Do we still need this? I don't think we have anything in RDU2

We should change these to nftables rules

We should change these to nftables rules

I think we still have those

We don't have these machines anymore.

These IPs should be changed to 10.16.*

Do we still need this? I don't think we have anything in RDU2

Forgot the Community cage is in RDU2, so that should be OK

Otherwise LGTM

Do we still need this? I don't think we have anything in RDU2

We mount NFS volumes from something in RDU2, which is also why I left the RDU2 view in named.conf and other things referring to rdu2 in peace yesterday. I think we can remove it from here, though.

We should change these to nftables rules

Agreed, but let’s do it in a different PR.

I think we can remove it from here, though.

Ahh there are other mentions of RDU2-CC in the docs, so I’ll rename it accordingly.

--- a/modules/sysadmin_guide/pages/dns.adoc
+++ b/modules/sysadmin_guide/pages/dns.adoc
@@ -17,10 +17,10 @@ ns05.fedoraproject.org::
   hosted at internetx (ipv6 enabled)
 ns13.rdu2.fedoraproject.org::
   in rdu2, internal to rdu2.
-ns01.iad2.fedoraproject.org::
-  in iad2, internal to iad2.
-ns02.iad2.fedoraproject.org::
-  in iad2, internal to iad2.
+ns01.rdu3.fedoraproject.org::
+  in rdu3, internal to rdu3.
+ns02.rdu3.fedoraproject.org::
+  in rdu3, internal to rdu3.

I think we still have those

They might be alive still, but AFAIK only until iad2 is taken offline, not (anymore) what you reach from the outside under ns-iad0{1,2}.fedoraproject.org (these are 38.145.32.1{3,4} externally and ns0{1,2}.rdu3 internally). I'll merge and if I’m wrong, we can fix it later :wink:.