I wonder if this is a MediaWiki issue or a Wikimedia issue.

Undoubtedly Wikimedia.

(In reply to comment #0)

I also invite comments on whether this is the best way to handle this. This
seems to be something that any checkuser should be able to configure on a
per-wiki basis. Is it, and our current batch of checkusers was never told
how?
Or does it actually require action at the Wikimedia software level?

No, I'm pretty sure this requires changes to the software or configuration.

(In reply to comment #2)

Undoubtedly Wikimedia.

(In reply to comment #0)

I also invite comments on whether this is the best way to handle this. This
seems to be something that any checkuser should be able to configure on a
per-wiki basis. Is it, and our current batch of checkusers was never told
how?
Or does it actually require action at the Wikimedia software level?

No, I'm pretty sure this requires changes to the software or configuration.

No.

trusted-hosts.txt in the TrustedXFF extension need updating.

Then the cdb needs updating/rebuilding and then be pushed to the cluster

For examaple:

1. Opera Mini
2. Source: https://list.opera.com/mailman/listinfo/net-changes-mini

37.228.104.0/21
58.67.157.0/24
59.151.95.128/25
59.151.98.128/27
59.151.106.224/27
59.151.120.32/27
80.84.1.0/24
80.239.242.0/23
82.145.208.0/20
91.203.96.0/22
116.58.209.36/27
116.58.209.128/27
141.0.8.0/21
195.189.142.0/23
203.81.19.0/24
209.170.68.0/24
217.212.226.0/24
217.212.230.0/23

kwwilliams wrote:

(In reply to comment #3)

(In reply to comment #2)

Undoubtedly Wikimedia.

(In reply to comment #0)

I also invite comments on whether this is the best way to handle this. This
seems to be something that any checkuser should be able to configure on a
per-wiki basis. Is it, and our current batch of checkusers was never told
how?
Or does it actually require action at the Wikimedia software level?

No, I'm pretty sure this requires changes to the software or configuration.

No.

trusted-hosts.txt in the TrustedXFF extension need updating.

Then the cdb needs updating/rebuilding and then be pushed to the cluster

Two "no"s in a row there, and I'm unsure whether the second no is another "no" to me or if it's a "no" to the first "no".

Who has the power to update trusted-hosts.txt, rebuild the CDB, and push it to a cluster. Is that under English Wikipedia control, or is it under centralized control?

No, it's not under English Wikipedia control. Little is.

Anyone with a gerrit account can add it to trusted-hosts.txt

A more limited group of people have the rights to approve and that change

And an even much limited group can merge that to the deployment branch, update the code on the cluster...

Related URL: https://gerrit.wikimedia.org/r/65344 (Gerrit Change Id337b820773971559636313ad2300bbf290d9b1a)

kwwilliams wrote:

This really seems like a roundabout way to address what should be simple day-to-day maintenance. Is there a reason that the extension can't consult a locally-configured list?

I've updated [[m:XFF]]: https://meta.wikimedia.org/w/index.php?title=XFF_project&diff=5506192&oldid=5465496.

I made a note that changes can be proposed through Gerrit.