[08:34:19] 10Traffic, 10Operations, 10Performance-Team, 10SRE-swift-storage, 10Patch-For-Review: Automatically clean up unused thumbnails in Swift - https://phabricator.wikimedia.org/T211661 (10fgiunchedi) From my POV as Swift maintainer I'm ok to go ahead with testing etc. Although it'd be really good to have at... [10:05:11] 10Traffic, 10DNS, 10Operations, 10Patch-For-Review, 10Release-Engineering-Team (CI & Testing services): Create redirect to integration.wikimedia.org/zuul - https://phabricator.wikimedia.org/T207008 (10hashar) 05Open→03Declined The canonical URL is https://integration.wikimedia.org/zuul/ which one ca... [10:05:25] 10Traffic, 10Continuous-Integration-Infrastructure, 10DNS, 10Operations, and 3 others: Create redirect to integration.wikimedia.org/zuul - https://phabricator.wikimedia.org/T207008 (10hashar) [10:21:40] 10Traffic, 10Operations, 10Performance-Team (Radar): 8-10% response start regression (Varnish 5.1.3-1wm15 -> 6.0.6-1wm1) - https://phabricator.wikimedia.org/T264398 (10ema) Given that the amount of changes between 5.1.3 and 6.0.6 is considerable, I was thinking of following this "bisect-like" apporach: packa... [10:23:00] 10netops, 10Operations, 10Patch-For-Review, 10Security, 10User-jbond: Review default ferm INPUT policy - https://phabricator.wikimedia.org/T264888 (10ayounsi) [10:39:56] 10Traffic, 10Operations, 10Performance-Team (Radar): 8-10% response start regression (Varnish 5.1.3-1wm15 -> 6.0.6-1wm1) - https://phabricator.wikimedia.org/T264398 (10akosiaris) > I tried installing 6.0.2 on cp4032, and to my surprise I found out that 6.0.6 and 6.0.2 are not binary compatible: {meme, src=f... [12:08:56] so now I've tried 6.0.4 in labs and I got this: [12:08:57] Oct 27 11:46:01 traffic-cache-atstext-buster varnish-frontend[2417]: ABI mismatch, expected , got https://github.com/varnish/varnish-modules/issues/70 https://github.com/varnishcache/varnish-cache/pull/2330 http://varnish-cache.org/docs/trunk/phk/somethinghappened.html [12:09:52] this is clearly the point where one should go for lunch [12:10:03] long-term-sorrow [13:11:25] 10netops, 10Operations: Apply uRPF strict mode on Customer links - https://phabricator.wikimedia.org/T266561 (10ayounsi) p:05Triage→03Low [13:20:42] ema: hello! wanted to check with you on this one [13:20:44] https://gerrit.wikimedia.org/r/c/operations/puppet/+/636493/5/modules/profile/manifests/cache/kafka/eventlogging.pp [13:23:23] ottomata: hey! I think it's cleaner to just define one regex of unwanted UAs [13:23:33] like '^(Fuzz Faster U Fool|Banana Potato)' [13:23:59] ok, don't mind either way, list will probably be small [13:24:09] i've done it that way elsewhere to make it easier to add and remove them [13:24:16] where we've had long complicated regexes [13:24:18] but ya ok [13:24:20] more generally ok though? [13:24:28] extra regex to check on caches for varnishfkafka eventlogging? [13:24:37] and then the query can simply be something like 'and ReqHeader:User-Agent !~ "${pattern}"' [13:25:16] oh !~ ok cool [13:25:29] should it be capitol? i saw other examples useing lower case user-agent [13:26:53] it doesn't really matter! [13:27:07] k [13:27:08] coo [13:27:18] usually headers are Upper-Case, but the match works regardless [13:28:03] aye ok i'll leave to lower, we to-lower them elsewhere when we store them to make everything consistent [13:28:49] k [13:55:05] sukhe: going through the RIPE program, you might be interested in https://ripe81.ripe.net/programme/meeting-plan/dns-wg/ "D. Developments in Encrypted DNS" [14:06:05] 10Traffic, 10Operations: libvmod-netmapper: must specify ABI stanza - https://phabricator.wikimedia.org/T266567 (10ema) [14:06:13] 10Traffic, 10Operations: libvmod-netmapper: must specify ABI stanza - https://phabricator.wikimedia.org/T266567 (10ema) p:05Triage→03Medium [14:11:01] XioNoX: thanks! [14:14:24] XioNoX: no sign-up required for the streams right? [14:14:29] nop [14:14:46] the recording will be on that page as soon as it's done [14:14:57] and the slides a bit before usually [14:17:50] thank you [15:26:39] 10netops, 10Operations: Investigate Juniper storm control - https://phabricator.wikimedia.org/T245192 (10ayounsi) 05Stalled→03Resolved a:03ayounsi All done here. I don't think it's worth doing more intrusive testing. [15:28:19] 10Traffic, 10Operations: libvmod-netmapper: must specify ABI stanza - https://phabricator.wikimedia.org/T266567 (10ema) 05Open→03Resolved a:03ema Done in libvmod-netmapper 1.9-1, closing. [15:30:54] 10Traffic, 10Operations, 10Performance-Team (Radar): 8-10% response start regression (Varnish 5.1.3-1wm15 -> 6.0.6-1wm1) - https://phabricator.wikimedia.org/T264398 (10ema) With T266567 out of the way, we can now try different Varnish 6 versions, at least as long as they're VRT-compatible. [16:51:52] 10Traffic, 10Operations, 10Product-Infrastructure-Team-Backlog, 10Proton, and 2 others: PDF download generates invalid PDF files - https://phabricator.wikimedia.org/T266559 (10Urbanecm) @Ammarpad Thansk for your comment. I wasn't able to open any of those PDFs with any PDF viewer installed (all browsers I... [16:54:28] 10Traffic, 10Operations, 10Product-Infrastructure-Team-Backlog, 10Proton, and 2 others: PDF download generates invalid PDF files - https://phabricator.wikimedia.org/T266559 (10RhinosF1) I get ERR_CONNECTION_CLOSED on https://en.wikipedia.org/api/rest_v1/page/pdf/Rail_transport_modelling [19:56:19] 10HTTPS, 10Traffic, 10MediaWiki-General, 10Operations: Protocol-relative URLs are poorly supported or unsupported by a number of HTTP clients - https://phabricator.wikimedia.org/T54253 (10Tgr)