1344384 - Can the m.mozilla.org CNAME be decommissioned?

Status: RESOLVED FIXED

(Infrastructure & Operations Graveyard :: WebOps: Other, task)

Description

[Jonathan Claudius [:claudijd] (use NEEDINFO)]

During the course of some automated security testing, where I was looking for subdomains that resulted in 404's, I came across m.mozilla.org.

$ host m.mozilla.org
m.mozilla.org is an alias for mana.mozilla.org.
mana.mozilla.org has address 63.245.215.36

As you can see m.mozilla.org is a CNAME for mana.mozilla.org.  However, if someone ever wanted to use m.mozilla.org they would get to the right server, but the VHOST will be incorrect and you'll end up a 404 error.

This is not a security issue, but more of a house cleaning item.

Recommendation:

- If it's not needed, I would recommend we remove the DNS alias for it.
- If it's needed, I'd be curious what for.

Examples:

https://m.mozilla.org/
http://m.mozilla.org/

Comment 1

[Eric Ziegenhorn :ericz]

We do use this like this:
http://m.mozilla.org/Puppet+freshness redirects to https://mana.mozilla.org/wiki/display/NAGIOS/Puppet+freshness
Nagios uses these shortened links in alerts.

m.mozilla.org used to somehow provide another useful service in that pages that did not exist offered up a documentation template to encourage everyone to document their nagios checks and what to do when they alert.  At the moment though this doesn't appear to be working.  The MOC may be able to comment further.

Comment 2

[Jonathan Claudius [:claudijd] (use NEEDINFO)]

:ericz - Is this just for mana or for any URL shortening?

- If just mana, maybe have https://m.mozilla.org/ => https://mana.mozilla.org/
- If for any URL shortening, maybe have https://m.mozilla.org/ => some banner/documentation on what this is?

Comment 3

[:Atoll]

I suggest forking m. into its own service, since confluence is exiting to SaaS. It need not be hosted with Mana components. Basic Apache is fine.

Comment 4

[Eric Ziegenhorn :ericz]

It's just for mana url shortening to my knowledge and if it no longer provides the nice shortcut to a template for new documentation then I agree a redirect would suffice.  The MOC is I believe the owner of that, needinfo'ing Linda.

Comment 5

[Linda Ypulong [:unixfairy]]

we still need it - it is used in our Nagios alerting to redirect to runbooks - can we test it some time with the redirect without the service

Comment 6

[Eric Ziegenhorn :ericz]

Any other questions Jonathan or can we close this out?

Comment 7

[Jonathan Claudius [:claudijd] (use NEEDINFO)]

Sure, I'll close it out.  Assuming that if someone wants to take some action to split the URL shortening service off into it's own service, then it will be tracked with a different bug.