REDDNet Site Requirements: Difference between revisions
No edit summary |
No edit summary |
||
| Line 19: | Line 19: | ||
These ports should be opened on your perimeter firewall (or firewalls if you have both organizational and departmental firewalls). | These ports should be opened on your perimeter firewall (or firewalls if you have both organizational and departmental firewalls). | ||
* Management interfaces: 22/tcp (ssh), 80/tcp (www), 443/tcp (https), | |||
For the usual depot network interface, please see the chart below: | |||
| Line 28: | Line 27: | ||
!style="background:#000000;color:#ff8888"|Port | !style="background:#000000;color:#ff8888"|Port | ||
!style="background:#000000;color:#ff8888"|Service | !style="background:#000000;color:#ff8888"|Service | ||
!style="background:#000000;color:#ff8888"|Notes | !style="background:#000000;color:#ff8888"|Notes | ||
|- | |- | ||
|tcp/22 | |tcp/22 | ||
|ssh | |ssh | ||
|from all depots to 129.59.197.60 and 129.59.197.90 | |from all depots to 129.59.197.60 and 129.59.197.90 | ||
|- | |- | ||
|tcp/5666 | |tcp/5666 | ||
|nagios | |nagios | ||
|from all depots to 129.59.197.60 and 129.59.197.90 | |from all depots to 129.59.197.60 and 129.59.197.90 | ||
|- | |- | ||
|tcp/6714 | |tcp/6714 | ||
|ibp | |ibp | ||
|from all depots to world | |from all depots to world | ||
|- | |- | ||
|tcp/4823 | |tcp/4823 | ||
|bwctl | |bwctl | ||
|from 1st depot to world | |from 1st depot to world | ||
|- | |- | ||
|tcp/861 | |tcp/861 | ||
|owamp | |owamp | ||
|from 2nd to world | |from 2nd to world | ||
|- | |- | ||
|tcp/80 | |tcp/80 | ||
|http | |http | ||
|from all depots to 129.59/16 | |from all depots to 129.59/16 | ||
|- | |- | ||
|tcp/443 | |tcp/443 | ||
|https | |https | ||
|from all depots to 129.59/16 | |from all depots to 129.59/16 | ||
|- | |- | ||
|tcp/5900 | |tcp/5900 | ||
|vnc | |vnc | ||
|from all depots to 129.59/16 | |from all depots to 129.59/16 | ||
|- | |- | ||
|udp/123 | |udp/123 | ||
|ntp | |ntp | ||
|allow outbound from local depots | |allow outbound from local depots | ||
|- | |- | ||
|udp/161 | |udp/161 | ||
|snmpv3 | |snmpv3 | ||
|from all to 129.59.197.60 and 129.59.197.90 | |from all to 129.59.197.60 and 129.59.197.90 | ||
|} | |} | ||
Revision as of 18:18, 4 March 2010
Depots
Our standard depot contains one dual-core AMD Athlon CPU, 4 GB of RAM, two 1 Gb network ports, and 4-8 TB of storage space. The standard depot draws approximately 300 W.
We are evaluating a new depot configuration with one 8-core Intel I7, 12 GB of RAM, two 1 Gb network ports, and 24 TB of storage space. This depot may optionally connect to the network via 10 Gb ethernet (via an add-on adapter). We will provide power requirements for this box at a later date.
IP Addresses
We require two externally-visible IP address for each depot. One address is for the depot itself, the other is for the management console.
Network Ports on your Switch
Each depot has two network interfaces, so if supported by your switch, we would like to use both interfaces in 802.3ad bonding mode for increased performance. This requires two switch ports and two ethernet cables per depot. If not supported, then each depot only requires one port/cable.
In addition, each depot has an ethernet port for the management console. The management consoles can connect directly to your primary network switch, or they can run off a smaller dumb switch to minimize the number of primary switch ports in use.
Required Network Ports
These ports should be opened on your perimeter firewall (or firewalls if you have both organizational and departmental firewalls).
- Management interfaces: 22/tcp (ssh), 80/tcp (www), 443/tcp (https),
For the usual depot network interface, please see the chart below:
| Port | Service | Notes |
|---|---|---|
| tcp/22 | ssh | from all depots to 129.59.197.60 and 129.59.197.90 |
| tcp/5666 | nagios | from all depots to 129.59.197.60 and 129.59.197.90 |
| tcp/6714 | ibp | from all depots to world |
| tcp/4823 | bwctl | from 1st depot to world |
| tcp/861 | owamp | from 2nd to world |
| tcp/80 | http | from all depots to 129.59/16 |
| tcp/443 | https | from all depots to 129.59/16 |
| tcp/5900 | vnc | from all depots to 129.59/16 |
| udp/123 | ntp | allow outbound from local depots |
| udp/161 | snmpv3 | from all to 129.59.197.60 and 129.59.197.90 |