DEV Community

aimall
aimall

Posted on

I open-sourced a free 5GB/month GitHub download accelerator API (rate-limited + SSRF-guarded)

#ai #api #devops #github

I open-sourced a free 5GB/month GitHub download accelerator API (rate-limited + SSRF-guarded)

Everyone has hit the git clone that crawls at a few dozen KB/s. This post introduces a free 5GB/month download accelerator API: drop a GitHub / Gitee / GitLab URL into ?url=, one curl returns the accelerated content. Over quota it auto-throttles — never blocked, never billed.

The pain: slow GitHub downloads are the norm

  • CI/CD dependency pulls time out;
  • Downloading release assets or model weights gets throttled;
  • Cross-border links (GitHub from some regions) flake out constantly;
  • AI agents that just want to fetch an open-source file get network-blocked.

The solution: a download accelerator API

Souyi AIMALL shipped a download accelerator API — essentially "whitelisted reverse proxy + edge cache + quota/throttle":

curl -H "X-API-Key: YOUR_KEY" \
  "https://souyi.net.cn/api/v1/accel?url=https://raw.githubusercontent.com/owner/repo/main/file"
Enter fullscreen mode Exit fullscreen mode

Put any whitelisted resource (github.com / gitee.com / gitlab.com and their raw, codeload subdomains) into ?url=, and the response is the accelerated raw bytes. Hot files hit Cloudflare edge cache and go fast.

Free quota & throttling

Param Value
Free quota 5GB/month, auto-resets every 30 days
Over quota auto-throttle to 200KB/s — never blocked, never billed
Max file 2GB
Rate limit 60 req/min per key

Key point: over quota doesn't cut you off, it just slows down. For most personal / agent use, 5GB/month is plenty.

Not a naked proxy: SSRF-guarded

Many "accelerators" are open proxies that get abused as jump-hosts into internal networks. This one has guardrails:

  1. Whitelist domains — GitHub / Gitee / GitLab families only; rejects all literal IPs and private addresses;
  2. Hop-by-hop redirect check — every 30x redirect is re-validated against the whitelist, max 5 hops, no bypass;
  3. HTTPS enforced — no MITM;
  4. Over-quota streams aren't cached — marked Cache-Control: private, no-store so slow streams aren't cached and accelerated for others.

AI agents can use it directly

Beyond X-API-Key REST, agents can connect via MCP (Model Context Protocol) at https://souyi.net.cn/api/v1/mcp — streamable HTTP, X-API-Key auth. Any MCP client (Claude, Cursor, Dify, Coze, LangChain) plugs in and lets the agent decide when to fetch open-source resources.

Get started

  1. Sign up at souyi.net.cn → $1 free trial, $4 more after email verification;
  2. The accelerator itself is free 5GB/month — generate an API key in the console;
  3. Copy the curl above.

Aside: AIMALL is itself an API & Token marketplace for AI agents — models, search, image, voice, video, pay-as-you-go, free trial on signup. The accelerator is just the slice we open for free to everyone.

Related

Top comments (0)