Change Details

hieradata/common.yaml: dmz_cidr: '208.80.155.0/22,10.0.0.0/8' This setting contains a list of destination ranges which will not have the normal labs NAT rules applied. I.e. ranges in this list will see internal IPs This does not cover everything in https://wikitech.wikimedia.org/wiki/IP_and_AS_allocations, leading to this: ```lang=bash krenair@tools-bastion-03:~$ curl -skI https://text-lb.{esams,eqiad,ulsfo,codfw}.wikimedia.org/wiki/Main_Page -H 'Host: en.wikipedia.org' | grep X-Client-IP X-Client-IP: 208.80.155.163 X-Client-IP: 10.68.23.58 X-Client-IP: 208.80.155.163 X-Client-IP: 10.68.23.58```

hieradata/common.yaml: dmz_cidr: '208.80.155.0/22,10.0.0.0/8' This setting contains a list of destination ranges which will not have the normal labs NAT rules applied. I.e. ranges in this list will see internal IPs This does not cover everything in https://wikitech.wikimedia.org/wiki/IP_and_AS_allocations, leading to this: ```lang=bash krenair@bastion-01:~$ curl -skI https://text-lb.{esams,eqiad,ulsfo,codfw,eqsin}.wikimedia.org/wiki/Main_Page -H 'Host: en.wikipedia.org' | grep X-Client-IP X-Client-IP: 208.80.155.129 X-Client-IP: 10.68.17.232 X-Client-IP: 208.80.155.129 X-Client-IP: 10.68.17.232 X-Client-IP: 208.80.155.129```

hieradata/common.yaml: dmz_cidr: '208.80.155.0/22,10.0.0.0/8' This setting contains a list of destination ranges which will not have the normal labs NAT rules applied. I.e. ranges in this list will see internal IPs This does not cover everything in https://wikitech.wikimedia.org/wiki/IP_and_AS_allocations, leading to this: ```lang=bash krenair@tools-bastion-031:~$ curl -skI https://text-lb.{esams,eqiad,ulsfo,codfw,eqsin}.wikimedia.org/wiki/Main_Page -H 'Host: en.wikipedia.org' | grep X-Client-IP X-Client-IP: 208.80.155.163129 X-Client-IP: 10.68.23.5817.232 X-Client-IP: 208.80.155.163129 X-Client-IP: 10.68.23.58```17.232 X-Client-IP: 208.80.155.129```