Buildout of mofosecure sendto.mozilla.org failover

RESOLVED FIXED

Status

RESOLVED FIXED
4 years ago
4 years ago

People

(Reporter: johns, Assigned: johns)

Tracking

Details

(Whiteboard: [EOYFR2014][p1])

(Assignee)

Description

4 years ago
S3 bucket, logging bucket, Cloudfrnt distro, SSL, monitoring, cloudtrail for auditing.
(Assignee)

Comment 1

4 years ago
S3 bucket created on mofosecure, in US-Standard.
* Versioning On
* Public access for read (website standard config)
* Logging to the mofosecure-techops/logs/sendto.mozilla.org/ bucket/folder
* Only admin write access
* Default index.html, which will not exist.  Anything other than paths we will eventually redirect.
(Assignee)

Comment 2

4 years ago
Cloudfront distribution created:

* d94ya7facqszn.cloudfront.net
* Logging to mofosecure-techops/logs/sendto.mozilla.org-cf/
* No headers forwarded (may want to change)
* 0 TTL (should be no-cache, verify)
* 
Edit
Distribution ID
E1U9CRFMMZ0GN4
Log Prefix
logs/sendto.mozilla.org-cf/
Delivery Method
Web
Cookie Logging
On
Distribution Status
InProgress
Comment
sendto.mozilla.org failover
Price Class
Use All Edge Locations (Best Performance)
State
Enabled
Alternate Domain Names (CNAMEs)
sendto.mozilla.org
SSL Certificate
Default CloudFront Certificate (*.cloudfront.net)
Domain Name
d94ya7facqszn.cloudfront.net
Custom SSL Client Support
-
Default Root Object
-
Last Modified
2014-12-12 12:18 UTC-6
Log Bucket
mofosecure-techops.s3.amazonaws.com

Need to get SSL up, and decide what headers/cookies need to be passed, if any.
jbuck scott, any headers, query strings, or cookies we need to pass through to origin?
Flags: needinfo?(scott)
Flags: needinfo?(jon)

Comment 3

4 years ago
no headers, query strings or cookies need to be passed to the origin
Flags: needinfo?(scott)
Flags: needinfo?(jon)
(Assignee)

Comment 4

4 years ago
Cloudtrail activity auditing/logging has been activated, and pointed to mofosecure-techops/cloudtrail/

Thanks Jon
(Assignee)

Updated

4 years ago
Depends on: 1110920
Whiteboard: [EOYFR2014][p1]
(Assignee)

Comment 5

4 years ago
The infrastructure is all set and ready.  The DNS failover setup has been setup, and is ready for us to get a form up, test the form, test the failover process, test the alerting, and then go live with.
Status: NEW → ASSIGNED
(Assignee)

Comment 6

4 years ago
Mari is getting me hooked up with a credit card for this, so we're all set for infra!  We'll test in other bugs.
Status: ASSIGNED → RESOLVED
Last Resolved: 4 years ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.