800439 - Stage Squid Change to allow for larger /.well-known/browserid responses

Status: RESOLVED FIXED

(Cloud Services :: Operations: Deployment Requests - DEPRECATED, task)

Description

[ozten]

According to https://github.com/mozilla/browserid/issues/2559 it sounds like we impose a limit to the size of responses when we're fetching /.well-known/browserid during discovery.

1) What is the current value?

2) What is a new sane value? I propose 10x our current value.

We need this deployed to stage, we'll test, and then we'll file a new bug for production deployment.

We should do this soon, outside of our normal train schedule as it's low risk and an operational task against Squid.

Comment 1

[John Morrison [:jrgm]]

bumped into this looking for something else. ozten, is this still what needs to be done?

Comment 2

[Austin King [:ozten]]

gene, can you verify we can accept large well knowns in Persona production stack?

Comment 3

[Gene Wood [:gene]]

We currently limit at 2KB for some reason :

https://github.com/mozilla/identity-ops/blob/master/chef/cookbooks/persona-proxy/templates/default/etc/squid/squid.conf.erb#L88

I can either remove that limit or change it. What would you prefer?

Comment 4

[Austin King [:ozten]]

Let's make sure it's set to max of 10k.

Comment 5

[Gene Wood [:gene]]

Change made in physical stage and prod at sysadmins r63883 and in AWS at https://github.com/mozilla/identity-ops/commit/04181aab43b36fa38baa25094868710612220ab8

Change deployed to physical production (both datacenters) physical stage and aws stage