taskcluster-livelog-proxy in production

[djmitche]

This is a proxy to allow access to workers that are not otherwise publicly accessible. It replaces the existing dns-based solution that gets live logs via public IPs of EC2 instances

[ckousik]

consider using yamux for multiplexing requests from proxy to worker.
https://github.com/ckousik/yaup.git can upgrade an HTTP/1.1 connection to yamux, and I plan on adding TLS support.

[djmitche]

@jonasfj what's left for this?

[jonasfj]

I think it's done... We still have some workers to port over...

Ckousik is doing that as we speak... But the proxy is written and deployed, so we could strictly speaking close this...

[djmitche]

OK - let's keep it until we have the workers using it and have shut off inbound network access.

[djmitche]

@ckousik what is the status of this project?

[jonasfj]

Done... Deployed in prod... This is now known as webhooktunnel

[djmitche]

Deployment on workers is in https://bugzilla.mozilla.org/show_bug.cgi?id=1436195

[djmitche]

This RFC is stored as rfcs/0021-taskcluster-livelog-proxy-in-production.md