Page MenuHomePhabricator

move frav1001's to the frack-fundraising VLAN so we can use it for database testing
Closed, ResolvedPublic

Description

Please confirm that eqiad pfw port 2/0/3 is frav1001, and if so change its vlan from frack-administration to frack-fundraising, and relabel it frdb1003. I plan to use this old server to test mariadb-10.1.x.

Event Timeline

Restricted Application added a subscriber: Aklapper. · View Herald Transcript
Jgreen raised the priority of this task from High to Needs Triage.
Jgreen subscribed.

This also requires an updating to the firewall policy, I added the new database and generated the new policy.

commit d6907c5e604e1b8c534a9a1f3eb083d2cbc9eafb
Author: Jeff Green <jgreen@wikimedia.org>
Date: Fri Sep 22 16:03:56 2017 +0000

add frdb1003 to pfw policy

Change 379782 had a related patch set uploaded (by Jgreen; owner: Jgreen):
[operations/dns@master] switch fundraising test box hostname from frav1001 to frdb1003, adjust IP for new subnet

https://gerrit.wikimedia.org/r/379782

Change 379782 merged by Jgreen:
[operations/dns@master] switch fundraising test box hostname from frav1001 to frdb1003, adjust IP for new subnet

https://gerrit.wikimedia.org/r/379782

ayounsi subscribed.

Vlan changed on pfw-eqiad (old)
Vlan changed on fasw-c-eqiad (new)
Security policies updated on pfw-eqiad (old)
Security policies updated on pfw3-codfw
Security policies NOT updated on pfw3-eqiad (new) - most of the rules under security policies are missing in the update file

new policy file worked fine, committed.
Don't forget to update racktables and relabel the box.