Questions about repositories servers/mirrors

I was wondering about mirrors while I’m in middle of system update…

Are the mirrors basically multiple servers running at different locations to distribute loads of traffic from users trying to access updates/packages si!ultaneously?

These must be one of the major things where the funds are spent…? Also the risk of DDOS attacks and hacks…

Is the current entity structure open to share how they manage these, I mean, if all the mirrors are used equally, and ones that dont get much traffic are they intentionally shut down? Like mirror status page shows some offline.

Just curious.

No. Most mirrors are single servers, volunteered, so we don’t know if they are protected against ddos. Manjaro does not control the servers.

A notable exception is the country “Global”. This is indeed a cdn network of multiple servers which makes it fast and resilient from everywhere.

Note that the country “Worldwide” just means “use all mirrors”.
I was confused at the difference of those pseudo countries.

Oh they are volunteered, interesting!

Manjaro pays for the CDN i think. But the rest - anybody having the required space and bandwidth can apply to host a mirror.

Hmm… So its like VPS or Locally hosted server, routed through stuff like cloudflare tunnels with cdn for caching files in case of high demand.

Yes, that’s a good way of putting it. But there’s more to it than that. :backhand_index_pointing_down:

No, because those mirrors are independently run by separate organizations — e.g. universities, telecom operators, et al — and they serve as mirrors to more than just Manjaro. Most of them are also mirrors for various other distributions, and for individual software projects.

Well, any of them could be targeted by a DDoS, and for whatever reason, but they usually have their own DDoS mitigations in place.

Whether they are online or offline is at the discretion of each individual mirror’s administrator(s).

The manjaro-mirrors script polls the pool of mirrors as per your selection — e.g. only the mirrors in your country, only mirrors supporting https, and so on — and ranks the ones which are online and which have properly synced.

Some reading:

Basically domain, static ip, 200GB and unlimited internet + decent bandwidth and some config.