=== NFS Hosts ===* [[Infrastructure:Dirtycow|dirtycow]] - Primary NFS server, 8x2TB raidz2 array* [[Infrastructure:Cyberdelia|Cyberdeliacyberdelia]] is the only connected physical machine right now. It contains 48 GB of memory with 4 ethernet interfaces; only eth4 is connected and is attached to br0. All hosts are on the ECE network behind router.ece.vt.edu- OFF, a gateway featuring ARP proxying but no IPv6. For global DNS changes under ece.vt.edu7x1TB raidz2 array, server room access, and getting hosts added to the ARP proxy, contact Branden McKagen.sitting on shelf instead of shelf

Virginia Tech has started blocking inbound ports 22 and 3389 and outbound port 25 at the campus border, in a move some are calling === VM Hosts ===* [[Infrastructure:Meltdown|meltdown]] - Primary VM/docker host* [[gpInfrastructure:Cyber AuschwitzSpectre|Cyber Auschwitzspectre]]. Contact itso-g@vt.edu Secondary VM/docker host, for firewall exceptions. When deploying new hosts, make ssh listen on both 2222 and 22. Acidburn currently listens on 443 as well.example user VMs

Most other VTLUUG=== Router ===* [[Infrastructure:Shellshock|shellshock]] -owned servers 3 disk RAID1 array All hosts are on our own 1 Gb/s port with [[Infrastructure:Joey|joey]], a gateway featuring ARP proxying, and full delegation of the 2607:b400:6:cc80/64 prefix. Virginia Tech has started blocking inbound ports 22 and 3389 and outbound port 25 at the campus border, in a move[[User:echarlie|echarlie]] is calling [[gp:Cyber Auschwitz|Cyber Auschwitz]]. Contact itso-g@vt.edu for firewall exceptions.When deploying new hosts, make ssh listen on both 2222 and 22. [[Infrastructure:Acidburn|Acidburn]] currently stored listens on 3128 as well. === Other hosts ===* [[Infrastructure:Wood|Wood]] is sitting in Aliour rack turned off because we don's basement, with the exception t have a use for it currently. It is in a 4U case capable of fitting several GPUs.* [[infrastructureInfrastructure:sunwaySunway|sunway]] and a SuperMicro server, which were all transferred to WUVT. Older hosts have either been thrown out or given to members. See [[VTLUUG:Strategic_plan]] for things we plan to do in the future.

Because VTLUUG infra no longer has IPv6 accessIn theory, we are limited by the IP addresses assigned to us, and what we services can get through DHCP from ECE. As be provided via a consequence, all services which do not need to have a global IP should move to the internal network on the 10.99.x.x/24 subnet. In the future, it may be wise to bridge this network to an ethernet port on cyberdeliahidden service such as [[w:Tor|Tor]], so but that a switch can be used to network our introduces other servicescomplications. When we have rackspace to do soAlternately, services can require use of the [[Infrastructure:IPsec|VPN/]] on [[Infrastructure:Acidburn|acidburn]],[[Iodine]] access , or [[Secure Shell|ssh tunnelling]], although all of these limit usage to members with a shell account.All of these have the internal network will be necessarybenefit of NAT transversal, however.

=== Critical ===''Further information: [[:Category:Services]]'' * [[Infrastructure:Acidburn|acidburn]]

* Razor[[Infrastructure:Chimera|chimera]]** LdapFreeIPA* Milton/[[Infrastructure:Sczi|Sczi]]

*** public file shares[https://bash.vtluug.org vtbash]** git* Cyberdelia[[Infrastructure:Dirtycow|dirtycow]]** VMs Storage for projects** other all primary services** TankNFS - ZFS pool name is cistern*** NFS[[Infrastructure:Meltdown|meltdown]]*** milton_srv (website files)VM host for above services

 All vtluug websites are run on nginx on milton[[Infrastructure:Sczi|sczi]]. These sites are currently functional:

* wiki.vtluug.org (this redirects to vtluug.org/wiki/)* bash.vtluug.org* vtluug.org/users/~$user

All of these sites exclusively allow for the use of tls TLS connections. Hokie Privacy has a cert from All services use automatically updatedletsencrypt,while all other services are verified by StartComcerts.

Currently, milton has '''no startup script''' for ==== Main Page ====The main VTLUUG page was scraped from the website. If things go down, someone has to run[[w:Internet Archive|Internet Archive]] and added created as a github page at<pre>root@milton[https:/srv/http/vtluug.org# sudo -u www-data uwsgi --yaml uwsgigithub.io vtluug.github.yml</pre>in a tmux sessionio], to restart uwsgiand is reverse-proxied through [[Infrastructure:Sczi|sczi]].

=== HIstorically =Wiki ====The wiki currently runs fully on MediaWiki hosted on nginx using a [https://github.com/vtluug/mediawiki-docker modified version of the official mediawiki docker image]. You can auth with the admin account, [[User:wiki-admin|wiki-admin]] or a Google account. See note on [[Main_page]] about why LDAP isn't working yet.

Beyond these, we have data and nginx configurations for these (deprecated) sites, which===== Gobblerpedia =====were previously hosted Runs on milton:* ccdcthe same Mediawiki instance as this wiki.vtluug.org* foodfor.vtluug.org* jessicaandchristopher.net* nagios.vtluug.org* tahoe.vtluug.org* vtcybersecurity.org* cdn.vtluug.org* git.vtluug.org* randynance.info* uniluug.org* map.vtluug.org* security.ece.vt.edu* users.vtluug.org* wargame.vtluug.org* munin.vtluug.org* vtbash.org* webchat.vtluugSimilarly to LUUGWiki, only Google accounts or the admin user are supported logins.org

Further, we have server data for multiple versions of dokuwiki === Needs Restoration ===These are VTLUUG services that haven't yet been properly restored:* [https://github.com/mutantmonkey/foodforus foodfor.vtluug.org] - For [[Wadsworth]]'s .pickfood and mediawiki, .foodvote commands. This is [[User:Timelord|jpo's]] fault.* tahoe.vtluug.org - [[user:mjh|mhazinsk's]] Tahoe-LAFS grid* git.vtluug.org - git hosting; previously a wordpress instance, "newsblur", and "bitcoin",redirect to gitweb with gitosis as the SSH backendand for a time had a static version of vtbash* gitweb.vtluug.org hosted at bash- git hosting; previously gitweb* [https://github.com/vtluug/campusmap map.vtluug.org.] - [[Openstreetmap|OSM]] based map of VT

VTLUUG was also previously responsible for mirror.ece.vt.edu, and still has the ip allocation for that DNS entry. === Considerations for the future Goals === It would be preferable to keep all existing sites functional. See [[userVTLUUG:andreim|Aam]Strategic_plan#Web_Services] suggested the use of [https://caddyserver.com/ caddy]to replace nginx, especially on static sites, because it provides automatic letsencrypt. It is also important to ensure there are '''startup scripts''' for sczi, so that a reboot of it doesn't result in a 10-hour website outage. ==== Encryption ====All sites should move to automatic letsencrypt certificates within the next few months. letsencrypt is still in beta, but it provides fully functionaland low-hassle 3-month certificates. They will have integration for nginx soon, which will decrease the complexity of getting certs. It may also be of interest to the club to revive [[monkeysphere]] signing on the servers. ==== Project Hosting ==== Most vtluug internal projects (e.g. HokiePrivacy) are currently hosted on git repositories on milton. How to move forwards with these is stillindeterminate. For public hosting, there has been some conversation about using [https://github.com/gogits/gogs Go Git Service (gogs)], for public,www-viewable git repositories. ==== Gobblerpedia ==== [[gp:Main page|Gobblerpedia]] is effectively non-functional currently, because account creation was disabled, to prevent spam. This needs to be addressed by adding captchas which are blacksburg-specific, limiting account creation access to local IP addresses, or enabling some form of LUUG-managed account creation. One suggestion was using CAS/Login future goals involving web services to authenticate, however that makes it difficult for Blacksburgresidents to add content, and has other disadvantages. ==== VTLUUG Main Page ==== This needs to be kept up-to-date, and have some way of adding calendar information. ==== VTLUUG Wiki ==== Meeting creation script needs to be re-implemented.

httpsWe currently hold the IPv6 prefix <code>2001://linx.vtluug.org/ips1.txt {| class="wikitable"!globally addressable!ECE DNS!Name!fucntion!internal address|-| 128.173.88.78| luug.ece.vt.edu.| [[Infrastructure470:sczi|sczi]]| New webserver| 10.99.0.27?? (Currently DHCP)|-| 128.173.89.244| luug0.ece.vt.edu| [[Infrastructure8:cyberdelia|cyberdelia]]| VM Host| 10.99.0.1|-|128.173.89.245 | luug1.ece.vt.edu. | [[Infrastructure6d9:acidburn|acidburn]]| shell server| 10.99.0.4|-| 128.173.89.246 | luug2.ece.vt.edu.| [[Infrastructure:milton|milton]]| Old webserver||-| 128.173.89.247| luug3.ece.vt.edu.| [[Infrastructure:razor|razor]]| LDAP||-| 128.173.88.104 | luug4.ece.vt.edu.| /64<s/code>akhaten</from HE's>| currently pfsense (global v4 subject allocation due to change)| 10our tunnel.99.0.104 |When CNS finally sets up prefix-| 128.173.88.36| mirror.ece.vt.edu.| mirror| not in use||-| 128.173.88.191| luug5.ece.vt.edu.| [[Infrastructuredelegation, we might be able to get something from <code>2607:b400:Temp88191|router]]| not in use||-|| 172.xx.xx.xx | snapfeed| REDACTED||-| pfsense/443| jitsi.vtluug.org| jitsi| [[Jitsi]]| 10.99.0.101 (static lease)|-|None| 172.16.10.13| archiveteam-warrior| [http:/32</archiveteam.org/index.php?title=ArchiveTeam_Warrior Archive Team Warrior]||} == Other IPs ==IPs we had at some point (by reclaiming CVL IPscode>, etc), or are mentioned in /etc/exports on Cyberdelia* 128.173.235.22 (Something for WUVT) (IP currently in use)* 128.173.88.161 (security.ece.vt.edu)* 128.173.88.145 (cvl05.ece.vt.edu)* 128.173.88.131 (dog.ecewhich is VT's largest allocation.vt.edu) (IP currently in use) == Network Diagram ==

This is the projected diagram of our network, once sczi is fully deployed and milton is phased out. At this time, razor may also lose its global v4 address.[[File{{:Infra2016-network.png]]Infrastructure:Network}}

[[Category:VTLUUG :Projects]][[Category:2016Featured content]]