Update (was Re: Shibboleth Maven repositories offline)

[Scott Cantor]

> Do you have the list of artefacts which are attempted to be reached? Maybe we can manage to guess what is the "top-level" dependency which has declared shibboleth as first Maven repository, or at least orient the search for it.

It's nothing consistent, or particularly new, but we had a guess that it may be something in Azure as there are lookups to some Microsoft artifacts and a decent amount of traffic is coming from there.

The server is being reconfigured now to double the size, once it's back up I plan to copy off the recent build host access log and get it somewhere that people can take a look at.

We will explore the possibility of a CDN to cache the lookups, but we are (in addition to not being a real entity with a bank account able to spend money on services) heavily limited in our capacity to just make infrastructure changes very quickly.

But quite frankly, I really see no reason why we need to. We're not here to serve OpenSAML to the world. Absolute non-goal. Members we can accommodate without really that much effort, and anybody else should be building from source if they value it so much that paying a pittance for access is too much to ask.

-- Scott