Page MenuHomePhabricator

Remove recommendation-api from the REST API offerings
Open, MediumPublic

Description

Per https://lists.wikimedia.org/hyperkitty/list/wikitech-l@lists.wikimedia.org/thread/NBXZSHR36ONJ5DWIS57HOEANYNYYU2UH/, the internal decision brief and the blog post at https://diff.wikimedia.org/2025/02/24/sunset-of-wikimedia-recommendation-api/, this task is about removing recommendation-api from the infrastructure

Action items

  • Block the API at the CDN level, returning a 404
  • Remove the API from the rest-gateway
  • Remove alerts, LVS, etc
  • Delete wikikube k8s namespace, puppet configuration, etc

Event Timeline

Per https://w.wiki/DeQh, we are well within our estimations about the day amount of requests still reaching this service. It's in the order of ~1900 and we had estimated ~2k.

akosiaris triaged this task as Medium priority.Mar 31 2025, 8:13 AM

requestctl rules set, the API now responds 403. Let's keep it like this for a week or so to see if anyone complains and then proceed with killing it.

Per https://w.wiki/DeQh, we are well within our estimations about the day amount of requests still reaching this service. It's in the order of ~1900 and we had estimated ~2k.

This is still true. Excluding an attack we received on May 13, we are still on the order of ~2k to 2.5k requests per day. I would have love to see it becoming less, but that's apparently not gonna happen. Not with the amount of out of date wikipedia apps out there.

Clement_Goubert changed the task status from Open to In Progress.Jun 5 2026, 9:50 AM
Clement_Goubert updated the task description. (Show Details)

We're at 13k hits on it over the last month (106 in turnilo sampled at 1/128), or about 430 hits per day. About half of these were still 200s because the rule was applied on "unidentified cache misses", so logged in apps would not get 403.

I have changed this to the "deprecation" which should ensure consistent 403 responses.

I think we can let that soak for a little bit, say a week, then actually clean up the infra-side of this endpoint, leaving just the edge rule to return 403s.

Krinkle subscribed.

I'm closing or untagging remaining tasks from the "API Platform" team that existed prior to Jan 2024 (https://www.mediawiki.org/wiki/API_Platform_Team).

Clement_Goubert changed the task status from In Progress to Open.Jul 8 2026, 8:36 AM
Clement_Goubert removed Clement_Goubert as the assignee of this task.
Clement_Goubert updated the task description. (Show Details)
Clement_Goubert subscribed.