985920 - redirect from m.input.mozilla.com to input.mozilla.org

Status: RESOLVED FIXED

(Infrastructure & Operations Graveyard :: WebOps: Other, task)

Description

[Will Kahn-Greene [:willkg] ET needinfo? me]

I have no idea what m.input.mozilla.com points to or what is handling that traffic. We no longer use that domain for Input.

However it seems that there might still be things that link to that domain, so this bug covers the following:

1. find out what is handling that domain and if there are redirects in pkce, and

2. pending the outcome of item 1, setting up a redirect for all hppt://m.input.mozilla.com traffic to https://input.mozilla.org

Comment 1

[Chris Turra [:cturra]]

m.input.mozilla.org is a ServerAlias in the apache config for input.mozilla.org. i don't know why it's there, but there is this comment in the config file:

 # m.input.mozilla.org should be available over HTTP w/o redirect [to https]


i do recall it being there before we did the input rewrite, so my best guess is this is something legacy (predates me).

Comment 2

[Will Kahn-Greene [:willkg] ET needinfo? me]

To clarify, this is about m.input.mozilla.COM not m.input.mozilla.ORG.

Is there a server alias for the .COM, too?

Comment 3

[Chris Turra [:cturra]]

(In reply to Will Kahn-Greene [:willkg] from comment #2)
> To clarify, this is about m.input.mozilla.COM not m.input.mozilla.ORG.
> 
> Is there a server alias for the .COM, too?

oh, i missed that! no, there isn't an apache config for m.input.mozilla.com, tho, in DNS i do see it routing to the input load balancer vip.

 $ dig +short m.input.mozilla.com
 63.245.217.51

 $ host 63.245.217.51
 51.217.245.63.in-addr.arpa domain name pointer input.zlb.phx.mozilla.net.

Comment 4

[Will Kahn-Greene [:willkg] ET needinfo? me]

Also, http://m.input.mozilla.org/ redirects to https://m.input.mozilla.org/en-US/ (that's in our code (thank you locale redirect!)) which then shows a "This connection is untrusted" error page.

Given that that's not working at all and no one has said peep, my vote is we change m.input.mozilla.ORG from being a server alias to being a redirect, too.

Ricky: Does that sound right/good to you?

Comment 5

[Chris Turra [:cturra]]

(In reply to Will Kahn-Greene [:willkg] from comment #4)
> Also, http://m.input.mozilla.org/ redirects to
> https://m.input.mozilla.org/en-US/ (that's in our code (thank you locale
> redirect!)) which then shows a "This connection is untrusted" error page.

you would see this error in the browser because m.input.mozilla.{com|org} are not subject alternative names on the ssl certificate. 


> Given that that's not working at all and no one has said peep, my vote is we
> change m.input.mozilla.ORG from being a server alias to being a redirect,
> too.

+1 here too.

Comment 6

[Ricky Rosario [:rrosario, :r1cky]]

(In reply to Will Kahn-Greene [:willkg] from comment #4)
> Ricky: Does that sound right/good to you?

THUMBS UP!

Comment 7

[Will Kahn-Greene [:willkg] ET needinfo? me]

Ok. So to be explicit, let's do the following two things:

1. change m.input.mozilla.ORG server alias to a redirect so anything coming to http://m.input.mozilla.ORG/whatever goes to https://input.mozilla.org/whatever

2. add a new redirect so anything coming to http://m.input.mozilla.COM/whatever goes to https://input.mozilla.org/whatever

I think that covers it. Thanks, Chris!

Comment 8

[Chris Turra [:cturra]]

new vhost config in place.

<VirtualHost *:80>
    ServerName m.input.mozilla.org
    ServerAlias m.input.mozilla.com

    RewriteEngine On
    RewriteRule ^/?(.*) https://input.mozilla.org/$1 [R=301,L]
</VirtualHost>


$ curl -IL http://m.input.mozilla.org/en-US/\?date_start\=2014-02-18\&selected\=30d
HTTP/1.1 301 Moved Permanently
Server: Apache
X-Backend-Server: input2.webapp.phx1.mozilla.com
Vary: Accept-Encoding
Content-Type: text/html; charset=iso-8859-1
Date: Thu, 20 Mar 2014 17:37:46 GMT
Location: https://input.mozilla.org/en-US/?date_start=2014-02-18&selected=30d
Transfer-Encoding: chunked
Connection: Keep-Alive
X-Cache-Info: caching

HTTP/1.1 200 OK
Server: Apache
Vary: Cookie, Accept-Encoding
X-Backend-Server: input1.webapp.phx1.mozilla.com
Content-Type: text/html; charset=utf-8
Date: Thu, 20 Mar 2014 17:37:47 GMT
Transfer-Encoding: chunked
Connection: Keep-Alive
Set-Cookie: anoncsrf=VhHTAslfQHMJjkw0yqDi0metx2WpENUz; expires=Thu, 20-Mar-2014 19:37:47 GMT; httponly; Max-Age=7200; Path=/; secure
X-Frame-Options: DENY
X-Cache-Info: caching


$ curl -IL http://m.input.mozilla.com/en-US/\?date_start\=2014-02-18\&selected\=30d
HTTP/1.1 301 Moved Permanently
Server: Apache
X-Backend-Server: input1.webapp.phx1.mozilla.com
Vary: Accept-Encoding
Content-Type: text/html; charset=iso-8859-1
Date: Thu, 20 Mar 2014 17:37:53 GMT
Location: https://input.mozilla.org/en-US/?date_start=2014-02-18&selected=30d
Transfer-Encoding: chunked
Connection: Keep-Alive
X-Cache-Info: caching

HTTP/1.1 200 OK
Server: Apache
Vary: Cookie, Accept-Encoding
X-Backend-Server: input1.webapp.phx1.mozilla.com
Content-Type: text/html; charset=utf-8
Date: Thu, 20 Mar 2014 17:37:47 GMT
Transfer-Encoding: chunked
X-Frame-Options: DENY
Connection: Keep-Alive
X-Cache-Info: cached

Comment 9

[Will Kahn-Greene [:willkg] ET needinfo? me]

Awesome--thank you Chris!

Comment 10

[Eric Ziegenhorn :ericz]

Removed the Nagios check for m.input.mozilla.org.  We still have coverage for input.mozilla.org.