Migrate to nftables:
- memcached
- memcached-gutter
- memcached wikifunctions
- memcached misc
NOTE: There is an opportunity with the upcoming eqiad mc host hardware refresh (T412255) to bring up the new hosts using nftables from day 1 (T398611#11540403).
Description
Description
Details
Details
Related Changes in Gerrit:
| Subject | Repo | Branch | Lines +/- | |
|---|---|---|---|---|
| hieradata: migrate memcached gutter pool to nftables | operations/puppet | production | +1 -1 |
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Unknown Object (Task) | |||||
| Open | None | T412255 Q2:rack/setup/install mc1055-72 | |||
| In Progress | jijiki | T398611 Migrate all memcached* clusters to nftables |
Event Timeline
Comment Actions
Change #1166194 had a related patch set uploaded (by Effie Mouzeli; author: Effie Mouzeli):
[operations/puppet@production] hieradata: migrate memcached gutter pool to nftables
Comment Actions
Change #1166194 merged by Effie Mouzeli:
[operations/puppet@production] hieradata: migrate memcached gutter pool to nftables
Comment Actions
@jijiki - Is this something you anticipate we might be picking back up in Q3? Also, is there anything blocking this other than just finding time? (I see the gutter-pool change was merged and doesn't appear to have been reverted.)
Comment Actions
Given that we are refreshing the hardware in eqiad soon (https://phabricator.wikimedia.org/T412255), this would be an opportune time: These should instead simply be installed with role::insetup::serviceops_nftables and then you can add hieradata/hosts/mcXY.yaml entries with profile::firewall::provider: nftables and simply add them with nftables from the start.
Comment Actions
@Scott_French @jijiki could you update the description with more details about the rationale (why now)? We may consider raising the priority of this.
Please also see if this is an opportunity to ramp up someone else on memcached (to balance with the urgency of doing it of course)
Comment Actions
Updated the task description to reflect the point about the hardware refresh (and mark the gutter pool complete). This will still need info from @jijiki on feasibility of substantially completing the entire scope of work in Q3.
Comment Actions
It all depends in how soon we will wrap up T405292. As soon as the servers arrive, the process is quite straight forward
Comment Actions
The dependent task T405292 is only at ordering stage, so it seems difficult to complete this within Q3. @jijiki shall we move this back to Backlog and pick it up in Q4?