connecting to aur.archlinux.org (aur.archlinux.org)|209.126.35.78|:443... connected. GnuTLS: The TLS connection was non-properly terminated. Unable to establish SSL connection. Here is to hoping this isn't an extended outage. It may be wise to delay dropping all the gtk2 and dependent packages to AUR until this clears up. -- David C. Rankin, J.D.,P.E.
I can't even connect to the AUR web interface On 27/10/25 5:34 am, David C Rankin wrote:
On 10/26/25 7:51 AM, gromit wrote:
Hello everyone,
as we were the target of yet another DDoS attack we have enabled DDoS protection for aur.archlinux.org, which does not yet properly handle incoming connections on port 22 (yet).
We are working with our provider to resolve this issue but wanted to ensure service reachability for everyone in the meantime.
Please check https://status.archlinux.org/ for updates on the situation!
Cheers, Chris for the Arch Linux DevOps Team
Thanks,
Seems this may be worse than past DDoS attacks. Beginning roughly 12 hours ago, connections were degraded, but you could still reach AUR. Currently, you cannot even connect to download a source package, e.g.
$ wg https://aur.archlinux.org/cgit/aur.git/snapshot/vscodium-bin.tar.gz wget --no-check-certificate --progress=bar https://aur.archlinux.org/cgit/aur.git/snapshot/vscodium-bin.tar.gz --2025-10-26 14:30:20-- https://aur.archlinux.org/cgit/aur.git/snapshot/vscodium-bin.tar.gz Loaded CA certificate '/etc/ssl/certs/ca-certificates.crt' Resolving aur.archlinux.org (aur.archlinux.org)... 209.126.35.78, 2604:cac0:a104:d::2 Connecting to aur.archlinux.org (aur.archlinux.org)|209.126.35.78|:443... connected. GnuTLS: The TLS connection was non-properly terminated. Unable to establish SSL connection.
Here is to hoping this isn't an extended outage. It may be wise to delay dropping all the gtk2 and dependent packages to AUR until this clears up.
Hi! The issue seems more widespread for me. On Sun, Oct 26, 2025, at 05:51, gromit wrote:
as we were the target of yet another DDoS attack we have enabled DDoS protection for aur.archlinux.org, which does not yet properly handle incoming connections on port 22 (yet).
It seems HTTP/HTTPS connections (80/443) are also immediately closed without sending any response. (Different from 22, where the connection is refused.) This means that AUR is completely unavailable, including the web interface and HTTP git, not just the git ssh interface. Just pointing this out as the status page specifically mentions that only pushing is affected. Christopher
participants (4)
-
Christopher Cooper
-
Corey Bruce
-
David C Rankin
-
gromit