Page MenuHomePhabricator

Have checkpoint check for public labs DNS
Closed, DeclinedPublic

Description

*.wmflabs.org should work, checked by hitting a well known point (uh, maybe the tools-checker domain itself?) and making sure it returns a known good address. Or however checkpoint does their native DNS checks.

Event Timeline

yuvipanda raised the priority of this task from to Needs Triage.
yuvipanda updated the task description. (Show Details)
yuvipanda added a project: Cloud-Services.
Andrew claimed this task.
Andrew added a subscriber: Andrew.

I don't think this is useful... if public dns fails then /all/ of our catchpoint alerts will fail.

I don't think this is useful... if public dns fails then /all/ of our catchpoint alerts will fail.

I think that's a bug - is there a requirement to have checks use DNS, or is this by design? I think it's very unhelpful to have a single failed system make every test invalid.

If we want to fix that we can make all the checks use IPs instead of DNS from catchpoint's side.

I think that would be a good idea - being able to distinguish between "labs broke" and "DNS has failed" is important to direct recovery efforts.