Page MenuHomePhabricator
Create Task
Maniphest T271148

Some Data Persistence Backup clusters apparently do not support IPv6
Closed, ResolvedPublic
Actions

Description

Greetings!

During importation of DNS into Netbox as part of the transition to automation, we discovered some clusters do not have IPv6 DNS entries, which we interpreted as intentional (given that this was the mechanism used to prevent potential clients from accessing the IPv6 interfaces on the machine, if a given service did not support IPv6), and prevented from being imported into automation.

We are now triaging these clusters for their potential at supporting IPv6 in the future, so below are hosts which were left out of IPv6 DNS which we think that your team is responsible for. If you could take some time to put any information you have about supporting IPv6 on these clusters, specific plans for doing so, or if it will not in the forseeable future be possible to do so, it would be greatly appreciated!

If any of these machines don't belong to you let us know on this ticket or the parent task (T253173), thanks!

Backups:

  • dbprov[2001-2002].codfw.wmnet
  • dbprov[1001-1002].eqiad.wmnet
  • heze.codfw.wmnet - will be deprecated

Related Objects
Search...

Event Timeline

LSobanski created this task.Jan 4 2021, 7:42 PM
Restricted Application added a subscriber: Aklapper. · View Herald TranscriptJan 4 2021, 7:42 PM
LSobanski mentioned this in T271140: Some Data Persistence clusters apparently do not support IPv6.Jan 4 2021, 7:42 PM
LSobanski added a parent task: T253173: Some clusters do not have DNS for IPv6 addresses (TRACKING TASK).
LSobanski updated the task description. (Show Details)
LSobanski triaged this task as Medium priority.Jan 4 2021, 7:47 PM
LSobanski moved this task from Triage to Refine on the Data-Persistence-Backup board.
jcrespo added a comment.Jan 11 2021, 10:32 AM

If you could take some time to put any information you have about supporting IPv6 on these clusters, specific plans for doing so, or if it will not in the forseeable future be possible to do so, it would be greatly appreciated

It is unclear to me what is the specific outcome needed. dbprovs are, for network purposes, mysql and transfer.py clients, so they will have the same issues as mw* or db* hosts with grants- doable, but it may not be trivial to add extra grants and firewall configuration for mysql (similar to T271140). They support, however, IPv6 servers to connect to for backups.

• crusnov closed this task as Resolved.Mar 27 2021, 12:02 AM
• crusnov claimed this task.

Thank you for the extra explanation. Given that these will have the same problems as the db hosts, we will mark them as skipping for now / on back burner.

jcrespo mentioned this in T270101: Grants not working with DB hosts with to ipv6.Jan 19 2022, 9:49 AM
Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL