We're replacing graphite hosts, thus router ACLs will need to be updated, specifically terms graphite and statsd at the moment contain:
10.64.32.155/32; 10.192.16.33/32;
Please add graphite1004 and graphite2003. Once these machines are fully in service we can remove the hosts above, thanks!
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Unknown Object (Task) | |||||
| Resolved | fgiunchedi | T196484 rack/setup/install graphite1004 | |||
| Resolved | ayounsi | T202846 Update ACLs for newer graphite hosts |
[edit firewall family inet filter analytics-in4 term graphite from destination-address] + /* graphite1004 */ + 10.64.16.149/32; 10.64.32.155/32 { ... } [edit firewall family inet filter analytics-in4 term graphite from destination-address] 10.64.32.155/32 { ... } + /* graphite2003 */ + 10.192.0.102/32; 10.192.16.33/32 { ... } [edit firewall family inet filter analytics-in4 term statsd from destination-address] + /* graphite1004 */ + 10.64.16.149/32; 10.64.32.155/32 { ... } [edit firewall family inet filter analytics-in4 term statsd from destination-address] 10.64.32.155/32 { ... } + /* graphite2003 */ + 10.192.0.102/32; 10.192.16.33/32 { ... }
Mentioned in SAL (#wikimedia-operations) [2018-08-27T19:34:55Z] <XioNoX> adding graphite1004 and graphite2003 to analytics-in4 - T202846