REDDNet Site Requirements: Difference between revisions

From ReddNet
Jump to navigation Jump to search
No edit summary
No edit summary
Line 27: Line 27:
{|
{|
!style="background:#000000;color:#ff8888"|Port
!style="background:#000000;color:#ff8888"|Port
!style="background:#000000;color:#ff8888"|Service
!style="background:#000000;color:#ff8888"|Interface
!style="background:#000000;color:#ff8888"|Interface
!style="background:#000000;color:#ff8888"|Notes
!style="background:#000000;color:#ff8888"|Notes
|-
|-
|tcp/22 (ssh)
|tcp/22
|ssh
|mgmt + data
|mgmt + data
|from all depots to 129.59.197.60 and 129.59.197.90
|from all depots to 129.59.197.60 and 129.59.197.90
|-
|-
|tcp/5666 (nagios)
|tcp/5666
|nagios
|data
|data
|from all depots to 129.59.197.60 and 129.59.197.90
|from all depots to 129.59.197.60 and 129.59.197.90
|-
|-
|tcp/6714 (ibp)
|tcp/6714
|ibp
|data
|data
|from all depots to world
|from all depots to world
|-
|-
|tcp/4823 (bwctl)
|tcp/4823
|bwctl
|data
|data
|from 1st depot to world
|from 1st depot to world
|-
|-
|tcp/861 (owamp)
|tcp/861
|owamp
|data
|data
|from 2nd to world
|from 2nd to world
|-
|-
|tcp/80 (http)
|tcp/80
|http
|mgmt
|mgmt
|from all depots to 129.59/16
|from all depots to 129.59/16
|-
|-
|tcp/443 (https)
|tcp/443
|https
|mgmt
|mgmt
|from all depots to 129.59/16
|from all depots to 129.59/16
|-
|-
|tcp/5900 (vnc)
|tcp/5900
|vnc
|mgmt
|mgmt
|from all depots to 129.59/16
|from all depots to 129.59/16
|-
|-
|udp/123 (ntp)
|udp/123
|ntp
|data
|data
|allow outbound from local depots
|allow outbound from local depots
|-
|-
|udp/161 (snmpv3)
|udp/161
|snmpv3
|data
|data
|from all to 129.59.197.60 and 129.59.197.90
|from all to 129.59.197.60 and 129.59.197.90
|}
|}

Revision as of 15:19, 4 March 2010

Depots

Our standard depot contains one dual-core AMD Athlon CPU, 4 GB of RAM, two 1 Gb network ports, and 4-8 TB of storage space. The standard depot draws approximately 300 W.

We are evaluating a new depot configuration with one 8-core Intel I7, 12 GB of RAM, two 1 Gb network ports, and 23 TB of storage space. This depot may optionally connect to the network via 10 Gb ethernet (via an add-on adapter). We will provide power requirements for this box at a later date.

IP Addresses

We require two externally-visible IP address for each depot. One address is for the depot itself, the other is for the management console.

Network Ports on your Switch

Each depot has two network interfaces, so if supported by your switch, we would like to use both interfaces in 802.3ad bonding mode for increased performance. This requires two switch ports and two ethernet cables per depot. If not supported, then each depot only requires one port/cable.

In addition, each depot has an ethernet port for the management console. The management consoles can connect directly to your primary network switch, or they can run off a smaller dumb switch to minimize the number of primary switch ports in use.

Required Network Ports

These ports should be opened on your perimeter firewall (or firewalls if you have both organizational and departmental firewalls).

Shorthand:

  • mgmt -> Management interface
  • data -> Data transfer interface


Port Service Interface Notes
tcp/22 ssh mgmt + data from all depots to 129.59.197.60 and 129.59.197.90
tcp/5666 nagios data from all depots to 129.59.197.60 and 129.59.197.90
tcp/6714 ibp data from all depots to world
tcp/4823 bwctl data from 1st depot to world
tcp/861 owamp data from 2nd to world
tcp/80 http mgmt from all depots to 129.59/16
tcp/443 https mgmt from all depots to 129.59/16
tcp/5900 vnc mgmt from all depots to 129.59/16
udp/123 ntp data allow outbound from local depots
udp/161 snmpv3 data from all to 129.59.197.60 and 129.59.197.90