[08:17:44] 10HTTPS, 10Traffic, 10Operations: WMF servers support ESNI? - https://phabricator.wikimedia.org/T205378 (10Shizhao) [08:20:01] wow, it took just one day to get a task about ESNI :D ^^^ [08:20:08] 10HTTPS, 10Traffic, 10Operations: WMF servers support ESNI? - https://phabricator.wikimedia.org/T205378 (10Krenair) I would think this needs to come from nginx upstream [08:21:16] vgutierrez, welcome back [08:41:07] 10HTTPS, 10Traffic, 10Operations: WMF servers support ESNI? - https://phabricator.wikimedia.org/T205378 (10Aklapper) @Shizhao: Is this a [[ https://www.mediawiki.org/wiki/How_to_report_a_bug | feature request ]]? Currently it looks like a question, and questions can be asked on mailing lists, on IRC, or in f... [09:04:33] Krenair: thx :D [10:28:37] 10Traffic, 10Cloud-VPS, 10DNS, 10Operations: Inconsistent lists of labs-ns* nameservers - https://phabricator.wikimedia.org/T205344 (10MoritzMuehlenhoff) p:05Triage>03Normal [11:38:29] 10Traffic, 10Operations, 10Performance-Team, 10Wikimedia-General-or-Unknown, and 2 others: Search engines continue to link to JS-redirect destination after Wikipedia copyright protest - https://phabricator.wikimedia.org/T199252 (10Deskana) There is a task to try to quantify if the addition of the sitemap a... [13:14:41] 10Traffic, 10Fundraising-Backlog, 10Operations, 10fundraising-tech-ops: SSL cert for links.email.wikimedia.org - https://phabricator.wikimedia.org/T188561 (10Jgreen) @CCogdill_WMF @BBlack there's no change as far as I can see in Trilogy's SSL rating according to Qualys, still a B with the main issues being... [13:27:02] 10Traffic, 10Fundraising-Backlog, 10Operations, 10fundraising-tech-ops: SSL cert for links.email.wikimedia.org - https://phabricator.wikimedia.org/T188561 (10BBlack) I would choose not to proceed with a vendor who cares so little about security. The "Weak DH" issue, in particular, made security headlines... [13:51:37] 10Traffic, 10Operations, 10Continuous-Integration-Config: CI jobs for authdns linting need to run on Stretch - https://phabricator.wikimedia.org/T205439 (10BBlack) p:05Triage>03Normal [14:00:59] hi mark! [14:01:37] hi! [14:01:46] welcome back [14:01:49] thx [14:02:13] feel free to actively remind me if I'm blocking you on something related to pybal [14:02:29] hehe [14:02:36] there are indeed a few outstanding reviews [14:02:51] but not really new ones, as I've been absent a fair bit due to my father in hospital [14:03:04] ouch, I'm sorry to read that [14:03:09] I hope everything is better now [14:03:24] will be a while but slowly getting better yeah [14:03:52] i did jokingly complain the other week when I had a few hours to do tech work that both my reviewers were off on vacation ;-p [14:04:20] so i'm glad you're back! ;) [14:05:02] had fun? [14:05:43] indeed, Iceland is a pretty interesting & beautiful place to go for some hikes :) [14:07:07] i've heard that yes :) [14:08:07] it's also fricking expensive [14:42:34] I wonder why? [14:42:50] higher cost of getting goods to a more-remote place with a smaller population and unforgiving climate? [14:48:45] i've seen part of that on other islands as well, even in more forgiving climates :) [14:49:18] we should also take into account that it's an scandinavian country... so taxes are pretty high as well [14:49:52] true, I guess as a tourist you get less benefit from that, whereas for the locals it might be a win [14:50:11] 25% VAT, alcohol (beer) is crazy expensive as well... [14:50:15] (although you do get some benefit from more free public services/parks/things, and possibly free/cheap medical care for travelers) [14:50:52] yup.. free museums [14:51:42] I was amazed at the cheap minor medical care in greece, which is probably common elsewhere in the EU, but that's where I ran into it. [14:52:20] when gage got some road rash falling off a scooter. We went to a random pharmacy and they cleaned/patched him up and gave meds and bandage supplies, etc, and it was all ~$10 euros. [14:52:53] well.. we (EU folks) are pretty scared of going to the US and getting a medical/health care debt [14:53:04] Lol [14:54:38] I can go into a hospital anywhere in EU and I'll be taken care for free [14:54:54] US is kinda different :) [14:55:05] vgutierrez: I’m with you on that one :) [14:55:15] yes, the exact same situation in the US would be handled via a private minor emergency center, and the billed cost to my HSA (given insurance negotiation) would be ~$200 USD [14:55:27] and I already have some friends with stupidly high debts in the US due to a broken arm [14:55:35] I think the "retail" cost is higher, but then some of them will auto-negotiate that down if you lack insurance, but it's iffy. [14:56:19] (or offer to put you on some local monthy payment plan to get cheaper services from just that provider, as an alternative to insurance) [15:15:47] in the US they will probably stop your heartattack before calling to see what the pay cap on your insurance is :) [16:58:56] 10Traffic, 10Operations: gdnsd plugin support for ACME DNS challenges - https://phabricator.wikimedia.org/T194965 (10BBlack) 05Open>03Resolved Beta releases of gdnsd (supporting this new feature) have been stable on our production authdns since mid-last-week. The code hasn't been released officially as gd... [16:58:59] 10Traffic, 10Operations, 10Patch-For-Review: Create and deploy a centralized letsencrypt service - https://phabricator.wikimedia.org/T194962 (10BBlack) [17:13:01] bblack: we're depooling ulsfo for the DC move, DR said they will proceed with the X-connect cut/move "now" [17:15:43] "surprise!" [17:16:12] lol, ok [17:16:50] if you have any control, keep in mind it's at least 10 minutes after the authdns-update before "good" client recursors have all noted the change, thanks to TTLs [17:17:04] some "bad" recursors may take longer because they ignore standards or whatever [17:17:14] rob is on the phone with them, doubt he'll manage to get them to abort in time [17:17:43] well we're like 3.5 minutes out from the 10 minute mark anyways, going by logs [17:17:47] the TL;DR is that they went from "this is not possible, you need to contact UL and/or all of your carriers one by one and ask them to submit disconnect requests" x 10 emails [17:17:51] to [17:17:57] "OK, no need, we're doing it now" [17:19:08] checking real syslog stamps [17:19:39] for? [17:20:14] 17:13:27 was the last one (multatuli) to report it loaded the admin_state update for the depool [17:20:29] so conforming recursors should be done with giving out ulsfo answers by 17:23:27 [17:21:52] ok, 2 more minutes good [17:25:46] past the 10-min mark, phew [18:19:17] * volans reading backscroll, phew... [19:25:46] 10Traffic, 10Varnish, 10Operations, 10Maps (Tilerator), and 2 others: Tilerator should purge Varnish cache - https://phabricator.wikimedia.org/T109776 (10MSantos) [19:25:55] 10Traffic, 10Maps, 10Operations, 10Reading-Infrastructure-Team-Backlog (Kanban): Decide on Cache-Control headers for map tiles - https://phabricator.wikimedia.org/T186732 (10MSantos) [22:43:29] 10Traffic, 10Community-Tech, 10MediaWiki-Parser, 10Operations: Show SVGs in page language if available - https://phabricator.wikimedia.org/T205040 (10MaxSem) [23:58:55] 10Traffic, 10DNS, 10Operations, 10WMF-Communications, and 4 others: Move Foundation Wiki to new URL when new Wikimedia Foundation website launches - https://phabricator.wikimedia.org/T188776 (10Jdforrester-WMF) 05Open>03Resolved [23:59:41] 10Traffic, 10DNS, 10Operations, 10WMF-Communications, and 4 others: Move Foundation Wiki to new URL when new Wikimedia Foundation website launches - https://phabricator.wikimedia.org/T188776 (10Jdforrester-WMF)