Page MenuHomePhabricator

Allow rsync traffic between analytics VLAN and fluorine
Closed, ResolvedPublic

Description

We want to be able to rsync mediawiki logs from fluorine over to stat1002 for analysis. We need a hole in the Analytics VLAN for this please!

Event Timeline

Ottomata raised the priority of this task from to Medium.
Ottomata updated the task description. (Show Details)
Ottomata added a project: acl*sre-team.
Ottomata added subscribers: gerritbot, ArielGlenn, Ironholds and 4 others.

hole opened on both cr1-eqiad and cr2-eqiad.

Tested this and packets do pass the ACL successfully, not resolving since some ferm changes need to be done as well

Change 211721 had a related patch set uploaded (by Ottomata):
Use udp2log::rsyncd class to set up rsyncd on fluorine

https://gerrit.wikimedia.org/r/211721

Change 211721 merged by Ottomata:
Use udp2log::rsyncd class to set up rsyncd on fluorine

https://gerrit.wikimedia.org/r/211721

what's the status on this? also since we're deprecating udp2log this should go away shortly after?

Fluorine's udp2log instance is different than the one used for webrequest logs. It is used directly (I think) by mediawiki to log. We should deprecate it, but it isn't on my todo list.

Ottomata claimed this task.