Page MenuHomePhabricator

Allow analytics VLAN to reach eventgate-analytics.discovery.wmnet:31192
Closed, ResolvedPublic

Description

(or eventgate-analytics.svc.eqiad.wmnet:31192)

In T220081, we allowed access to Swift from the Analytics cluster. We need a way for consumers of data in swift to get notification that their data is ready. We plan to do this using a new upload complete event in Kafka. We could produce this directly to Kafka, but it will be easier for producer dependencies if we just POST the event to eventgate-analytics.

Please allow for HTTP access to port 31192 to the eventgate-analytics service.

Event Timeline

Ottomata created this task.Wed, Jul 24, 2:45 PM
Restricted Application added a subscriber: Aklapper. · View Herald TranscriptWed, Jul 24, 2:45 PM
Ottomata removed Ottomata as the assignee of this task.Wed, Jul 24, 4:09 PM
elukey closed this task as Resolved.Thu, Jul 25, 6:33 AM
elukey claimed this task.
+      term eventgate {
+          from {
+              destination-address {
+                  /* eventgate-analytics.svc.eqiad.wmnet */
+                  10.2.2.42/32;
+              }
+              protocol tcp;
+              destination-port 31192;
+          }
+          then accept;
+      }

Committed to both cr1/cr2 eqiad. Cc: @ayounsi :)

Mentioned in SAL (#wikimedia-operations) [2019-07-25T06:34:53Z] <elukey> add term eventgate to analytics-in4 on cr1/cr2-eqiad - T228882