openshift.org

This is where you should report issues arising from the subscription filters.

Moderator: EasyList authors

Post Reply
mwringe
New Member
New Member
Posts: 5
Joined: Thu Mar 09, 2017 8:26 pm
Reputation: 0

openshift.org

Post by mwringe » Thu Mar 09, 2017 8:40 pm

OpenShift openshift.org uses Hawkular Metrics hawkular.org to store its metrics about container usage (eg CPU, memory, network, etc)

We are running into issues where if a user has an adblocker installed, our console page for graphing container usage fails.
This is because the url to Hawkular Metrics can contain /metrics/metrics in it.

Eg a sample url may look like the followiing:

Code: Select all

https://hawkular-metrics.example.com/hawkular/metrics/metrics/stats/query
There are no ads on this page and this url is only being used to fetch metrics from our Hawkular Metrics instances so that they can be graphed.

What can we do we to get our urls to not be blocked anymore?

User avatar
smed79
Liste AR Author
Liste AR Author
Posts: 9239
Joined: Sun Jan 17, 2010 4:00 am
Reputation: 21
Location: /tmp

Post by smed79 » Thu Mar 09, 2017 8:52 pm

mwringe wrote:this url is only being used to fetch metrics from our Hawkular Metrics instances so that they can be graphed
This filter is part of EasyPrivacy which is an optional subscription (manually added by user) deputed to block tracking services.
•► Before posting, to find your answer fast, read Forum « RULES » and use « Search »
••► Don't post clickable links » use inline text bbcode notation « [ C ] » or « [ code ] »

mwringe
New Member
New Member
Posts: 5
Joined: Thu Mar 09, 2017 8:26 pm
Reputation: 0

Post by mwringe » Thu Mar 09, 2017 9:32 pm

Yes, its part of EasyPrivacy, which is indicated in uBlockOrigin and links to this forum. Sorry, is this not the right location to ask?

This is not a tracking service and is being incorrectly flagged as invalid just because it has "/metrics/metrics" in its name.

User avatar
smed79
Liste AR Author
Liste AR Author
Posts: 9239
Joined: Sun Jan 17, 2010 4:00 am
Reputation: 21
Location: /tmp

Post by smed79 » Thu Mar 09, 2017 9:48 pm

mwringe wrote:This is not a tracking service...
Provide a real testable online example... and wait an easylist author see this topic.
•► Before posting, to find your answer fast, read Forum « RULES » and use « Search »
••► Don't post clickable links » use inline text bbcode notation « [ C ] » or « [ code ] »

mwringe
New Member
New Member
Posts: 5
Joined: Thu Mar 09, 2017 8:26 pm
Reputation: 0

Post by mwringe » Thu Mar 09, 2017 10:47 pm

For the OpenShift issues, its not going to be that easy right now. Its in a management console and not something which would be publicly available. Our online version is in developer preview so we might be able to see if we can get someone access to test (https://console.preview.openshift.com).

Otherwise you could of course install OpenShift Origin locally and verify with that, but I somehow think that is not what you are looking for :)

Its a bit strange to block anything if it has "/metrics/metrics" in it as that could cover a lot of different possible URL patterns.

I can provide you documentation if that would be helpful at all:

Our bugzilla for this issue: https://bugzilla.redhat.com/show_bug.cgi?id=1430888

Documentation for how to fetch the metrics manually which shows the "/metrics/metrics" URL in a lot of our examples: https://github.com/openshift/origin-met ... -a-project

Is there anything else we can provide which would help to get this looked at? I realise that not having an good quick site which can be used is a bit of a pain. If you do need access to something live, I would have to figure out how to get that setup for you. Would you need an actual site or just something with Hawkular Metrics running that you could curl into?

User avatar
fanboy
EasyList Author
EasyList Author
Posts: 9450
Joined: Wed Sep 05, 2007 8:17 pm
Reputation: 3

Post by fanboy » Sun Mar 12, 2017 2:31 am

Given the difficulty of fixing this, can openshift just change the folder name?

mwringe
New Member
New Member
Posts: 5
Joined: Thu Mar 09, 2017 8:26 pm
Reputation: 0

Post by mwringe » Mon Mar 13, 2017 2:20 pm

How is it difficult to fix this exactly? The privacy blockers appear to be too strict with regards to blocking everything with "/metrics/metrics" in it.

We cannot easily change this in OpenShift without breaking other existing REST based clients. We are looking into other alternatives, but its a bit crazy that we have to rearrange our paths just because a privacy blocker is incorrectly flagging things.

User avatar
fanboy
EasyList Author
EasyList Author
Posts: 9450
Joined: Wed Sep 05, 2007 8:17 pm
Reputation: 3

Post by fanboy » Mon Mar 13, 2017 7:28 pm

I'm open to filter suggestions.

wgordon
New Member
New Member
Posts: 1
Joined: Wed Mar 15, 2017 1:45 pm
Reputation: 0

Post by wgordon » Wed Mar 15, 2017 1:46 pm

Since this URL is an API endpoint, we already have customers who have built solutions around this format. Since at the very least, this is affecting paying customers, would it be possible to provide a whitelist/exclusion as part of EasyList for https://metrics.*.openshift.com? This at least provides a very limited scope of what is being whitelisted/excluded, and the above format will be the same for at least one sub-section of our customers.

Out of curiosity, what is it about the "/metrics/metrics" format that you've seen have ads on it...or is it more for blocking tracking scripts?

mwringe
New Member
New Member
Posts: 5
Joined: Thu Mar 09, 2017 8:26 pm
Reputation: 0

Post by mwringe » Thu Mar 16, 2017 12:58 pm

Fixing it for https://metrics.*.openshift.com wont help that much since it will still fail on all the other installations which are not using that url.

An exclusion for "hawkular/metrics/metrics" would work better, as this should work across all installations of OpenShift

User avatar
Lanik
Site Owner
Site Owner
Posts: 1149
Joined: Thu Feb 15, 2007 7:44 am
Reputation: 9
Location: West Coast, USA

Post by Lanik » Thu Mar 16, 2017 3:38 pm

mwringe wrote:
Thu Mar 16, 2017 12:58 pm
An exclusion for "hawkular/metrics/metrics" would work better, as this should work across all installations of OpenShift
That's a pretty broad exception and has high potential to be abused. Say if a "bad" site is getting blocked on metrics/metrics, if we used your suggestion, all they'd have to do is add hawkular to their path and problem solved. Do you see where I'm going with this?

Same thing i said here: viewtopic.php?f=64&t=35937 cases like this are almost impossible to fix on a filter level.

I'm not an EasyList author so final decision isn't mine. Everything I said IMO of course. :mrgreen:
"If it ain't broke don't fix it."

Post Reply

Who is online

Users browsing this forum: rajeshkumaryadav and 4 guests