Page MenuHomePhabricator

Cloud: drop NAT exception for IRCD
Closed, ResolvedPublic

Description

As of this writing, the IRCD service has a NAT exception from cloud to production.

Recently, the server kraz has been removed and replaced by irc1001 and irc2001, which seems like a perfect moment to re-evaluate the NAT exception.

@bd808 wrote:

The irc1001/2001 boxes host an independent IRC service that is only used to provide recent changes activity feeds in the form of read-only irc channels organized by project+language (https://wikitech.wikimedia.org/wiki/IRCD). This NAT exception would allow our irc boxes to see which Cloud VPS instance a connected bot is coming from. Because the channels are read only to attached clients I"m not sure that has a lot of operational value though (no reason to block/k-line spammers/harassers in a read-only environment).

I think we should just drop the NAT exception and see what happens.

Event Timeline

Change 679278 had a related patch set uploaded (by Arturo Borrero Gonzalez; author: Muehlenhoff):

[operations/puppet@production] Update NAT exceptions for kraz -> irc1001/irc2001

https://gerrit.wikimedia.org/r/679278

aborrero triaged this task as Medium priority.Thu, Apr 15, 8:34 AM
aborrero moved this task from Inbox to Doing on the cloud-services-team (Kanban) board.

Change 679709 had a related patch set uploaded (by Arturo Borrero Gonzalez; author: Arturo Borrero Gonzalez):

[operations/puppet@production] cloud: drop NAT exception for IRCD (kraz)

https://gerrit.wikimedia.org/r/679709

Change 679716 had a related patch set uploaded (by Arturo Borrero Gonzalez; author: Arturo Borrero Gonzalez):

[operations/homer/public@master] cr/firewall: dro IRCD exception (kraz)

https://gerrit.wikimedia.org/r/679716

Change 679709 merged by Arturo Borrero Gonzalez:

[operations/puppet@production] cloud: drop NAT exception for IRCD (kraz)

https://gerrit.wikimedia.org/r/679709

Change 679278 abandoned by Arturo Borrero Gonzalez:

[operations/puppet@production] Update NAT exceptions for kraz -> irc1001/irc2001

Reason:

merged https://gerrit.wikimedia.org/r/c/operations/puppet/ /679709 instead

https://gerrit.wikimedia.org/r/679278

Change 679716 merged by Arturo Borrero Gonzalez:

[operations/homer/public@master] cr/firewall: dro IRCD exception (kraz)

https://gerrit.wikimedia.org/r/679716

Mentioned in SAL (#wikimedia-operations) [2021-04-15T11:14:25Z] <arturo> merging homer changes for cr-eqiad (T280225)

Mentioned in SAL (#wikimedia-operations) [2021-04-15T11:14:57Z] <arturo> merging homer changes for cr-codgw (T280225)