Services/Meetings/2012-01-24

• Time: Tuesday at 9:15 AM PST / 12:15 PM EST / 5:15 PM UTC.
• Place: Mozilla HQ, North Bridge (Vidyo room "Services")
• Phone (US/Intl): 650 903 0800 x92 Conf: 98616#
• Phone (Toronto): 416 848 3114 x92 Conf: 98616#
• Phone (US): 800 707 2533 (pin 369) Conf: 98616#

Who's away?: ….

Ops

Note: Goals do not reflect project timelines discussed in the Work Week pending budget approval.

• If you're curious, I'm asking for another ~$2M for the various projects.
  • Services budget spreadsheet (rough/untested numbers)

BrowserID at PHX1

• Cross-connect in place. Netops has firewall work pending, no ETA available
• Kickstart found broken in PHX1, repairs underway.

Production work this week

ChangeWindow 2012-01-24

New/modified changes

• Deploy cross root intermediate SSL certificate to *.s.m.c, *.browserid.org [bug 720478]
• Finish innodb rseg alterations to SCL1 and PHX1 Sync databases [bug 694234]
• Purge pre-ttl history entries [bug 687103]

Unchanged since last week

• Update SCL2 internal Zeus networking rules to match staging. [bug 708444]
• Upgrade SCL2 and PHX1 external Zeus software to match internal Zeus and staging. [bug 718473]
• Reconfigure SCL2 and PHX1 Sync databases to decrease CPU load per request. [bug 694222]
• Upgrade Sync reg/sreg to fix CEF logging for Infrasec. [bug 717073]

Engineering

Sagrada

New engineering wiki framework going up at https://wiki.mozilla.org/Services/Sagrada - Toby will work with people to move their projects under there into that namespace

Token Server (Tarek)

• finishing the crypto bits this week
• security review on the design to start soon
• ongoing dev of the server
• we should meet with Ben B., Ryan K., Toby to define app-to-app auth/

Metlog (Rob)

• Metlog MozSvc integration nearly ready for testing
• Lots of conversations w/ other folks re: Metlog requirements
• Have data successfully being pushed into HDFS
• Initial sync-server load testing Coming Soon®

Sauropod (rfkelly & rtilder)

Received the Latest! and Greatest! direction for What Is Sauropod?(finish the bottle) on Friday which is essentially a reset back to the original design: Be a token server authorized, encrypted key value store. Developed goals for the quarter for: get an unencrypted but authn/authz implementation in place.

Queuey (bbangert)

Qdo worker library underway, for batch processing of 'jobs' on the queues. Still finishing second draft of Queuey API with new BrowserID assertion handling, wiki will be updated when ready. Acquiring realistic data from Socorro team for creating load testing scripts.

Big Lebowski (rtilder)

While I await further Sauropod clarification, I will finish the BigL. Need to come back up to speed on the code.

Sync

Server (rfkelly)

Meeting to triage bugs and start work on 2.0 yesterday

Notifications

WebApp/BrowserID support (BIPostal)

• post work week work.
• rewrote portions of pymilter to use gevent, saw a 50% speed improvement.
• add'l meetings with ops & qa around bipostal push.
• continuing improvements on milter performance.
• continue review of Push code.

Client/Server (jbalogh)

• Have Fennec build + push server that supports the whole flow on Android
• Rebuilding the push server to scale now that the prototype works

QA

• Updated our Q1 goals from last week's workweek

Testing and Sign-offs (tracy)

• Desktop client train expected ready for testing by EOD Tuesday. Need announcement so MihaelaV in Romania can jump on it over night.
• Continue to pound on Android Native Sync
• Planning
  • Working with David Boswell on QA community to improve our transparency, on-ramps and overall services QA community picture for 2012. Tracy is taking the stewardship responsibility off of James plate.
  • Moving UI automation to open source image recognition tool Sikuli. The fix for bug 715877 should get us over the hump in automating passing the JPAKE code from client to client

Sync Server (jbonacci)

• 20110124 maintenance window
  • Bug 717691 - Android SDK r8 OpenSSL and certificate annoyances
  • Bug 720478 - add "cross root" intermediate to production *.s.m.c, *.browserid.org certificates
  • Bug 710338 - Upgrade browserid.org SSL cert to EV or crazypants good level

BrowserID (jbonacci)

• 20110124 maintenance window
  • Bug 717691 - Android SDK r8 OpenSSL and certificate annoyances
  • Bug 720478 - add "cross root" intermediate to production *.s.m.c, *.browserid.org certificates
  • Bug 710338 - Upgrade browserid.org SSL cert to EV or crazypants good level

• Bug 719243 - QA and deploy BrowserID train-2012.01.18 to production
  • Proxy support set up
  • Primaries in and enabled
  • Localization in code but disabled

• Hotfixes and lots of debug work going on in the Dev and Stage environments

Deployment Requests

No server trains (unless there's an issue) until 2.0. Makes little sense to deploy incremental improvements on the current code.

Security

Android Sync

• Code review of Android sync + J-PAKE is under way
  • ETA is unknown
  • imelven and dchan looking at deliverable-0.2 branch

Sagrada

• yboily has scheduled an initial threat model meeting for today (01-24)
• 11 AM Pacific
• MV 3A - All Your Base (Vidyo 5316)
• The focus of this will to document the relationship and data-flows between the following components:
  • Token Server / Authentication Server
  • Metrics
  • Storage (Sauropod)
  • Queuing (Queuey)