[aur-general] AUR rate limiting

[Jerome Leclanche]

On Thu, Dec 20, 2018 at 9:45 PM Jelle van der Waa <jelle at vdwaa.nl> wrote:

> On 12/21/18 at 03:40am, Macca wrote:
> >
> > On 21 Dec. 2018, 3:26 am, at 3:26 am, Drew DeVault via aur-general <
> aur-general at archlinux.org> wrote:
> > >Following up from IRC. Hello!
> > >
> > >I run a public build service which has Arch Linux support and uses yay
> > >to install AUR packages when requested. I recently had some users
> > >running up against the AUR rate limit.
> > >
> > >The current rate limit window (1 day) seems a bit strict. Would it be
> > >possible to apply the rate limit hourly? Today it's 4000 requests per
> > >day, but ~166 requests per hour would be a similar load on the server
> > >but a bit more forgiving, users would only have to wait an hour before
> > >attempting their builds again.
>
> The issue here seems to be that yay queries for provides in the AUR.
> Which causes excsessive requests to be made. [1]
>
> [1] https://builds.sr.ht/~delthas/job/17157


That should probably be fixed as well, but I agree with making the rate
limit window 1 hour, at most. A 24 hour API restriction on the AUR API is
really nasty imo.