1057317 - Please open netflows for Sentry Multi-homing

Status: VERIFIED FIXED

(Infrastructure & Operations Graveyard :: NetOps: DC ACL Request, task)

Description

[Brandon Johnson [:cyborgshadow]]

We're setting up cross datacenter Multihoming of the sentry servers and need a netflow open.

Please open the netflow from:
sentry[1-2].db.scl3.mozilla.com:3306 <-> sentry[1-2].db.phx1.mozilla.com:3306

This should be a total of 4 netflows. All traffic is set to use SSL encryption.

Thanks!

Comment 1

[Dave Curado :dcurado]

working on this.

Comment 2

[Dave Curado :dcurado]

OK, these policies should be in place now.  
Please let me know if there are any problems?
Thanks -- Dave

fw1.scl3:

  From zone: dc, To zone: db
  Source addresses:
    sentry2.db.phx1: 10.8.70.248/32 
    sentry1.db.phx1: 10.8.70.247/32
  Destination addresses:
    sentry2.db: 10.22.70.130/32 
    sentry1.db: 10.22.70.129/32
  Application: mysql
    IP protocol: tcp, ALG: 0, Inactivity timeout: 1800
      Source port range: [0-0] 
      Destination port range: [3306-3306]

fw1.phx1:

  From zone: dc, To zone: db
  Source addresses:
    sentry2.db.scl3: 10.22.70.130/32 
    sentry1.db.scl3: 10.22.70.129/32
  Destination addresses:
    sentry2.db: 10.8.70.248/32 
    sentry1.db: 10.8.70.247/32
  Application: mysql
    IP protocol: tcp, ALG: 0, Inactivity timeout: 1800
      Source port range: [0-0] 
      Destination port range: [3306-3306]

Comment 3

[Brandon Johnson [:cyborgshadow]]

Confirmed working.

Thanks!