Closed Bug 713665 Opened 14 years ago Closed 14 years ago

socorro production cannot reach bugzilla.mozilla.org

Categories

(Infrastructure & Operations Graveyard :: NetOps, task)

Product:
Infrastructure & Operations Graveyard
Component:
NetOps
Type:
task
Priority:
Not set
Severity:
normal

Tracking

(Not tracked)

Status:
RESOLVED FIXED

People

(Reporter: rhelmer, Assigned: ahill)

References

Details

Socorro uses bugzilla to find bugs containing a particular crash signature. It looks like bugzilla.mozilla.org has been unreachable from the socorro admin box since 12-20-2011: [rhelmer@sp-admin01.phx1 ~]$ nc -v bugzilla.mozilla.org 443 nc: connect to bugzilla.mozilla.org port 443 (tcp) failed: Connection timed out
On the 20th, Bugzilla was flipped back from SJC to PHX1. MDN has the same problem. When Bugzilla flipped back to PHX1, they are no longer able to query Bugzilla. The obvious difference there is that MDN is in SJC, and sp-admin01.phx1 is in PHX1. However, from an ACL standpoint, I doubt that's relevant. MDN's issue is in bug 712237. Adding jabba as a CC and moving this to the Netops component. It seems to me like something happened to Bugzilla's ACLs between the time it was moved away to SJC and when it was moved back. The bugzilla IP is 63.245.217.60. That will be the destination. sp-admin01.phx1 is 10.8.75.29. That is the source. However, I don't know if this is the *only* source... it may be just one of many. Hopefully rhelmer or jabba can clarify.
Assignee: server-ops → network-operations
Component: Server Operations → Server Operations: Netops
QA Contact: cshields → mrz
See Also: → 712237
I believe for all socorro -> bugzilla interactions, sp-admin01 is the only source, since it is just an hourly cronjob that runs on sp-admin01 that talks to bugzilla.
(In reply to Justin Dow [:jabba] from comment #2) > I believe for all socorro -> bugzilla interactions, sp-admin01 is the only > source, since it is just an hourly cronjob that runs on sp-admin01 that > talks to bugzilla. Yes that's correct, the only server-side Bugzilla request come from the cronjob on the admin box.
Assignee: network-operations → ahill
This may be a result of moving the vips onto the core so to alleviate load on the firewall. I'll work up a flow to permit this.
Done. [root@sp-admin01.phx1 ~]# telnet bugzilla.mozilla.org 443 Trying 63.245.209.72... Connected to bugzilla.mozilla.org. Escape character is '^]'.
Status: NEW → RESOLVED
Closed: 14 years ago
Resolution: --- → FIXED
Product: mozilla.org → Infrastructure & Operations
Product: Infrastructure & Operations → Infrastructure & Operations Graveyard
You need to log in before you can comment on or make changes to this bug.