|
|
| (28 intermediate revisions by 3 users not shown) |
| Line 1: |
Line 1: |
| | This page is for the network and server infrastructure for the space. | | This page is for the network and server infrastructure for the space. |
| − |
| |
| − | = Members =
| |
| − | * [[User:Wizzup|Wizzup]]
| |
| − | * [[User:Tg|tg]]
| |
| − | * [[User:Arda Xi|Arda Xi]]
| |
| − | * [[User:Webmind|Webmind]]
| |
| − | * [[User:Mattronix|Mattronix]]
| |
| − | * [[User:nathan7|nathan7]]
| |
| − | * [[User:Piele|Piele]]
| |
| − |
| |
| − | = Features =
| |
| − |
| |
| − | * Wireless Leiden
| |
| − | * Virtual machines for members
| |
| − | * Spacenet
| |
| − | * Wifi (SSIDs: TechInc, Spacenet) on 2.4 Ghz ; Techinc-5Ghz for 5Ghz
| |
| − | * spacenet using RADIUS, LDAP for members when authenticating at remote spacenet places.
| |
| | | | |
| | = Plans = | | = Plans = |
| Line 57: |
Line 40: |
| | * Oversee network infrastructure | | * Oversee network infrastructure |
| | | | |
| − | = Network Structure =
| |
| − |
| |
| − | ==Diagrams==
| |
| − |
| |
| − | New Infra Design effective as of 27-06-2014 Mattronix
| |
| − |
| |
| − |
| |
| − | [[File:NETWORK-map-full.svg|700px]]
| |
| − |
| |
| − | == VLANS == (Updated 27-06-2014 Mattronix)
| |
| − | {|class="wikitable"
| |
| − | ! VLAN ID !! VLAN Name !! Subnet !! Gateway !! Description !! MTU
| |
| − | |-
| |
| − | | 1 || TechInc || 10.0.20.0/22 || 10.0.21.254 ||TechInc Public net || 1500
| |
| − | |-
| |
| − | | 2 || Spacenet || 10.0.20.0/24 || 10.0.21.254 || Spacenet VLAN, bridged to TechInc || 1500
| |
| − | |-
| |
| − | | 4 || Zandbak || 10.0.4.0/24 || 10.0.4.1 || TechInc Zandbak ||
| |
| − | |-
| |
| − | | 5 || UrbanStatic1 || ?? || || Urban resort static subnet ||
| |
| − | |-
| |
| − | | 6 || UrbanStatic2 || ?? || || Urban resort static subnet ||
| |
| − | |-
| |
| − | | 7 || UrbanStatic3 || ?? || || Urban resort static subnet ||
| |
| − | |-
| |
| − | | 8 || WLeiden || 172.17.92.0/24 || 172.17.92.1 || Wireless Leiden network (gateway: 172.17.92.1) || 1200
| |
| − | |-
| |
| − | | 9 || ChaosVPN || 172.31.186.0/24 || 172.31.186.1 ||ChaosVPN subnet || 1200
| |
| − | |-
| |
| − | | 10 || TI-PEERING || 192.168.94.0/24 || N/A ||Techinc Peering VLAN for EDGE switch TI-Urbanresort-sw001|| 1500
| |
| − | |-
| |
| − | | 11 || Storage || 10.0.19.0/24 || N/A || Storage network for NFS shares between Netapp & Hypervisors || 9000
| |
| − | |}
| |
| − |
| |
| − | == PEERS ==
| |
| − | VLAN 10 Peers List (updated 27-06-2014 Mattronix)
| |
| | | | |
| − | {|class="wikitable"
| |
| − | ! Peer Name !! Peer IP !! Routes Behind Peer !! Description !! MTU
| |
| − | |-
| |
| − | || TechInc || 192.168.94.1/24 || 10.0.20.1/22 ||TechInc Public net || 1500
| |
| − | |-
| |
| − | || Wireless Amsterdam || 192.168.94.1/24 || 172.17.92.0/24 || Spacenet VLAN, bridged to TechInc || 1500
| |
| − |
| |
| − | |}
| |
| | | | |
| − | == Reserved IP Ranges ==
| |
| − | Ranges reserved for Techinc Services and may not be used without consent from the contact Person.
| |
| − |
| |
| − | {|class="wikitable"
| |
| − | !Range Start - Range End || Range Name !! Range Description !! Contact Person
| |
| − | |-
| |
| − | || 10.0.21.16 - 10.0.21.49 ||RANGE-15 || Reserved for new server deployment from FIFO || Mattronix
| |
| − | |-
| |
| − | || 10.0.22.1 - 10.0.22.99 || ?? || Reserved for space infra VM's || Mattronix
| |
| − | |-
| |
| − | || 10.0.22.100 - 10.0.22.254 || ?? || Reserved for member VM's || Mattronix
| |
| − |
| |
| − | |}
| |
| − |
| |
| − | == Switch ports ==
| |
| − |
| |
| − | Updated and is now correct.
| |
| − |
| |
| − | TI-Glassroom-sw001 [top] (Updated 12-11-2014 Piele)
| |
| − |
| |
| − | {|class="wikitable"
| |
| − | |-
| |
| − | ! Port !! Connected to !! Untagged VLAN !! Tagged VLANS !! Cable
| |
| − | |-
| |
| − | | 1 || Serial Server || TechInc (1) || N/A || BLUE
| |
| − | |-
| |
| − | | 2 || HV1 Interface 1 || TechInc (1) || N/A || B12 (Yellow)
| |
| − | |-
| |
| − | | 3 || RED Port 2 || TechInc (1) || N/A || A12 (Yellow)
| |
| − | |-
| |
| − | | 4 || RED Port 3 || TechInc (1) || N/A || A7 (Yellow)
| |
| − | |-
| |
| − | | 5 || RED Port 4 || TechInc (1) || N/A || UNI-3 (Yellow)
| |
| − | |-
| |
| − | | 6 || RED Port 1 || TechInc (1) || N/A || A9 (Yellow)
| |
| − | |-
| |
| − | | 7 || DEAD?? || TechInc (1) || N/A || N/A
| |
| − | |-
| |
| − | | 8 || HV2 Interface 1 || TechInc (1) || N/A || B9 (Yellow)
| |
| − | |-
| |
| − | | 9 || TI Filer2 E0 A || TechInc (1) || N/A || A8 (Yellow)
| |
| − | |-
| |
| − | | 10 || TI Filer1 E0 A || TechInc (1) || N/A || A6 (Yellow)
| |
| − | |-
| |
| − | | 11 || TI Filer2 E0 B || Storage (11) || N/A || B4 (Yellow)
| |
| − | |-
| |
| − | | 12 || TI Filer1 E0 B || Storage (11) || N/A || B7 (Yellow)
| |
| − | |-
| |
| − | | 13 || Core-Router WAN || Urban-Static1 (5) || 1 || WHITE MIKROTIK ETH1
| |
| − | |-
| |
| − | | 14 || Core-Router LAN || TechInc (1) || 4 || WHITE MIKROTIK ETH2
| |
| − | |-
| |
| − | | 15 || Patchpanel port 4 "uplink 1" || TechInc (1) || N/A || 24 (Green)
| |
| − | |-
| |
| − | | 16 || HV1 Interface 2 || Storage (11) || N/A || 20 (Green)
| |
| − | |-
| |
| − | | 17 || HV2 Interface 2 || Storage (11) || N/A || B3 (Yellow)
| |
| − | |-
| |
| − | | 18 || LAN Nyancat ETH1 || Urban-Static1 (5) || N/A || B1 (Yellow)
| |
| − | |-
| |
| − | | 19 || ADM Uplink via mikrotik || Urban-Static1 (5) || N/A || A14 (Yellow)
| |
| − | |-
| |
| − | | 20 || UPLINK Urban Resort || TechInc (1) || N/A || B15 (Yellow)
| |
| − | |-
| |
| − | | 21 || TP-Link AP via Patchpanel port 2 || TechInc (1) || 4 || A5 (Yellow)
| |
| − | |-
| |
| − | | 22 || Glassroom switch 2 || TechInc (1) || N/A || B11 (Yellow)
| |
| − | |-
| |
| − | | 23 || TI-Cleanroom-sw001-UPLINK A || TechInc (1) || N/A || N/A
| |
| − | |-
| |
| − | | 24 || TI-Cleanroom-sw001-UPLINK B || TechInc (1) || N/A || N/A
| |
| − | |-
| |
| − | |}
| |
| − |
| |
| − | TI-Glassroom-sw002 (former: TI-Cleanroom Switch): (Updated 12-11-2014 Piele)
| |
| − | ''in the middle of updating''
| |
| − | {|class="wikitable"
| |
| − | |-
| |
| − | ! Port !! Connected to !! Untagged VLAN !! Tagged VLANS !! Cable
| |
| − | |-
| |
| − | | 1 || Glassroom switch 1 || TechInc (1) || N/A || B11 (Yellow)
| |
| − | |-
| |
| − | | 2 || DOWN || TechInc (1) || NAT-Urban,UrbanStatic1,UrbanStatic2,UrbanStatic3 !! B10 (Yellow)
| |
| − | |-
| |
| − | | 3 || DOWN || TechInc (1) || ?? || A13 (Yellow)
| |
| − | |-
| |
| − | | 4 || NC || NC || NC || NC
| |
| − | |-
| |
| − | | 5 || space-button ?? || TechInc (1) || ?? || A1 (Yellow)
| |
| − | |-
| |
| − | | 6 || Lasercutter ?? || TechInc (1) || ?? || A3 (Yellow)
| |
| − | |-
| |
| − | | 7 || N/A || TechInc (1) ||
| |
| − | |-
| |
| − | | 8 || N/A || TechInc (1) ||
| |
| − | |-
| |
| − | | 9 || N/A || TechInc (1) ||
| |
| − | |-
| |
| − | | 10 || N/A || TechInc (1) ||
| |
| − | |-
| |
| − | | 11 || N/A || TechInc (1) ||
| |
| − | |-
| |
| − | | 12 || Roof-Black ?? || TechInc (1) || ?? || B6 (Yellow)
| |
| − | |-
| |
| − | | 13 || Eastside Window || TechInc (1) || ?? || "Eastside-Window" (Grey)
| |
| − | |-
| |
| − | | 14 || Ripe Atlas || TechInc (1) || ?? || UNI-2 (Yellow)
| |
| − | |-
| |
| − | | 15 || Sheeva Plug || TechInc (1) || ?? || B13 (Yellow)
| |
| − | |-
| |
| − | | 16 || DOWN || TechInc (1) ||
| |
| − | |-
| |
| − | | 17 || DOWN || TechInc (1) ||
| |
| − | |-
| |
| − | | 18 || DOWN || TechInc (1) ||
| |
| − | |-
| |
| − | | 19 || Wireless Amsterdam?? || TechInc (1) || ?? || RED
| |
| − | |-
| |
| − | | 20 || Switch WestSide || TechInc (1) || ?? || "West-Space" (Grey)
| |
| − | |-
| |
| − | | 21 || DOWN || TechInc (1) ||
| |
| − | |-
| |
| − | | 22 || DOWN || TechInc (1) ||
| |
| − | |-
| |
| − | | 23 || DOWN || TechInc (1) ||
| |
| − | |-
| |
| − | | 24 || DOWN || TechInc (1) ||
| |
| − | |-
| |
| − |
| |
| − | |}
| |
| | | | |
| | == Cables & Sockets == | | == Cables & Sockets == |
| Line 287: |
Line 96: |
| | * TechInc and Spacenet. [Legacy and public, unfiltered IPv6] | | * TechInc and Spacenet. [Legacy and public, unfiltered IPv6] |
| | * TechInc-zandbak Legacy (and soon: firewalled IPv6) | | * TechInc-zandbak Legacy (and soon: firewalled IPv6) |
| − |
| |
| − | = Machines =
| |
| − |
| |
| − | {{#ask: [[Category:Machines]]
| |
| − | | mainlabel=Hostname
| |
| − | |?IPv4
| |
| − | |?IPv6
| |
| − | |?Function
| |
| − | |?Location
| |
| − | |?Contact
| |
| − | |order=ASC
| |
| − | |sort=ID
| |
| − | |default=
| |
| − | |offset=0
| |
| − | |headers=plain
| |
| − | |limit=1024
| |
| − | }}
| |
| − | {{Refresh}}
| |
| − | {{#formlink:form=Machine|link text=Add|tooltip=Create machine page}}
| |
| − |
| |
| − | = Virtual Machines =
| |
| − |
| |
| − | This is an initial setup, by Piele on 12-11-2014
| |
| − | {|class="wikitable"
| |
| − | |-
| |
| − | ! Hostname !! IPv4 !! IPv6 !! Function !! Contact
| |
| − | |-
| |
| − | | techinc-srv1.ti || 10.0.22.1 || N/A || ISPConfig || [[User:Mattronix|Mattronix]]
| |
| − | |-|-
| |
| − | | monitoring.ti || 10.0.22.2 || N/A || Monitoring server || [[User:Andreasr|Andreasr]]
| |
| − | |-|-
| |
| − | | techinc-backup.ti || 10.0.22.3 || N/A || Backup Server || [[User:Mattronix|Mattronix]]
| |
| − | |-|-
| |
| − | | techinc-quessel.ti || 10.0.22.4 || N/A || Quessel Server || [[User:Mattronix|Mattronix]]
| |
| − | |-|-
| |
| − | | techinc-vpn.ti || 10.0.22.5 || N/A || Openvpn Server || [[User:Piele|Piele]]
| |
| − | |-|-
| |
| − | | techinc-cloud.ti || 10.0.22.7 || N/A || Owncloud || [[User:Mattronix|Mattronix]]
| |
| − | |-|-
| |
| − | | techinc-ldap.ti || 10.0.22.8 || N/A || LDAP server || [[User:Mattronix|Mattronix]]
| |
| − | |-|-
| |
| − | | techinc-radius.ti || 10.0.22.9 || N/A || Radius server || [[User:Mattronix|Mattronix]]
| |
| − | |-|-
| |
| − | | techinc-ampache.ti || 10.0.22.10 || N/A || Ampache server || [[User:Mattronix|Mattronix]]
| |
| − | |}
| |
| | | | |
| | = Services = | | = Services = |
| | List of services, each with a small guide/article on how to use / tweak it said service: | | List of services, each with a small guide/article on how to use / tweak it said service: |
| | | | |
| − | * Neuromancer, VPS host and IPv6 router, managed by [[User:Webmind|Webmind]] and [[User:Wizzup|Wizzup]]
| |
| − | * Molly, VPS guest, runs Hypatia, managed by [[User:Webmind|Webmind]]
| |
| − | * <s>(Armitage, VPS guest on neuromancer, spacenet, run by [[User:DrWhax|DrWax]])</s> (Spacenet runs on gencore, and is managed by Wizzup)
| |
| | * physical infra (cables/ports/etc) can be inquired about [[User:justa|Justa]] | | * physical infra (cables/ports/etc) can be inquired about [[User:justa|Justa]] |
| | * Remove pulseaudio sink on indicio. PULSE_SERVER=indicio.ti mplayer <foo> (Questions ask Wizzup) | | * Remove pulseaudio sink on indicio. PULSE_SERVER=indicio.ti mplayer <foo> (Questions ask Wizzup) |
This page is for the network and server infrastructure for the space.
Plans
Current items / TODO:
- Get rid of redudant (and especially: noisy, power hungry) devices.
- Re-enable public ipv6 for all devices.
- Rebuild the virtual machine server as it is very unstable. > Neuromancer 2.0 > Mattronix/AndreasR
- TODO: move uplink to cleanroom-port which will free up 'uplink1' cable (see below)
Network Cleanup
- Label Cables
- Replace old 10/100 access switches
- Fix or replace wireless infra (random Drops, cannot promise stability)
- Check Switch config and name all interfaces and vlans
- Fix management IP of the switch in the urban resort rack.
- confirm and fix documentation
Server Infra
- Designate a location for the infra
- Decide and discuss an OS for server operation
applications
decide on a possible Shell server
Space hosted services (Web? Mail? VMS?)
Ticket System? or mailing list?
Support Roles
Who is maintaining what?
Responsibility
- Oversee network infrastructure
Cables & Sockets
There are three kinds of ethernet-cabling currently in the space.
The first kind are the ethernet data-bars provided by Urban Resort to facilitate providing each space in the building with an uplink for internet of some sort. In our space these can be found in the solder-area (below the window there), as well as one set of two ports in the 'dirty room' and a similar set in the 'dirty room'.
Currently our uplink to UR-infra comes from a port in the cleanroom.
The ports in the soldering area are patched into our switch at Urban Resort.
The second kind of cabling is the 'permanent' cabling as provided by ourselves that run from/to the clean-room and provide ethernet connectivity to different ports/devices in the space. The short-term goal is to have these cables all terminate on a patch-bay in the clean-room and dual-RJ45 ports on the walls or other places. All cables are to have the same label on both ends of the cable.
An inventory of currently provided ports is below:
| port
|
description
|
| port 1
|
First port of two in the wall behind the presentation desk
|
| port 2
|
Second port of two in the wall behind the presentation desk
|
| door1
|
First of two cables that run to the corner of the ceiling at the door
|
| door2
|
second of two cables that run to the corner of the ceiling at the door
|
| middle1
|
First of two cables that run to the center of the space; above the ceiling just behind the beamer; runs to solder-space switch for now; planned for power-bar infra later
|
| middle2
|
second of two cables that run to the center of the space; above the ceiling just behind the beamer; has AP connected
|
| table
|
runs to wall next to the arcade; reserved for connecting the table with ethernet
|
| arcade
|
runs to the wall next to the arcade; reserved for connecting the arcade machine with ethernet
|
| uplink1
|
Cable running from soldering area to cleanroom, please use with care to prevent broadcast-storms.
|
The third kind of ethernet-cabling is the cabling found in the space, drawn from local switches on tables or walls to devices found in the space. Currently there is no overview of these devices or the amount of switches/there. It might be good to make a distinction between 'permanent infra' switches and 'user-purpose' switches later.
layer 2/3
- Nyancat is the main router.
- There is now a TP-Link WDR4300 connected directly to the switch, with three SSIDs:
* TechInc and Spacenet. [Legacy and public, unfiltered IPv6]
* TechInc-zandbak Legacy (and soon: firewalled IPv6)
Services
List of services, each with a small guide/article on how to use / tweak it said service:
- physical infra (cables/ports/etc) can be inquired about Justa
- Remove pulseaudio sink on indicio. PULSE_SERVER=indicio.ti mplayer <foo> (Questions ask Wizzup)
- Indicio, MPD Server, managed by Wizzup & others
