Difference between revisions of "Infrastructure"

From the Linux and Unix Users Group at Virginia Teck Wiki
Jump to: navigation, search
imported>Echarlie
(→‎Network Diagram)
imported>Uncurlhalo
m (Reverted edits by Echarlie (talk) to last revision by Mjh)
Line 2: Line 2:
  
 
== Physical Infrastructure ==
 
== Physical Infrastructure ==
−
[[Infrastructure:Cyberdelia|Cyberdelia]] is the only connected physical machine right now. It contains 48 GB of memory with 4 ethernet interfaces; only eth4 is connected and is attached to br0. All hosts are on the ECE network behind router.ece.vt.edu, a gateway featuring ARP proxying but no IPv6. For global DNS changes under ece.vt.edu, server room access, and getting hosts added to the ARP proxy, contact Branden McKagen.
+
Cyberdelia is the only connected physical machine right now. It contains 48 GB of memory with 4 ethernet interfaces; only eth4 is connected and is attached to br0. All hosts are on the ECE network behind router.ece.vt.edu, a gateway featuring ARP proxying but no IPv6. For global DNS changes under ece.vt.edu, server room access, and getting hosts added to the ARP proxy, contact Branden McKagen.
  
 
Virginia Tech has started blocking inbound ports 22 and 3389 and outbound port 25 at the campus border, in a move some are calling [[gp:Cyber Auschwitz|Cyber Auschwitz]]. Contact itso-g@vt.edu for firewall exceptions. When deploying new hosts, make ssh listen on both 2222 and 22. Acidburn currently listens on 443 as well.
 
Virginia Tech has started blocking inbound ports 22 and 3389 and outbound port 25 at the campus border, in a move some are calling [[gp:Cyber Auschwitz|Cyber Auschwitz]]. Contact itso-g@vt.edu for firewall exceptions. When deploying new hosts, make ssh listen on both 2222 and 22. Acidburn currently listens on 443 as well.
−
 
−
== On the Network Architecture ==
 
−
 
−
Because VTLUUG infra no longer has IPv6 access, we are limited by the IP addresses assigned to us, and what we can get through DHCP from ECE. As a consequence, all services which do not need to have a global IP should move to the internal network on the 10.99.x.x/24 subnet. In the future, it may be wise to bridge this network to an ethernet port on cyberdelia, so that a switch can be used to network our other services. When we have rackspace to do so, VPN/[[Iodine]] access to the internal network will be necessary.
 
  
 
== Addressing ==
 
== Addressing ==
Line 43: Line 39:
 
| [[Infrastructure:milton|milton]]
 
| [[Infrastructure:milton|milton]]
 
| Old webserver
 
| Old webserver
−
|
 
 
|-
 
|-
 
| 128.173.89.247
 
| 128.173.89.247
Line 67: Line 62:
 
| [[Infrastructure:Temp88191|router]]
 
| [[Infrastructure:Temp88191|router]]
 
| not in use
 
| not in use
 +
|
 
|
 
|
 
|-
 
|-
Line 89: Line 85:
  
 
== Network Diagram ==
 
== Network Diagram ==
−
 
−
This is the projected diagram of our network, once sczi is fully deployed, and milton phased out. At this time, razor may also lose its global v4 address.
 
 
[[File:Infra2016-network.png]]
 
[[File:Infra2016-network.png]]
  

Revision as of 21:01, 10 February 2016

This page document's VTLUUG's infrastructure post-CVL eviction.

Physical Infrastructure

Cyberdelia is the only connected physical machine right now. It contains 48 GB of memory with 4 ethernet interfaces; only eth4 is connected and is attached to br0. All hosts are on the ECE network behind router.ece.vt.edu, a gateway featuring ARP proxying but no IPv6. For global DNS changes under ece.vt.edu, server room access, and getting hosts added to the ARP proxy, contact Branden McKagen.

Virginia Tech has started blocking inbound ports 22 and 3389 and outbound port 25 at the campus border, in a move some are calling Cyber Auschwitz. Contact itso-g@vt.edu for firewall exceptions. When deploying new hosts, make ssh listen on both 2222 and 22. Acidburn currently listens on 443 as well.

Addressing

https://linx.vtluug.org/ips1.txt

globally addressable ECE DNS Name fucntion internal address
128.173.88.78 luug.ece.vt.edu. sczi New webserver 10.99.0.27?? (Currently DHCP)
128.173.89.244 luug0.ece.vt.edu cyberdelia VM Host 10.99.0.1
128.173.89.245 luug1.ece.vt.edu. acidburn shell server 10.99.0.4
128.173.89.246 luug2.ece.vt.edu. milton Old webserver
128.173.89.247 luug3.ece.vt.edu. razor LDAP
128.173.88.104 luug4.ece.vt.edu. akhaten currently pfsense (global v4 subject to change) 10.99.0.104
128.173.88.36 mirror.ece.vt.edu. mirror not in use
128.173.88.191 luug5.ece.vt.edu. router not in use
172.xx.xx.xx snapfeed REDACTED
pfsense/443 jitsi.vtluug.org jitsi Jitsi 10.99.0.101 (static lease)
None 172.16.10.13 archiveteam-warrior Archive Team Warrior

Network Diagram

Infra2016-network.png

Retrieved from "https://vtluug.org/w/index.php?title=Infrastructure&oldid=5933"