Extreme Makeover: Rubygems Edition

on YouTube ↗37m

" summary

Accidental DDOS raised rubygems.org load by 15–20×, prompting a rebuilt Bundler dependency API as a Sinatra app on Heroku (many dynos + large Postgres) and later a full rubygems.org rebuild on EC2 with multi-server automation after a YAML-based compromise. New work replaces Marshal blobs with a plain-text append-only index (versions file + per-gem depths), prototypes in Bundler already work, and serving via Fastly CDN mirrors plus local gem mirrors and parallel installs reduces requests and transfer dramatically. Ruby Central funds the effort.

AI-written summary · about

" chapters (13)

1. 0:00Introduction and speaker intro
2. 2:21DDOS attack on rubygems.org
3. 3:46RubyGems.org security breach
4. 5:51Travis CI network issues
5. 7:59SSL certificate problems
6. 10:28Current state and future plans
7. 14:26Problems with current gem index
8. 18:00New index format for speed
9. 21:12Ruby Central grant and progress
10. 26:11Bundler improvements and features
11. 29:44New resolver in Bundler
12. 31:08Future merger of Bundler and RubyGems
13. 32:15How to contribute to Bundler

" related talks

• 01mExtreme Makeover - Rubygems EditionAndre Arko · RubyConf AU 2014
• 25mRebuilding the heart of the Ruby community in 60 hoursSam Kottler · Nickel City Ruby Conference 2013
• 37mDeathmatch Bundler vs Rubygems.orgAndre Arko · GoRuCo 2013
• 35mState of the RubyGemsSamuel Giddins · RubyConf 2023
• 45m`bundle install` Y U SO SLOW: Server EditionTerence Lee · Ruby on Ales 2013
• 37m`bundle install` Y U SO SLOW: Server EditionTerence Lee · Rubyfuza 2013
• 29mFaster Bundler, Happier DevelopersEdouard Chin · RubyKaigi 2026
• 48mPolishing RubygemsYehuda Katz · RubyConf 2009