Page MenuHomePhabricator
Create Task
Maniphest T177821

Allow syslog-tls and syslog in analytics towards wezen/lithium
Closed, ResolvedPublic
Actions

Description

We've switched to syslog-tls (tcp/6514) by default in T136312. The following addresses should be allowed to be talked to from analytics:

  • lithium.eqiad.wmnet / 10.64.32.154/32
  • wezen.codfw.wmnet / 10.192.48.64/32

Related Objects

Event Timeline

fgiunchedi created this task.Oct 10 2017, 9:47 AM
Restricted Application added a subscriber: Aklapper. · View Herald TranscriptOct 10 2017, 9:47 AM
Aklapper added a project: SRE.Oct 10 2017, 11:38 AM
MoritzMuehlenhoff triaged this task as Medium priority.Nov 7 2017, 8:41 AM
MoritzMuehlenhoff added a project: netops.
fgiunchedi added a subscriber: ayounsi.Nov 7 2017, 6:03 PM

While investigating with @ayounsi it emerged that regular syslog is also blocked from analytics to prod. Please allow udp/514 as well, thanks!

fgiunchedi renamed this task from Allow syslog-tls in analytics towards wezen/lithium to Allow syslog-tls and syslog in analytics towards wezen/lithium.Nov 7 2017, 6:04 PM
ayounsi closed this task as Resolved.Nov 7 2017, 6:10 PM
ayounsi claimed this task.

Done.

faidon mentioned this in rOHPU903bcbf5c1b2: Allow analytics to send syslog and syslog-tls to collectors.Oct 3 2019, 11:10 AM
Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL