Closed Bug 1200202 Opened 9 years ago Closed 9 years ago

please open netflow for buildbot bridge dev db

Categories

(Infrastructure & Operations Graveyard :: NetOps: DC ACL Request, task)

Product:
Infrastructure & Operations Graveyard
Component:
NetOps: DC ACL Request
Type:
task
Priority:
Not set
Severity:
normal

Tracking

(Not tracked)

Status:
RESOLVED FIXED

People

(Reporter: bhearsum, Assigned: dcurado)

References

Details

Please open netflows FROM:
buildbot-master84.bb.releng.scl3.mozilla.com (10.26.68.24)

TO
port 3306
ON
stage-rw-vip.db.scl3.mozilla.com (10.22.70.63)
working on this
Assignee: network-operations → dcurado
Status: NEW → ASSIGNED
This security policy has been configured.
Please confirm whether it meets your requirements or not?
Thanks.

dcurado@fw1.ops.scl3.mozilla.net> show security policies from-zone dc to-zone db policy-name stage-rw-vip--mysql detail
node1:
--------------------------------------------------------------------------
Policy: stage-rw-vip--mysql, action-type: permit, State: enabled, Index: 685, Scope Policy: 0
  Policy Type: Configured
  Sequence number: 8
  From zone: dc, To zone: db
  Source addresses:
    buildbot-master84.bb.releng.scl3: 10.26.68.24/32
    mobile-imaging-state1.p127.releng.scl3: 10.26.254.33/32
  Destination addresses:
    stage-rw-vip.db.scl3: 10.22.70.63/32
  Application: mysql
    IP protocol: tcp, ALG: 0, Inactivity timeout: 1800
      Source port range: [0-0]
      Destination port range: [3306-3306]
  Per policy TCP Options: SYN check: No, SEQ check: No

dcurado@fw1.ops.scl3.mozilla.net> show configuration | compare rollback 1
[edit security policies from-zone dc to-zone db policy stage-rw-vip--mysql match]
-      source-address mobile-imaging-state1.p127.releng.scl3;
+      source-address [ mobile-imaging-state1.p127.releng.scl3 buildbot-master84.bb.releng.scl3 ];
[edit security zones security-zone dc address-book]
       address dev2.db.phx1 { ... }
+      address buildbot-master84.bb.releng.scl3 10.26.68.24/32;
Flags: needinfo?(bhearsum)
Looks good Dave, thank you very much for the quick turnaround!
Status: ASSIGNED → RESOLVED
Closed: 9 years ago
Flags: needinfo?(bhearsum)
Resolution: --- → FIXED
Product: Infrastructure & Operations → Infrastructure & Operations Graveyard
You need to log in before you can comment on or make changes to this bug.