git daemon inetd mode: need traffic statistics

git daemon inetd mode: need traffic statistics

[Robin H. Johnson]

[-- Attachment #1: Type: text/plain, Size: 958 bytes --]

Has anybody got patchsets that let git-daemon send traffic data (to
syslog) at the end of each request, about the peer, and how many bytes
in each direction?

Hoping somebody has something useful to share that isn't coming up in my
research.

Gentoo's seeing a big uptick in usage on the anonymous git daemons via
xinetd (we do offer HTTP/HTTPS as well, but the growth is in http).

I know it's via the git/9418 protocol because the HTTP traffic is
well-metered and hasn't grown, and the overall traffic to the hosts also
grew. This is confirmed by using Netflow data, which tells me it's the
Git port, and some of the IPs, but doesn't let me get which repo
directly (And processing the netflow data is also painful).

-- 
Robin Hugh Johnson
Gentoo Linux: Dev, Infra Lead, Foundation Treasurer
E-Mail   : robbat2@gentoo.org
GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85
GnuPG FP : 7D0B3CEB E9B85B1F 825BCECF EE05E6F6 A48F6136

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 1113 bytes --]

Re: git daemon inetd mode: need traffic statistics

[brian m. carlson]

[-- Attachment #1: Type: text/plain, Size: 982 bytes --]

On 2022-09-26 at 04:21:46, Robin H. Johnson wrote:
> Has anybody got patchsets that let git-daemon send traffic data (to
> syslog) at the end of each request, about the peer, and how many bytes
> in each direction?
> 
> Hoping somebody has something useful to share that isn't coming up in my
> research.

I don't, sorry.  At work we use a custom proxy which provides this,
which I can't share and probably wouldn't be of much use to you even if
I could since it's very specific to our setup.

My impression is that typically most hosters are moving away from port
9418 because it isn't encrypted or secured and anonymous HTTPS is just
as easy to use.  As a consequence, git-daemon isn't typically seeing a
lot of development since it is seeing less and less use.  Having said
that, I'm sure a patch to git-daemon implementing this feature would be
welcome, whether from you or from someone else.
-- 
brian m. carlson (he/him or they/them)
Toronto, Ontario, CA

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 263 bytes --]