Infrastructure

This page document's VTLUUG's infrastructure post-CVL eviction.

Physical Infrastructure

Cyberdelia is the only connected physical machine right now. It contains 48 GB of memory with 4 ethernet interfaces; only eth4 is connected and is attached to br0. All hosts are on the ECE network behind router.ece.vt.edu, a gateway featuring ARP proxying but no IPv6. For global DNS changes under ece.vt.edu, server room access, and getting hosts added to the ARP proxy, contact Branden McKagen.

Virginia Tech has started blocking inbound ports 22 and 3389 and outbound port 25 at the campus border, in a move some are calling Cyber Auschwitz. Contact itso-g@vt.edu for firewall exceptions. When deploying new hosts, make ssh listen on both 2222 and 22. Acidburn currently listens on 443 as well.

On the Network Architecture

Because VTLUUG infra no longer has IPv6 access, we are limited by the IP addresses assigned to us, and what we can get through DHCP from ECE. As a consequence, all services which do not need to have a global IP should move to the internal network on the 10.99.x.x/24 subnet. In the future, it may be wise to bridge this network to an ethernet port on cyberdelia, so that a switch can be used to network our other services. When we have rackspace to do so, VPN/Iodine access to the internal network will be necessary.

Services

Critical

• Tank
  • NFS
• Acidburn
  • Shell server
  • Email
• Razor
  • Ldap
• Milton/Sczi
  • Website
    • Wiki
    • Main Page
    • snapfeed
    • linx
    • public file shares
  • git
• Cyberdelia
  • VMs for projects
  • other services

Other (not all functional)

• LAFS - Tahoe
• Jitsi Meet
• User websites
• Diaspora*

Addressing

https://linx.vtluug.org/ips1.txt

globally addressable	ECE DNS	Name	fucntion	internal address
128.173.88.78	luug.ece.vt.edu.	sczi	New webserver	10.99.0.27?? (Currently DHCP)
128.173.89.244	luug0.ece.vt.edu	cyberdelia	VM Host	10.99.0.1
128.173.89.245	luug1.ece.vt.edu.	acidburn	shell server	10.99.0.4
128.173.89.246	luug2.ece.vt.edu.	milton	Old webserver
128.173.89.247	luug3.ece.vt.edu.	razor	LDAP
128.173.88.104	luug4.ece.vt.edu.	akhaten	currently pfsense (global v4 subject to change)	10.99.0.104
128.173.88.36	mirror.ece.vt.edu.	mirror	not in use
128.173.88.191	luug5.ece.vt.edu.	router	not in use
	172.xx.xx.xx	snapfeed	REDACTED
pfsense/443	jitsi.vtluug.org	jitsi	Jitsi	10.99.0.101 (static lease)
None	172.16.10.13	archiveteam-warrior	Archive Team Warrior

Other IPs

IPs we had at some point (by reclaiming CVL IPs, etc), or are mentioned in /etc/exports on Cyberdelia

• 128.173.235.22
• 128.173.88.161 (security.ece.vt.edu)
• 128.173.88.145 (cvl05.ece.vt.edu)
• 128.173.88.131 (dog.ece.vt.edu)

Network Diagram

This is the projected diagram of our network, once sczi is fully deployed and milton is phased out. At this time, razor may also lose its global v4 address.