Opened 22 months ago

Closed 21 months ago

Last modified 21 months ago

#18494 closed task (fixed)

Setup CNAME records for reports.ooni.torproject.org and explorer.ooni.torproject.org

Reported by: hellais Owned by: tpa
Priority: Medium Milestone:
Component: Internal Services/Tor Sysadmin Team Version:
Severity: Normal Keywords:
Cc: weasel, anadahz Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description (last modified by hellais)

After discussing this with weasel it seems like it's best if we move hosting the reports of OONI on a machine that is not staticiforme, but instead use some of the hardware we have.

To do so we would need to have some CNAME records setup that point to a domain we can use to point to these servers.

The CNAME record pointers should be:

# For hosting the measurements
CNAME measurements.ooni.torproject.org measurements.ooni.io
# For hosting the explorer
CNAME explorer.ooni.torproject.org explorer.ooni.io

We will then proceed in getting some SSL certificates for them from letsencrypt.

Child Tickets

Change History (3)

comment:1 Changed 22 months ago by hellais

Description: modified (diff)

comment:2 Changed 21 months ago by weasel

Resolution: fixed
Status: newclosed

done.

Note that explorer is now a cname chain. That's evil and really should be avoided.

Also, why is there no DS record for ooni.io in the io zone?

comment:3 in reply to:  2 Changed 21 months ago by hellais

Replying to weasel:

done.

Note that explorer is now a cname chain. That's evil and really should be avoided.

Yes I will fix that now.

Also, why is there no DS record for ooni.io in the io zone?

I thought it would have been setup by the registrar since I requested DNSEC to be enabled on it, but you are right that it appears to not be configured correctly.

Will look into this.

Note: See TracTickets for help on using tickets.