Page MenuHomePhabricator

Experiencing Phabricator 429 errors
Closed, DeclinedPublic

Description

I am currently blocked even from accessing phabricator.wikimedia.org from my IP. I get a “Error / Too many requests” UI message. I am trying to access the site from the same IP that is currently running User:DPLA_bot on Commons making high-speed edits. But surely making approved bot edits shouldn’t block a user from Phabricator, much less users logged into a different account just sharing the IP from even reading the site?

Info:

Request served via cp1102 cp1102, Varnish XID 439847219
Upstream caches: cp1102 int
Error: 429, Too many requests at Fri, 10 Jan 2025 18:14:07 GMT

Sensitive client information
IP address: 54.165.106.96

Related Objects

StatusSubtypeAssignedTask
OpenNone
DeclinedNone

Event Timeline

Could you tell us more about that IP? Is that in "the cloud", as Amazon AWS or a similar cloud provider as opposed to a regular home IP?

There will be no relation between Phabricator throttling and what happens on wikis or whether a user is an approved bot. It's all about number of connections and whether that IP is considered a cloud IP.

Could you tell us more about that IP? Is that in "the cloud", as Amazon AWS or a similar cloud provider as opposed to a regular home IP?

Yes, it’s a work VPN, operated by tailscale.

@Dominicbm Gotcha! I'm sorry, but for right now I don't have much besides .. use a home IP or do things slower. It should be totally unrelated to the number of edits you make on wikis though. It's only about how many connections you open within a few minutes to Phabricator. We had to throttle access from cloud IPs due to scraping and abuse from bots and we can't really distinguish that from this traffic.

Whether someone is logged in or not (anywhere) would also not be related here.

The IP listed above is indeed an Amazon AWS IP. But let me double check where the throttling actually happens. Maybe I have to correct some of the previous statements.

I suspected something like that, it just seemed a bit aggressive. No other web site on the Internet prevents me from even reading it, especially when I am logged into a trusted account in this case. I guess the fact that it was a 429 error was what made me think there was a chance my own bot activity was related. While I don’t know what other activity there is on the IP, this error is given at all times l, so it’s kind of surprising if there are constantly enough new connections being opened to experience that.

Yea, so, this is really just about it being an AWS IP and the number of requests to Phabricator per minute. Whether those requests are from other users of that VPN or just from you would be a separate question. Are you doing something fast and automated on Phabricator?

@Dominicbm I suppose there could be other VPN users sharing that IP who also access Phabricator and maybe use bots or scripts?

@Dzahn Sorry, for the late reply. I am doing nothing on Phabricator at all besides occasionally viewing it or making the occasional ticket/comment. Certainly nothing high-volume. (And it's news to me that there are high-volume requests to Phabricator, even on an AWS IP, but I hoped being logged in would be enough to not get caught in any ban.)

LSobanski subscribed.

As @Dzahn stated before, using cloud IPs to access our services implies a risk of throttling.

Jelto added a parent task: Restricted Task.Jun 11 2025, 12:43 PM