Distributed distribution of patches and other updates is disclosed. A request for an update is received. In some embodiments it is determined whether the source of the request will serve as a redistribution point. If the source will serve as a redistribution point, a redistribution identifier associated with the source is stored. In some embodiments it is determined whether the update will be provided to the source of the request directly, e.g., from a (more) primary source of the update, such as a source that received the request, or indirectly, e.g., from a secondary source such as a host to which a (more) primary source provided the update previously. The request is serviced either directly or indirectly, in accordance with the determination.