Provide secops team with application logs for plugging into fraud pipeline

mozilla-services / contile

This is the back-end server for the Mozilla Tile Service (MTS)

https://mozilla-services.github.io/contile/

Mozilla Public License 2.0

19 stars 2 forks source link

Closed data-sync-user closed 3 years ago

data-sync-user commented 3 years ago

Secops has a service called “iprepd” (IP Reputation Daemon) that could be used to secure backend applications (such as Contile and Merino) from fraud attacks
It works as a Nginx/OpenResty module that fits perfectly into our being-built infrastructure
It’s simply plug&play, and Katie Kleemola can set it up with SRE. We just need to provide iprepd with some application logs

┆Issue is synchronized with this Jira Task

data-sync-user commented 3 years ago

âž¤ Michael Cooper commented:

This is a contile issue (I think), not a merino one.

data-sync-user commented 3 years ago

➤ Michael Cooper commented:

This is a contile issue (I think), not a merino one.

data-sync-user commented 3 years ago

➤ Michael Cooper commented:

This is a contile issue (I think), not a merino one.

data-sync-user commented 3 years ago

➤ Nan Jiang commented:

Closing it as this is already implemented by SRE and SecOps team. Iprepd is protecting Contile in production.