Last modified: 2014-10-30 16:20:09 UTC
Zirconium.wikimedia.org has public IPv4 and IPv6 address and is used as a CNAME target for the contacts, etherpad, and *.planet virtual hosts. These CNAMES should be changed to misc-web-lb.eqiad and have related Varnish and front end SSL termination configuration added. This will allow removing the public IPs from zirconium thus reducing the attack surface of the cluster.