DNS (original) (raw)

Description

Issues relating to the nameserver configuration of Wikimedia servers (infrastructure). Not to be confused with Traffic.

See also Domains (for domain procurement etc.).

Parent project: SRE

Should this be closed in favor of T205378: Support Encrypted Client Hello (ECH) on Wikimedia servers? Seems like pretty soon browsers and servers will support technology that conceals web domains from censors, so rearchitecting our domains and subdomains to solve the same problem may not be necessary.

@CDobbins All looks good on the Anthropic end, I'm seeing the domain as verified now. Thanks for your help, feel free to close the ticket!

I just updated our DNS records, @bcampbell. Let me know if there's any unexpected behavior or if I can close the ticket.

Change #1279402 merged by CDobbins:

[operations/dns@master] wikimedia.org: Add TXT verification for Claude

https://gerrit.wikimedia.org/r/1279402

Change #1279402 had a related patch set uploaded (by CDobbins; author: CDobbins):

[operations/dns@master] wikimedia.org: Add TXT verification for Claude

https://gerrit.wikimedia.org/r/1279402

Hi, @JKelsoteel-WMF ! This has been deployed - I'm going to go ahead and close this; Please do re-open if something is not as expected. Thanks!

Change #1270568 merged by BCornwall:

[operations/dns@master] wikimedia.org: Add TXT verification for Miro

https://gerrit.wikimedia.org/r/1270568

Dzahn renamed T423199: [Update DNS Record Request] - wikimedia.org - Add TXT verification for Miro from [Update DNS Record Request] - wikimedia.org to [Update DNS Record Request] - wikimedia.org - Add TXT verification for Miro.

Change #1270568 had a related patch set uploaded (by BCornwall; author: BCornwall):

[operations/dns@master] wikimedia.org: Add TXT verification for Miro

https://gerrit.wikimedia.org/r/1270568

What would be a good day to alert about those ? Or even better, not even need an alert ?

Thanks for fixing it but I agree that we need an alert for this otherwise we will miss this again.

I've merged and release the fix, do you want to keep the task open to implement some form of check to prevent this from happening?

Change #1266952 merged by Volans:

[operations/dns@master] Add missing includes from Netbox exported data

https://gerrit.wikimedia.org/r/1266952

Change #1266952 had a related patch set uploaded (by Volans; author: Volans):

[operations/dns@master] Add missing includes from Netbox exported data

https://gerrit.wikimedia.org/r/1266952

We can close this, there has been a decade of improvements to how we run DNS and this was for the legacy microservices we ran prior to Kubernetes.

@BBlack can this be closed? I don't see action for Service ops so removing our tag, feel free to add back if needed.

Change #1216856 merged by Dzahn:

[operations/puppet@production] ncredir: remove wikipedia25.org, keep wikipedia25.com to www.wikipedia25.org

https://gerrit.wikimedia.org/r/1216856

abstract.wikipedia.org has been added to DNS

Change #1227706 merged by Dzahn:

[operations/dns@master] add abstract.wikipedia.org to section for wikis not covered by langlist

https://gerrit.wikimedia.org/r/1227706

I believe this has been solved with the latest patch merge. If this is in error, please re-open!

{% from "helpers/langlist.tmpl" import langs %} {% for lang in langs -%} {{ lang }} 1D IN CNAME dyna.wikimedia.org. {{ lang }}.m 1D IN CNAME dyna.wikimedia.org. {% endfor -%}

So this is what we are setting when iterating over the language editions and this is what we are setting for the other stuff below, so there is no difference. But yes, not putting abstract in langlist makes sense.

Yes, I should have clarified better, sorry. There is nothing special about langlist.tmpl as such. It just lists the language editions, which are then iterated over in: