WilliamsNet Architecture: Difference between revisions

From WilliamsNet Wiki
Jump to navigation Jump to search
Line 46: Line 46:


=== Work Filesystem ===
=== Work Filesystem ===
/work on pro6 -> EquaLogic Storage Array -> xfs -> NFS
* /work on pro6 -> EquaLogic Storage Array -> xfs -> NFS


== Infrastructure Services ==
== Infrastructure Services ==

Revision as of 22:28, 18 August 2021

(include a network diagram including the three core switches, the firewall, cable modem, and internet link, blocks for each cluster/group of systems)

Networks

  • Describe 3-switch core network
  • Describe which ports are dedicated for specific VLANs (iSCSINet/Storagenet)

VLANs

describe all three primary VLANs (Admin, StorageNet, iSCSINet) and what they are used for.

External Access

firewall pinholes

  • http/https
  • ssh (non-standard ports)
  • Plex

Domains

  • esternal wildcard DNS entries
    • Managed/provided by enom.com
    • williams-net.org
    • dredwilliams.com
    • ewconsulting.com
  • internal
    • williams.localnet
    • dev.williams.localnet
    • test.williams.localnet

Firewall

  • pfSense software/appliance
  • DHCP Server
  • DNS server
  • IPsec VPN
    • mobile clients
    • Michael's network (loneisles)
    • Joshua's network (alagaesia)
    • Cottage network (menagerie) menagerie.williams-net.org

Storage

EquaLogic Storage Array

Promise Storage Array

Primary File Server

  • /files on storage1 -> EquaLogic Storage Array -> zfs -> NFS/SMB
  • /backup on storage1 -> local disk -> zfs -> NFS/SMB
  • /promise on storage1 -> Promise Storage Array -> zfs -> NFS

Work Filesystem

  • /work on pro6 -> EquaLogic Storage Array -> xfs -> NFS

Infrastructure Services

  • Load Balancer/Reverse proxy - NGINX - diggle.williams.localnet
  • IMAP/SMTP (production cluster) [mail|smtp|imap|narnia].williams.localnet
  • Log Aggregator (production cluster) rsyslog.williams.localnet
  • Config Server (production cluster) http://config.williams.localnet
  • MariaDB (production cluster) database.williams.localnet
  • iSpy Security Cameras - maugrim.williams.localnet

Web applications

Kubernetes Clusters

Production Cluster

vanilla upstream install (point to config page)

  • telmar (master)
  • compute4 (node)
  • pro5 (node)
  • separate Ceph cluster (7TB ish)

Test Cluster

k3s HA install (point to config page)

  • pro1 (master)
  • pro2 (master)
  • pro3 (master)
  • pro4 (node)
  • integrated rook/ceph storage

Development Cluster

k3s HA install (point to config page)

  • rogin (GPU) (master)
  • duffle (GPU) (master)
  • compute1 (GPU) (master)
  • compute8 (GPU)(node)
  • storage1 (node)
  • integrated rook/ceph storage (~20TB)

Desktop Systems

  • aslan - Office
  • tumnus - kitchen
  • bree - Music Room
  • rumblebuffin - cottage office
  • drad - cottage office
  • reepicheep - Surface Tablet

Spare Servers

  • poggin (GPU) (Debian 10)
  • trumpkin (GPU) (Debian 10)
  • calormen (Debian 10)
  • lamppost (Fedora 34)