3 ms·
They didn't even look at their firewall tables before deploying a completely different OS to production? Wow.
by peterwwillis 10y ago
They didn't even look at their firewall tables before deploying a completely different OS to production? Wow.
- nailer 10y agoThis: > Upon the migration of the final nameserver – you guessed it – DNS died everywhere. The culprit turned out to be a difference in firewall configuration between the two OSes: the default generated ruleset on Trusty did not allow for port 53 on the public interface. Deploy a new service on a Linux box in the last decade? Poke it through whatever the distro uses to manage iptables. It's like a webdev saying "it turns out DROP deletes tables".