Project

General

Profile

Story #8028

Migrate UNM CN servers to DMZ network

Added by Dave Vieglais over 7 years ago. Updated almost 6 years ago.

Status:
Rejected
Priority:
Normal
Assignee:
Category:
d1_cn_buildout
Target version:
Start date:
2017-02-28
Due date:
% Done:

30%

Story Points:

Description

UNM now has a DMZ available which will place servers outside of the campus intrusion prevention infrastructure, and so should significantly reduce latency and increase throughput for network activity.

The goal of this story is to migrate all UNM CNs including test instances to the new network.

Network info:

IP Range: 64.106.84.2/27 (.2 - .8 currently reserved for DataONE, .5 - .8 currently available for CNs)
Gateway: 64.106.84.1
Netmask: 255.255.255.224
Broadcast: 64.106.84.31

To move a VM to the new network:

  1. Select IP Address
  2. Update /etc/network/interfaces
  3. Update /etc/hosts
  4. Reconfigure any services that specify IP address, including but not limited to:

a) apache
b) UFW
c) Zookeeper
d) LDAP (?)
e) Hazelcast
f) Metacat replication
g) CILogon ?

Note that the other CNs also specify specific IP addresses for connectivity, so it will be necessary to update configurations on those machines as well.

  1. Select the DMZ network in VMWare configuration for the VM
  2. Restart the VM

History

#1 Updated by Dave Vieglais over 7 years ago

  • Target version changed from CCI-2.3.3 to CCI-2.3.4

#2 Updated by Dave Vieglais over 7 years ago

  • Description updated (diff)

#3 Updated by Dave Vieglais over 7 years ago

  • Description updated (diff)

#4 Updated by Dave Vieglais over 7 years ago

  • Target version changed from CCI-2.3.4 to CCI-2.4.0

#5 Updated by Dave Vieglais almost 7 years ago

  • Sprint set to Infrastructure backlog

#6 Updated by Dave Vieglais almost 7 years ago

  • % Done changed from 0 to 30
  • Status changed from New to In Progress

#7 Updated by Dave Vieglais almost 7 years ago

  • Assignee set to Dave Vieglais

#8 Updated by Dave Vieglais almost 6 years ago

  • Status changed from In Progress to Rejected

UNM network, especially DMZ has proven to be unreliable. Cancelling this activity.

Also available in: Atom PDF

Add picture from clipboard (Maximum size: 14.8 MB)