Page MenuHomePhabricator
Create Task
Maniphest T298241

Add Zscaler to list of trusted hosts for XFF
Closed, ResolvedPublic
Actions

Description

The Wikimedia Stewards were emailed by Zscaler (Ticket#2021122310004481 ), asking for help with their customers unable to edit Wikipedia because of soft-blocked Zscaler nodes.

Zscaler confirmed they add XFF to the requests. This means we can add them to the list of trusted hosts for XFF: IPs available at https://config.zscaler.com/zscaler.net/cenr. Patch incoming.

Details

SubjectRepoBranchLines +/-
Add more Zscaler rangesmediawiki/extensions/TrustedXFFmaster+38 K -2
Add more Zscaler rangesmediawiki/extensions/TrustedXFFwmf/1.38.0-wmf.16+38 K -2
Add more Zscaler rangesmediawiki/extensions/TrustedXFFwmf/1.38.0-wmf.13+38 K -2
Add Zscaler to list of trusted hosts for XFFmediawiki/extensions/TrustedXFFwmf/1.38.0-wmf.16+23 K -1
Add Zscaler to list of trusted hosts for XFFmediawiki/extensions/TrustedXFFwmf/1.38.0-wmf.13+23 K -1
Add Zscaler to list of trusted hosts for XFFmediawiki/extensions/TrustedXFFmaster+23 K -1
Customize query in gerrit

Related Objects

Event Timeline

Urbanecm created this task.Dec 23 2021, 1:32 PM
Restricted Application added a project: User-Urbanecm. · View Herald TranscriptDec 23 2021, 1:32 PM
Restricted Application added a subscriber: Aklapper. · View Herald Transcript
Urbanecm updated the task description. (Show Details)Dec 23 2021, 1:32 PM
gerritbot added a comment.Dec 23 2021, 1:33 PM

Change 749733 had a related patch set uploaded (by Urbanecm; author: Urbanecm):

[mediawiki/extensions/TrustedXFF@master] Add Zscaler to list of trusted hosts for XFF

https://gerrit.wikimedia.org/r/749733

gerritbot added a project: Patch-For-Review.Dec 23 2021, 1:33 PM
Urbanecm updated the task description. (Show Details)Dec 23 2021, 1:42 PM
Urbanecm moved this task from Backlog to Waiting on review on the User-Urbanecm board.Dec 24 2021, 2:18 PM
gerritbot added a comment.Jan 4 2022, 8:41 PM

Change 749733 merged by jenkins-bot:

[mediawiki/extensions/TrustedXFF@master] Add Zscaler to list of trusted hosts for XFF

https://gerrit.wikimedia.org/r/749733

ReleaseTaggerBot added a project: MW-1.38-notes (1.38.0-wmf.17; 2022-01-10).Jan 4 2022, 9:00 PM
gerritbot added a comment.Jan 4 2022, 9:05 PM

Change 751195 had a related patch set uploaded (by Urbanecm; author: Urbanecm):

[mediawiki/extensions/TrustedXFF@wmf/1.38.0-wmf.16] Add Zscaler to list of trusted hosts for XFF

https://gerrit.wikimedia.org/r/751195

gerritbot added a comment.Jan 4 2022, 9:06 PM

Change 751196 had a related patch set uploaded (by Urbanecm; author: Urbanecm):

[mediawiki/extensions/TrustedXFF@wmf/1.38.0-wmf.13] Add Zscaler to list of trusted hosts for XFF

https://gerrit.wikimedia.org/r/751196

gerritbot added a comment.Jan 5 2022, 9:32 AM

Change 751196 merged by jenkins-bot:

[mediawiki/extensions/TrustedXFF@wmf/1.38.0-wmf.13] Add Zscaler to list of trusted hosts for XFF

https://gerrit.wikimedia.org/r/751196

gerritbot added a comment.Jan 5 2022, 9:33 AM

Change 751195 merged by jenkins-bot:

[mediawiki/extensions/TrustedXFF@wmf/1.38.0-wmf.16] Add Zscaler to list of trusted hosts for XFF

https://gerrit.wikimedia.org/r/751195

Stashbot added a comment.Jan 5 2022, 9:35 AM

Mentioned in SAL (#wikimedia-operations) [2022-01-05T09:35:43Z] <urbanecm@deploy1002> Synchronized php-1.38.0-wmf.13/extensions/TrustedXFF/trusted-hosts.php: 010d96b9297825079b3ac84f247c0f80353d42a8: Add Zscaler to list of trusted hosts for XFF (T298241) (duration: 01m 09s)

Stashbot added a comment.Jan 5 2022, 9:37 AM

Mentioned in SAL (#wikimedia-operations) [2022-01-05T09:37:05Z] <urbanecm@deploy1002> Synchronized php-1.38.0-wmf.16/extensions/TrustedXFF/trusted-hosts.php: ab8fe9884e3e4d1fa3bdaa1c8a9cab143b4ac565: Add Zscaler to list of trusted hosts for XFF (T298241) (duration: 01m 08s)

Urbanecm closed this task as Resolved.Jan 5 2022, 9:37 AM

Calling this done.

ReleaseTaggerBot edited projects, added MW-1.38-notes (1.38.0-wmf.13; 2021-12-13); removed MW-1.38-notes (1.38.0-wmf.17; 2022-01-10).Jan 5 2022, 10:00 AM
Maintenance_bot removed a project: Patch-For-Review.Jan 5 2022, 10:10 AM
Urbanecm reopened this task as Open.Jan 5 2022, 1:25 PM

Appears https://config.zscaler.com/zscaler.net/cenr has one Copy IPs button per region. Uploading a follow-up.

gerritbot added a comment.Jan 5 2022, 1:26 PM

Change 751742 had a related patch set uploaded (by Urbanecm; author: Urbanecm):

[mediawiki/extensions/TrustedXFF@master] Add more Zscaler ranges

https://gerrit.wikimedia.org/r/751742

gerritbot added a project: Patch-For-Review.Jan 5 2022, 1:26 PM
gerritbot added a comment.Jan 5 2022, 1:31 PM

Change 751742 merged by jenkins-bot:

[mediawiki/extensions/TrustedXFF@master] Add more Zscaler ranges

https://gerrit.wikimedia.org/r/751742

gerritbot added a comment.Jan 5 2022, 1:32 PM

Change 751535 had a related patch set uploaded (by Urbanecm; author: Urbanecm):

[mediawiki/extensions/TrustedXFF@wmf/1.38.0-wmf.16] Add more Zscaler ranges

https://gerrit.wikimedia.org/r/751535

gerritbot added a comment.Jan 5 2022, 1:32 PM

Change 751536 had a related patch set uploaded (by Urbanecm; author: Urbanecm):

[mediawiki/extensions/TrustedXFF@wmf/1.38.0-wmf.13] Add more Zscaler ranges

https://gerrit.wikimedia.org/r/751536

gerritbot added a comment.Jan 5 2022, 1:35 PM

Change 751536 merged by jenkins-bot:

[mediawiki/extensions/TrustedXFF@wmf/1.38.0-wmf.13] Add more Zscaler ranges

https://gerrit.wikimedia.org/r/751536

gerritbot added a comment.Jan 5 2022, 1:35 PM

Change 751535 merged by jenkins-bot:

[mediawiki/extensions/TrustedXFF@wmf/1.38.0-wmf.16] Add more Zscaler ranges

https://gerrit.wikimedia.org/r/751535

Stashbot added a comment.Jan 5 2022, 1:37 PM

Mentioned in SAL (#wikimedia-operations) [2022-01-05T13:37:45Z] <urbanecm@deploy1002> Synchronized php-1.38.0-wmf.13/extensions/TrustedXFF/: d35e36f4deb7a8e2a454769f4b2d72e45318fcc9: Add more Zscaler ranges (T298241) (duration: 01m 09s)

Stashbot added a comment.Jan 5 2022, 1:38 PM

Mentioned in SAL (#wikimedia-operations) [2022-01-05T13:38:55Z] <urbanecm@deploy1002> Synchronized php-1.38.0-wmf.16/extensions/TrustedXFF/: ce7113b99712ac7ce4112cff720c669f618df6eb: Add more Zscaler ranges (T298241) (duration: 01m 09s)

ReleaseTaggerBot edited projects, added MW-1.38-notes (1.38.0-wmf.17; 2022-01-10); removed MW-1.38-notes (1.38.0-wmf.13; 2021-12-13).Jan 5 2022, 2:00 PM
Urbanecm closed this task as Resolved.Feb 5 2022, 5:32 PM
Reedy removed a project: Patch-For-Review.Mar 1 2022, 12:15 PM
Reedy mentioned this in T302780: Add more Zscaler ranges to the trusted list for XFF.Mar 1 2022, 12:17 PM
Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL