[10:55:29] 06Traffic, 13Patch-For-Review: Enable QoS for upload video files - https://phabricator.wikimedia.org/T412785#11472216 (10cmooney) This looks to be working as expected. Packets are marked correctly on cp7009: ` cmooney@cp7009:~$ sudo tcpdump -v -c 10 -i eno12399np0 -l -p -nn "tcp port 443 and ip[1] = 0x88 and... [12:16:21] 06Traffic, 13Patch-For-Review: Enable QoS for upload video files - https://phabricator.wikimedia.org/T412785#11472474 (10cmooney) Actually @Fabfur it occured to me that perhaps the haproxy rule should explicitly set the TOS to 0x00 (default priority) for all other files? So in my own made-up syntax that I'm... [12:30:35] hey, I've been redirected here to ask about this: I'm working on moving mailman's frontend behind CDN (https://w.wiki/H2kq) and I was checking how to handle the IP situation. I was reaching the conclusion (and I'm thinking mistakenly) that I should add a private IP to lists hosts. [12:30:35] Since the server will have to keep its public IP for a while to keep being MX, I don't want to create a security hole and/or break network isolation somehow, so here I am :) [14:49:32] 06Traffic, 07Essential-Work, 05MW-1.46-notes (1.46.0-wmf.5; 2025-12-02), 06Test Kitchen (Test Kitchen (Experiment Platform Sprint 17)): Test the impact of incremental increase in traffic for cache splitting experiments - https://phabricator.wikimedia.org/T407570#11473247 (10KReid-WMF) [16:02:39] 10netops, 06Infrastructure-Foundations, 06SRE: InboundInterfaceErrors alerts firing for Nokia switches on v25.10.1 - https://phabricator.wikimedia.org/T412733#11473512 (10Papaul) ` Hi Papaul, I’ve replicated this issue in our lab. I’m escalating this to our next level of support for further investigation. I... [17:30:07] arnaudb: for gerrit, for the time being, the plan of record is that we'll just forward from the CDN to the existing public IP address (but referenced in the CDN config via an internal CNAME, so we can easily change it in the future) [17:30:44] adding a private IP isn't necessary to do any of the steps up to and including "transition the public DNS record to the CDN dyna" [17:30:56] (you do want to do it eventually, but, eventually) [17:31:37] afaik it's also fine for a server to have both public and private IPs eventually, although you can run into issues with firewall rules and such :) [17:31:41] s/eventually/simultaneously/ [19:05:26] 06Traffic, 06Data-Persistence, 10MediaViewer, 10SRE-swift-storage, 10Thumbor: Propose a new set of standard thumbnail sizes - https://phabricator.wikimedia.org/T412971#11474062 (10bvibber) > iOS currently uses 2x320 = 640 on retina devices, which would end up being 960-downscaled. Is that too wasteful? c...