[tor-bugs] #32239 [Internal Services/Tor Sysadmin Team]: setup a cache frontend for the blog

[Tor Bug Tracker & Wiki]

#32239: setup a cache frontend for the blog
-------------------------------------------------+-------------------------
 Reporter:  anarcat                              |          Owner:  anarcat
     Type:  task                                 |         Status:  closed
 Priority:  Medium                               |      Milestone:
Component:  Internal Services/Tor Sysadmin Team  |        Version:
 Severity:  Normal                               |     Resolution:  fixed
 Keywords:                                       |  Actual Points:
Parent ID:  #32090                               |         Points:
 Reviewer:                                       |        Sponsor:
-------------------------------------------------+-------------------------
Changes (by anarcat):

 * status:  merge_ready => closed
 * resolution:   => fixed


Old description:

> design docs in https://help.torproject.org/tsa/howto/cache/
>
> launch checklist:
>
>  1. alternatives listing and comparison (done)
>  2. deploy a test virtual machine by hand, say `cache-01.tpo` (done)
>  3. benchmark the different alternatives (done, ATS and nginx comparable)
>  4. setup secondary node with Puppet, say `cache-02.tpo` (done)
>  4. validation benchmark against both nodes (done)
>  5. lower DNS to 10 minutes wait an hour (done)
>  6. open firewall (done)
>  7. lower DNS to 3 minutes (done, around 2019-11-05 16:00:00)
>  8. point DNS to caches (done)
>  11. raise DNS back to 1h if all goes well. (done!)
>
> Post launch tasks:
>
>  1. update documentation to fill in information from template
>  2. hit ratio stats in to Prometheus, separate ticket?
>  3. convert existing varnish setups into Nginx (probably requires Puppet
> refactoring), separate ticket?
>
> Disaster recovery:
>
>  1. flip DNS back to backend

New description:

 design docs in https://help.torproject.org/tsa/howto/cache/

 launch checklist:

  1. alternatives listing and comparison (done)
  2. deploy a test virtual machine by hand, say `cache-01.tpo` (done)
  3. benchmark the different alternatives (done, ATS and nginx comparable)
  4. setup secondary node with Puppet, say `cache-02.tpo` (done)
  4. validation benchmark against both nodes (done)
  5. lower DNS to 10 minutes wait an hour (done)
  6. open firewall (done)
  7. lower DNS to 3 minutes (done, around 2019-11-05 16:00:00)
  8. point DNS to caches (done)
  11. raise DNS back to 1h if all goes well. (done!)

 Post launch tasks:

  1. update documentation to fill in information from template (done)
  2. hit ratio stats in to Prometheus, separate ticket? (done, although
 missing syslog buffer, see #32461)
  3. convert existing varnish setups into Nginx (probably requires Puppet
 refactoring, see #32462)

 Disaster recovery:

  1. flip DNS back to backend

--

Comment:

 i think this is done. i split the remaining work in separate tickets:

  * syslog buffer for hit stats, see #32461
  * convert existing varnish setups into Nginx, see #32462

 the docs have been updated as best I could, which about wraps it out:

 https://help.torproject.org/tsa/howto/cache/

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/32239#comment:21>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online