Page MenuHomePhabricator

Assign an internal LVS service IP for zotero
Closed, ResolvedPublic

Description

Zotero needs an internal LVS service IP to be assigned to be consistent with all the other service approaches

Event Timeline

akosiaris raised the priority of this task from to Needs Triage.
akosiaris updated the task description. (Show Details)
akosiaris added a project: acl*sre-team.
akosiaris added subscribers: akosiaris, Aklapper.

Change 191824 had a related patch set uploaded (by Dzahn):
add internal LVS service IP for zotero

https://gerrit.wikimedia.org/r/191824

Patch-For-Review

Dzahn added a subscriber: Dzahn.Feb 20 2015, 1:33 AM

so we really just need the internal one, right?

not like the shared public one like here:

https://gerrit.wikimedia.org/r/#/c/188537/2/templates/wikimedia.org

Dzahn set Security to None.Feb 20 2015, 1:34 AM
Dzahn added a subscriber: fgiunchedi.
Dzahn claimed this task.Feb 20 2015, 1:51 AM

Yeah Daniel, internal one. Just fill in the gap before starting to use .32 and above as per @fgiunchedi's comment

Dzahn added a comment.Feb 20 2015, 8:30 PM

Yep, amended. using .16 now. Also uploaded changes for adding a skeleton role class and LVS config. Linked to the "puppetize zotero" bug.

Dzahn triaged this task as Normal priority.Feb 20 2015, 8:31 PM
Dzahn added a comment.Feb 20 2015, 8:34 PM

fwiw, i asked bblack and he checked and said we can use the entire /24 range of IPs here even though it's not a real /24 network as such but all indidivual /32 but we can use up to .254.

Change 191824 merged by Dzahn:
add internal LVS service IP for zotero

https://gerrit.wikimedia.org/r/191824

Dzahn closed this task as Resolved.Feb 20 2015, 8:37 PM

merged. 10.2.2.16 is the new service IP.

fwiw, i asked bblack and he checked and said we can use the entire /24 range of IPs here even though it's not a real /24 network as such but all indidivual /32 but we can use up to .254.

Yes, of course we can. It is not a technical limitation but an effort to avoid fragmentation of IPs for as long as we can. More like a "keep it clean" policy with the added benefit of allowing an easy split of that network in smaller ones if needed (which we may very well not need, but you never know)