[08:10:31] andrewbogott: something is still off with the NS records of traffic.wmflabs.org. [08:10:52] the auth NS servers still return 4 NS records [08:11:02] https://www.irccloud.com/pastebin/e9INASWc/ [12:43:41] 10Traffic, 10Operations, 10Phabricator, 10Security-Team: Accessing Phabricator from Tor - https://phabricator.wikimedia.org/T254568 (10Reedy) [12:55:53] 10Traffic, 10Operations, 10Phabricator, 10Security-Team: Accessing Phabricator from Tor - https://phabricator.wikimedia.org/T254568 (10Dzahn) This could be related to T229620. [12:59:03] 10netops, 10Analytics, 10Operations: Ingestion semantic for netflow data sent to kafka generates late-data - https://phabricator.wikimedia.org/T254574 (10JAllemandou) [13:25:52] 10netops, 10Analytics, 10Operations: Ingestion semantic for netflow data sent to kafka generates late-data - https://phabricator.wikimedia.org/T254574 (10elukey) @ayounsi is it ok to set the "Time" field to `stamp_updated` rather than `stamp_inserted` ? As Joseph pointed out we have some weird situations lik... [13:57:04] vgutierrez: is there any way we can break down that lookup to figure out who specifically is responding with those four records? (In particular, is it definitely my pdns server, or is it something in the middle?) [13:59:53] well.. the query is being run against 208.80.154.135#53 [14:00:05] I dunno what's listening on that IP/port :) [14:00:21] apparently that IP belongs to cloudservices1003.wikimedia.org. [14:07:04] ok, so if there's a cache, it's my cache :) [14:07:05] * andrewbogott digs [14:08:45] hm, going to to create a dummy record to see if that forces a refresh [14:10:55] yeah, looks like that was all we needed [14:11:08] I kind of wish Designate did a daily refresh even if there are no known changes [14:11:28] vgutierrez: looks good now, right? [14:23:48] * vgutierrez checking [14:24:28] andrewbogott: yep, thanks [14:25:06] andrewbogott: and now acme-chief has been able to issue the cert, thanks <3 [14:25:37] so that means that the designate API credentials work as expected and the same for the LE account :) [14:26:11] cool [14:26:17] I'll try to do that same cleanup in other old domains [14:26:21] thanks [15:22:54] 10netops, 10Analytics, 10Operations: Ingestion semantic for netflow data sent to kafka generates late-data - https://phabricator.wikimedia.org/T254574 (10CDanis) Hopefully Arzhel understands this better than I do, but here's my rough understanding: * 'Normally' routers send netflow just on the end of a flow... [16:13:52] 10netops, 10Analytics, 10Operations, 10Patch-For-Review: Ingestion semantic for netflow data sent to kafka generates late-data - https://phabricator.wikimedia.org/T254574 (10CDanis) As a last note: this should improve the accuracy of //all// long-lived flows (any with a duration longer than a minute); the... [16:16:15] 10netops, 10Analytics, 10Operations, 10Patch-For-Review: Ingestion semantic for netflow data sent to kafka generates late-data - https://phabricator.wikimedia.org/T254574 (10JAllemandou) Great explanation @CDanis - This change should also resolve hour late-data issue - One stone two birds :) [18:38:39] 10Traffic, 10Operations, 10serviceops: Certificate *.wikipedia.org valid until 2020-06-20 - https://phabricator.wikimedia.org/T251726 (10Dzahn) 05Open→03Declined