Page MenuHomePhabricator

cloudweb2001-dev: add TLS termination
Closed, ResolvedPublic

Description

cloudweb2001-dev is one of the very few remaining origin servers available only via plain HTTP, see T108580#6488253. We should make it available via HTTPS instead to ensure that traffic between ATS and cloudweb2001-dev is encrypted.

Event Timeline

Restricted Application added a subscriber: Aklapper. · View Herald Transcript
nskaggs triaged this task as Medium priority.Oct 20 2020, 4:16 PM
nskaggs moved this task from Inbox to Watching on the cloud-services-team (Kanban) board.
BBlack added a subscriber: BBlack.

The swap of Traffic for Traffic-Icebox in this ticket's set of tags was based on a bulk action for all such tickets that haven't been updated in 6 months or more. This does not imply any human judgement about the validity or importance of the task, and is simply the first step in a larger task cleanup effort. Further manual triage and/or requests for updates will happen this month for all such tickets. For more detail, have a look at the extended explanation on the main page of Traffic-Icebox . Thank you!

Change 742213 had a related patch set uploaded (by Majavah; author: Majavah):

[operations/puppet@production] set up tls termination on cloudweb2001-dev

https://gerrit.wikimedia.org/r/742213

Change 742214 had a related patch set uploaded (by Majavah; author: Majavah):

[operations/puppet@production] P::trafficserver: use https for cloudweb2001-dev

https://gerrit.wikimedia.org/r/742214

Change 742213 merged by Andrew Bogott:

[operations/puppet@production] set up tls termination on cloudweb2001-dev

https://gerrit.wikimedia.org/r/742213

Change 742214 merged by Andrew Bogott:

[operations/puppet@production] P::trafficserver: use https for cloudweb2001-dev

https://gerrit.wikimedia.org/r/742214

taavi claimed this task.