12306 Booking Assistant plug-in caused the collapse of the whole incident GitHubSpring Festival approaching, 12306 Ticket difficult 2015 Latest Nike Shoes problem again is directed cusp. This time, the various browser vendors seize the opportunity to launch the Year Edition. The common feature of these numerous browsers, is the integration of a users iFish (Muyu) booking assistant plugins. Not coincidentally, an early version of this plug-in to use GitHub's Raw File service as a CDN, and return the requested 403 error code using very violent five seconds and try again. Thus, when on January 15, the first small peak booking comes, GitHub is indirectly DDos. Jordan Fight Club '91 GitHub operation and maintenance engineer Jesse Newland After discovering server load exception, had disabled the code is located in the Raw service Repo and Repo reported an issue where he found the Repo 12306 references in a resource, because of the huge traffic This resource for GitHub services had a negative impact, I hope someone can reach 12306 engineers to remove the reference. Living in the ocean's GitHub engineers solved the problem over the GitHub service, it is clearly not the situation in China two points clear: what spring is, what 12306 12306 engineer is unlikely to be linked to the question everyone we questioned, exist in two things:? Why require a browser plug-referenced resources from GitHub GitHub load capacity so weak it difficult to explain the first question, let Muyu plugin authors themselves explain:? introduce an automatic update. Since 12306 TICKETS assistant is a very special thing, dependent on the Ministry's website and store, and its operation is extremely dependent on the site's functionality and page structure, so as to improve the Ministry of Railways, it is easy to fail (although they look like reception From the beginning to now, more than a year of almost no change him meow Why do I have to use the unit, said in time, really sad). Therefore, in order to ensure the normal booking assistant functions at a very early version of Air Jordan 18 the beginning of the introduction of auto-update mechanism (1.4). Updates are beginning on your site, and the distinction between Firefox and Chrome. First assistant is UserScript pattern emerges, commissioning and debugging in Firefox. When Firefox under, Scriptish provides support cross-domain GMxmlHttpRequest function, you can visit my site using ajax directly. But Chrome under, there is no such convenience does not support cross-domain ajax, so with the introduction of script script way to check for updates. Later in Firefox and Chrome branch full merger (the beginning of the separation for different browsers, and later found the synchronization is too much trouble), give some specific features (such as GMxmlHttpRequest), for a number of functions to do the adaptation (such as desktop notice), update it with down. But then I do not know when it started, the update mechanism suddenly ineffective. Why does this matter from another to begin. That is 12306 of HTTPS. 1.4 billion hits a day as a website, CDN ChinaNetCenter is still very to the force, according to the information I gathered, it accelerated node hundreds. However, as a booking site and also CDN, why root certificate will use HTTPS protocol or a self-signed, it is too hard to understand. Any understanding of network knowledge knows, load capacity under the HTTPS protocol than HTTP server much lower, not to mention tickets are not what confidential data. There is always someone hopping up and say ah booking more secret, I always oppose, what secret door, and the trips I vote or data? This has brought a lot of trouble HTTPS. I do not know which version of Chrome introducing security mechanisms, for an HTTPS website, all of its resources referenced (Script and StyleSheet and the like), must also be located on the HTTPS server, otherwise rejected. And I did not HTTPS server, therefore, Chrome auto-update gorgeous hung up. Then Firefox. Firefox can not play the next music, I always thought it was Personality Nike Air Force 1 Unisex White Blue Shoes not supported by Firefox, later found to be safe mechanism in trouble Firefox: HTTPS pages Popular Nike Air Force 1 Unisex White Black Shoes refuse to play multimedia files from HTTP. Wonderful maybe let me a headache. Then inadvertently glimpse of GitHub turned HTTPS, So shift in the past, into a logical thing, I begged dad to tell my grandmother did not seek an HTTPS server, although there is a free SSL certificate or something, but I went to apply for a time, even the provider's website himself wrong certificate. So things are resolved. And the second question, GitHub load capacity why so weak, because GitHub is not suitable as a CDN service. Bit inn famous Renaissance blog, has done a detailed explanation: It is not a static file server, in other words, all requests must go through a bunch of server access code to handle, reducing its response speed. MIME and file its return has nothing to do (always a text / plain), some browsers, for example, said IE, does not execute javascript file MIME type errors. It returns the Cache-Control Header does not allow the browser cache files, mean the loss of the most basic functions CDN. Precisely because 12306 TICKETS Assistant is not run in IE, I do not want to update the files are cached, the latter two did not disadvantage Raw file is revealed. But the rest of that disadvantage, but let Github response speed greatly reduced, had temporarily blocked Raw file access. To address this problem, the original author of the straight key provides two levels of solution: use GitHub as CDN right way: So, Github as CDN what the right way is Github Pages?. By adding gh-pages branch, you can modify and publish their own repo files. It is worth recalling, Pages, although free, is not unlimited resources, see the official description Disk Quota Although we did not set an upper limit, but please reasonable use. Github understatement to say that fair use, rather than strict regulations to MB, GB, in fact, is a subconscious mutual trust. This is a disparity between supply and demand in the Chinese increasingly missing something, there is a 12306 is a confirmed booking assistant: Passengers do not believe that the passengers do not believe 12306,12306, 12306 and finally extract a booking assistant, and even every day updated once per half-day ticket to go home to meet the needs of the Chinese people. Under HTTPS How to cite HTTP resources: Will Google Reader, is how to play non-HTTPS video Youku and potatoes in the HTTPS domain we find the same problem in September last year, Google themselves is solved:? After Chrome 21, in SSL encryption non-SSL page embed Flash will happen? will be silently blocked, leaving only a console report. Google Reader that is how to circumvent this problem see Youku and potatoes video? Iframe them a non-SSL page, then referenced inside flash (page references even domain names are different) The same also applies to Javascript, which is also set 12306 Current ticket assistant solutions (except Firefox). SSL is no longer required under the CDN. The author is not the end of the Genuine Nike Air Force 1 Mens Blue Yellow Shoes booking assistant Muyu, unbearable all walks of life Nike Air Max 91 have visited his tour of the open source on GitHub code repository booking assistant, eventually deleted items. But he said will continue to streamline / improve this booking widget. Because this plug-in, even complaints to the Ministry of Railways Ministry, asking them to order the various browser companies to stop providing incidental to grab votes capable browser download. However, this article was published on the front, various browser vendors have not yet received the relevant notification indicates. All this is not the end. Source: InfoQ submission, the original link.