OSMF OPS meeting

# OSMF OPS meeting Thursday 19 September 2024, 19:00 London time, unless rescheduled [Time in your timezone](https://www.timeanddate.com/worldclock/fixedtime.html?msg=OSM+Foundation+OPS+meeting+-++Thursday+19+September+2024&iso=20240919T19&p1=136&ah=1) [Countdown](https://www.timeanddate.com/countdown/generic?p0=136&iso=20240919T19&msg=OSM%20Foundation%20OPS%20meeting%20-%20%20Thursday%2019%20September%202024) [Online calendar](https://framagenda.org/apps/calendar/p/fce4xrpFGx7fMxz8) [Subscription to future events](https://framagenda.org/remote.php/dav/public-calendars/fce4xrpFGx7fMxz8?export) Frequency of meetings: every two weeks, on Thursday at 19:00 London time, unless rescheduled. [Video room](https://osmvideo.cloud68.co/user/dor-x99-y3m) ## Participants * Grant * Tom * Paul ---- # New action items from this meeting * **Grant to create a ticket for action item** [2024-08-08](https://hackmd.io/su12wMb9TR2kd1I5lLJ8vw) OPS to evaluate Fastly Security (DDOS) Protections we could use. [Topic: Cloudflare / Fastly] * **Grant to create an IP blocklist.** [Topic: Cloudflare keep enabled?][2024-09-19 Reportage] - Discussion during [2024-07-25](https://hackmd.io/iyFjUWl1RY6D_pevem8ciA) OPS to make a reasonable evaluation whether to go with Cloudflare, Fastly or none. * **Paul to add the OpenMapTiles application to the next agenda, together with the editor inclusion policy.** [2024-09-19 Reportage] * **Grant to come up with estimates for space needs in next 5 years and cost for Ironbelly replacement**. [2024-09-19 topic: Ironbelly Replacement? ] * **Grant to confirm that the AArnet servers will be removed and to ask the Australian community whether there is interest in hosting/providing a render server in Australia or Asia/Pacific** [2024-09-19 topic: AArnet Servers going away] ---- # Reportage ## Grant to work on the builder for debian packages *[2024-08-08](https://hackmd.io/su12wMb9TR2kd1I5lLJ8vw) Grant to work on the builder for debian packages [Topic: apt.openstreetmap.org next steps?]* * Seems ok now, as we've got upstream package builders and if we needed we could fork * We could automate the upload. There is an issue for it (#999), so the action item will get closed. ## OPS to evaluate Fastly Security (DDOS) Protections we could use. *[2024-08-08](https://hackmd.io/su12wMb9TR2kd1I5lLJ8vw) OPS to evaluate Fastly Security (DDOS) Protections we could use. [Topic: Cloudflare / Fastly]* Reported on previous meeting. * We can turn on some Fastly Security (DDOS) Protections which can extend the rate-limiting. * There are more controls than Cloudflare. * They use a service which seems to be provided by a third party or it might be bought out by them. * They have set settings. Extends rate limiting. * Protections enabled up to a degree on our Enterprise account. **'''Action item: Grant to create a ticket.'''** ## OPS to make a reasonable evaluation whether to go with Cloudflare, Fastly or none. *[2024-07-25](https://hackmd.io/iyFjUWl1RY6D_pevem8ciA) OPS to make a reasonable evaluation whether to go with Cloudflare, Fastly or none. [Topic: Cloudflare keep enabled?]* * We have Cloudflare on right now. * By disabling Cloudflare we accept the risk that there might be some outages, as previously. We should respond more quickly now that we are familiar with the necessary procedures. On IP block lists * The IP block lists were lost during the machine reinstallations with Debian. * We might have some blocklists with Cloudflare and Grant has an old back-up, which might need cleaning. **Action item: Grant to create a blocklist.** ## OPS to do capacity planning for tile.openstreetmap.org *[2024-06-27](https://hackmd.io/Gxa-ukx6SuKKNlu7lokf6A) OPS to do capacity planning for tile.openstreetmap.org [Topic: rhaegel usage?]* Paul is looking into capacity. On rhaegel * Has fast disks, but the CPUs are a few generations old. * Ysera + Odin are being upgraded, and rhaegel was significant slower than them. * There is no decision yet on what will be run on the system. Grant might need to go to Slough and Amsterdam. ## OPS to revisit the OpenMapTiles application *[2024-05-02](https://hackmd.io/6VQhtcbqRYKDSwx1i-fpWg) OPS to revisit the OpenMapTiles application. # 2024-06-13 They haven't responded to the questions. Paul to email them again. # 2024-07-25 They have replied, OPS haven't had a chance to look at the answers.* **'''Action item: Paul to add it to the next agenda, together with the editor inclusion policy.'''** ----- # Agenda # Ironbelly Replacement? Ironbelly currently hosts imagery (more below). We run on it os.openstreetmap.org and the Australian reference service, which will need to be moved to the new machine. Ironbelly is old: * One hard disk has failed. * Another disk is at risk of failing, as a single disk failure puts additional strain on the remaining disks. * There have been 10 tickets on Ironbelly disks since 2017. Each ticket probably needs at least 1-2 hours of work. Space: * There is 36 TB of data, with nearly all of it in use. Tom has copied over the logs, which have not been expiring correctly for some time. Grant will remove the logs. Plan: Replace Ironbelly with a more modern HP machine that is good enough, reusing some existing parts. On cost * Do not want to spend much money on it. * NVMe are nice but expensive. The price difference is GBP 6,000. Suggestions * Install the disks where applicable and acquire a slightly more modern machine. ** Imagery services os.osm.org, Australian service, and others need to be migrated to the new system. ** Not unreasonable to spend the money to do it. * Assess the required storage capacity for the next five years. Other points mentioned during discussion * We may be spending more on remote assistance ("smart hands") and Grant's time addressing issues with old hard drives than the cost difference between older and newer drives over the past 12 years. ** Recently, two disks were replaced through remote assistance. ## Imagery * Grant wanted to test imagery on S3; however, there were not enough credits available. * We did not agree to turn off the services over the weekend to save sufficient funds, so the testing was not carried out. Issues related to imagery * Source imagery needs to be stored somewhere. ** Brazil source imagery is 110 GB, once converted to suitable format, processed and then retained. ** Suggestion: use the AWS open data program. * In some cases we might have some imagery which was provided to us, but we can't distribute it. Brazilian imagery * Got access to semi-private FTP server to get it. * The National Mapping Service is involved in mapping activities. They own the imagery and do not consider derivative works created from it to be subject to copyright links to the original work. They have granted us permission to use it. ** We can't use the AWS Open Data program for this case. South Africa imagery * Total processed data: 7 TB. * Source imagery: 16 TB. * Licence: We have permission to use and distribute the imagery. The South African National Mapping Agency is credited on our copyright page as the source. Agencies are generally unaware of copyright. * New imagery is published monthly. We will receive the next set, approximately 1 TB, after which we will pause, as it will cover the entire country at a resolution of 36 cm. Surrey imagery * It was provided to us, probably under ODbL. Australian refernce imagery * Not used much anymore. * The source imagery is giant TIFF files. US imagery * We have for 1 of the bigger counties of Texas. '''Action item: Grant to come up with estimates for space needs in next 5 years and cost.''' # AArnet Servers going away A community member in Australia had contacted AARnet to get two servers for us. They were identical, and we used one as a cache server and one as a render server. Issue: The community member received an email from AARnet stating that the servers will get removed at the end of October. However, he did not inform us directly and instead emailed talk-au to notify them. * Grant emailed the community member today for clarification. * The discussion on talk-au seemed to indicate that there is academic interest in hosting and providing replacement servers. On servers' trafic * The current traffic is minimal. * The absence of the servers will result in a slight increase in latency. Suggestion: Ask the Australian community to get a render server in Australia or Asia/Pacific. Singapore would be expensive. '''Action item: Grant to confirm that the servers will be removed and to aask the Australian community whether there is interest in hosting/providing a render server in Australia or Asia/Pacific.''' # Fastly Shielding Shielding: All traffic through a particular server is going to go through one Fastly point, so it has another layer of caching. It picks a local cache to your backend server and that's the single point of entry. Essentially, it's two-tier caching and the inner tier is what accesses your server, not the edge. * Shielding didn't improve health check failures or latencies in previous tests, even though it's going from Fastly to Fastly. **This may have been influenced by the fact that the test was in Australia. ** There seemed to be some race with the timeouts and we probably had changed the interval or the timeout. * Fastly requires us to enable shielding when using their image transformation service to avoid redoing the imagery work on each edge cache. * This issue is not a priority. **'''Decision: Drop the image transformation.'''** Suggestions * Do an experiment with shielding at a different region, we could seek Fastly's assistance in setting it up. * Paul would like to work on serving error tiles as images. * Use the tester distribution and then do a migration. # Any other business ## Grant's travel to Amsterdam Still deciding on the best travel option, but leaning towards driving and taking the ferry, as: * it costs about the same as other travel options, * runs overnight, eliminating the need for expensive accommodation in Amsterdam, * allows for easier transport of bulky items, such as label printers and tools. ## Replacement in motherboard that failed * Plans to replace the motherboard in the failed machine, which was mentioned by Paul in a previous discussion. * Gen9 model. * For GBP 45, there’s potential to get the machine operational again, though it’s a gamble. * NVMe drives are now cheaper than SATA drives (Enterprise), especially for larger capacity drives. ## Open Ops Tickets Review open, what needs policy and what needs someone to help with... https://github.com/openstreetmap/operations/issues https://github.com/orgs/openstreetmap/projects/1 https://github.com/orgs/openstreetmap/projects/1/views/2?filterQuery=-is%3Aclosed ## Action items * [2024-08-22](https://hackmd.io/ky2mjfvdTnaJFk9K98TL_g) Guillaume to make a limited in scale experiment to assess impact and practicality. E.g. look if there are clients that say they support WEBP and don't. [Topic: Fastly image recoding] * [2024-08-22](https://hackmd.io/ky2mjfvdTnaJFk9K98TL_g) Guillaume to keep OPS in the loop about what Fastly says. [Topic: Fastly image recoding] * [2024-08-22](https://hackmd.io/ky2mjfvdTnaJFk9K98TL_g) Grant to talk to Guillaume on setting up the testing about image recoding and shielding. [Topic: Fastly image recoding] * ~~[2024-08-08](https://hackmd.io/su12wMb9TR2kd1I5lLJ8vw) Grant to work on the builder for debian packages [Topic: apt.openstreetmap.org next steps?]~~ * ~~[2024-08-08](https://hackmd.io/su12wMb9TR2kd1I5lLJ8vw) Grant and Tom to discuss apt.osm.org supports api upload [Topic: apt.openstreetmap.org next steps?]~~ See ticket #999 * [2024-08-08](https://hackmd.io/su12wMb9TR2kd1I5lLJ8vw) OPS to evaluate Fastly Security (DDOS) Protections we could use. [Topic: Cloudflare / Fastly] * [2024-07-25](https://hackmd.io/iyFjUWl1RY6D_pevem8ciA) OPS to make a reasonable evaluation whether to go with Cloudflare, Fastly or none. [Topic: Cloudflare keep enabled?] * [2024-07-25](https://hackmd.io/iyFjUWl1RY6D_pevem8ciA) Grant to determine the Cloudflare API call to block IPs, in order to deal with scrappers [Topic: Cloudflare keep enabled?] 2024-08-08 update: Briefly discussed * [2024-06-27](https://hackmd.io/Gxa-ukx6SuKKNlu7lokf6A) OPS to do capacity planning for tile.openstreetmap.org [Topic: rhaegel usage?] * [2024-05-02](https://hackmd.io/6VQhtcbqRYKDSwx1i-fpWg) OPS to revisit the OpenMapTiles application. # 2024-06-13 They haven't responded to the questions. Paul to email them again. # 2024-07-25 They have replied, OPS haven't had a chance to look at the answers. ## OPS pads for 2024 meetings * [2024-03-21](https://hackmd.io/pnBMmOtbQHmweS2XqC8E6g) * [2024-04-04](https://hackmd.io/O2KUiG9RQXSk9vMAgPA7Dw) * [2024-04-18](https://hackmd.io/_FT8I1sSRL2UNVDM94IbQA) * [2024-05-02](https://hackmd.io/6VQhtcbqRYKDSwx1i-fpWg) * [2024-05-16](https://hackmd.io/XFtol8teRoinL34n7h2bcA) * [2024-05-30](https://hackmd.io/IM0d3VWhTqWcY-FPwgXy-A) * [2024-06-13](https://hackmd.io/rDX4FuDfRa-0Trc0IKFJ5Q) * [2024-06-27](https://hackmd.io/Gxa-ukx6SuKKNlu7lokf6A) * [2024-07-11](https://hackmd.io/oU9CCUivSPyNUWrp7FP2tQ) * [2024-07-25](https://hackmd.io/iyFjUWl1RY6D_pevem8ciA) * [2024-08-08](https://hackmd.io/su12wMb9TR2kd1I5lLJ8vw) * [2024-08-22](https://hackmd.io/ky2mjfvdTnaJFk9K98TL_g) * [2024-09-05](https://hackmd.io/A15F6GBrTgKfcXQkaTzDiQ) * [2024-09-19](https://hackmd.io/yqkAQF6FT2OzmLqNR7I7_g) * [2024-10-03](https://hackmd.io/Bd98MgqETlyqM1YDoUkq6Q) * [2024-10-17](https://hackmd.io/wIMfTi0jSVi07XoCN3RFrg) * [2024-10-31](https://hackmd.io/dqE6-AIvSjmPU31IJ2MtCA) * [2024-11-14](https://hackmd.io/gru50cHsSvetMprTz7gJ7Q) * [2024-11-28](https://hackmd.io/mei-vI-bRmSxkWAfWX-jlw) * [2024-12-12](https://hackmd.io/PXNLnaX_R4OvqQWSyXzzHw) * [2024-12-26](https://hackmd.io/u3nFsnpQSpCitJL2xe5Hzg) **[Minutes published on the OSMF website](https://osmfoundation.org/wiki/Working_Group_Minutes#2024)** ### Automatic addition of OPS meetings to your calendar If you want future OPS meetings to be automatically added to your calendar, you can subscribe to the following [iCalendar link](https://framagenda.org/remote.php/dav/public-calendars/fce4xrpFGx7fMxz8?export). Instructions on how to do that depends on which calendar software/service you use. The link is provided for your convenience. Note that: * This might not work when Framasoft servers experience problems. * You might get delayed updates, depending on how often the calendar service from your side syncs/checks for updates.

Syntax	Example	Reference
# Header	Header	基本排版
- Unordered List	Unordered List
1. Ordered List	Ordered List
- [ ] Todo List	Todo List
> Blockquote	Blockquote
Bold font	Bold font
Italics font	Italics font
~~Strikethrough~~	~~Strikethrough~~
19^th^	19^th
H~2~O	H₂O
++Inserted text++	Inserted text
==Marked text==	Marked text
[link text](https:// "title")	Link
![image alt](https:// "title")	Image
`Code`	`Code`	在筆記中貼入程式碼
```javascript var i = 0; ```	`var i = 0;`
:smile:		Emoji list
{%youtube youtube_id %}	Externals
$L^aT_eX$	L^aT_eX
:::info This is a alert area. :::	This is a alert area.