BBlack has submitted this change and it was merged. (
https://gerrit.wikimedia.org/r/372467 )
Change subject: Deprecation of 3DES: Bump pageview replacement to 5%
......................................................................
Deprecation of 3DES: Bump pageview replacement to 5%
Bug: T163251
Change-Id: I8ef96b271cc0a69d4dd9503dfafaacc7fe036b53
---
M modules/varnish/templates/text-frontend.inc.vcl.erb
1 file changed, 3 insertions(+), 3 deletions(-)
Approvals:
BBlack: Verified; Looks good to me, approved
diff --git a/modules/varnish/templates/text-frontend.inc.vcl.erb
b/modules/varnish/templates/text-frontend.inc.vcl.erb
index 6036d11..e4b7f62 100644
--- a/modules/varnish/templates/text-frontend.inc.vcl.erb
+++ b/modules/varnish/templates/text-frontend.inc.vcl.erb
@@ -175,17 +175,17 @@
// TLS terms: those using DES-CBC3-SHA, which is not forward-secret,
// and the bulk of which are also IE[78]/XP) that their connection
// security is awful and point them at our wikitech page for more info.
- // The X-Conn-Props cipher filter matches < 0.2% of traffic. We
+ // The X-Conn-Props cipher filter matches ~0.1% of traffic. We
// further restrict to the GET method on /wiki/ URLs which do not
// contain colons (e.g. Special:, which is localized on many wikis) in
// an attempt to mostly apply this only to article pageview fetches.
- // We then only apply the synth to 1% of matching traffic randomly.
+ // We then only apply the synth to 5% of matching traffic randomly.
// Note that a magic test URL is also included for viewing
// the warning content with modern browsers.
if (req.url == "/test-sec-warning"
|| (req.http.X-Connection-Properties ~ "C=DES-CBC3-SHA;"
&& req.url ~ "^/wiki/" && req.url !~ ":" && req.method == "GET"
- && std.random(0,100) < 1.0)) {
+ && std.random(0,100) < 5.0)) {
return (synth(418, "Browser Connection Security Warning"));
}
--
To view, visit https://gerrit.wikimedia.org/r/372467
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: merged
Gerrit-Change-Id: I8ef96b271cc0a69d4dd9503dfafaacc7fe036b53
Gerrit-PatchSet: 3
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: BBlack <[email protected]>
Gerrit-Reviewer: BBlack <[email protected]>
Gerrit-Reviewer: Ema <[email protected]>
Gerrit-Reviewer: jenkins-bot <>
_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
