Update (was Re: Shibboleth Maven repositories offline)

[Scott Cantor]

At the moment, we have re-enabled the repository access, but adjusting some rules to optimize some of the non-relevant lookups hasn't helped much and it's just going to melt down again soon.

We're taking steps to back things up and then increase the instance size but it's our expectation that is a tail-chasing exercise that will just not help or take Apache down once it can run to capacity, and then we're in a hopeless cycle, not to mention Internet2's generosity in paying our AWS costs will run out.

The problem fundamentally is that it's pretty likely somebody botched a very heavily used Maven configuration somewhere to point everything at us in favor of Central, and we're just snowed under.

While we will try to buy time with some extra capacity, it is very possible we will be forced to close off access to members via some authorization process, probably IP-based initially.

When/if we need to take that step, we'll announce that.

Our priority is and will continue to be the ability to support Shibboleth software and those members, and NOT OpenSAML and certainly not all the free consumption of it. The download site and all the related material is separate enough that we can isolate it to keep that operational regardless of the rest, it's just a question of the work/time to get it done.

That's everything I know for now.

-- Scott