Difference between revisions of "Infrastructure"

From the Linux and Unix Users Group at Virginia Teck Wiki
Jump to: navigation, search
imported>Echarlie
(Services)
imported>Echarlie
Line 114: Line 114:
 
|
 
|
 
|}
 
|}
 +
 +
== Other IPs ==
 +
IPs we had at some point (by reclaiming CVL IPs, etc), or are mentioned in /etc/exports on Cyberdelia
 +
* 128.173.235.22
 +
* 128.173.88.161
 +
* 128.173.88.145
 +
* 127.0.0.1
 +
* 10.0.1.2 (formerly tahoe)
  
 
== Network Diagram ==
 
== Network Diagram ==

Revision as of 03:20, 15 February 2016

This page document's VTLUUG's infrastructure post-CVL eviction.

Physical Infrastructure

Cyberdelia is the only connected physical machine right now. It contains 48 GB of memory with 4 ethernet interfaces; only eth4 is connected and is attached to br0. All hosts are on the ECE network behind router.ece.vt.edu, a gateway featuring ARP proxying but no IPv6. For global DNS changes under ece.vt.edu, server room access, and getting hosts added to the ARP proxy, contact Branden McKagen.

Virginia Tech has started blocking inbound ports 22 and 3389 and outbound port 25 at the campus border, in a move some are calling Cyber Auschwitz. Contact itso-g@vt.edu for firewall exceptions. When deploying new hosts, make ssh listen on both 2222 and 22. Acidburn currently listens on 443 as well.

On the Network Architecture

Because VTLUUG infra no longer has IPv6 access, we are limited by the IP addresses assigned to us, and what we can get through DHCP from ECE. As a consequence, all services which do not need to have a global IP should move to the internal network on the 10.99.x.x/24 subnet. In the future, it may be wise to bridge this network to an ethernet port on cyberdelia, so that a switch can be used to network our other services. When we have rackspace to do so, VPN/Iodine access to the internal network will be necessary.

Services

Critical

  • Tank
    • NFS
  • Acidburn
  • Razor
    • Ldap
  • Milton/Sczi
    • Website
      • Wiki
      • Main Page
      • snapfeed
      • linx
      • public file shares
    • git
  • Cyberdelia
    • VMs for projects
    • other services

Other (not all functional)

  • LAFS - Tahoe
  • Jitsi Meet
  • User websites
  • Diaspora*

Addressing

https://linx.vtluug.org/ips1.txt

globally addressable ECE DNS Name fucntion internal address
128.173.88.78 luug.ece.vt.edu. sczi New webserver 10.99.0.27?? (Currently DHCP)
128.173.89.244 luug0.ece.vt.edu cyberdelia VM Host 10.99.0.1
128.173.89.245 luug1.ece.vt.edu. acidburn shell server 10.99.0.4
128.173.89.246 luug2.ece.vt.edu. milton Old webserver
128.173.89.247 luug3.ece.vt.edu. razor LDAP
128.173.88.104 luug4.ece.vt.edu. akhaten currently pfsense (global v4 subject to change) 10.99.0.104
128.173.88.36 mirror.ece.vt.edu. mirror not in use
128.173.88.191 luug5.ece.vt.edu. router not in use
172.xx.xx.xx snapfeed REDACTED
pfsense/443 jitsi.vtluug.org jitsi Jitsi 10.99.0.101 (static lease)
None 172.16.10.13 archiveteam-warrior Archive Team Warrior

Other IPs

IPs we had at some point (by reclaiming CVL IPs, etc), or are mentioned in /etc/exports on Cyberdelia

  • 128.173.235.22
  • 128.173.88.161
  • 128.173.88.145
  • 127.0.0.1
  • 10.0.1.2 (formerly tahoe)

Network Diagram

This is the projected diagram of our network, once sczi is fully deployed and milton is phased out. At this time, razor may also lose its global v4 address. Infra2016-network.png