Page MenuHomePhabricator

Migrate frack setup to use new anycast ntp servers
Closed, ResolvedPublic

Description

Add in the following servers:

  • ntp-a.anycast.wmnet
  • ntp-b.anycast.wmnet
  • ntp-c.anycast.wmnet

After the bake in for a day, remove the following:

  • ntp.anycast.wmnet
  • dns1004.wikimedia.org
  • dns1005.wikimedia.org
  • dns1006.wikimedia.org
  • dns2004.wikimedia.org
  • dns2005.wikimedia.org
  • dns2006.wikimedia.org

Update iptables/firewall rules as necessary for the migration.

Event Timeline

iptables rules updated for new anycast servers. New servers added to hiera and deployed. Verified working with chronyc on frpm1002:

$ chronyc sources
MS Name/IP address         Stratum Poll Reach LastRx Last sample               
===============================================================================
^+ ntp.anycast.wmnet             2   6   377    17   +178us[ +175us] +/-   47ms
^+ ntp-a.anycast.wmnet           3   6   377    15   +189us[ +186us] +/-   63ms
^+ ntp-b.anycast.wmnet           2   6   377    82   +193us[ +188us] +/-   46ms
^+ ntp-c.anycast.wmnet           3   6   377    15   -226us[ -228us] +/-   53ms
^+ dns1004.wikimedia.org         3   6   377    18   +177us[ +175us] +/-   63ms
^* dns1005.wikimedia.org         2   6   377    15   +310us[ +307us] +/-   47ms
^+ dns1006.wikimedia.org         3   6   377    19   -200us[ -203us] +/-   52ms
^+ dns2004.wikimedia.org         3   6   377    16    -23us[  -25us] +/-   71ms
^+ dns2005.wikimedia.org         3   6   377    16    +41us[  +38us] +/-   96ms
^+ dns2006.wikimedia.org         3   6   377    17   -829us[ -831us] +/-   67ms
Dwisehaupt moved this task from In Progress to Done on the fundraising-tech-ops board.

Old servers removed in following commit:

[frack::puppet] 5b22b90dd Remove ntp servers that are going to be deprecated (Dallas Wisehaupt:Dallas Wisehaupt)

Removing the dnsXXXX servers and ntp.anycast.wmnet in favor of the new
ntp-[abc].anycast.wmnet servers that have been added to config.

Bug: T366360

All set.