Difference between revisions of "Infrastructure"
imported>Echarlie (→Services) |
imported>Echarlie |
||
Line 114: | Line 114: | ||
| | | | ||
|} | |} | ||
+ | |||
+ | == Other IPs == | ||
+ | IPs we had at some point (by reclaiming CVL IPs, etc), or are mentioned in /etc/exports on Cyberdelia | ||
+ | * 128.173.235.22 | ||
+ | * 128.173.88.161 | ||
+ | * 128.173.88.145 | ||
+ | * 127.0.0.1 | ||
+ | * 10.0.1.2 (formerly tahoe) | ||
== Network Diagram == | == Network Diagram == |
Revision as of 03:20, 15 February 2016
This page document's VTLUUG's infrastructure post-CVL eviction.
Contents
Physical Infrastructure
Cyberdelia is the only connected physical machine right now. It contains 48 GB of memory with 4 ethernet interfaces; only eth4 is connected and is attached to br0. All hosts are on the ECE network behind router.ece.vt.edu, a gateway featuring ARP proxying but no IPv6. For global DNS changes under ece.vt.edu, server room access, and getting hosts added to the ARP proxy, contact Branden McKagen.
Virginia Tech has started blocking inbound ports 22 and 3389 and outbound port 25 at the campus border, in a move some are calling Cyber Auschwitz. Contact itso-g@vt.edu for firewall exceptions. When deploying new hosts, make ssh listen on both 2222 and 22. Acidburn currently listens on 443 as well.
On the Network Architecture
Because VTLUUG infra no longer has IPv6 access, we are limited by the IP addresses assigned to us, and what we can get through DHCP from ECE. As a consequence, all services which do not need to have a global IP should move to the internal network on the 10.99.x.x/24 subnet. In the future, it may be wise to bridge this network to an ethernet port on cyberdelia, so that a switch can be used to network our other services. When we have rackspace to do so, VPN/Iodine access to the internal network will be necessary.
Services
Critical
- Tank
- NFS
- Acidburn
- Shell server
- Razor
- Ldap
- Milton/Sczi
- Website
- Wiki
- Main Page
- snapfeed
- linx
- public file shares
- git
- Website
- Cyberdelia
- VMs for projects
- other services
Other (not all functional)
- LAFS - Tahoe
- Jitsi Meet
- User websites
- Diaspora*
Addressing
https://linx.vtluug.org/ips1.txt
globally addressable | ECE DNS | Name | fucntion | internal address |
---|---|---|---|---|
128.173.88.78 | luug.ece.vt.edu. | sczi | New webserver | 10.99.0.27?? (Currently DHCP) |
128.173.89.244 | luug0.ece.vt.edu | cyberdelia | VM Host | 10.99.0.1 |
128.173.89.245 | luug1.ece.vt.edu. | acidburn | shell server | 10.99.0.4 |
128.173.89.246 | luug2.ece.vt.edu. | milton | Old webserver | |
128.173.89.247 | luug3.ece.vt.edu. | razor | LDAP | |
128.173.88.104 | luug4.ece.vt.edu. | currently pfsense (global v4 subject to change) | 10.99.0.104 | |
128.173.88.36 | mirror.ece.vt.edu. | mirror | not in use | |
128.173.88.191 | luug5.ece.vt.edu. | router | not in use | |
172.xx.xx.xx | snapfeed | REDACTED | ||
pfsense/443 | jitsi.vtluug.org | jitsi | Jitsi | 10.99.0.101 (static lease) |
None | 172.16.10.13 | archiveteam-warrior | Archive Team Warrior |
Other IPs
IPs we had at some point (by reclaiming CVL IPs, etc), or are mentioned in /etc/exports on Cyberdelia
- 128.173.235.22
- 128.173.88.161
- 128.173.88.145
- 127.0.0.1
- 10.0.1.2 (formerly tahoe)
Network Diagram
This is the projected diagram of our network, once sczi is fully deployed and milton is phased out. At this time, razor may also lose its global v4 address.