openSUSE admin

~> curl https://kde.org/.well-known/matrix/server
{
    "m.server": "kde.modular.im:443"
}

kde.org seem to be using Element hosted Matrix, is this really specific to kde.org or rather to all Element hosted instances?

In the latter case, I have a suspicion:

$ dig kde.modular.im +short a
k8s-core-coreingr-e213c56b76-ef68a8798c5364b0.elb.eu-central-1.amazonaws.com.
3.66.50.240

That IP address is part of 3.0.0.0/9, requests from which we are blanket rejecting with 429 due to abuse from hosts at Amazon: https://progress.opensuse.org/projects/opensuse-admin/repository/salt/revisions/843268caef24c4e986b5b0312a0dc83487910e1b/diff.
Assuming that IP address is also the one they use as a source address.

Easiest would be to exclude requests to Matrix from all source address filtering, but it would mean that it receives request spam from other places which don't necessarily host Matrix servers. Do I recall correctly that only SNI is used for federation traffic? Then we could only exclude sni_matrix and still benefit from filtering requests to Matrix which only match a host header.

gnome.modular.im seems to be hosted on the same cluster as kde