#11226 Update DNS entry for component-registry
Closed: Fixed 2 years ago by kevin. Opened 2 years ago by jazinner.

NOTE

If your issue is for security or deals with sensitive info please
mark it as private using the checkbox below.

Describe what you would like us to do:


Following https://pagure.io/fedora-infrastructure/issue/11143 we get the DNS entry updated to point to 'apps.ext-waf.spoke.prod.us-east-1.aws.paas.redhat.com' .

However that route restricts ingress to requests from Akamai servers. Since we don't have this site cached in Akamai direct requests are not getting through.

If you guys have an existing setup with Akamai perhaps you can add caching for component-registry, and we could keep the current DNS setup. Alternatively if you can't provide caching with Akamai we'll have to We need to switch it back to '*.apps.ext.spoke.prod.us-east-1.aws.paas.redhat.com'

When do you need this to be done by? (YYYY/MM/DD)


2023/04/06


Further reading on this suggest the the Akamai setup would also need to be using 'SiteShield' which I believe is provided by 'web acceleration' product. So we'd have to be using that for the current DNS setup to work.

Metadata Update from @zlopez:
- Issue tagged with: dns

2 years ago

We will need to switch it back. We have no contact with akamai at all. ;(

Done. Can you confirm it looks ok (in a few minutes after it syncs out)

Metadata Update from @phsmoura:
- Issue priority set to: Waiting on Assignee (was: Needs Review)
- Issue tagged with: low-gain, low-trouble, ops

2 years ago

Looks good.

Thanks

On Thu, 6 Apr 2023, 2:22 am Kevin Fenzi, pagure@pagure.io wrote:

kevin added a new comment to an issue you are following:
Done. Can you confirm it looks ok (in a few minutes after it syncs out)

To reply, visit the link below or just reply to this email
https://pagure.io/fedora-infrastructure/issue/11226

Great. Let us know if you need anything more. ;)

Metadata Update from @kevin:
- Issue close_status updated to: Fixed
- Issue status updated to: Closed (was: Open)

2 years ago

Log in to comment on this ticket.

Metadata
Boards 1
ops Status: Backlog