Back to blog

Enforced HTTPS for '' and consolidation of the Jenkins Mirrors

May 13, 2022

The Jenkins project provides a download mirror infrastructure allowing to download Jenkins packages and plugins from a download server close to your location.

How Does it Work?

When a download request is emitted to either or, an HTTP redirect response to a mirror download server is answered.

The Jenkins infrastructure uses a database of existing mirror servers provided by volunteers and donators to select the closest mirror to your location: this is currently the role of the distinct and services.


The system behind is using a software named "mirrorbrain" and was originally used by the Jenkins infrastructure to provide download redirections to mirrors.

A new system was introduced in 2020:, using "mirrorbits" which is a great fit for a Kubernetes environment (lightweight, horizontally scalable) and provides a set of nice WebUI features to see the mirror list and grading.

INFO: Try it by yourself, check the mirrors providing the latest Jenkins LTS distribution:

It’s been 2 years and the new system is clearly the most reliable: that’s why we, the Jenkins Infrastructure team, want to retire the "mirrorbrain" system.

In consequence, the 19th of May 2022, the domain name will be changed to point to the actual "mirrorbits" system already available at

This consolidation ensures all users downloading a Jenkins package or a plugin will use the closest download mirror to their location, without having to maintain 2 distinct systems.

Enforced HTTPS

The main consequence is that the HTTPS protocol will be enforced for the request to the domain

The "mirrorbrain" system currently serving requests behind the domain is not available through HTTPS, which is a safety issue for users downloading files.

The 19th of May 2022, that won’t be the case anymore: like, HTTPS will be available and enforced for the requests going through the domain

What Does It Change for Me?

  • Short answer: nothing. You should already be using the domain as it’s been the default since almost 2 years, and the content served by both system is the same.

  • Long answer: if you are still using the former and are not able to switch to, you’ll see the following changes:

  • 🌍 The mirror usually selected might change as the grading system on mirrorbits is different (and covers way more mirrors): faster downloads for you!

  • 🔐 Your HTTP requests will be redirected to their corresponding URL using the HTTPS protocol with a valid TLS certificate signed by the Let’s Encrypt authority: improved safety!

  • ⚠️ The IP pointed by the DNS record will change from to upgrade your proxies!

About the author



Damien is the Jenkins Infrastructure officer and a software engineer at CloudBees working as a Site Reliability Engineer for the Jenkins Infrastructure project. Not only he is a decade-old Hudson/Jenkins user but also an open-source citizen who participates in Updatecli, Asciidoctor, Traefik and many others.