924960 - Please allow outbound https requests from "mango" -> Amazon S3

Status: RESOLVED FIXED

(Infrastructure & Operations Graveyard :: NetOps: DC ACL Request, task)

Description

[Mark Reid [:mreid]]

For bug 922745, we'll need to be able to make outbound HTTPS Post requests to send data from the mango cluster to Amazon S3.

Comment 1

[T [:tmary] Meyarivan]

IP range(s) for Mango cluster:

10.22.24.3[6-9] # 3 admin nodes
10.22.24.[48-104] # 56 compute nodes, 1 GW node

--

Comment 2

[Michael Henry [:tinfoil]]

:tmary - May I suggest using the datacenter proxies for this?

Amazon has a habbit of chaning ip addresses of its destinations.  The proxy will auto-adapt to IP changes as long as you're using names.

I can get it set up in minutes if you can provide destination name(s).

Comment 3

[T [:tmary] Meyarivan]

(In reply to Michael Henry [:tinfoil] from comment #2)
> 
> I can get it set up in minutes if you can provide destination name(s).

IIUC s3.amazonaws.com

--

Comment 4

[T [:tmary] Meyarivan]

Starting upload etc - may see increase in no of connections from node[1-56].mango.metrics.scl3.mozilla.com

--