diff --git a/build.sh b/build.sh
index 141c104357..98a0d30e1d 100755
--- a/build.sh
+++ b/build.sh
@@ -505,7 +505,10 @@ if hasArg java; then
         bash "${REPODIR}"/java/cuopt/scripts/build_native.sh
         source "${REPODIR}"/java/cuopt/scripts/maven.sh
         cuopt_maven_args
-        cuopt_mvn -f "${REPODIR}"/java/cuopt/pom.xml clean package \
+        # cd into java/cuopt so Maven's directory-search picks up java/cuopt/.mvn/maven.config --
+        # it walks up from the current working directory, not from -f's directory.
+        cd "${REPODIR}"/java/cuopt
+        cuopt_mvn -f pom.xml clean package \
             -DskipTests \
             -Dcuopt.native.dir="${CUOPT_JAVA_NATIVE_BUILD_DIR}"
     fi
diff --git a/java/cuopt/.mvn/maven.config b/java/cuopt/.mvn/maven.config
new file mode 100644
index 0000000000..fb1e5b65cf
--- /dev/null
+++ b/java/cuopt/.mvn/maven.config
@@ -0,0 +1,8 @@
+-e
+-B
+-Daether.connector.basic.downstreamThreads=1
+-Daether.connector.http.retryHandler.count=8
+-Daether.connector.http.retryHandler.interval=5000
+-Daether.connector.http.retryHandler.intervalMax=60000
+-Daether.connector.http.retryHandler.serviceUnavailable=429,503
+-Dmaven.wagon.http.retryHandler.count=5
diff --git a/java/cuopt/pom.xml b/java/cuopt/pom.xml
index 019cc08433..d214cf603c 100644
--- a/java/cuopt/pom.xml
+++ b/java/cuopt/pom.xml
@@ -45,6 +45,63 @@ SPDX-License-Identifier: Apache-2.0
     <junit.jupiter.version>5.11.4</junit.jupiter.version>
   </properties>
 
+  <!--
+    Maven Central rate-limits NVIDIA-managed GitHub Actions runners: they egress through a small,
+    shared NAT'd IP range, so every RAPIDS repo's Java CI shares the same budget against Central
+    (see rapidsai/build-infra#370). Prefer the Google Cloud read-only mirror of Central, the same
+    one Apache ORC/Lucene/Spark use, and fall back to Central for anything not mirrored. Matches
+    the fix applied in rapidsai/kvikio#992.
+  -->
+  <repositories>
+    <repository>
+      <id>gcs-maven-central-mirror</id>
+      <name>GCS Maven Central mirror</name>
+      <url>https://maven-central.storage-download.googleapis.com/maven2/</url>
+      <releases>
+        <enabled>true</enabled>
+      </releases>
+      <snapshots>
+        <enabled>false</enabled>
+      </snapshots>
+    </repository>
+    <repository>
+      <id>central</id>
+      <name>Maven Central</name>
+      <url>https://repo.maven.apache.org/maven2</url>
+      <releases>
+        <enabled>true</enabled>
+      </releases>
+      <snapshots>
+        <enabled>false</enabled>
+      </snapshots>
+    </repository>
+  </repositories>
+
+  <pluginRepositories>
+    <pluginRepository>
+      <id>gcs-maven-central-mirror</id>
+      <name>GCS Maven Central mirror</name>
+      <url>https://maven-central.storage-download.googleapis.com/maven2/</url>
+      <releases>
+        <enabled>true</enabled>
+      </releases>
+      <snapshots>
+        <enabled>false</enabled>
+      </snapshots>
+    </pluginRepository>
+    <pluginRepository>
+      <id>central</id>
+      <name>Maven Plugin Repository</name>
+      <url>https://repo.maven.apache.org/maven2</url>
+      <releases>
+        <enabled>true</enabled>
+      </releases>
+      <snapshots>
+        <enabled>false</enabled>
+      </snapshots>
+    </pluginRepository>
+  </pluginRepositories>
+
   <dependencies>
     <dependency>
       <groupId>org.junit.jupiter</groupId>
@@ -109,38 +166,6 @@ SPDX-License-Identifier: Apache-2.0
           </execution>
         </executions>
       </plugin>
-      <!-- Sources and javadoc jars are required by any Maven repository we would publish to. -->
-      <plugin>
-        <groupId>org.apache.maven.plugins</groupId>
-        <artifactId>maven-source-plugin</artifactId>
-        <version>3.3.1</version>
-        <executions>
-          <execution>
-            <id>attach-sources</id>
-            <goals>
-              <goal>jar-no-fork</goal>
-            </goals>
-          </execution>
-        </executions>
-      </plugin>
-      <plugin>
-        <groupId>org.apache.maven.plugins</groupId>
-        <artifactId>maven-javadoc-plugin</artifactId>
-        <version>3.11.2</version>
-        <configuration>
-          <!-- The bindings are documented against the C API rather than in javadoc comments;
-               missing tags should not fail the build. -->
-          <doclint>none</doclint>
-        </configuration>
-        <executions>
-          <execution>
-            <id>attach-javadocs</id>
-            <goals>
-              <goal>jar</goal>
-            </goals>
-          </execution>
-        </executions>
-      </plugin>
       <plugin>
         <groupId>org.apache.maven.plugins</groupId>
         <artifactId>maven-surefire-plugin</artifactId>
@@ -154,4 +179,54 @@ SPDX-License-Identifier: Apache-2.0
       </plugin>
     </plugins>
   </build>
+
+  <profiles>
+    <!--
+      Sources and javadoc jars are required by any Maven repository we would publish to, but
+      not by anything else. Attaching them unconditionally meant every `mvn test`/`verify`
+      invocation (which never packages anything) still had to resolve maven-source-plugin and
+      maven-javadoc-plugin from Maven Central, on every CI run, for no reason. That repeated,
+      unnecessary resolution repeatedly hit Maven Central 429 rate limits. Activate explicitly
+      with -Pattach-source-javadoc when actually packaging for publishing; mvn test/verify
+      should not activate it.
+    -->
+    <profile>
+      <id>attach-source-javadoc</id>
+      <build>
+        <plugins>
+          <plugin>
+            <groupId>org.apache.maven.plugins</groupId>
+            <artifactId>maven-source-plugin</artifactId>
+            <version>3.3.1</version>
+            <executions>
+              <execution>
+                <id>attach-sources</id>
+                <goals>
+                  <goal>jar-no-fork</goal>
+                </goals>
+              </execution>
+            </executions>
+          </plugin>
+          <plugin>
+            <groupId>org.apache.maven.plugins</groupId>
+            <artifactId>maven-javadoc-plugin</artifactId>
+            <version>3.11.2</version>
+            <configuration>
+              <!-- The bindings are documented against the C API rather than in javadoc comments;
+                   missing tags should not fail the build. -->
+              <doclint>none</doclint>
+            </configuration>
+            <executions>
+              <execution>
+                <id>attach-javadocs</id>
+                <goals>
+                  <goal>jar</goal>
+                </goals>
+              </execution>
+            </executions>
+          </plugin>
+        </plugins>
+      </build>
+    </profile>
+  </profiles>
 </project>