[00:36:54] 06Traffic: Update libvmod-netmapper to 1.10 - https://phabricator.wikimedia.org/T392533#10806278 (10BCornwall) [08:28:40] bd808: right now the easiest way would be adding a hiera hiera that injects the allowlisted CIDRs on the wikimedia_nets acl [08:28:54] s/hiera hiera/hiera key/ [08:29:37] don't use wikimedia_trust cause those are allowed to set X-F-P [11:12:32] 06Traffic: Create VTC tests for HAProxy - https://phabricator.wikimedia.org/T393770 (10Fabfur) 03NEW [11:14:13] 06Traffic, 10Data-Engineering (Q4 2025 April 1st - June 30th), 10DPE HAProxy Migration: Add HAproxy termination field to webrequest - https://phabricator.wikimedia.org/T387454#10807037 (10Fabfur) 05Open→03Resolved [11:15:47] 10netops, 06Infrastructure-Foundations, 06SRE, 13Patch-For-Review: Do we need prometheus-ethtool-exporter? - https://phabricator.wikimedia.org/T371375#10807046 (10cmooney) @fgiunchedi hey just wondering what the best way forward might be if we want to get node exporter exposing ethtool stats for our hosts.... [11:23:58] 06Traffic, 06Data-Engineering, 06Data-Engineering-Radar, 10Observability-Logging: Shutdown varnishkafka instances - https://phabricator.wikimedia.org/T393772 (10Fabfur) 03NEW [11:27:21] 06Traffic, 06Data-Engineering, 06Data-Engineering-Radar, 10Observability-Logging: Shutdown varnishkafka instances - https://phabricator.wikimedia.org/T393772#10807091 (10Vgutierrez) Please note that you should only shutdown the webrequest instance [12:56:15] 10netops, 06Infrastructure-Foundations, 06SRE, 13Patch-For-Review: Do we need prometheus-ethtool-exporter? - https://phabricator.wikimedia.org/T371375#10807265 (10fgiunchedi) >>! In T371375#10807046, @cmooney wrote: > @fgiunchedi hey just wondering what the best way forward might be if we want to get node... [14:06:40] ottomata: WDYM on https://gerrit.wikimedia.org/r/c/operations/puppet/+/1143474/comment/c635e48d_5c5f3a8e/ :? [14:06:55] ottomata: current regex definitely matches /beacon/v2/event [14:31:53] magru peaked at 90krps yesterday [14:31:57] amazing [15:21:46] 10netops, 06Infrastructure-Foundations, 06SRE, 13Patch-For-Review: Do we need prometheus-ethtool-exporter? - https://phabricator.wikimedia.org/T371375#10807881 (10cmooney) >>! In T371375#10807265, @fgiunchedi wrote: > If I read the task correctly we can enable it only on >= bookworm hosts (?) in which case... [16:07:27] 10netops, 06Infrastructure-Foundations, 06SRE, 13Patch-For-Review: Do we need prometheus-ethtool-exporter? - https://phabricator.wikimedia.org/T371375#10808026 (10cmooney) >>! In T371375#10807881, @cmooney wrote: > Let me double check and report back. So it seems an unprivaledged user can get these stats... [16:19:41] 06Traffic, 06Data-Engineering, 06Infrastructure-Foundations: WMF-Last-Access-Global cookie set on wrong domain when accessing static assets - https://phabricator.wikimedia.org/T367346#10808048 (10Krinkle) [16:23:12] 06Traffic, 06Data-Engineering, 06Infrastructure-Foundations: WMF-Last-Access-Global cookie set on wrong domain when accessing static assets - https://phabricator.wikimedia.org/T367346#10808056 (10Krinkle) This is still an issue. This impacts bug reporting and software support in Phab, mediawiki.org Support d... [16:25:11] 06Traffic, 06Data-Engineering, 06Infrastructure-Foundations: WMF-Last-Access-Global cookie set on wrong domain when accessing static assets - https://phabricator.wikimedia.org/T367346#10808061 (10Krinkle) [16:28:56] 06Traffic, 06Data-Engineering, 06Infrastructure-Foundations: WMF-Last-Access-Global cookie set on wrong domain when accessing static assets - https://phabricator.wikimedia.org/T367346#10808069 (10Krinkle) [17:15:55] 10Domains: Create redirect from tj.*.org to tg.*.org - https://phabricator.wikimedia.org/T393803#10808157 (10Pppery) a:05Amire80→03None [17:16:50] 10Domains: Create redirect from tj.*.org to tg.*.org - https://phabricator.wikimedia.org/T393803#10808162 (10Pppery) Note for the record that `tj` is not a valid language code, so there isn't (currently) any conflict with a hypothetical tj-language wiki [17:40:26] 06Traffic, 10DNS, 06SRE: Create redirect from tj.*.org to tg.*.org - https://phabricator.wikimedia.org/T393803#10808234 (10Amire80) I support this. For just a bit more context, @zolfeqar brought it up in a conversation with me at the [[ https://meta.wikimedia.org/wiki/Central_Asian_WikiCon_2025 | Central Asi... [18:02:35] 06Traffic, 06Data-Engineering, 06Data-Engineering-Radar, 10Observability-Logging: Shutdown varnishkafka instances - https://phabricator.wikimedia.org/T393772#10808262 (10Ahoelzl) @JAllemandou please comment on proposed timeline, looks to me its aligned with our plan / data retention. [18:13:53] 10netops, 06DC-Ops, 06Infrastructure-Foundations, 10ops-codfw, 06SRE: codfw: setup MPC10E-10C and SCBE3 - https://phabricator.wikimedia.org/T393552#10808313 (10cmooney) p:05Triage→03Medium [18:14:14] 10netops, 06DC-Ops, 06Infrastructure-Foundations, 10ops-codfw, 06SRE: codfw: setup MPC10E-10C and SCBE3 - https://phabricator.wikimedia.org/T393552#10808315 (10cmooney) [20:25:55] 06Traffic, 10Beta-Cluster-Infrastructure: Add allowlist to make poking holes in abuse_networks:blocked_nets:networks easier - https://phabricator.wikimedia.org/T393481#10808600 (10bd808) `lang=irc [21:25:31] Before I waste energy with a poor implementation, could some of you fine folks look at my idea... [20:35:00] 06Traffic, 13Patch-For-Review: bring katran to liberica - https://phabricator.wikimedia.org/T380450#10808621 (10CDanis) Is there a task for tracking Katran deployment for high-traffic lvsen/libericas? [20:39:46] 06Traffic, 13Patch-For-Review: bring katran to liberica - https://phabricator.wikimedia.org/T380450#10808624 (10Vgutierrez) not yet, I'm planning to work on that as soon as next week starting with ncredir@eqiad that runs a dedicated liberica instance, I'll keep you posted <3 [21:04:45] 06Traffic, 10Beta-Cluster-Infrastructure: Add allowlist to make poking holes in abuse_networks:blocked_nets:networks easier - https://phabricator.wikimedia.org/T393481#10808662 (10bd808) The `wikimedia_nets` acl mentioned by @Vgutierrez is an interesting option. The current code creating that acl includes a se... [21:34:55] 06Traffic, 06DC-Ops, 10ops-codfw, 13Patch-For-Review: Q4:rack/setup/install cp20[43-58] codfw - https://phabricator.wikimedia.org/T392851#10808737 (10BCornwall) 05Open→03In progress