1030601 - unable to connect to irc.allizom.org on non-standard ports

Status: RESOLVED FIXED

(Infrastructure & Operations Graveyard :: Infrastructure: IRC, task)

Description

[:glob ✱]

currently you can connect to irc.mozilla.org on ports other than 6667 and 6697.
the two that i know of that currently timeout are 6668 (non-ssl) and 8443 (ssl).

i'm not sure if this is an artefact of the allizom staging environment or a configuration/firewall issue to be addressed prior to go-live.

Comment 1

[Dan Parsons [:lerxst]]

Why do you need ports other than 6667 or 6697?

Comment 2

[:Atoll]

Port 8443 is required due to Verizon blocking inbound ports in the 6xxx range to our networks. Apparently they very aggressively block IRC ports over the MiFi connections, and so after testing I requested and we implemented port 8443 as a clone of 6697 to circumvent third-party IRC port range blocking.

Comment 3

[Dan Parsons [:lerxst]]

OK, so aside from 6667 and 6697(ssl), which other ports should we have? Just 6668 and 8443(ssl)?

Comment 4

[Dan Parsons [:lerxst]]

I'm just going to copy the ports we have set up on the current irc network, which are 6665-7000, 6697(ssl), 8443(ssl). With the exclusion of 7000, because that port is used for links between servers. I could reconfigure the servers to use a different port, but I'd have to restart the whole network, and get netops flows.

Comment 5

[Dan Parsons [:lerxst]]

Correction: the ports used on the current IRC network are 6665-6669, 6697, 7000, 8443.

Comment 6

[Dan Parsons [:lerxst]]

The following ports are now open on the test network:

Non-SSL: 6665-6669
SSL: 6697,8443