1163837 - static hosting for tlscanary.mozilla.org

Status: RESOLVED FIXED

(Infrastructure & Operations Graveyard :: WebOps: Community Platform, task)

Description

[Matt Wobensmith [:mwobensmith][:matt:]]

I'd like to add a DNS entry within the mozilla.com (or mozilla.org) space to point to a location that hosts my SSL compatibility test runs.

At the moment, the URL is located here:
http://people.mozilla.org/~mwobensmith/ssl_compat/

I'd like to have a DNS entry so that people can access it via sslcompat.mozilla.com (or org).

Is that possible?

Comment 1

[Dave Curado :dcurado]

I'm not a DNS guru.

I do know that we could set sslcompat.mozilla.com (or .org) to point to the IP address of
people.mozilla.org, and then the web server (httpd) on that server can be (and may already be)
configured to direct requests for that web page to your more specific url.

I'm going to send this bug over to webops and see what they have to say about it.

Comment 2

[Shyam Mani [:fox2mike]]

Matt,

We generally don't point external DNS entries at people (because of the risk of your site becoming famous enough to grab a ton of traffic) and there might be configuration challenges with doing this as well. 

We can look at other hosting options if that makes sense?

Comment 3

[Matt Wobensmith [:mwobensmith][:matt:]]

If there is a better hosting option, I'd love that. I just need a place to put some static HTML files that can be accessed from anywhere. Thank you.

Comment 4

[Matt Wobensmith [:mwobensmith][:matt:]]

Also, I decided to change the name of the project - and subsequent DNS entry - to "tlscanary", so officially I'd like "tlscanary.mozilla.org" if possible.

Comment 5

[:Atoll]

Correcting topic to .org as requested in comment 4.

Comment 6

[Shyam Mani [:fox2mike]]

(In reply to Matt Wobensmith from comment #3)
> If there is a better hosting option, I'd love that. I just need a place to
> put some static HTML files that can be accessed from anywhere. Thank you.

If you can commit the static files to a github repo or someplace we can pull it from (and you can update it) we'll be happy to host it for you.

Comment 7

[Matt Wobensmith [:mwobensmith][:matt:]]

This is where the project lives now. These files would be the ones to stage:

https://github.com/mwobensmith/ssl_compat

In the future, this will move to an official Mozilla repo, but this is what I have for now.

Comment 8

[Shyam Mani [:fox2mike]]

Matt, 

http://tlscanary.mozilla.org is now live. There is no auto update mechanism setup yet, but the site is up :) I'll leave the bug open to set that up.

Comment 9

[Matt Wobensmith [:mwobensmith][:matt:]]

Wonderful, thank you!

Comment 10

[Matt Wobensmith [:mwobensmith][:matt:]]

Shyam, how difficult is it host this site under SSL? I can file another bug if need be. I believe I was asked if I wanted to host it securely initially and declined, but have since changed my mind.

Comment 11

[:Atoll]

Two options - we can either purchase a commercial certificate from our provider, or issue a Mozilla-only certificate from the internal Mozilla CA. The former will work for all visitors, the latter will only work for those who install the Mozilla Root CA certificate.

It is most likely that you'll want the former, but we do need a separate bug in the WebOps: SSL component requesting the certificate (for cost tracking purposes).

Comment 12

[Matt Wobensmith [:mwobensmith][:matt:]]

Thanks Richard - filed bug 1168661 for the SSL part.

Comment 13

[:Atoll]

The static SSL cert now contains 'tlscanary.mozilla.org', so the site config can be updated to primary :81 with a redirect from :80 whenever.

Comment 14

[:Atoll]

Updated the tlscanary site to live on https, existing http links will be redirected to https, added HSTS header to ensure stickiness of SSL in this case.

Next-step is some sort of auto-update mechanism.

Comment 15

[:Atoll]

Not meant to be resolved yet, sorry. Still trying to work out how autoupdates function here.

Comment 16

[Matt Wobensmith [:mwobensmith][:matt:]]

Hi Richard, any updates here?

Comment 17

[Shyam Mani [:fox2mike]]

sysadmins r105122 adds autoupdate twice an hour for the site.