Alex Monk has uploaded a new change for review.
https://gerrit.wikimedia.org/r/246206
Change subject: Fix scap firewall rules to allow connecting to mira over IPv6
......................................................................
Fix scap firewall rules to allow connecting to mira over IPv6
This was making a simple sync-file take an extra minute while waiting for the
IPv6 connection to mira time out.
Change-Id: Ib6603ed9a5d04df2d9d6bb97a6731d13b4ecb027
---
M manifests/role/deployment.pp
1 file changed, 8 insertions(+), 2 deletions(-)
git pull ssh://gerrit.wikimedia.org:29418/operations/puppet
refs/changes/06/246206/1
diff --git a/manifests/role/deployment.pp b/manifests/role/deployment.pp
index a6e0e0b..3a56004 100644
--- a/manifests/role/deployment.pp
+++ b/manifests/role/deployment.pp
@@ -62,11 +62,17 @@
}
# T115075
- ferm::service { 'ssh_deployment_server':
+ ferm::service { 'ssh_deployment_server_ipv4':
desc => 'ssh on trebuchet deployment servers, for sync-file / scap',
proto => 'tcp',
port => '22',
- srange => "@resolve((tin.eqiad.wmnet mira.codfw.wmnet))",
+ srange => "@resolve((tin.eqiad.wmnet mira.codfw.wmnet), A)",
+ }
+ ferm::service { 'ssh_deployment_server_ipv6':
+ desc => 'ssh on trebuchet deployment servers, for sync-file / scap',
+ proto => 'tcp',
+ port => '22',
+ srange => "@resolve((tin.eqiad.wmnet mira.codfw.wmnet), AAAA)",
}
#T83854
--
To view, visit https://gerrit.wikimedia.org/r/246206
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: newchange
Gerrit-Change-Id: Ib6603ed9a5d04df2d9d6bb97a6731d13b4ecb027
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Alex Monk <[email protected]>
_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
