Page MenuHomePhabricator

Update ACLs for newer graphite hosts
Closed, ResolvedPublic

Description

We're replacing graphite hosts, thus router ACLs will need to be updated, specifically terms graphite and statsd at the moment contain:

10.64.32.155/32;
10.192.16.33/32;

Please add graphite1004 and graphite2003. Once these machines are fully in service we can remove the hosts above, thanks!

Related Objects

StatusSubtypeAssignedTask
Resolvedfgiunchedi
Resolvedayounsi

Event Timeline

fgiunchedi triaged this task as Medium priority.Aug 27 2018, 7:08 AM
fgiunchedi created this task.
fgiunchedi moved this task from Backlog to Blocked on the User-fgiunchedi board.Aug 27 2018, 8:18 AM
elukey added a subscriber: elukey.Aug 27 2018, 8:38 AM
[edit firewall family inet filter analytics-in4 term graphite from destination-address]
+        /* graphite1004 */
+        10.64.16.149/32;
         10.64.32.155/32 { ... }
[edit firewall family inet filter analytics-in4 term graphite from destination-address]
         10.64.32.155/32 { ... }
+        /* graphite2003 */
+        10.192.0.102/32;
         10.192.16.33/32 { ... }
[edit firewall family inet filter analytics-in4 term statsd from destination-address]
+        /* graphite1004 */
+        10.64.16.149/32;
         10.64.32.155/32 { ... }
[edit firewall family inet filter analytics-in4 term statsd from destination-address]
         10.64.32.155/32 { ... }
+        /* graphite2003 */
+        10.192.0.102/32;
         10.192.16.33/32 { ... }

Mentioned in SAL (#wikimedia-operations) [2018-08-27T19:34:55Z] <XioNoX> adding graphite1004 and graphite2003 to analytics-in4 - T202846

ayounsi closed this task as Resolved.Aug 27 2018, 7:36 PM

Feel free to reopen or file a new task for the deletion part.