Page MenuHomePhabricator
Create Task
Maniphest T332027

Replace current L4LB with with Katran-based alternative
Open, In Progress, MediumPublic
Actions

Description

This is the tracking task for all things L4LB: the WMF implementation of a L4LB based on katran named liberica

Related Objects
Search...

StatusSubtypeAssignedTask
 In ProgressVgutierrezT332027 Replace current L4LB with with Katran-based alternative
 ResolvedRobHT341992 Relocate lvs1013-lvs1016 to rows E & F
 ResolvedVgutierrezT342618 Perform katran load tests on lvs1013
 ResolvedVgutierrezT348837 Investigate IPVS IPIP encapsulation support
 ResolvedVgutierrezT351069 Enable IPIP encapsulation for ncredir
 ResolvedVgutierrezT352143 Firewall rules prevent IPIP/IP6IP6 encapsulated traffic from reaching realservers
 ResolvedVgutierrezT352160 RP filtering drops requests incoming via IPIP tunnels on ncredir realservers
 ResolvedVgutierrezT350462 Provide a TCP MSS clamping mechanism for real servers
 OpenNoneT350463 Provide an etcd schema to store real servers information
 OpenVgutierrezT352956 Handling inbound IPIP traffic on low traffic LVS k8s based realservers
 ResolvedVgutierrezT353279 CI on gitlab for eBPF / networking heavy projects
 ResolvedVgutierrezT357257 Use IPIP encapsulation on lvs<-->upload cluster
 ResolvedVgutierrezT357258 Release tcp-mss-clamper for bullseye
 ResolvedVgutierrezT365101 MSS clamper check triggers false positives
 ResolvedVgutierrezT365354 rp_filter should be disabled on puppet apply
 ResolvedVgutierrezT365689 Provide a ferm based alternative to tcp-mss-clamper
 OpenCDobbinsT367204 LVSRealserverMSS alert is broken for ferm based hosts
 ResolvedVgutierrezT366466 Use IPIP encapsulation on lvs<-->text cluster
 ResolvedVgutierrezT367312 Migrate services behind high-traffic2 LVS to IPIP encapsulation
 ResolvedbkingT367511 Migrate Cloudelastic load balancing to IPIP encapsulation (LVS)
 ResolvedNoneT367861 Migrate ldap-ro and ldap-ro-ssl to IPIP encapsulation
 ResolvedBCornwallT368083 migrate all high-traffic1 and high-traffic2 services to maglev
 OpenVgutierrezT368544 IPIP encapsulation considerations for low-traffic services
 ResolvedVgutierrezT368545 weighted maglev viability for low-traffic services
 ResolvedVgutierrezT372731 liberica triggers one DNS query per HTTPCheck execution/realserver
 OpenVgutierrezT373020 Remove katran blockers for low-traffic non-k8s based services
 OpenVgutierrezT373027 Add support for mh-port scheduler flag on pybal
 ResolvedVgutierrezT375464 Test liberica BGP support
 ResolvedVgutierrezT376600 Provide debian packages for liberica
 InvalidVgutierrezT376696 Sync liberica etcd library requirements with versions provided on debian bookworm
 ResolvedVgutierrezT377127 liberica puppetization
 ResolvedVgutierrezT378453 Testing liberica with ncredir@eqiad
 ResolvedVgutierrezT378341 harden liberica systemd service units
 OpenVgutierrezT379164 BGP settings for liberica
 OpenVgutierrezT379238 liberica should offer prometheus endpoints on both IPv4 and IPv6
 OpenVgutierrezT380450 bring katran to liberica

Event Timeline

Vgutierrez created this task.Mar 14 2023, 3:21 PM
Restricted Application added a subscriber: Aklapper. · View Herald TranscriptMar 14 2023, 3:21 PM
CDanis subscribed.Mar 14 2023, 3:23 PM
Volans subscribed.Mar 14 2023, 3:28 PM
Maintenance_bot added a project: SRE.Mar 14 2023, 3:29 PM
ayounsi subscribed.Mar 14 2023, 3:31 PM
Vgutierrez moved this task from Backlog to Traffic team actively servicing on the Traffic board.Mar 14 2023, 3:39 PM
MoritzMuehlenhoff subscribed.Mar 15 2023, 12:46 PM
BCornwall subscribed.Mar 15 2023, 6:07 PM
BCornwall mentioned this in T321309: Upgrade Traffic hosts to bullseye.Mar 15 2023, 6:10 PM
ssingh subscribed.Mar 15 2023, 6:40 PM
Ladsgroup subscribed.Mar 19 2023, 1:25 PM
taavi subscribed.Apr 5 2023, 2:55 PM
ssingh mentioned this in T334259: Upgrade lvs1013-1016 firmware.Apr 12 2023, 3:18 PM
KOfori subscribed.Apr 18 2023, 8:57 PM
BCornwall renamed this task from L4LB tracking task to Replace current L4LB with with Katran-based alternative.Apr 25 2023, 8:53 PM
BCornwall changed the task status from Open to In Progress.
BCornwall assigned this task to Vgutierrez.
BCornwall triaged this task as Medium priority.
BCornwall removed a project: SRE.
Fabfur subscribed.May 17 2023, 10:04 PM
Vgutierrez closed subtask T341992: Relocate lvs1013-lvs1016 to rows E & F as Resolved.Jul 31 2023, 1:08 PM
Vgutierrez mentioned this in T245059: depool / confctl commands should print warnings or errors if too many nodes from that service are already depooled.Oct 2 2023, 1:31 AM
cmooney mentioned this in T346428: Netbox: Add support for our complex host network setups in provision script.Oct 4 2023, 12:19 PM
Vgutierrez added a subtask: T348837: Investigate IPVS IPIP encapsulation support.Oct 13 2023, 8:15 AM
Jgreen subscribed.Nov 16 2023, 7:23 PM
Jgreen mentioned this in T344290: Fundraising environment support for Debian 12 (Bookworm).Nov 16 2023, 7:32 PM
Vgutierrez closed subtask T348837: Investigate IPVS IPIP encapsulation support as Resolved.Dec 7 2023, 8:35 AM
Vgutierrez changed the status of subtask T357257: Use IPIP encapsulation on lvs<-->upload cluster from Open to In Progress.May 10 2024, 10:04 AM
Vgutierrez closed subtask T350462: Provide a TCP MSS clamping mechanism for real servers as Resolved.May 23 2024, 9:38 AM
Vgutierrez closed subtask T357257: Use IPIP encapsulation on lvs<-->upload cluster as Resolved.May 23 2024, 1:00 PM
Vgutierrez closed subtask T365689: Provide a ferm based alternative to tcp-mss-clamper as Resolved.Jun 11 2024, 3:35 PM
Vgutierrez closed subtask T366466: Use IPIP encapsulation on lvs<-->text cluster as Resolved.Jun 12 2024, 2:03 PM
Vgutierrez changed the status of subtask T367312: Migrate services behind high-traffic2 LVS to IPIP encapsulation from Open to In Progress.Jun 20 2024, 4:16 PM
Vgutierrez closed subtask T367312: Migrate services behind high-traffic2 LVS to IPIP encapsulation as Resolved.Jun 25 2024, 1:35 PM
Vgutierrez closed subtask T342618: Perform katran load tests on lvs1013 as Resolved.Jun 27 2024, 10:09 AM
Vgutierrez closed subtask T353279: CI on gitlab for eBPF / networking heavy projects as Resolved.
BCornwall closed subtask T368083: migrate all high-traffic1 and high-traffic2 services to maglev as Resolved.Jul 10 2024, 4:09 PM
Vgutierrez closed subtask T368545: weighted maglev viability for low-traffic services as Resolved.Aug 21 2024, 12:20 PM
Vgutierrez closed subtask T372731: liberica triggers one DNS query per HTTPCheck execution/realserver as Resolved.Aug 22 2024, 7:48 AM
BCornwall moved this task from Traffic team actively servicing to Scheduled work for this quarter on the Traffic board.Sep 9 2024, 8:57 PM
BCornwall moved this task from Scheduled work for this quarter to Traffic team actively servicing on the Traffic board.Sep 9 2024, 10:28 PM
Vgutierrez closed subtask T377127: liberica puppetization as Resolved.Wed, Nov 6, 2:41 PM
Vgutierrez changed the status of subtask T378341: harden liberica systemd service units from Open to In Progress.Thu, Nov 7, 9:30 AM
Vgutierrez closed subtask T375464: Test liberica BGP support as Resolved.Thu, Nov 21, 9:38 AM
Vgutierrez closed subtask T376600: Provide debian packages for liberica as Resolved.
Vgutierrez closed subtask T378341: harden liberica systemd service units as Resolved.
Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL · Credits