[08:42:28] 10netops, 10SRE: Move management routers ssh port - https://phabricator.wikimedia.org/T277438 (10ayounsi) This is not supported by 3/5 of our management routers. They will need to be replaced by more recent gear anyway. [08:53:44] 10netops, 10SRE: Move management routers ssh port - https://phabricator.wikimedia.org/T277438 (10ayounsi) [12:13:59] 10Traffic, 10Phabricator, 10SRE: Phabricator should cache tasks for a few minutes for logged-out users - https://phabricator.wikimedia.org/T274228 (10mmodell) @epriestley: Thanks for the tips. I think we may have already enabled persistant connections, I will double check. As for caching, our phabricator s... [12:17:32] 10Traffic, 10Phabricator, 10SRE: Phabricator should cache tasks for a few minutes for logged-out users - https://phabricator.wikimedia.org/T274228 (10mmodell) Although I thought we were using `cluster.databases` to configure mysql connections, it appears that we are not. [12:23:15] 10Traffic, 10Phabricator, 10SRE: Phabricator should cache tasks for a few minutes for logged-out users - https://phabricator.wikimedia.org/T274228 (10jcrespo) >>! In T274228#6940987, @mmodell wrote: > Although I thought we were using `cluster.databases` to configure mysql connections, it appears that we are... [12:24:50] 10Traffic, 10Phabricator, 10SRE: Phabricator should cache tasks for a few minutes for logged-out users - https://phabricator.wikimedia.org/T274228 (10mmodell) @jcrespo: I think we can use cluster.databases in phabricator's config even with a single mysql server name/password. Do you know if the proxy suppor... [12:35:03] 10Traffic, 10Phabricator, 10SRE: Phabricator should cache tasks for a few minutes for logged-out users - https://phabricator.wikimedia.org/T274228 (10jcrespo) There is HTTP-reuse functionality: https://cbonte.github.io/haproxy-dconv/1.8/configuration.html#4.2-http-reuse but I don't think there is something l... [13:34:06] 10Traffic, 10Phabricator, 10SRE: Phabricator should cache tasks for a few minutes for logged-out users - https://phabricator.wikimedia.org/T274228 (10Aklapper) [13:34:26] 10Traffic, 10Phabricator, 10SRE: Phabricator should cache tasks for a few minutes for logged-out users - https://phabricator.wikimedia.org/T274228 (10Aklapper) [14:00:11] 10Traffic, 10Phabricator, 10SRE: Phabricator should cache tasks for a few minutes for logged-out users - https://phabricator.wikimedia.org/T274228 (10mmodell) @jcrespo: sure, no argument from me. I was just curious if we could easily implement epriestley's advice (or whether we already had) [16:30:15] 10Traffic, 10Phabricator, 10SRE: Phabricator should cache tasks for a few minutes for logged-out users - https://phabricator.wikimedia.org/T274228 (10epriestley) It's perfectly fine to configure `cluster.databases` with one service, and Phabricator internally (in effect) builds a one-service `cluster.databas... [20:48:44] 10Traffic, 10DNS, 10SRE, 10serviceops, and 3 others: DNS for GitLab - https://phabricator.wikimedia.org/T276170 (10Dzahn) [20:49:23] 10Traffic, 10SRE, 10GitLab (Initialization), 10Patch-For-Review, and 2 others: open firewall ports on gitlab1001.wikimedia.org (was: Port map of how Gitlab is accessed) - https://phabricator.wikimedia.org/T276144 (10Dzahn) 05Stalled→03Resolved There are now firewall rules to open 80 and 443 but only to...