When doing T287406 we ran across an issue. ipset has a hard limit for how long a set Name can be (31 characters). When adding in Adyen domains that were longer, it would cause the script to error when creating the -temp list for comparison. In the script we currently set the set name to the hostname specified in the config.

• update dns_to_ipset to use the section name in config instead of the hostname when setting the set name
• document the config and code to reference this limitation
• add in duplicate configs for the existing sets so that we can transition
• after testing heavily, update the puppet config for the transition
• update the iptables rules to reference the appropriate new sets
• remove the old hostname based sets