Closed Bug 1129466 Opened 11 years ago Closed 11 years ago

Transfer mozillafoundation.org to mozillafoundation hosting on AWS Route 53

Categories

(Infrastructure & Operations :: SSL Certificates, task)

Product:
Infrastructure & Operations
Component:
SSL Certificates
Platform:
x86
macOS
Type:
task
Priority:
Not set
Severity:
normal

Tracking

(Not tracked)

Status:
RESOLVED FIXED

People

(Reporter: johns, Unassigned)

Details

(Whiteboard: [kanban:https://webops.kanbanize.com/ctrl_board/2/414] )

Good day to you friends! We're working on the CallCongress app, which is a huge P1 with a hard deadline, and we're looking for a legit looking domain name to host it on. We have mozillafoundation.org sitting out there, which I see currently redirects. I'd like to get DNS moved over to us so we have the opportunity to setup something like call.mozillafoundation.org. Can we please (with some amount of haste, much appreciated! :) ) do the following? 1) Dump the current zone listing in here, and I will replicate it, then update this ticket that I've replicated it. 2) We'll then have you update nameservers to the following for this domain: ns-1329.awsdns-38.org ns-663.awsdns-18.net ns-1938.awsdns-50.co.uk ns-95.awsdns-11.com 3) Celebratory measures shall then be enacted. Many thanks! JP
Whiteboard: [kanban:https://webops.kanbanize.com/ctrl_board/2/414]
This needs to happen super fast folks. Bumping up the priority.
Severity: normal → major
Looking at the current public zone, it already smells like a route53 zone. $> cat mozillafoundation.org.public $TTL 3600 mozillafoundation.org. 3600 IN SOA ns.mozilla.org. sysadmins.mozilla.org. ( 2014101400 ; Serial 180 ; Refresh 180 ; Retry 1209600 ; Expire 3600 ; Minimum ) mozillafoundation.org. IN NS ns1-240.akam.net. mozillafoundation.org. IN NS ns4-64.akam.net. mozillafoundation.org. IN NS ns5-65.akam.net. mozillafoundation.org. IN NS ns7-66.akam.net. mozillafoundation.org. IN MX 100 mozillafoundation.org.s5a1.psmtp.com. mozillafoundation.org. IN MX 200 mozillafoundation.org.s5a2.psmtp.com. mozillafoundation.org. IN MX 300 mozillafoundation.org.s5b1.psmtp.com. mozillafoundation.org. IN MX 400 mozillafoundation.org.s5b2.psmtp.com. gapps.mozillafoundation.org. IN MX 1 ASPMX.L.GOOGLE.COM. gapps.mozillafoundation.org. IN MX 5 ALT1.ASPMX.L.GOOGLE.COM. gapps.mozillafoundation.org. IN MX 5 ALT2.ASPMX.L.GOOGLE.COM. gapps.mozillafoundation.org. IN MX 10 ALT3.ASPMX.L.GOOGLE.COM. gapps.mozillafoundation.org. IN MX 10 ALT4.ASPMX.L.GOOGLE.COM. mozillafoundation.org. IN TXT "google-site-verification=lgL4psiSm3v6I-0ju-MpDsiBY32ZKya9JtHxOtjXk4g" gapps.mozillafoundation.org. IN TXT "google-site-verification=HuGniawGuN8RM6MzcLyB00RE6w_O0D0DX-Bi0BgUIpg" test.mozillafoundation.org. IN TXT "google-site-verification=IANu2HZIwzbcYNHRjCT6jdqo_9oCiBmHkGRgSnEkNRE" _sip._udp.mozillafoundation.org. IN SRV 0 0 5060 anonsip.scl3.mozilla.com. _autodiscover._tcp.mozillafoundation.org. IN SRV 0 0 443 mail.mozilla.com. _pop3._tcp.mozillafoundation.org. IN SRV 1 0 0 . _pop3s._tcp.mozillafoundation.org. IN SRV 1 0 995 mail.mozilla.com. _imap._tcp.mozillafoundation.org. IN SRV 0 0 0 . _submission._tcp.mozillafoundation.org. IN SRV 0 0 587 smtp.mozilla.org. _imaps._tcp.mozillafoundation.org. IN SRV 0 0 993 mail.mozilla.com. www.mozillafoundation.org. IN CNAME mozillafoundation.org. mozillafoundation.org. IN A 63.245.217.192
Hmm, I'm seeing this: localmac-12:13:19-call.mozillafoundation.org# nslookup mozillafoundation.org Server: 75.75.76.76 Address: 75.75.76.76#53 Non-authoritative answer: Name: mozillafoundation.org Address: 63.245.217.192 localmac-13:19:21-call.mozillafoundation.org# dig mozillafoundation.org ; <<>> DiG 9.8.5-P1 <<>> mozillafoundation.org ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 47210 ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0 ;; QUESTION SECTION: ;mozillafoundation.org. IN A ;; ANSWER SECTION: mozillafoundation.org. 3600 IN A 63.245.217.192 ;; Query time: 152 msec ;; SERVER: 75.75.75.75#53(75.75.75.75) ;; WHEN: Wed Feb 04 13:19:27 CST 2015 ;; MSG SIZE rcvd: 55 localmac-13:19:27-call.mozillafoundation.org# whois 75.75.76.76 # # ARIN WHOIS data and services are subject to the Terms of Use # available at: https://www.arin.net/whois_tou.html # # If you see inaccuracies in the results, please report at # http://www.arin.net/public/whoisinaccuracy/index.xhtml # # # Query terms are ambiguous. The query is assumed to be: # "n 75.75.76.76" # # Use "?" to get help. # # # The following results may also be obtained via: # http://whois.arin.net/rest/nets;q=75.75.76.76?showDetails=true&showARIN=false&ext=netref2 # Comcast Cable Communications Holdings, Inc CCCH-3-34 (NET-75-64-0-0-1) 75.64.0.0 - 75.75.191.255 Comcast Cable Communications Holdings, Inc COMCAST-47 (NET-75-75-72-0-1) 75.75.72.0 - 75.75.79.255 # # ARIN WHOIS data and services are subject to the Terms of Use # available at: https://www.arin.net/whois_tou.html # # If you see inaccuracies in the results, please report at # http://www.arin.net/public/whoisinaccuracy/index.xhtml #
I've confirmed this is not on either of my AWS accounts, mofo or mozilla-labs. Also, I'm an idiot, that was my comcast nameserver. localmac-13:19:35-call.mozillafoundation.org# dig +short NS mozillafoundation.org ns4-64.akam.net. ns7-66.akam.net. ns5-65.akam.net. ns1-240.akam.net. It sure looks like akamai though, not aws.
Considering we're in megarush mode today, I think it'd probably be wiser to just add the following cname, and transfer control of the domain on a day where people aren't scrambling. The ELB DNS to point call.mozillafoundation.org to is: callcongress-production-905568889.us-east-1.elb.amazonaws.com Please have that with a low ttl, if possible. Thanks!
:gozer if you (or someone in your team) is working on a bug. Can you assign it to yourself? This just paged the MOC and I would rather not have to wake someone up if possible. Bumping priority down to Normal to stop paging. :JP if this needs to be dealt with nowish, bump it back up and I'll start waking people up.
Severity: major → normal
Flags: needinfo?(gozer)
(In reply to JP Schneider :jp from comment #5) > Considering we're in megarush mode today, I think it'd probably be wiser to > just add the following cname, and transfer control of the domain on a day call is already a cname to d2okhac1e40nyh.cloudfront.net is it ok to change it ?
Yup, leave it as d2okhac1e40nyh.cloudfront.net. I have that distribution shut off until we pull the 'go live' switch, so everything is set, thanks to the heroics of Gozer. Thanks all!
Status: NEW → RESOLVED
Closed: 11 years ago
Flags: needinfo?(gozer)
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.