[prev in list] [next in list] [prev in thread] [next in thread] 

List:       outages-discussion
Subject:    Re: [Outages-discussion] FB Outage AAR I - Engineering Posts Pabulum
From:       Bill Woodcock <woody () pch ! net>
Date:       2021-10-06 8:48:22
Message-ID: 7F53238A-1A78-4EF4-B901-5BC01E9A69A4 () pch ! net
[Download RAW message or body]

[Attachment #2 (multipart/signed)]


> > What team doesn't have their management IPs somewhere other than DNS? That seems \
> > crazy to me.

> I've always been partial to a binder with printouts of all vital IPs for \
> infrastructure and disaster recovery, updated monthly

We have a not-yet-fully-enacted plan that we've been noodling with to have all of our \
critical stuff in un-routed IPv6, with centrally-managed hosts files being generated \
wih only need-to-know contents and pushed to each machine with a need-to-know \
individually.  As well, of course, as keeping encrypted different-site backups, etc.

We haven't yet seen a problem with it.  We have some Jira/Confluence boosters \
internally, which is tricky, because people want to put sensitive information into \
the Jira and Confluence instances, but they need Internet access to phone home and do \
updates and stuff, apparently.  Which is unfortunate.  But I guess I heard that \
they'd shot themselves in the foot some other way recently, which tipped the balance \
in favor of getting rid of them, I think.  I'm not fully up-to-date on that argument.

                                -Bill


["signature.asc" (signature.asc)]

-----BEGIN PGP SIGNATURE-----
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=ntXO
-----END PGP SIGNATURE-----


_______________________________________________
Outages-discussion mailing list
Outages-discussion@outages.org
https://puck.nether.net/mailman/listinfo/outages-discussion


[prev in list] [next in list] [prev in thread] [next in thread]