[12:39:36] 07HTTPS, 10Traffic, 06Operations, 06WMF-Communications, 07Security-Other: Server certificate is classified as invalid on government computers - https://phabricator.wikimedia.org/T128182#2066342 (10Reedy) https://ticket.wikimedia.org/otrs/index.pl?Action=AgentTicketZoom;TicketID=9091759 ``` The issues we... [13:36:14] 07HTTPS, 10Traffic, 06Operations, 06WMF-Communications, 07Security-Other: Server certificate is classified as invalid on government computers - https://phabricator.wikimedia.org/T128182#2066342 (10Platonides) This seems to have started since the last certificate change (not before 2015-12-10). What chain... [13:55:39] 07HTTPS, 10Traffic, 06Operations, 06WMF-Communications, 07Security-Other: Server certificate is classified as invalid on government computers - https://phabricator.wikimedia.org/T128182#2214035 (10BBlack) >>! In T128182#2214024, @Platonides wrote: > This seems to have started since the last certificate c... [14:07:29] 10Traffic, 06Commons, 06Multimedia, 06Operations: Commons API fails (413 error) to upload file within 100MB threshold - https://phabricator.wikimedia.org/T86436#2214064 (10Slowking4) this is a problem for uploading books with IA moving away from dejavu the bloated jpegs will be larger important copyright... [15:32:15] 10Traffic, 06Commons, 06Multimedia, 06Operations: Commons API fails (413 error) to upload file within 100MB threshold - https://phabricator.wikimedia.org/T86436#2214250 (10Slowking4) ok i have uploaded this 69.29 MB volume using metadata from IA uploader and uploading using chunked uploads. could someone p... [15:49:41] 07Varnish, 10Beta-Cluster-Infrastructure, 10Monitoring: Monitor Varnish caches on beta cluster have two varnishd process running - https://phabricator.wikimedia.org/T75944#2214282 (10Krenair) nrpe in beta? Do we have icinga/nagios running somewhere able to use that? [15:52:51] 07Varnish, 10Beta-Cluster-Infrastructure, 10Monitoring: Monitor Varnish caches on beta cluster have two varnishd process running - https://phabricator.wikimedia.org/T75944#2214303 (10hashar) We used to have Icinga with generated config files that used nrpe to trigger remote checks. Then we eventually switche... [18:07:51] 07HTTPS, 10Traffic, 06Labs, 06Operations, and 2 others: Migrate tools.wmflabs.org to https only (and set HSTS) - https://phabricator.wikimedia.org/T102367#2214934 (10Andrew) a:03Andrew [18:08:31] 07HTTPS, 10Traffic, 06Labs, 06Operations, and 2 others: Migrate tools.wmflabs.org to https only (and set HSTS) - https://phabricator.wikimedia.org/T102367#2214936 (10yuvipanda) >>! In T102367#1372878, @Nemo_bis wrote: >> Should be fairly simple to do. > > I doubt this is possible. Several tools do not sup... [18:15:41] 07HTTPS, 10Traffic, 06Labs, 06Operations, and 2 others: Detect tools.wmflabs.org tools which are HTTP-only - https://phabricator.wikimedia.org/T128409#2073537 (10yuvipanda) This seems not particularly useful as a data point, since it is just counting: 1. Tools that are doing HTTPS redirects themselves 2.... [18:15:57] 07HTTPS, 10Traffic, 06Labs, 06Operations, and 2 others: Detect tools.wmflabs.org tools which are HTTP-only - https://phabricator.wikimedia.org/T128409#2214957 (10yuvipanda) [18:50:54] 10Traffic, 10DNS, 06Operations, 13Patch-For-Review: Set SPF (... -all) for toolserver.org - https://phabricator.wikimedia.org/T131930#2183433 (10Dzahn) a:03Mschon [20:41:45] 10Wikimedia-Apache-configuration, 07TestMe: Use gzip transfer encoding for SVG files from MediaWiki static assets - https://phabricator.wikimedia.org/T63442#2215601 (10Krinkle) [20:43:00] 10Wikimedia-Apache-configuration, 07TestMe: Use gzip transfer encoding for SVG files from MediaWiki static assets - https://phabricator.wikimedia.org/T63442#663309 (10Krinkle) 05Open>03Resolved a:03Krinkle Responses to 10Wikimedia-Apache-configuration, 06Operations: Use gzip transfer encoding for SVG files from MediaWiki static assets - https://phabricator.wikimedia.org/T63442#2215611 (10Krinkle) [20:43:46] 10Traffic, 06Operations: Decom bits.wikimedia.org hostname - https://phabricator.wikimedia.org/T107430#2215614 (10Krinkle) [21:06:32] 10Traffic, 06Operations: Decom bits.wikimedia.org hostname - https://phabricator.wikimedia.org/T107430#2215690 (10Krinkle) [21:06:39] 10Traffic, 06Mobile-Apps, 06Operations: WikipediaApp for Android hits loads.php on bits.wikimedia.org - https://phabricator.wikimedia.org/T132969#2215676 (10Krinkle) [21:07:50] 10Traffic, 06Mobile-Apps, 06Operations: WikipediaApp for Android hits loads.php on bits.wikimedia.org - https://phabricator.wikimedia.org/T132969#2215676 (10Krinkle) [21:14:47] 10Traffic, 06Operations, 06Performance-Team, 13Patch-For-Review: Support HTTP/2 - https://phabricator.wikimedia.org/T96848#2215724 (10BBlack) ^ The 1.9.14 commits have the chrome http/2 fix in place, too. I haven't built or tested these yet (pinkunicorn still on the 1.9.12 patches). [21:17:42] 10Traffic, 06Mobile-Apps, 06Operations: WikipediaApp for Android hits loads.php on bits.wikimedia.org - https://phabricator.wikimedia.org/T132969#2215676 (10Krenair) 2014-08-*? Those are quite old versions. Did you get anything more recent than May 2015 (https://gerrit.wikimedia.org/r/#/c/208315/) ? Only ref... [22:05:19] 10Traffic, 06Operations: Decom bits.wikimedia.org hostname - https://phabricator.wikimedia.org/T107430#2215883 (10BBlack) Some pointers from digging around in github: transparency.wm.o definitely has bits refs in the live HTML I see in the browser: https://github.com/wikimedia/wikimedia-TransparencyReport/sea... [22:06:52] 10Traffic, 06Mobile-Apps, 06Operations: WikipediaApp for Android hits loads.php on bits.wikimedia.org - https://phabricator.wikimedia.org/T132969#2215884 (10Krinkle) A few more (varnish_text, bits.wikimedia.org, WikipediaApp): ``` 10 WikipediaApp/2.0 2014-08 Android 2 WikipediaApp/2.0 2014-09 And... [22:43:47] 10Traffic, 06Operations, 13Patch-For-Review: Decom bits.wikimedia.org hostname - https://phabricator.wikimedia.org/T107430#1494832 (10MaxSem) The favicon hits might be from bookmarks. I wonder if browsers will update the icon locations if we start hard-redirecting to new locations... [23:37:27] 10Traffic, 06Operations, 13Patch-For-Review: Decom bits.wikimedia.org hostname - https://phabricator.wikimedia.org/T107430#2216279 (10MaxSem) Did some investigation on geoiplookup hits: * Most of hits have no referer, yet the same UA: `Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/5.0)` - prote... [23:40:13] 10Traffic, 06Operations, 13Patch-For-Review: Decom bits.wikimedia.org hostname - https://phabricator.wikimedia.org/T107430#2216284 (10BBlack) Not sure what you mean about "protection for HTTP-only", but we do universally HTTPS-redirect all bits.wikimedia.org traffic (it's not UA-sensitive or anything). [23:45:01] 10Traffic, 06Operations, 13Patch-For-Review: Decom bits.wikimedia.org hostname - https://phabricator.wikimedia.org/T107430#2216306 (10MaxSem) I mean, IE 10 doesn't report referrer if original URL was http even if it got redirected to https.