please open netflow for buildbot bridge dev db

RESOLVED FIXED

Status

Infrastructure & Operations
NetOps: DC ACL Request
RESOLVED FIXED
2 years ago
2 years ago

People

(Reporter: bhearsum, Assigned: dcurado)

Tracking

Details

(Reporter)

Description

2 years ago
Please open netflows FROM:
buildbot-master84.bb.releng.scl3.mozilla.com (10.26.68.24)

TO
port 3306
ON
stage-rw-vip.db.scl3.mozilla.com (10.22.70.63)
(Assignee)

Comment 1

2 years ago
working on this
Assignee: network-operations → dcurado
Status: NEW → ASSIGNED
(Assignee)

Comment 2

2 years ago
This security policy has been configured.
Please confirm whether it meets your requirements or not?
Thanks.

dcurado@fw1.ops.scl3.mozilla.net> show security policies from-zone dc to-zone db policy-name stage-rw-vip--mysql detail
node1:
--------------------------------------------------------------------------
Policy: stage-rw-vip--mysql, action-type: permit, State: enabled, Index: 685, Scope Policy: 0
  Policy Type: Configured
  Sequence number: 8
  From zone: dc, To zone: db
  Source addresses:
    buildbot-master84.bb.releng.scl3: 10.26.68.24/32
    mobile-imaging-state1.p127.releng.scl3: 10.26.254.33/32
  Destination addresses:
    stage-rw-vip.db.scl3: 10.22.70.63/32
  Application: mysql
    IP protocol: tcp, ALG: 0, Inactivity timeout: 1800
      Source port range: [0-0]
      Destination port range: [3306-3306]
  Per policy TCP Options: SYN check: No, SEQ check: No

dcurado@fw1.ops.scl3.mozilla.net> show configuration | compare rollback 1
[edit security policies from-zone dc to-zone db policy stage-rw-vip--mysql match]
-      source-address mobile-imaging-state1.p127.releng.scl3;
+      source-address [ mobile-imaging-state1.p127.releng.scl3 buildbot-master84.bb.releng.scl3 ];
[edit security zones security-zone dc address-book]
       address dev2.db.phx1 { ... }
+      address buildbot-master84.bb.releng.scl3 10.26.68.24/32;
Flags: needinfo?(bhearsum)
(Reporter)

Comment 3

2 years ago
Looks good Dave, thank you very much for the quick turnaround!
Status: ASSIGNED → RESOLVED
Last Resolved: 2 years ago
Flags: needinfo?(bhearsum)
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.