Maniphest T351087

Migrate cloudlb hosts to nftables
Closed, ResolvedPublic
Actions

Assigned To

Authored By

	• taavi
	Nov 13 2023, 2:05 PM

Tags

Referenced Files

None

Subscribers

Description

Looks like the Ferm puppetization doesn't quite allow mixing source range + destination range + destination port filtering, but nftables does.

Details

	Subject	Repo	Branch	Lines +/-
	hieradata: migrate all cloudlb hosts to nftables	operations/puppet	production	+1 -2
	hieradata: migrate codfw cloudlb to nftables	operations/puppet	production	+2 -0
	P:bird::anycast: migrate to nftables	operations/puppet	production	+12 -14
	cloudlb: haproxy: migrate to firewall::service	operations/puppet	production	+50 -34

Customize query in gerrit

Related Objects
Search...

		Status	Subtype	Assigned	Task
		Resolved		aborrero	T296411 cloud: decide on general idea for having cloud-dedicated hardware provide service in the cloud realm & the internet
		Resolved		aborrero	T297596 have cloud hardware servers in the cloud realm using a dedicated LB layer
		Open		None	T297026 Automate maintain-views workflow
		Open		fnegri	T300427 Automate maintain-views replica depooling
		Resolved		• taavi	T355115 Remove cloud-support1-c-eqiad VLAN
		Resolved		• taavi	T346947 Move wiki replicas behind cloudlb
		Resolved		• taavi	T351087 Migrate cloudlb hosts to nftables

Event Timeline

• taavi created this task.Nov 13 2023, 2:05 PM

Change 973781 had a related patch set uploaded (by Majavah; author: Majavah):

[operations/puppet@production] cloudlb: haproxy: migrate to firewall::service

https://gerrit.wikimedia.org/r/973781

Change 973782 had a related patch set uploaded (by Majavah; author: Majavah):

[operations/puppet@production] P:bird::anycast: migrate to nftables

https://gerrit.wikimedia.org/r/973782

Change 973785 had a related patch set uploaded (by Majavah; author: Majavah):

[operations/puppet@production] hieradata: migrate codfw cloudlb to nftables

https://gerrit.wikimedia.org/r/973785

Change 973806 had a related patch set uploaded (by Majavah; author: Majavah):

[operations/puppet@production] hieradata: migrate all cloudlb hosts to nftables

https://gerrit.wikimedia.org/r/973806

Change 973781 merged by Majavah:

[operations/puppet@production] cloudlb: haproxy: migrate to firewall::service

https://gerrit.wikimedia.org/r/973781

Change 973782 merged by Majavah:

[operations/puppet@production] P:bird::anycast: migrate to nftables

https://gerrit.wikimedia.org/r/973782

Change 973785 merged by Majavah:

[operations/puppet@production] hieradata: migrate codfw cloudlb to nftables

https://gerrit.wikimedia.org/r/973785

Change 973806 merged by Majavah:

[operations/puppet@production] hieradata: migrate all cloudlb hosts to nftables

https://gerrit.wikimedia.org/r/973806

• taavi closed this task as Resolved.Nov 15 2023, 9:50 AM

Maintenance_bot removed a project: Patch-For-Review.Nov 15 2023, 10:10 AM