[01:24:14] 7HTTPS, 6Research-and-Data, 10The-Wikipedia-Library, 10Wikimedia-General-or-Unknown, and 4 others: Set an explicit "Origin When Cross-Origin" referer policy via the meta referrer tag - https://phabricator.wikimedia.org/T87276#2053808 (10DarTar) 5Open>3Resolved [04:10:45] 10Traffic, 6Operations, 6Services, 13Patch-For-Review: Decom parsoidcache cluster - https://phabricator.wikimedia.org/T110472#2054102 (10BBlack) [04:10:50] 10Traffic, 6Operations, 10Parsoid, 10VisualEditor, and 2 others: Decom parsoid-lb.eqiad.wikimedia.org entrypoint - https://phabricator.wikimedia.org/T110474#2054101 (10BBlack) 5stalled>3Resolved [04:25:04] 7HTTPS, 10Wikimedia-Fundraising, 7Blocked-on-Fundraising-Tech: links.email.donate.wikimedia.org should offer HTTPS - https://phabricator.wikimedia.org/T74514#2054108 (10Chmarkine) So is `links.email.donate.wikimedia.org` still in use? If not, can we remove it from the DNS record? [04:58:51] 7HTTPS, 10Wikimedia-Fundraising, 7Blocked-on-Fundraising-Tech: links.email.donate.wikimedia.org should offer HTTPS - https://phabricator.wikimedia.org/T74514#2054126 (10CCogdill_WMF) It will be in use for another couple of weeks, until the Swedish banners come down. We have an active automated email program... [09:29:28] 10Traffic, 6Operations, 13Patch-For-Review: Create separate packages for required vmods - https://phabricator.wikimedia.org/T124281#2054535 (10ema) p:5Triage>3Normal [09:30:05] 10Traffic, 6Operations, 13Patch-For-Review: Evaluate and Test Limited Deployment of Varnish 4 - https://phabricator.wikimedia.org/T122880#2054536 (10ema) p:5Triage>3Normal [10:53:33] 10Traffic, 6Operations, 13Patch-For-Review: openssl-1.0.2f introduced minor bug with nginx - https://phabricator.wikimedia.org/T126616#2054764 (10MoritzMuehlenhoff) The new packages have been installed on cp1008 and seem to work fine there, so I also copied these to carbon. I'll leave picking a proper candid... [11:53:17] 10Traffic, 10MediaWiki-extensions-CentralAuth, 10MobileFrontend, 6Operations: S:UL requests with crazy encoding of mobile parameters - https://phabricator.wikimedia.org/T127823#2054955 (10BBlack) [12:37:27] 10Traffic, 6Operations, 6Services, 13Patch-For-Review: Decom parsoidcache cluster - https://phabricator.wikimedia.org/T110472#2055094 (10BBlack) 5Open>3Resolved [12:37:30] 10Traffic, 6Operations, 10ops-eqiad, 13Patch-For-Review: eqiad cache cluster re-arrangements - https://phabricator.wikimedia.org/T125486#2055095 (10BBlack) [14:54:45] =;2~ [14:55:18] ^ my cellphone hit the keyboard, trying to grab it to read yet another slave db lag SMS :P [15:44:26] 7HTTPS, 6Research-and-Data, 10The-Wikipedia-Library, 10Wikimedia-General-or-Unknown, and 4 others: Set an explicit "Origin When Cross-Origin" referer policy via the meta referrer tag - https://phabricator.wikimedia.org/T87276#2055480 (10Krinkle) [16:51:51] 7HTTPS, 6Research-and-Data, 10The-Wikipedia-Library, 10Wikimedia-General-or-Unknown, and 4 others: Set an explicit "Origin When Cross-Origin" referer policy via the meta referrer tag - https://phabricator.wikimedia.org/T87276#987826 (10TheDJ) I now get errors in Safari/Webkit console btw. I have therefore... [16:55:50] 7HTTPS, 6Research-and-Data, 10The-Wikipedia-Library, 10Wikimedia-General-or-Unknown, and 4 others: Set an explicit "Origin When Cross-Origin" referer policy via the meta referrer tag - https://phabricator.wikimedia.org/T87276#2055795 (10BBlack) Fascinating :) Any idea if it also throws an error on the othe... [17:04:32] 7HTTPS, 6Research-and-Data, 10The-Wikipedia-Library, 10Wikimedia-General-or-Unknown, and 4 others: Set an explicit "Origin When Cross-Origin" referer policy via the meta referrer tag - https://phabricator.wikimedia.org/T87276#988112 (10faidon) Apologies if this has been discussed before, but why did we do... [17:11:19] 7HTTPS, 6Research-and-Data, 10The-Wikipedia-Library, 10Wikimedia-General-or-Unknown, and 4 others: Set an explicit "Origin When Cross-Origin" referer policy via the meta referrer tag - https://phabricator.wikimedia.org/T87276#2055895 (10BBlack) I don't think that was ever really discussed that I recall. P... [17:52:32] 7HTTPS, 6Research-and-Data, 10The-Wikipedia-Library, 10Wikimedia-General-or-Unknown, and 4 others: Set an explicit "Origin When Cross-Origin" referer policy via the meta referrer tag - https://phabricator.wikimedia.org/T87276#2056051 (10DarTar) @faidon: what @BBlack said, I don't think this option has ever... [18:05:34] 7HTTPS, 10MediaWiki-extensions-CodeReview: Provide HTTPS links in CodeReview emails - https://phabricator.wikimedia.org/T31008#2056138 (10Aklapper) Proposing to close as declined. I don't think there is anything left to do here, see last grep'ed line: ``` $:andre\> grep -r "http" . ./maintenance/showEmails.ph... [18:07:54] 7HTTPS, 6Research-and-Data, 10The-Wikipedia-Library, 10Wikimedia-General-or-Unknown, and 4 others: Set an explicit "Origin When Cross-Origin" referer policy via the meta referrer tag - https://phabricator.wikimedia.org/T87276#2056153 (10DarTar) For reference, this is the relevant [[ https://w3c.github.io/w... [18:12:12] 10Traffic, 10domains, 6Operations, 13Patch-For-Review: wikiknihy.cz - transfer to Wikimedia Czech Republic? - https://phabricator.wikimedia.org/T127573#2056159 (10Aklapper) [18:12:16] 7HTTPS, 10Traffic, 10Huggle, 6Operations: Huggle 2 fails on HTTP used when HTTPS expected - https://phabricator.wikimedia.org/T126357#2056160 (10Aklapper) [18:12:20] 10Traffic, 10DNS, 6Operations, 13Patch-For-Review: Internal DNS resolver responds with NXDOMAIN for localhost AAAA - https://phabricator.wikimedia.org/T125170#2056162 (10Aklapper) [18:12:22] 7HTTPS, 10Traffic, 6Operations: ssl certificate replacement: dumps.wikimedia.org (expires 2016-02-26) - https://phabricator.wikimedia.org/T122321#2056164 (10Aklapper) [18:12:23] 7HTTPS, 10Traffic, 6Labs, 10Labs-Infrastructure, 6Operations: add a https-only option to dynamicproxy - https://phabricator.wikimedia.org/T120486#2056168 (10Aklapper) [18:12:45] 10Traffic, 10DNS, 10Mail, 6Operations: Set up role accounts and feedback loops (FBL) with all providers - https://phabricator.wikimedia.org/T106664#2056184 (10Aklapper) [18:12:47] 7HTTPS, 10Traffic, 6Operations, 10Wikimedia-Blog: Switch blog to HTTPS-only - https://phabricator.wikimedia.org/T105905#2056186 (10Aklapper) [18:12:50] 10Traffic, 10Wikimedia-Apache-configuration, 10DNS, 6Operations: Redirect yue.wikipedia.org to zh-yue.wikipedia.org - https://phabricator.wikimedia.org/T105999#2056185 (10Aklapper) [18:12:53] 7HTTPS, 10Traffic, 6Operations, 10Wikimedia-Blog: make blog links from wmfwiki front page use HTTPS links - https://phabricator.wikimedia.org/T104728#2056190 (10Aklapper) [18:13:02] 7HTTPS, 10Traffic, 6Operations, 10Wikimedia-General-or-Unknown, 7JavaScript: Use Upgrade Insecure Requests on Wikimedia - https://phabricator.wikimedia.org/T101002#2056199 (10Aklapper) [18:13:05] 10Traffic, 10DNS, 6Operations, 13Patch-For-Review: adding new languages to DNS langs.tmpl doesn't work until zone template is edited as well - https://phabricator.wikimedia.org/T97051#2056206 (10Aklapper) [18:13:41] 7HTTPS, 10Traffic, 10MediaWiki-General-or-Unknown, 6Operations: Make default interwiki map links protocol-relative - https://phabricator.wikimedia.org/T33327#2056243 (10Aklapper) [18:13:45] 7HTTPS, 10Traffic, 10MediaWiki-extensions-CodeReview, 6Operations: Provide HTTPS links in CodeReview emails - https://phabricator.wikimedia.org/T31008#2056244 (10Aklapper) [18:20:45] 7HTTPS, 10Traffic, 10Huggle, 6Operations: Huggle 2 fails on HTTP used when HTTPS expected - https://phabricator.wikimedia.org/T126357#2056289 (10DVdm) By the way, I haven't commented out the aborts. I have trapped the errors that are mere warnings about HTTPS. Corrected a few bugs too. Works pretty good now. [18:26:24] 7HTTPS, 10Traffic, 6Operations: ssl certificate replacement: dumps.wikimedia.org (expires 2016-02-26) - https://phabricator.wikimedia.org/T122321#2056295 (10RobH) 5Open>3Resolved This was pushed live today, resolved! [18:59:08] 10Traffic, 6Discovery, 10Maps, 6Operations, 13Patch-For-Review: Set up proper edge Varnish caching for maps cluster - https://phabricator.wikimedia.org/T109162#2056415 (10BBlack) [18:59:18] 10Traffic, 6Discovery, 10Maps, 6Operations, 13Patch-For-Review: Set up proper edge Varnish caching for maps cluster - https://phabricator.wikimedia.org/T109162#1542014 (10BBlack) [18:59:21] 10Traffic, 6Operations, 10ops-eqiad, 13Patch-For-Review: eqiad cache cluster re-arrangements - https://phabricator.wikimedia.org/T125486#2056416 (10BBlack) [19:00:15] 10Traffic, 6Operations, 10ops-eqiad, 13Patch-For-Review: eqiad cache cluster re-arrangements - https://phabricator.wikimedia.org/T125486#1988833 (10BBlack) [19:00:40] 10Traffic, 6Operations, 10ops-eqiad, 13Patch-For-Review: eqiad cache cluster re-arrangements - https://phabricator.wikimedia.org/T125486#1988833 (10BBlack) Status update: this is basically-done other than sorting out decom/reclaim. [21:25:49] bblack: same update-ocsp cronspam issue with (I think) the parsoid varnishes [21:27:36] yup [21:27:40] well, kinda [21:27:53] it's the ex-misc varnishes heh [22:18:28] 10Traffic, 10DNS, 10Internet-Archive, 6Operations, 10Wikimedia-Video: Please set up a CNAME for videoserver.wikimedia.org to Video Editing Server - https://phabricator.wikimedia.org/T99216#2057570 (10Dzahn) Since we said it's going to be external and i abandoned the change to add that CNAME on our side,...