Documentation on network restrictions? #955
-
Is there any documentation on what types of network activity are and are not allowed? All I can find is the "Repository is blocked" FAQ, which mentions cryptocurrency mining, piracy, and ad fraud. I briefly tried to set up integration tests for a cryptocurrency repo that connect to public ElectrumX servers (obviously no mining), and the TCP connections all seem to be failing, which makes me wonder whether I've inadvertently triggered some kind of abuse detection heuristic that blocks network activity. Log is at https://cirrus-ci.com/task/6236556557025280 (see the |
Beta Was this translation helpful? Give feedback.
Replies: 1 comment 1 reply
-
There was a huge increase in crypto mining attempts on all services that provide compute for free in 2021 including Cirrus CI. Multiple companies just drastically restricted free usage:
We on the other hand decided not to restrict any usage of Cirrus CI and implemented multiple different mechanism to pro-actively fight with crypto mining on the clusters that we provide the free service on. One of them analyzes and blocks some network activities. We can't go much into the exact details of now our anti-mining safeguards work to not spoil them and make life of miners easier. As for your use case, it seems it won't be possible for the mechanism to distinguish between you trying to run integration tests and a potential miner trying to connect to ElectrumX in order to mine. The only workaround I see is for you to use some instance that is managed by you. Cirrus CI is not running the anti-mining safeguards on the connected compute services. |
Beta Was this translation helpful? Give feedback.
There was a huge increase in crypto mining attempts on all services that provide compute for free in 2021 including Cirrus CI. Multiple companies just drastically restricted free usage:
We on the other hand decided not to restrict any usage of Cirrus CI and implemented multiple different mechanism to pro-actively fight with crypto mining on the clusters that we provide the free service on. One of them analyzes and blocks some network activities. We can't go …