Sorry for the cross post, forwarding here in case people are not on ops.
please feel free to forward this message to anyone else's who you feel may
be interested
Thanks
---------- Forwarded message ---------
From: John Bond <jbond(a)wikimedia.org>
Date: Mon, Feb 6, 2023 at 3:22 PM
Subject: NO_PROXY setting for interactive shells
To: Operations Engineers <ops(a)lists.wikimedia.org>
Hi All
As part of an ongoing effort to tighten the policies on the web proxy
servers[1], I would like to deploy a change[2] that would inject a sane
no_proxy environment variable into login sessions via systemd. This means
traffic towards our own websites will not risk going through the proxy
servers when a user manually sets the http(s)_proxy environment
variable(s). It will improve resiliency, latency and load on the proxies,
while reducing user overhead (as it’s a required manual action so far [3]).
No impact is expected.
I plan to deploy this Change next Monday 13th Feb at 12:00 UTC, if you have
any concerns or questions please let me know either via email or on the
change
Thanks John
[1]https://phabricator.wikimedia.org/T300977
[2]https://gerrit.wikimedia.org/r/c/operations/puppet/+/879418
[3]https://wikitech.wikimedia.org/wiki/HTTP_proxy#How-to