Compilation results for cp1100.eqiad.wmnet: System changes detected
You can retrieve this result from host.json.Catalog differences
Summary
| Total Resources: | 4028 |
|---|---|
| Resources added: | 4 |
| Resources removed: | 0 |
| Resources modified: | 2 |
| Change percentage: | 0.15% |
Resources only in the new catalog
- File[/usr/share/CIDERGRINDER]
- File[/etc/haproxy/lua/cidergrinder_bloom.lua]
- Package[lua5.4-ciderbloom]
- File[/etc/haproxy/lua/cidergrinder_mmdb.lua]
Resources modified
- File[/etc/haproxy/haproxy.cfg]
- Content differences:
--- /etc/haproxy/haproxy.cfg.orig +++ /etc/haproxy/haproxy.cfg @@ -22,6 +22,8 @@ lua-load-per-thread /etc/haproxy/lua/ja4h.lua lua-load-per-thread /etc/haproxy/lua/utf8ps.lua lua-load-per-thread /etc/haproxy/lua/contact_info.lua + lua-load-per-thread /etc/haproxy/lua/cidergrinder_mmdb.lua /usr/share/CIDERGRINDER/anonymous-residential.cider.mmdb + lua-load-per-thread /etc/haproxy/lua/cidergrinder_bloom.lua /usr/share/CIDERGRINDER/anonymous-residential.cider.bloom ssl-default-bind-options ssl-min-ver TLSv1.2 ssl-max-ver TLSv1.3 ssl-default-bind-ciphers -ALL:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256
- Content differences:
- File[/etc/confd/templates/_etc_haproxy_conf.d_tls.cfg.tmpl]
- Content differences:
--- /etc/confd/templates/_etc_haproxy_conf.d_tls.cfg.tmpl.orig +++ /etc/confd/templates/_etc_haproxy_conf.d_tls.cfg.tmpl @@ -181,6 +181,10 @@ # Check if the request originates from a known datacenter. http-request lua.is_datacenter http-request set-var(req.provenance) var(req.provenance),add_item(";",,"datacenter=true") if { var(txn.is_datacenter) -m bool } + http-request lua.cidergrinder_mmdb_lookup unless { var(sess.cidergrinder_mmdb_result) -m found } + http-request set-var(sess.prehashed) src,ipmask(32,64),xxh3 unless { var(sess.cidergrinder_mmdb_result) -m found } || { var(sess.prehashed) -m found } + http-request lua.bloom_lookup unless { var(sess.cidergrinder_mmdb_result) -m bool } + http-request set-var(req.provenance) var(req.provenance),add_item(";",,"likely_resiproxy=true") if { var(sess.cidergrinder_mmdb_result) -m bool } || { var(sess.bloom_result) -m bool } http-request lua.res_proxy # sets var txn.res_proxy to `proxy=foo` (or, doesn't) http-request set-var(req.provenance) var(req.provenance),add_item(";",txn.res_proxy,"") if { var(txn.res_proxy) -m found }
- Content differences: