[00:01:52] 10netops, 6operations: Decommission nitrogen (IPv6 relay) - https://phabricator.wikimedia.org/T123732#1972136 (10Dzahn) [00:02:32] 10netops, 6operations: Decommission nitrogen (IPv6 relay) - https://phabricator.wikimedia.org/T123732#1936607 (10Dzahn) [00:04:06] 10netops, 6operations: Decommission nitrogen (IPv6 relay) - https://phabricator.wikimedia.org/T123732#1972157 (10Dzahn) a:5Papaul>3Dzahn [00:31:11] 10netops, 6operations, 5Patch-For-Review: Decommission nitrogen (IPv6 relay) - https://phabricator.wikimedia.org/T123732#1972337 (10Dzahn) removed IP from DNS, fixed link to blocking ticket, this is done, follow-up in the ops-eqiad ticket, assigned to Chris [00:31:27] 10netops, 6operations, 5Patch-For-Review: Decommission nitrogen (IPv6 relay) - https://phabricator.wikimedia.org/T123732#1972338 (10Dzahn) 5Open>3Resolved [00:33:02] 10netops, 6operations: Decommission nitrogen (IPv6 relay) - https://phabricator.wikimedia.org/T123732#1936607 (10Dzahn) [02:27:43] 7HTTPS, 6operations: ssl certificate replacement: dumps.wikimedia.org (expires 2016-02-26) - https://phabricator.wikimedia.org/T122321#1972753 (10Dzahn) a:5ArielGlenn>3RobH re-assigning back to robh [09:56:52] 10netops, 6operations: Peer with SFMIX at ULSFO in 200 Paul - https://phabricator.wikimedia.org/T124843#1973527 (10faidon) 5Open>3stalled We've already considered it and we have been in touch with a couple of SFMIX people. It's hard because it may not make financial sense for us (= it could be very expens... [09:57:06] 10netops, 6operations: Peer with SFMIX at ULSFO in 200 Paul - https://phabricator.wikimedia.org/T124843#1973529 (10faidon) p:5Triage>3Low [16:19:34] 10Traffic, 10MediaWiki-API, 6operations, 7Blocked-on-Operations, 7Monitoring: Set up action API latency / error rate metrics & alerts - https://phabricator.wikimedia.org/T123854#1974238 (10GWicke) [16:20:18] 10Traffic, 10MediaWiki-API, 6Services, 6operations, and 2 others: Set up action API latency / error rate metrics & alerts - https://phabricator.wikimedia.org/T123854#1939492 (10GWicke) [16:33:27] 10Traffic, 10MediaWiki-API, 6Services, 6operations, 7Monitoring: Set up action API latency / error rate metrics & alerts - https://phabricator.wikimedia.org/T123854#1974270 (10faidon) [17:10:54] one of my biggest pet peeves when investigating with varnishlog is I've never found a way to do a negative check on a header [17:11:17] as in "filter varnishlog only for requests which *lack* RxHeader:X-Forwarded-Proto" [17:19:06] checking for labs vs. non-labs requests? [17:19:47] or did labs go via the public network... [17:20:40] so I suppose it's internal vs. external (including labs)? [17:25:20] hmmm? [17:25:36] if you mean my XFP example, that's just to see non-https requests (which we still get!) [17:26:07] we still haven't closed the insecure-POST problem. it needs some community announcement, because there's no soft way to redirect effectively for POST [17:26:23] it's been on the back burner a while, hoping the problem diminishes on its own [17:26:30] but also just for lack of time :( [17:31:28] oh, XFP [17:31:33] I read X-Forward- and assumed... :) [17:52:59] 7HTTPS, 6operations: ssl certificate replacement: ticket.wikimedia.org (expires 2016-02-16) - https://phabricator.wikimedia.org/T122320#1974651 (10RobH) Email sent to the otrs admins: > > OTRS Admins, > > This planned maintenance is being tracked on https://phabricator.wikimedia.org/T122320 > > The SSL ce... [18:13:38] 7HTTPS, 6operations: ssl certificate replacement: ticket.wikimedia.org (expires 2016-02-16) - https://phabricator.wikimedia.org/T122320#1977465 (10RobH) It seems this was the pushback date for the OTRS upgrade, but it wasnt on the deployments calendar so I wasnt aware. [18:16:03] 7HTTPS, 6operations: ssl certificate replacement: ticket.wikimedia.org (expires 2016-02-16) - https://phabricator.wikimedia.org/T122320#1977854 (10RobH) (Though it was already on the otrs landing page so shame on me for missing it.) Since this ssl expiry isn't until the 16th, I'll simply wait until after the... [20:20:48] 7HTTPS, 10Wikimedia-Blog: Switch blog to HTTPS-only - https://phabricator.wikimedia.org/T105905#1979347 (10Varnent) [20:21:29] 7HTTPS, 10Wikimedia-Blog: Switch blog to HTTPS-only - https://phabricator.wikimedia.org/T105905#1979348 (10Dzahn) [20:21:40] 7HTTPS, 10Wikimedia-Blog: Switch blog to HTTPS-only - https://phabricator.wikimedia.org/T105905#1979351 (10Varnent) Is there a status update on this? Just curious as it came up on IRC. :) [21:11:40] 10Traffic, 10ContentTranslation-Deployments, 10ContentTranslation-cxserver, 10Parsoid, and 4 others: Decom parsoid-lb.eqiad.wikimedia.org entrypoint - https://phabricator.wikimedia.org/T110474#1979545 (10BBlack) Status for `parsoid-lb.eqiad.wikimedia.org`: only a small handful of requests are still flowing...