Difference between revisions of "Infrastructure"
imported>Uncurlhalo |
imported>Uncurlhalo m (Reverted edits by Uncurlhalo (talk) to last revision by Echarlie) |
||
| Line 2: | Line 2: | ||
== Physical Infrastructure == | == Physical Infrastructure == | ||
| − | Cyberdelia is the only connected physical machine right now. It contains 48 GB of memory with 4 ethernet interfaces; only eth4 is connected and is attached to br0. All hosts are on the ECE network behind router.ece.vt.edu, a gateway featuring ARP proxying but no IPv6. For global DNS changes under ece.vt.edu, server room access, and getting hosts added to the ARP proxy, contact Branden McKagen. | + | [[Infrastructure:Cyberdelia|Cyberdelia]] is the only connected physical machine right now. It contains 48 GB of memory with 4 ethernet interfaces; only eth4 is connected and is attached to br0. All hosts are on the ECE network behind router.ece.vt.edu, a gateway featuring ARP proxying but no IPv6. For global DNS changes under ece.vt.edu, server room access, and getting hosts added to the ARP proxy, contact Branden McKagen. |
Virginia Tech has started blocking inbound ports 22 and 3389 and outbound port 25 at the campus border, in a move some are calling [[gp:Cyber Auschwitz|Cyber Auschwitz]]. Contact itso-g@vt.edu for firewall exceptions. When deploying new hosts, make ssh listen on both 2222 and 22. Acidburn currently listens on 443 as well. | Virginia Tech has started blocking inbound ports 22 and 3389 and outbound port 25 at the campus border, in a move some are calling [[gp:Cyber Auschwitz|Cyber Auschwitz]]. Contact itso-g@vt.edu for firewall exceptions. When deploying new hosts, make ssh listen on both 2222 and 22. Acidburn currently listens on 443 as well. | ||
| + | |||
| + | == On the Network Architecture == | ||
| + | |||
| + | Because VTLUUG infra no longer has IPv6 access, we are limited by the IP addresses assigned to us, and what we can get through DHCP from ECE. As a consequence, all services which do not need to have a global IP should move to the internal network on the 10.99.x.x/24 subnet. In the future, it may be wise to bridge this network to an ethernet port on cyberdelia, so that a switch can be used to network our other services. When we have rackspace to do so, VPN/[[Iodine]] access to the internal network will be necessary. | ||
== Addressing == | == Addressing == | ||
| Line 39: | Line 43: | ||
| [[Infrastructure:milton|milton]] | | [[Infrastructure:milton|milton]] | ||
| Old webserver | | Old webserver | ||
| + | | | ||
|- | |- | ||
| 128.173.89.247 | | 128.173.89.247 | ||
| Line 62: | Line 67: | ||
| [[Infrastructure:Temp88191|router]] | | [[Infrastructure:Temp88191|router]] | ||
| not in use | | not in use | ||
| − | |||
| | | | ||
|- | |- | ||
| Line 85: | Line 89: | ||
== Network Diagram == | == Network Diagram == | ||
| + | |||
| + | This is the projected diagram of our network, once sczi is fully deployed, and milton phased out. At this time, razor may also lose its global v4 address. | ||
[[File:Infra2016-network.png]] | [[File:Infra2016-network.png]] | ||
Revision as of 21:01, 10 February 2016
This page document's VTLUUG's infrastructure post-CVL eviction.
Physical Infrastructure
Cyberdelia is the only connected physical machine right now. It contains 48 GB of memory with 4 ethernet interfaces; only eth4 is connected and is attached to br0. All hosts are on the ECE network behind router.ece.vt.edu, a gateway featuring ARP proxying but no IPv6. For global DNS changes under ece.vt.edu, server room access, and getting hosts added to the ARP proxy, contact Branden McKagen.
Virginia Tech has started blocking inbound ports 22 and 3389 and outbound port 25 at the campus border, in a move some are calling Cyber Auschwitz. Contact itso-g@vt.edu for firewall exceptions. When deploying new hosts, make ssh listen on both 2222 and 22. Acidburn currently listens on 443 as well.
On the Network Architecture
Because VTLUUG infra no longer has IPv6 access, we are limited by the IP addresses assigned to us, and what we can get through DHCP from ECE. As a consequence, all services which do not need to have a global IP should move to the internal network on the 10.99.x.x/24 subnet. In the future, it may be wise to bridge this network to an ethernet port on cyberdelia, so that a switch can be used to network our other services. When we have rackspace to do so, VPN/Iodine access to the internal network will be necessary.
Addressing
https://linx.vtluug.org/ips1.txt
| globally addressable | ECE DNS | Name | fucntion | internal address |
|---|---|---|---|---|
| 128.173.88.78 | luug.ece.vt.edu. | sczi | New webserver | 10.99.0.27?? (Currently DHCP) |
| 128.173.89.244 | luug0.ece.vt.edu | cyberdelia | VM Host | 10.99.0.1 |
| 128.173.89.245 | luug1.ece.vt.edu. | acidburn | shell server | 10.99.0.4 |
| 128.173.89.246 | luug2.ece.vt.edu. | milton | Old webserver | |
| 128.173.89.247 | luug3.ece.vt.edu. | razor | LDAP | |
| 128.173.88.104 | luug4.ece.vt.edu. | currently pfsense (global v4 subject to change) | 10.99.0.104 | |
| 128.173.88.36 | mirror.ece.vt.edu. | mirror | not in use | |
| 128.173.88.191 | luug5.ece.vt.edu. | router | not in use | |
| 172.xx.xx.xx | snapfeed | REDACTED | ||
| pfsense/443 | jitsi.vtluug.org | jitsi | Jitsi | 10.99.0.101 (static lease) |
| None | 172.16.10.13 | archiveteam-warrior | Archive Team Warrior |
Network Diagram
This is the projected diagram of our network, once sczi is fully deployed, and milton phased out. At this time, razor may also lose its global v4 address.
