1121697 - Access for crashanalysis.dmz.phx1.mozilla.com to socorro-reporting2.db.phx1.mozilla.com

Status: RESOLVED FIXED

(Infrastructure & Operations Graveyard :: NetOps: DC ACL Request, task)

Description

[Matt Pressman [:mpressman]]

Can we please have access from crashanalysis.dmz.phx1.mozilla.com to socorro-reporting2.db.phx1.mozilla.com on ports 5432, 6432 and 6433. Effectively we need:

10.8.74.42 -> 10.8.70.198:5432
10.8.74.42 -> 10.8.70.198:6432
10.8.74.42 -> 10.8.70.198:6433

Comment 2

[Robert Kaiser]

Given this blocks bug 1121490, upping to critical as well as it's release week and I'm missing all custom reports I'm running and which I need to assess releases.

Comment 3

[James Barnell [:jbarnell]]

This has been added 

[e-mail]# show | compare 
[edit security policies from-zone dmz to-zone db]
      policy jenkins--mysql { ... }
+     /* https://bugzilla.mozilla.org/show_bug.cgi?id=1121697 */
+     policy crash-analysis {
+         match {
+             source-address crashanalysis;
+             destination-address socorro-reporting2.db.phx1.mozilla.com;
+             application [ postgres postgres-alt postgres-processors ];
+         }
+         then {
+             permit;
+         }
+     }
[edit security zones security-zone db address-book]
       address jenkins-mysql-ro-vip { ... }
+      address socorro-reporting2.db.phx1.mozilla.com 10.8.70.198/32;

Please test and confirm tonight.

Comment 4

[Robert Kaiser]

OK, this works, thanks!