Cloud services are moving ahead and migrating the network setup for hosts in eqiad to match the changes recently made in codfw.
To support this several changes are needed on the network side.
[x] Add cloud-private vlans and irb gateway interface on all 4 cloudsw in eqiad
[x] Trunk cloud-private vlan to connected cloud hosts on cloudsw's
[x] Assign public VIP range for services (T341220)
[x] Configure BGP group for peering from cloudsw to cloudlb / cloudservice
[] Review and update ACLs and BGP policies to ensure new ranges announced upstream and traffic allowed
The below tasks I will not do as part of this work, but leaving for reference. If/when we move to an active/passive setup we can make this change, but as there are some complications better to leave things as they are for now and review the design when needed.
[] ~~Reconfigure cloudsw routing in eqiad as iBGP with c8/d5 as route reflectors~~
** ~~This allows for the use of MED attribute to control active/passive device for a given VIP if needed in future~~
[] ~~Update wikitech docs to reflect change to iBGP ~~