Wikimedia Toolforge: migrating Kubernetes from PodSecurityPolicy to Kyverno
Summary: this article shares the experience and learnings of migrating away from Kubernetes PodSecurityPolicy into Kyverno in the Wikimedia Toolforge…
Category: Site Reliability Engineering
Building DReaMeRS: How and why we opened a datacenter in France
Content delivery networks (CDNs) are one of the modern building blocks of the Internet. This blog post highlights a recent addition to Wikimedia’s CDN setup.
June 2021 Datacenter Switchover
In June 2021, most user traffic was switched from our primary Virginia datacenter to our secondary one in Texas. This post covers how the swtichover went and the issues that came up.
The rollout of single-sign-on (SSO) at the Wikimedia Foundation
This is the second part of a three part series on the rollout of single-sign-on (SSO) at the Wikimedia Foundation.
Wikimedia SSO: Evaluation
In the first of three posts about the implementation of Single Sign On (SSO). This post looks at the original landscape of Wikimedia’s web-based services, summarizes requirements for a new SSO provider, looks at existing FLOSS solutions, and explains why Apereo CAS was chosen.
Wikimedia’s CDN: datacenter switchover
The 3rd and last article of a series that describes some of the changes to Wikimedia’s Content Delivery Network, including the replacement of Varnish with Apache Traffic Server (ATS) as the on-disk HTTP cache component of the CDN.
Wikimedia’s CDN: the road to ATS
The 2nd of a 3 part series that describes some of the changes to Wikimedia’s Content Delivery Network, including the replacement of Varnish with Apache Traffic Server (ATS) as the on-disk HTTP cache component of the CDN.
Impact of using HTTP connection pooling for PHP applications at scale
This post explores the challenges of running PHP applications at a large scale and discusses the effect of using Envoy on MediaWiki applications.
Wikimedia’s CDN up to 2018: Varnish and IPSec
The 1st of a 3 part series that will describe some of the changes, which included replacing Varnish with Apache Traffic Server (ATS) as the on-disk HTTP cache component of the CDN.