TechOPS - Revision history

imported>Bnewbold: /* KC POP - Network Information */ tables, clear up

2012-07-04T02:50:07Z

KC POP - Network Information: tables, clear up

← Older revision		Revision as of 02:50, 4 July 2012
Line 308:		Line 308:
	* firewall rules		* firewall rules
	* vpn access		* vpn access


	===Public IP information===		===Public IP information===
Line 317:		Line 316:
	====ATX====		====ATX====
	* 68.203.12.180		* 68.203.12.180


	===Public DNS related information===		===Public DNS related information===
Line 329:		Line 327:
	* fnf.tel		* fnf.tel
	* freenetfound.org		* freenetfound.org


	====Registrar====		====Registrar====
Line 348:		Line 345:

	PfSense is the authoritative source for firewall rules. This section just provides an overview of the logic behind how they are setup.		PfSense is the authoritative source for firewall rules. This section just provides an overview of the logic behind how they are setup.


	===VPN===		===VPN===
Line 355:		Line 351:

	Currently we have the following site to site VPN setup:		Currently we have the following site to site VPN setup:


	* ATX lab (charles house) to FNF primary data center		* ATX lab (charles house) to FNF primary data center
Line 363:		Line 358:

	See http://racktable.freenetworkfoundation.org/index.php?page=row&row_id=6 for up to date details, ip space used etc.		See http://racktable.freenetworkfoundation.org/index.php?page=row&row_id=6 for up to date details, ip space used etc.


	====Road warrior VPN====		====Road warrior VPN====
Line 499:		Line 493:
	==== Operator Support System tools ====		==== Operator Support System tools ====

	+(under heavy construction at this time)+		''Under heavy construction at this time!''

	All applications below are subject to being replaced, having data wiped etc at any time. Once my CIO tasks are finished, I'll be doing a very thorough build out on the NOC.		All applications below are subject to being replaced, having data wiped etc at any time. Once my CIO tasks are finished, I'll be doing a very thorough build out on the NOC.

	* Ticketing (OSTicket)		{\| class="wikitable"
	http://support.freenetworkfoundation.org		\|-
			! scope="col" style="width: 30%" \| What
	* Monitoring (Opsview)		! scope="col" style="width: 20%" align="right" \| Software
	http://opsview.freenetworkfoundation.org/		! scope="col" style="width: 30%" \| Deployment
			\|-
	* Documentation and configuration management system (Netdot/Nocproject.org)		\|Ticketing
	Not yet deployed.		\|OSTicket
			\|http://support.freenetworkfoundation.org
	* Access point management management (Aircontrol)		\|-
	http://aircontrol.freenetworkfoundation.org/home.seam		\|Monitoring
			\|Opsview
	* GIS System (Udig/OpenStreetMap/Ushadi)		\|http://opsview.freenetworkfoundation.org/
	http://ushadi.freenetworkfoundation.org/		\|-
			\|Documentation and configuration management system
	* Asset location tracking (OpenGTS)		\|Netdot/Nocproject.org
	Not yet deployed		\|Not yet deployed.
			\|-
	* Technical Operations Dispatch system (TicketsCAD)		\|Access point management management
	http://dispatch.freenetworkfoundation.org/		\|Aircontrol
			\|http://aircontrol.freenetworkfoundation.org/home.seam
	* Knowledge base (phpMyFAQ)		\|-
	http://kb.freenetworkfoundation.org/		\|GIS System
			\|Udig/OpenStreetMap/Ushadi
	* Colo documentation (rack table)		\|http://ushadi.freenetworkfoundation.org/
	http://racktable.freenetworkfoundation.org/		\|-
			\|Asset location tracking
	~~* ~~Network diagramming tool (netdiag)		\|OpenGTS
	http://netmap.freenetworkfoundation.org/		\|Not yet deployed
			\|-
			\|Technical Operations Dispatch system
			\|TicketsCAD
			\|http://dispatch.freenetworkfoundation.org/
			\|-
			\|Knowledge base
			\|phpMyFAQ
			\|http://kb.freenetworkfoundation.org/
			\|-
			\|Colo documentation
			\|rack table
			\|http://racktable.freenetworkfoundation.org/
			\|-
			\|Network diagramming tool
			\|netdiag
			\|http://netmap.freenetworkfoundation.org/
			\|}

	==KC/ATX Lab==		==KC/ATX Lab==

imported>Bnewbold: /* Dell Optiplex 745 (pfsense router) */ remove extra line

2012-07-04T02:43:27Z

Dell Optiplex 745 (pfsense router): remove extra line

← Older revision		Revision as of 02:43, 4 July 2012
Line 32:		Line 32:

	'''Notes:'''		'''Notes:'''
	System can also be accessed via SSH. Not much can be done via SSH unless you know exactly what you are doing.		System can also be accessed via SSH. Not much can be done via SSH unless you know exactly what you are doing.


	====Cisco 2950 Switch (main/peering switch)====		====Cisco 2950 Switch (main/peering switch)====

imported>Bnewbold: fix

2012-06-29T21:33:33Z

fix

← Older revision		Revision as of 21:33, 29 June 2012
Line 483:		Line 483:
	\|PowerDNS (hosting internal domains)		\|PowerDNS (hosting internal domains)
	\|http://pdns.freenetworkfoundation.org/padmin<br>(cPanel VM proxy back to running on 10.250.6.5)		\|http://pdns.freenetworkfoundation.org/padmin<br>(cPanel VM proxy back to running on 10.250.6.5)
			\|-
	\|Source control		\|Source control
	\|GIT		\|GIT

imported>Bnewbold: bit of tidy up

2012-06-29T21:32:11Z

bit of tidy up

Show changes

imported>Charlesnw: /* KC Lab */

2012-06-28T23:54:12Z

KC Lab

← Older revision		Revision as of 23:54, 28 June 2012
Line 506:		Line 506:
	http://netmap.freenetworkfoundation.org/		http://netmap.freenetworkfoundation.org/

	==KC Lab==		==KC/ATX Lab==

	See [[FreedomLab]] for all things related to the lab.		See [[FreedomLab]] for all things related to the lab. Racktables also has a lot of info.

	==Dallas DR==		==Dallas DR==

imported>Charlesnw: /* ATX Lab */

2012-06-28T23:52:52Z

ATX Lab

← Older revision		Revision as of 23:52, 28 June 2012
Line 509:		Line 509:

	See [[FreedomLab]] for all things related to the lab.		See [[FreedomLab]] for all things related to the lab.

	~~==ATX Lab==~~

	~~This serves as our continuous integration/live test environment. More details later.~~

	~~===Network Systems===~~

	~~===Server systems===~~

	==Dallas DR==		==Dallas DR==

imported>Charlesnw: /* KC Lab */

2012-06-28T23:52:20Z

KC Lab

← Older revision		Revision as of 23:52, 28 June 2012
Line 508:		Line 508:
	==KC Lab==		==KC Lab==

	~~===Network Systems===~~		See [[FreedomLab]] for all things related to the lab.

	~~===Server systems===~~

	==ATX Lab==		==ATX Lab==

imported>Charlesnw at 21:39, 28 June 2012

2012-06-28T21:39:14Z

← Older revision		Revision as of 21:39, 28 June 2012
Line 357:		Line 357:


	===VPN ~~access~~===		===VPN===

	~~h3.~~ Site to Site VPN		====Site to Site VPN====

	Currently we have the following site to site VPN setup:		Currently we have the following site to site VPN setup:
Line 372:		Line 372:


	===Road warrior VPN===		====Road warrior VPN====

	This is used for FNF staff when they travel. It allows access to all aspects of the FNF enterprise network.		This is used for FNF staff when they travel. It allows access to all aspects of the FNF enterprise network.

imported>Charlesnw at 21:32, 28 June 2012

2012-06-28T21:32:48Z

← Older revision		Revision as of 21:32, 28 June 2012
Line 122:		Line 122:
	N/A		N/A

	~~h2.~~ Deployed system storage details (hard drive and RAID setup details)		=== Deployed system storage details (hard drive and RAID setup details) ===

	We are using software RAID for the root and /data partition. Both are RAID1. The /backup partition is a single USB drive.		We are using software RAID for the root and /data partition. Both are RAID1. The /backup partition is a single USB drive.


	h3. Root		====Root====

	2 8GB USB flash drives		2 8GB USB flash drives
Line 138:		Line 138:
	* Actual device UUID:		* Actual device UUID:

	h3. /data		====/data====

	2 1TB USB hard drives		2 1TB USB hard drives
Line 146:		Line 146:
	Actual device UUID:		Actual device UUID:

	~~h3.~~ Backup Drive (/backup)		====Backup Drive (/backup)====

	TODO		TODO


	~~h3.~~ Misc storage notes:		====Misc storage notes====

	282 smartctl -i /dev/md0		282 smartctl -i /dev/md0

imported>Charlesnw at 20:46, 28 June 2012

2012-06-28T20:46:35Z

← Older revision		Revision as of 20:46, 28 June 2012
Line 241:		Line 241:

	root@knel-prod-fm1:~#		root@knel-prod-fm1:~#

			== KC POP - Virtual Machine Creation ==

			The process to create a new virtual machine is pretty straightforward

			# Login to pfsense
			# Go to services -> DHCP Server
			# Add a new DHCP reservation to the appropriate network
			# Login to bare metal server

			A virtual machine consists of two components

			* Data for the virtual instance: (located in /data/lxc)

			kccp
			root@knel-prod-fm1:/data/lxc# ls
			authorized_keys fix-dev.sh infra occupy www
			fix_dev.sh fnf knel templates
			root@knel-prod-fm1:/data/lxc#

			root@knel-prod-fm1:/data/lxc# ls fnf/
			fnf-base fnf-freeswitch fnf-opsview fnf-sogo
			fnf-chili fnf-git fnf-packetfence fnf-video
			fnf-freeside fnf-logger fnf-snorby fnf-voiptest


			===Configuration files for the virtual instance: (located in /etc/lxc)===


			root@knel-prod-fm1:/etc/lxc# ls
			cnwknel fnf infra knel occupy stage www
			root@knel-prod-fm1:/etc/lxc#


			root@knel-prod-fm1:/etc/lxc# ls fnf/
			fnf-base.conf fnf-freeswitch.conf fnf-nocproject.conf fnf-video.conf
			fnf-chili.conf fnf-git.conf fnf-opsview.conf fnf-voiptest.conf
			fnf-freeside.conf fnf-jabber.conf fnf-sogo.conf
			root@knel-prod-fm1:/etc/lxc#


			Creating a new virtual machine is straight forward.

			# Setup the new DHCP lease in PfSense
			# Clone the data directory in /data/lxc/<category> to the new machine name.
			# Clone the config file in /etc/lxc/<category> to the new machine name.
			# Edit the config file and adjust the mac address and data path

			lxc-start -f <path to config> -d -n <name of vm>

			Most likely a new VM isn't needed at this point. Cpanel VM should be able to do just about everything LAMP/Java related.

			A few notes:
			The first time you start the new container, you'll want to invoke
			lxc-start -f <path-to-config> -n <name of vm>
			(notice no -d)

			You'll then be in the container. Make any necessary changes (hostname, password).
			shutdown -h now
			will bring you back to the bare metal.

			If you'd like to enable ssh access to the new box, there's a couple of extra steps:
			A NAT rule to forward a random port to port 22 on the vm
			A DNS entry to resolve some domain to the correct ip address (this depends on which vlan your vm is on)


	==KC POP - Network Information==		==KC POP - Network Information==