GRAVE STATUS UPDATES AND CEMETERY NEWS' Journal
 
[Most Recent Entries] [Calendar View] [Friends]

Below are the 2 most recent journal entries recorded in GRAVE STATUS UPDATES AND CEMETERY NEWS' InsaneJournal:

    Saturday, August 13th, 2022
    8:22 pm
    AWS downtime followup (bold is my anger)



    Warped
    Sun Aug 07 2022
    15:58:44 GMT-0700
    (Pacific Daylight Time)

    We finished moving over to a VPC today, and ran into a snag of moving the IP to the VPC. It's locked (probably because we had you do the rdns entry before we could modify it, plus we had the port 25 allow enabled).

    We'd really like to keep the old IP because we've had it for so long and there is reputation scores for email that would be affected.

    old IP: 22.23.24.24 ( rdns is deadjournal.com )
    new vpc: vpc-0[redacted]
    new instance i-0[redacted]

    NOTE: We also had the port 25 enabled and that would need to move to the VPC as well.

    Warped
    Sun Aug 07 2022
    16:31:49 GMT-0700 (Pacific Daylight Time)

    [edited for time and to fit your tv screen]
    11:34:03 PM Warped: I suspect someone needs to remove the RDNS from the IP, unlock it, move it to the VPC scope, then reset RDNS and the enable for port 25 for it
    [...]
    11:39:08 PM AWS: One moment, please. I am still filling the internal ticket to request the IP release.
    11:40:10 PM Warped: oh, it's not a release.. it's a change to VPC scope. release might be read as letting the IP go (which is not what we want)
    [Edited to remove stuff... and more explaining...]
    00:07:16 AM Warped: so I suspect the process is "remove SMTP port 25 on the IP", "remove RDNS of deadjournal.com on the IP" change the scope to VPC for the IP, then add the RDNS back and the SMTP allow"
    [...]






    [more sparse contact omitted, more explaining ... more waiting...]

    Amazon Web Services

    Thu Aug 11 2022
    04:25:00 GMT-0700 (Pacific Daylight Time)

    Thank you very much for getting back to me, and I fully understand the inconvenience this issue is causing to your production. I would like to apologize for the time it takes to resolve your case.

    To speed up resolution for your case, I have reached out to the internal team directly and worked with one of their engineers to resolve this for you. I was informed that due to the way EC2 classic and VPCs are structured, the system will not allow transferring IP to VPC without removing rDNS. To speed up resolution, our team removed rDNS for you manually, and you should be able to move your IP in a console to VPC now. When the transfer is done, you can add rDNS back, which according to our internal team should not take too long.

    I hope that the above solution helps you with your task, and please let me know if you have any additional questions or concerns.

    I hope you have a great day ahead.

    We value your feedback. Please share your experience by rating this and other correspondences in the AWS Support Center. You can rate a correspondence by selecting the stars in the top right corner of the correspondence.








    So, if left to AWS, DJ would have been down completely from Sunday until early Thursday morning because someone couldn't figure out how to go flip a switch. If they weren't expiring their old network method that's been this way SINCE THE BEGINNING OF TIME, none of this would have happened. Clearly their playbook team didn't actually consider ancient VMs running... which is going to bite them badly on the 15th (tomorrow).





    Anyway, I had moved everything where it needs to be on Thursday/Friday and finally got around to this nice little post-mortem.


    You can follow us on the bird shitpost site:


    Tuesday, August 9th, 2022
    3:56 pm
    Welcome back
    You might have noticed a recent downtime. Or, you may have not. Regardless, for those of you not following @deadjournal on the bird site, here is a boring update:

    We had been receiving notifications from Amazon AWS that this was happening, and I scheduled time out of my life to deal with this for the past weekend:

    We are contacting to remind you that on August 15, 2022 we will retire the EC2-Classic environment and you will need to migrate your AWS resources from EC2-Classic to Amazon VPC before this date.

    So, I educated myself and spent all day Saturday configuring a VPC that would work for DJ. It was convoluted and annoying because I couldn't use their automation tools to convert it over, so it had to be manually. After bringing up some test instances of DJ and hooking it to the VPC, I worked out the kinks(!) and bugs. So, I brought down DJ and created a new instance and used the VPC. All was looking great until I tried to move over the IP to it...



    TLDR; we're obviously up on a different IP while they figure their shit out.

    TL:
    A long time ago, I had to have DJ's IP permitted to send email through AWS (which by default doesn't permit inbound, because we get abuse, and support updates, as well as some people use email to reply to journal comments), so they tagged the IP as allow. We also needed the IP to have reverse DNS correct so that the majority of email exchangers (like gmail, outlook, hotmail(!), etc) wouldn't just either tag it as spam or outright refuse the connection. They made the changes (this was before they added the option to the AWS Console UI to do it yourself).

    So the interface was burping that I couldn't move the IP to the VPC because it was... locked. So, I was ready and couldn't get the IP over to the new instance on the VPC. I popped a support ticket to them (OH YOU THINK DEALING WITH CABLEMODEM SUPPORT IS BAD?). They even had a little pull-down about an issue with the EC2->VPC as the subject... how convenient.



    I get someone telling me to read pages of documentation and what not, when I specifically pointed out that the problem was the UI and that the IP was locked and that someone needed to do their magic and move it to the VPC scope in a chat with the rep.

    I get a reply that they have, as a courtesy to me, moved it to premium support, since we only have basic support and that I would have to wait for them to reply. Chat over, and now I'm stuck with doing updates to the ticket through the support site.

    TIME PASSES. NOTHING HAPPENS. Then I get a response that I need to remove the reverse DNS which will take a couple days by filling out a form and waiting for an email. I replied with that this was unacceptable, and that the problem is on their side and some wizard needs to fix it... to which I was met with crickets.

    I updated Twitter, and the typical AWS support account that searches the troves of bird shitposts responds to the message asking for the case #, to which I DM'd them. I get a beautiful response that they have looked at the ticket and that due to the nature of Twitter that they can't discuss it and that they have notified support to look at it.

    Much screaming later... I decided to go ahead and start some much-needed maintenance on the database holding all of your precious diatribes and tribulations that was going to take at least a day of downtime anyway. At the same time, I started changing everything over to a new IP, because who knows how long this is going to take them?

    I get a support response that they are forwarding it to other people to deal with it. Meanwhile, the database fixing finished, and the DNS IP change I made to the domain finished propagating, so I just brought DJ back up on it.

    AND WE ARE STILL WAITING FOR A RESOLUTION. When that happens, I can switch the IP back, and all will be back to normal. In the meantime, any journal entry reply notices, etc may end up in your SPAM folder because of the RDNS and lack of reputation this new IP has with spam checkers.

    So, once again, AWS is causing time-consuming headaches.

    Stay tuned. Or don't. I'm not your parent.

GRAVE STATUS UPDATES AND CEMETERY NEWS   About InsaneJournal