All,
We’re going to be making a global change related to our host firewall (iptable rules) on all of our Chef managed hosts starting on Tuesday, May 25 at 2pm PDT (2100 UTC). If everything goes well, there should be no interruption in service, however since this is a global change that might impact services, I wanted to send this notice out.
We’re planning on disabling our configuration management globally so that we can make this change individually on each system to ensure we don’t have a mass outage. Obviously, this is going to take some time and I don’t expect we’ll finish on Tuesday and will continue with the process on the following day(s) as needed during our normal business hours.
We have done thorough testing (as much as we can) on our end, so I don’t expect any issues, but we like to plan just in case. This change will make iptable rule management much easier for us in the long run and also simplifies some of it.
If you have any questions, please let me know. I will send out an email once we have finished the migration.
Thanks-
···
Lance Albertson
Director
Oregon State University | Open Source Lab