1032971 - Redirect all non-SSL traffic on www.mozilla.org to SSL

Status: RESOLVED FIXED

(Infrastructure & Operations Graveyard :: WebOps: Product Delivery, task)

Description

[Paul [:pmac] McLanahan]

I can accomplish this in the apache config we control in the bedrock repo, but I thought that perhaps the better way would be to do this at the Zeus level. So please do this in Zeus for www.mozilla.org (prod-only) if that's best; otherwise WONTFIX this and I'll do it in apache via:

https://wiki.apache.org/httpd/RewriteHTTPToHTTPS

Comment 1

[Jake Maul [:jakem]]

Yeah, would prefer to do this in Zeus because then we can eliminate the Zeus and Apache config stuff for port 80 altogether, and just use a simpler redirect rule in Zeus rather than a normal vhost with a pool, compression, logging, etc.

Comment 2

[Philippe M. Chiasson (:gozer)]

(In reply to Paul McLanahan [:pmac] from comment #0)
> I can accomplish this in the apache config we control in the bedrock repo,
> but I thought that perhaps the better way would be to do this at the Zeus
> level. So please do this in Zeus for www.mozilla.org (prod-only)

Just curious why limit this to production-only? It makes a special case out of production.

Comment 3

[Paul [:pmac] McLanahan]

Because dev and stage are already https only. Though you do bring up a good point in that I don't know if the same mechanism is doing the https redirecting on the other environments.

:cturra (or whoever does this) can you also make sure that the other mozilla.org environments (www-dev.allizom, www.allizom, and the demos) are also setup in this way?

Thanks :gozer.

Comment 4

[Philippe M. Chiasson (:gozer)]

:pmac, does this require some coordination? Or can I just make it so in Zeus whenever I want?

Since this is www.mozilla.org, I imagine the possible impact could be large.

Comment 5

[Paul [:pmac] McLanahan]

I would like to be around to check things out when you do it. So yeah, let me know the plan and we can maybe hang out in #www when it happens.

Comment 6

[Philippe M. Chiasson (:gozer)]

(In reply to Paul McLanahan [:pmac] from comment #5)
> I would like to be around to check things out when you do it. So yeah, let
> me know the plan and we can maybe hang out in #www when it happens.

Allright, sounds like a plan, and to mirror how it's done in stage, it's just a little Zeus rule, easy to flip on/off.

Comment 7

[Philippe M. Chiasson (:gozer)]

HTTPS Redirect in place as of now both in PHX1 and SCL3

Comment 8

[Philippe M. Chiasson (:gozer)]

I'll keep the bedrock backends around for 2-3 days before removing that part of the backend infra.

Comment 9

[Philippe M. Chiasson (:gozer)]

Zeus cleaned up and removed port 80 virtualhosts.