Page MenuHomePhabricator

Add Zscaler to list of trusted hosts for XFF
Open, Needs TriagePublic

Description

The Wikimedia Stewards were emailed by Zscaler (Ticket#2021122310004481 ), asking for help with their customers unable to edit Wikipedia because of soft-blocked Zscaler nodes.

Zscaler confirmed they add XFF to the requests. This means we can add them to the list of trusted hosts for XFF: IPs available at https://config.zscaler.com/zscaler.net/cenr. Patch incoming.

Event Timeline

Restricted Application added a subscriber: Aklapper. · View Herald Transcript

Change 749733 had a related patch set uploaded (by Urbanecm; author: Urbanecm):

[mediawiki/extensions/TrustedXFF@master] Add Zscaler to list of trusted hosts for XFF

https://gerrit.wikimedia.org/r/749733

Change 749733 merged by jenkins-bot:

[mediawiki/extensions/TrustedXFF@master] Add Zscaler to list of trusted hosts for XFF

https://gerrit.wikimedia.org/r/749733

Change 751195 had a related patch set uploaded (by Urbanecm; author: Urbanecm):

[mediawiki/extensions/TrustedXFF@wmf/1.38.0-wmf.16] Add Zscaler to list of trusted hosts for XFF

https://gerrit.wikimedia.org/r/751195

Change 751196 had a related patch set uploaded (by Urbanecm; author: Urbanecm):

[mediawiki/extensions/TrustedXFF@wmf/1.38.0-wmf.13] Add Zscaler to list of trusted hosts for XFF

https://gerrit.wikimedia.org/r/751196

Change 751196 merged by jenkins-bot:

[mediawiki/extensions/TrustedXFF@wmf/1.38.0-wmf.13] Add Zscaler to list of trusted hosts for XFF

https://gerrit.wikimedia.org/r/751196

Change 751195 merged by jenkins-bot:

[mediawiki/extensions/TrustedXFF@wmf/1.38.0-wmf.16] Add Zscaler to list of trusted hosts for XFF

https://gerrit.wikimedia.org/r/751195

Mentioned in SAL (#wikimedia-operations) [2022-01-05T09:35:43Z] <urbanecm@deploy1002> Synchronized php-1.38.0-wmf.13/extensions/TrustedXFF/trusted-hosts.php: 010d96b9297825079b3ac84f247c0f80353d42a8: Add Zscaler to list of trusted hosts for XFF (T298241) (duration: 01m 09s)

Mentioned in SAL (#wikimedia-operations) [2022-01-05T09:37:05Z] <urbanecm@deploy1002> Synchronized php-1.38.0-wmf.16/extensions/TrustedXFF/trusted-hosts.php: ab8fe9884e3e4d1fa3bdaa1c8a9cab143b4ac565: Add Zscaler to list of trusted hosts for XFF (T298241) (duration: 01m 08s)

Calling this done.

Appears https://config.zscaler.com/zscaler.net/cenr has one Copy IPs button per region. Uploading a follow-up.

Change 751742 had a related patch set uploaded (by Urbanecm; author: Urbanecm):

[mediawiki/extensions/TrustedXFF@master] Add more Zscaler ranges

https://gerrit.wikimedia.org/r/751742

Change 751742 merged by jenkins-bot:

[mediawiki/extensions/TrustedXFF@master] Add more Zscaler ranges

https://gerrit.wikimedia.org/r/751742

Change 751535 had a related patch set uploaded (by Urbanecm; author: Urbanecm):

[mediawiki/extensions/TrustedXFF@wmf/1.38.0-wmf.16] Add more Zscaler ranges

https://gerrit.wikimedia.org/r/751535

Change 751536 had a related patch set uploaded (by Urbanecm; author: Urbanecm):

[mediawiki/extensions/TrustedXFF@wmf/1.38.0-wmf.13] Add more Zscaler ranges

https://gerrit.wikimedia.org/r/751536

Change 751536 merged by jenkins-bot:

[mediawiki/extensions/TrustedXFF@wmf/1.38.0-wmf.13] Add more Zscaler ranges

https://gerrit.wikimedia.org/r/751536

Change 751535 merged by jenkins-bot:

[mediawiki/extensions/TrustedXFF@wmf/1.38.0-wmf.16] Add more Zscaler ranges

https://gerrit.wikimedia.org/r/751535

Mentioned in SAL (#wikimedia-operations) [2022-01-05T13:37:45Z] <urbanecm@deploy1002> Synchronized php-1.38.0-wmf.13/extensions/TrustedXFF/: d35e36f4deb7a8e2a454769f4b2d72e45318fcc9: Add more Zscaler ranges (T298241) (duration: 01m 09s)

Mentioned in SAL (#wikimedia-operations) [2022-01-05T13:38:55Z] <urbanecm@deploy1002> Synchronized php-1.38.0-wmf.16/extensions/TrustedXFF/: ce7113b99712ac7ce4112cff720c669f618df6eb: Add more Zscaler ranges (T298241) (duration: 01m 09s)