[04:22:48] 10Traffic, 06Discovery, 06Operations, 10Wikidata, and 2 others: Tune WDQS caching headers - https://phabricator.wikimedia.org/T137238#2574309 (10Smalyshev) @Gehel is anything left to do in this ticket? [08:46:05] 10Traffic, 06Discovery, 06Operations, 10Wikidata, and 2 others: Tune WDQS caching headers - https://phabricator.wikimedia.org/T137238#2574633 (10Gehel) @Smalyshev yes there is: adding some cache-control headers. Change submitted. Thanks for reminding me! [15:06:45] I've tried setting up a IPv6 tunnel with HE, I'm getting > 50% packet loss pinging the IPv6 server endpoint. Lowering the MTU doesn't help. Any ideas? [15:35:00] 10Traffic, 10MediaWiki-extensions-CentralNotice, 06Operations, 13Patch-For-Review: CN: Stop using the geoiplookup HTTPS service (always use the Cookie) - https://phabricator.wikimedia.org/T143271#2562534 (10awight) @AndyRussG There's a deadline for this, roughly Aug 23. It sounds like the next steps are,... [15:36:31] 10Traffic, 10MediaWiki-extensions-CentralNotice, 06Operations, 03Fundraising Sprint Pretending This Isn't Happening, and 2 others: CN: Stop using the geoiplookup HTTPS service (always use the Cookie) - https://phabricator.wikimedia.org/T143271#2575919 (10awight) p:05Low>03Unbreak! [16:24:15] 10Traffic, 10Analytics, 06Operations, 06Performance-Team: Preliminary Design document for A/B testing - https://phabricator.wikimedia.org/T143694#2576043 (10Nuria) [16:27:10] 10Traffic, 10Fundraising-Backlog, 10MediaWiki-extensions-CentralNotice, 06Operations, and 3 others: CN: Stop using the geoiplookup HTTPS service (always use the Cookie) - https://phabricator.wikimedia.org/T143271#2576065 (10awight) Adding #fundraising-backlog so that this task makes it into our prioritizat... [18:20:23] 10Traffic, 06Operations: Support TLS chacha20-poly1305 AEAD ciphers - https://phabricator.wikimedia.org/T131908#2576654 (10BBlack) Following up a bit with observations now that we've had 2-3 weeks or so of ChaPoly stats to stare at: 1. Draft-mode is on the decline. I expect the timing of OpenSSL-1.1.x stabil... [18:27:25] #til about Cache-control: stale-while-revalidate [18:29:58] ostriches: I don't think varnish supports it [18:30:37] longer-term, we're looking to use Surrogate-Control for app->varnish and varnish->varnish cache control purposes, and leaving Cache-Control effectively-unmolested from app->user for signalling the browser. [18:30:50] * ostriches nods [18:32:36] https://info.varnish-software.com/blog/grace-varnish-4-stale-while-revalidate-semantics-varnish makes it sound like you can do similar via vcl, but you're right, it's not natively supported and doesn't conform to rfc5861 [18:33:03] And letting MW control cache responses without VCL mangling it sounds like the best course going forward too [20:35:47] 10Domains, 10Traffic, 06Operations, 10Wikimedia-Site-requests, 13Patch-For-Review: Private wiki for Project Grants Committee - https://phabricator.wikimedia.org/T143138#2577334 (10Dzahn) 05Open>03stalled p:05Triage>03Normal