This should allow access to:
port 80 / 443 to everyone in the universe
port 8282 from just labs (for proxylistener)
redis replication port from just other webproxies
port 22 from bastions
This allows us to open up the redis replication just to other webproxies instead of opening it up to the world.
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Resolved | yuvipanda | T96334 Make tools webproxy redundancy a lot better | |||
| Resolved | yuvipanda | T96335 Use base::firewall on tools proxies |
Change 204685 had a related patch set uploaded (by Yuvipanda):
dynamicproxy: Add ferm rules for http / https
Change 204688 had a related patch set uploaded (by Yuvipanda):
tools: Explicitly open port for proxylistener
Change 204693 had a related patch set uploaded (by Yuvipanda):
tools: Enable firewall on webproxies
Change 204697 had a related patch set uploaded (by Yuvipanda):
dynamicproxy: Include firewall for base proxy
Change 204698 had a related patch set uploaded (by Yuvipanda):
dynamicproxy: Do not bind redis only on localhost
Change 204701 had a related patch set uploaded (by Yuvipanda):
tools: Allow redis access between proxies