Sorry for the cross post, forwarding here in case people are not on ops.  please feel free to forward this message to anyone else's who you feel may be interested

Thanks
---------- Forwarded message ---------
From: John Bond <jbond@wikimedia.org>
Date: Mon, Feb 6, 2023 at 3:22 PM
Subject: NO_PROXY setting for interactive shells
To: Operations Engineers <ops@lists.wikimedia.org>


Hi All


As part of an ongoing effort to tighten the policies on the web proxy servers[1], I would like to deploy a change[2] that would inject a sane no_proxy environment variable into login sessions via systemd.  This means traffic towards our own websites will not risk going through the proxy servers when a user manually sets the http(s)_proxy environment variable(s). It will improve resiliency, latency and load on the proxies, while reducing user overhead (as it’s a required manual action so far [3]).

No impact is expected.  


I plan to deploy this Change next Monday 13th Feb at 12:00 UTC, if you have any concerns or questions please let me know either via email or on the change


Thanks John



[1]https://phabricator.wikimedia.org/T300977 

[2]https://gerrit.wikimedia.org/r/c/operations/puppet/+/879418

[3]https://wikitech.wikimedia.org/wiki/HTTP_proxy#How-to