[07:49:19] 10Traffic, 10Operations, 10serviceops, 10Patch-For-Review: Applayer services without TLS - https://phabricator.wikimedia.org/T210411 (10Dzahn) [07:50:22] 10Traffic, 10Operations, 10serviceops, 10Patch-For-Review: Applayer services without TLS - https://phabricator.wikimedia.org/T210411 (10Dzahn) [07:51:25] 10Traffic, 10Operations, 10serviceops, 10Patch-For-Review: Applayer services without TLS - https://phabricator.wikimedia.org/T210411 (10Dzahn) - releases.wikimedia.org switched to TLS - releases-jenkins remains todo - parsoid-vd / parsoid-rt tests on ruthenium - directors and DNS records removed - users wi... [08:06:29] cp5001 - traffic_server tls process? https://icinga.wikimedia.org/cgi-bin/icinga/extinfo.cgi?type=2&host=cp5001&service=traffic_server+tls+process+restarted [08:06:33] ema: cc & [08:40:25] mutante: yeah, I'm aware, thanks [08:41:06] vgutierrez: alrigh, ack [10:04:05] nuria: hi! I think the topic needs further discussion, and as gilles mentioned in T230772#5464981 we need a separate task to track misc services cacheability. Can you please open a new task mentioning explicitly what the issue is in the context of both piwik and stats.wm.org? Please add request/response headers, observed result, expected result. Thanks! [10:04:06] T230772: Piwik JS isn't cached - https://phabricator.wikimedia.org/T230772 [10:49:14] 10Traffic, 10Operations, 10Wikidata, 10Wikidata-Query-Service: LDF service does not Vary responses by Content-Type, sending incorrect cached responses to clients - https://phabricator.wikimedia.org/T232006 (10Lucas_Werkmeister_WMDE) [11:01:14] 10Traffic, 10Operations: ats-tls is performing 3k DNS queries per second on cp5001 - https://phabricator.wikimedia.org/T232209 (10Vgutierrez) [12:31:52] https://phabricator.wikimedia.org/T232213 [12:31:58] >I could reproduce this bug on multiple browsers and I have no reason to believe this is a client-related issue, nor I think this is a configuration issue of my proxy. [12:32:01] * Reedy boggles [12:32:25] Surely if he's running a proxy to rewrite urls and intercept stuff... It is his fault if it just passes location headers straight through to the client [12:44:23] Reedy: I imagine WMF does not really endorse such proxies to begin with [12:49:27] bblack, mark: please see T232213 when you have the chance. Do we have an explicit policy about reverse proxies configured on non-wmf domains? [12:49:28] T232213: [[Special:Random]] when used in a proxied website redirects to the main domain wikipedia.org - https://phabricator.wikimedia.org/T232213 [12:51:09] Reedy there could be an argument to send relative urls but it would be a feature request, not a bug [12:51:40] legal have definitely gone after domains that look like they're pretending to be WM sites [12:52:07] ema: Of course, it looks crap making someone take one down that they're providing to get around the turkish blocks [12:52:23] so that is a separate issue, I am sticking to the tecnical bug [12:52:29] *report [12:52:59] if you see their reports, they are actually trying to not get confused with wikimedia, by disabling loging, etc. [12:53:08] *logging in [12:53:20] (again, policy wise, I don't enter there) [12:56:26] I'm not sure how that necessarily stops confusion.. They're still using the Wikipedia logo [12:56:35] Which is probably more confusing to people than edit/login links [12:56:42] I mean [12:56:44] Browse the site... [12:56:45] "Central login [12:56:45] You are centrally logged in. Reload the page to apply your user settings." [12:57:33] sorry, I didn't see the site, was focused on the "Location:" request [13:27:46] 10Traffic, 10Operations, 10Patch-For-Review: ats-tls is performing 3k DNS queries per second on cp5001 - https://phabricator.wikimedia.org/T232209 (10Vgutierrez) 05Open→03Resolved p:05Triage→03Normal [13:27:49] 10Traffic, 10Operations: Move cache upload cluster from nginx to ats-tls - https://phabricator.wikimedia.org/T231433 (10Vgutierrez) [13:44:23] it's a thorny issue, especially in this case, probably not ideally suitable for public discourse [14:06:05] 10Traffic, 10Operations, 10Pybal: Migrate pybal-test2001 away from jessie - https://phabricator.wikimedia.org/T224570 (10MoritzMuehlenhoff) More generally speaking: Are the pybal-test* servers still used for testing/developing? Is there a specific reason they are in production and not in something like a "py... [15:11:36] 10netops, 10Operations, 10ops-eqiad: (Need By: Sept 30) update RE-S-X6-64G-S in cr[12]-eqiad - https://phabricator.wikimedia.org/T226424 (10ayounsi) Postponed to Thursday Sept 12th, 8am PST, 11am local time, 15:00 UTC. 3h