999940 - Please check flows between vlan 236 winbuild and Domain controllers 6-9

Status: RESOLVED FIXED

(Infrastructure & Operations Graveyard :: NetOps: DC ACL Request, task)

Description

[Mark Cornmesser [:markco] OOO 2024/04/15]

We should have any:any communication between machines in vlan 236 winbuild in SCL3 and domain controllers dc6-9.releng.ad.mozilla.com, 10.22.69.18, 10.12.69.19, 10.22.69.21, 10.12.69.20. 

We are currently seeing an issue with clients receiving/sending data from/to the DCs.

Comment 1

[Arzhel Younsi [:XioNoX]]

Was it working before?
Which host in vlan236 and destination IP/port can I use to troubleshot?

Comment 2

[Arzhel Younsi [:XioNoX]]

I don't see any trace of dc7 or dc9 in our configuration, in witch bug those flows have been requested?
I added them to the rule allowing winbuild to dc6. Is it working as expected?

Comment 3

[Mark Cornmesser [:markco] OOO 2024/04/15]

Yes this was working previously. It seem like the issue began around 4/15 or 4/16. I am going to check around and see if there has been any change in the behavior.

Comment 4

[Mark Cornmesser [:markco] OOO 2024/04/15]

Things seem to be better now. So there no changes made for the flows for dc6? If that is case there is still an unknown issue there, and machines in SCL3 are failing over to one of the other DCs.

Comment 5

[Arzhel Younsi [:XioNoX]]

Indeed, no changes for dc6. Is it possible to know what flow is not going through and causing the issue?

Comment 6

[Arzhel Younsi [:XioNoX]]

hey, please reopen if there is still any issue.