Ori.livneh has uploaded a new change for review.
https://gerrit.wikimedia.org/r/278326
Change subject: Adjust port range of ferm rule for redis on app servers
......................................................................
Adjust port range of ferm rule for redis on app servers
It looks like we forgot to update this when we rolled out redis::instance.
Bug: T130364
Change-Id: I08a726c747a2d4e61b5b29a39b72ed3ca80a8ae5
---
M modules/role/manifests/mediawiki/common.pp
1 file changed, 2 insertions(+), 2 deletions(-)
git pull ssh://gerrit.wikimedia.org:29418/operations/puppet
refs/changes/26/278326/1
diff --git a/modules/role/manifests/mediawiki/common.pp
b/modules/role/manifests/mediawiki/common.pp
index 2510105..2c2168f 100644
--- a/modules/role/manifests/mediawiki/common.pp
+++ b/modules/role/manifests/mediawiki/common.pp
@@ -9,14 +9,14 @@
desc => 'Skip outgoing connection tracking for Nutcracker',
table => 'raw',
chain => 'OUTPUT',
- rule => 'proto tcp sport (6379 11212) NOTRACK;',
+ rule => 'proto tcp sport (6378:6382 11212) NOTRACK;',
}
ferm::rule { 'skip_nutcracker_conntrack_in':
desc => 'Skip incoming connection tracking for Nutcracker',
table => 'raw',
chain => 'PREROUTING',
- rule => 'proto tcp dport (6379 11212) NOTRACK;',
+ rule => 'proto tcp dport (6378:6382 11212) NOTRACK;',
}
ferm::service{ 'ssh_pybal':
--
To view, visit https://gerrit.wikimedia.org/r/278326
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: newchange
Gerrit-Change-Id: I08a726c747a2d4e61b5b29a39b72ed3ca80a8ae5
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Ori.livneh <[email protected]>
_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
