Hi,
The Lazarus server is currently under heavy DDOS. This affects the Lazarus main site, the Lazarus packages, the Lazarus mailing list archives and the Lazarus+Freepascal forum.
I've enabled a rate limiter so the sites should be available again (in the first few seconds it was active, it blocked 10k connection attempts) but it might have some side effects using the forum. I hope it gets over soon.

Marc

Note:

As a consequence, the GitHub Action
https://github.com/gcarreno/setup-lazarus also fails now. Trying to use it to install FPC+Lazarus results in an error

Error: getPackageList -- Request timeout: /packagelist.json

in GitHub Action workflow output. I guess because the action downloads https://packages.lazarus-ide.org/packagelist.json . Which, while it works in the normal browser (like Firefox) (with a considerable delay), but e.g. "wget" (with default timeouts) fails:

   $ wget https://packages.lazarus-ide.org/packagelist.json
   --2024-10-01 17:09:44--  https://packages.lazarus-ide.org/packagelist.json
   Resolving packages.lazarus-ide.org (packages.lazarus-ide.org)...

37.97.187.115, 2a01:7c8:aac1:2f0::1
Connecting to packages.lazarus-ide.org
(packages.lazarus-ide.org)|37.97.187.115|:443... failed: Connection timed out.
Connecting to packages.lazarus-ide.org
(packages.lazarus-ide.org)|2a01:7c8:aac1:2f0::1|:443... failed: Network is unreachable.

( I understand this, I mean I'm writing above as just "FYI" for people who may be using https://github.com/gcarreno/setup-lazarus , like Castle Game Engine actions do. I was surprised today to see our GitHub Actions fail, but this explains it. I'm not "demanding" any action, sure you need to put limits to protect from DDOS. I'm just making a note to eventually relax these limits to at least enable the above wget again. )

Regards,
Michalis

wt., 1 pa? 2024 o 11:00 Marc Weustink via lazarus
napisa?(a):

Just downloaded lazarus trunk + compiled useride that took 2m:35s? I think that is normal. Living in Germany, Frankfurt am Main

Perhaps this issue is gone ?

John,

I'm afraid the issue is still there -- I just rechecked.

That is, using https://github.com/gcarreno/setup-lazarus causes "Error: getPackageList -- Request timeout: /packagelist.json". On both Windows, Linux and macOS GH-hosted runners.

I'm guessing it has a smaller default timeout for requests, so it can fail even if other ways to access Lazarus website over http(s) now work OK. I looked into increasing the socketTimeout underneath ( https://github.com/gcarreno/setup-lazarus is using httpclient in JS, from https://github.com/actions/toolkit/blob/main/packages/http-client/src/interfaces.ts ) but I'm not familiar with httpclient/JS enough to do it successfully. I also looked to switch to IPv6 (Marc pointed that IPv6 works more reliably for him) but there doesn't seem to be an option to force IPv6 with this client.

Regards,
Michalis

wt., 1 pa? 2024 o 18:12 John Landmesser via lazarus napisa?(a):

Michalis Kamburelis wrote

I'm afraid the issue is still there -- I just rechecked.

...

This URL belongs to the Online package manager. So if the tool your using wants to get updated extra packages.

Possible similar if you try to use the OPM in the IDE (I have not tested).

The official installers are hosted at sourceforge, and that should not be affected.
And the sources for Lazarus and Fpc can be gotten from GitLab, which also is not affected.

It is our self hosted services (forum, Opm, ... wiki?) that are affected (Marc would have the detailed list, which services are on the affected systems).
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.lazarus-ide.org/pipermail/lazarus/attachments/20241001/8ea62844/attachment.htm>

GitHub Actions using https://github.com/gcarreno/setup-lazarus are good again, they proceed without issues today.

Regards,
Michalis

wt., 1 pa? 2024 o 18:42 Michalis Kamburelis
napisa?(a):

Cloudflare offers DDOS protection even on the Free plan: https://www.cloudflare.com/plans/
https://www.cloudflare.com/ddos/

It is easy to set up and works really well.

Denis

Personally I don't like sites protected by them. I keep proving that I'm human.

Besides, as long it is once in a few years, I don't see the need

Marc

Testmail to see if thunderbird is ok !