Open main menu

Linux and Unix Users Group at Virginia Teck Wiki β

Changes

Infrastructure

989 bytes removed, 16:23, 13 June 2021
Current Setup
This page documents VTLUUG's infrastructure post-[[CVL eviction]]. It is intended as a scratch pad ofsorts for organizing infrastructure changes, since [[Infrastructure:Log]] is incredibly out of date, andthere are a lot of details which must be sorted out before major infrastructure changes can be made.
== Physical Infrastructure ==
=== NFS Hosts ===* [[Infrastructure:Dirtycow|dirtycow]] - Primary NFS server, 8x2TB raidz2 array* [[Infrastructure:Cyberdelia|Cyberdeliacyberdelia]] - OFF, 7x1TB raidz2 array, sitting on shelf instead of shelf === VM Hosts ===* [[Infrastructure:Meltdown|meltdown]] - Primary VM/docker host* [[Infrastructure:Spectre|spectre]] is the only connected physical machine right now- Secondary VM/docker host,for example user VMs === Router ===besides * [[Infrastructure:Temp88191Shellshock|our routershellshock]]. It contains 48 GB of memory- 3 disk RAID1 array with 4 ethernet interfaces; only eth4 is connected and is attached to br0. All hosts are on our own 1-gbit Gb/s port with[[Infrastructure:Temp88191Joey|temp88191joey]], a gateway featuring ARP proxying, and partial NDP proxying.For global DNS changes under ece.vt.edu, server room access, and getting hosts added to full delegation of the ARP proxy,contact [mailto2607:b400:jkh@vt.edu John Harris] or [mailto6:rdehart@vt.edu Roddy Dehart]cc80/64 prefix.
Virginia Tech has started blocking inbound ports 22 and 3389 and outbound port 25 at the campus border, in a move
[[User:echarlie|echarlie]] is calling [[gp:Cyber Auschwitz|Cyber Auschwitz]]. Contact itso-g@vt.edu for firewall exceptions.
When deploying new hosts, make ssh listen on both 2222 and 22. [[Infrastructure:Acidburn|Acidburn]] currently listens on 443 3128 as well.
All other VTLUUG-owned servers are currently stored in === Other hosts ===* [[userInfrastructure:pewWood|pewWood]]is sitting in our rack turned off because we don's apartment, with the exception t have a use for it currently. It is in a 4U case capable of fitting several GPUs.* [[infrastructureInfrastructure:sunwaySunway|sunway]]and a SuperMicro server, which were all transferred to WUVT. The list of these machines includes [[Infrastructure:Wood|Wood]],and a variety of other servers, including our old LXC Older hosts and the old mirrorhave either been thrown out or given to members.
See [[GoalsVTLUUG:Strategic_plan]] for things we plan to do in the future.
== On the Network Architecture ==
''Further Information: [[Infrastructure:Networking]] and [[Infrastructure:Network]]'' [[File:Infra2019-network.png|thumb|500px|A simple network diagram by [[user:pew|pew]]. '''Update June 2021: Joey is dead, long live Joey. Shellshock is the new router. Cyberdelia is off.]]
[[File:Infra2016-network.png|thumb|500px|A simple network diagram by [[user:mjh|mjh]]]]
We currently have some services with public IPv4 address, and all hosts have an internal IPv4 address on the 10.9998.x.x/16 subnet and an IPv6 address assigned via SLAAC.In the future, it may be wise to bridge this network to anethernet port on cyberdelia, so that a switch can be used to network our other services. When we have rackspaceto do so, [[Infrastructure:IPsec|VPN]]/[[Iodine]] access to the internal network will should be necessaryused.
In theory, services can be provided via a hidden service such as [[w:Tor|Tor]], but that introduces other complications.
Alternately, services can require use of the [[Infrastructure:IPsec|VPN]] on [[Infrastructure:acidburnAcidburn|acidburn]],
[[Iodine]], or [[Secure Shell|ssh tunnelling]], although all of these limit usage to members with a shell account.
All of these have the benefit of NAT transversal, however.
== Services ==
''Further information: [[:Category:Services]]'' * [[Infrastructure:Acidburn|Acidburnacidburn]]
** Shell server
** [[Email]]
** [[Wadsworth]]
* [[Infrastructure:RazorChimera|Razorchimera]]** LDAPFreeIPA
* [[Infrastructure:Sczi|Sczi]]
** Website
*** Main Page
*** linx
*** [[https://bash.vtluug.org vtbash]]* [[Infrastructure:CyberdeliaDirtycow|Cyberdeliadirtycow]]** All the above Storage for all primary services** VMs for projects** Tank*** NFS- ZFS pool name is cistern* [[Infrastructure:temp88191Meltdown|temp88191meltdown]]* Router* VM host for above services
[[Infrastructure:Acidburn|Acidburnacidburn]] and the website ''must'' be accessible through real services, and it is preferable that [[Infrastructure:Cyberdelia|Cyberdelia]] is other hosts are too. This means we must use our public IPv4 & IPv6 Addresses allotted by ECE.
== Website details ==
=== Current Setup ===
 
All vtluug websites are run on nginx on [[Infrastructure:Sczi|sczi]]. These sites are currently functional:
* gobblerpedia.org
* hokieprivacy.org
* linx.vtluug.org
* vtluug.org
* wiki.vtluug.org (this redirects to vtluug.org/wiki/)
* bash.vtluug.org
* vtluug.org/users/~$user
All of these sites exclusively allow for the use of TLS connections. All services use automatically updated
==== Main Page ====
The main VTLUUG page was scraped from the [[w:Internet Archive|Internet Archive]] and added created as a github page at[https://vtluug.github.io vtluug.github.io], and is reverse-proxied through [[Infrastructure:Sczi|sczi]].
==== Wiki ====
 The wiki currently runs fully on MediaWiki hosted on nginxusing a [https://github. Postgres is used for com/vtluug/mediawiki-docker modified version of the database and authenticationis through LDAPofficial mediawiki docker image]. MediaWiki is running You can auth with the current stable version as of March 2017admin account, courtesy hard work by[[userUser:pewwiki-admin|pewwiki-admin]]or a Google account. See note on [[Main_page]] about why LDAP isn't working yet.
===== Gobblerpedia =====
 Runs on the same Mediawiki instance as this wiki, with its schema in the same Postgres database. CurrentlySimilarly to LUUGWiki, you can authwith LDAP, pre-existing only Google accounts, or a Google account in the VT hosted domain. ==== Linx ==== Uses [[User:andreim|aam]]'s [https://github.com/andreimarcu/linx-server linx], and is an identical implementation to his site[https://linx.li linx.li]. One of the few sites with a complete startup script. The maintenance is currently the responsibilityof aam, however this is subject to change, pending his retaining root access on scziadmin user are supported logins.
=== Needs Restoration ===
* git.vtluug.org - git hosting; previously a redirect to gitweb with gitosis as the SSH backend
* gitweb.vtluug.org - git hosting; previously gitweb
* [https://github.com/vtluug/campusmap map.vtluug.org ] - [[Openstreetmap|OSM]] (gobblerpedia still relies on this)* users.vtluug.org - member hosting based map of acidburn home directories PostgreSQL tables exist on milton for foodforus, jandc, mediawiki, mewsblu, sharedwiki, uniluug, vtluug_wiki, and wargame_bbs. Moreresearch is necessary to determine what these are for. There are also a collection of mySQL databases on milton which maybe desirable to archive and store.VT
=== Historically ===
== Addressing ==
VTLUUG currently has DNS with namecheap, however all domains have been re-registered with gandi undervtluug.net. Message officers for access (please don's own account, to replace the mixture of mutantmonkey-holdings and vtluug-held domains on multipledifferent registrarst be scared :D).
We currently hold the IPv6 prefix <code>2001:470:8:6d9::/64</code> from HE's allocation due to our tunnel.
[[Category:Infrastructure]]
[[Category:VTLUUG:Projects]]
[[Category:2016]][[Category:2017]]
[[Category:Featured content]]