https://bugzilla.wikimedia.org/show_bug.cgi?id=58048
Web browser: ---
Bug ID: 58048
Summary: Put all zirconium vhosts behind misc varnish cluster
Product: Wikimedia
Version: wmf-deployment
Hardware: All
OS: All
Status: NEW
Severity: normal
Priority: Unprioritized
Component: SSL related
Assignee: wikibugs-l@lists.wikimedia.org
Reporter: bda...@wikimedia.org
Classification: Unclassified
Mobile Platform: ---
Zirconium.wikimedia.org has public IPv4 and IPv6 address and is used as a CNAME
target for the contacts, etherpad, and *.planet virtual hosts. These CNAMES
should be changed to misc-web-lb.eqiad and have related Varnish and front end
SSL termination configuration added. This will allow removing the public IPs
from zirconium thus reducing the attack surface of the cluster.
--
You are receiving this mail because:
You are the assignee for the bug.
You are on the CC list for the bug.
_______________________________________________
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
