Project

General

Profile

Actions

tickets #50078

closed

Mirror Updates

Added by rahulmkhj@gmail.com almost 5 years ago. Updated almost 5 years ago.

Status:
Resolved
Priority:
Normal
Assignee:
Category:
Mirrors
Target version:
-
Start date:
Due date:
% Done:

100%

Estimated time:

Description

Hi,

This is regarding opensuse mirror hosted with us at Esto Internet, India.
Following are the updates:

  1. We'd like to turn off rsync server on our mirror.
  2. The bandwidth capacity have been upgraded to 10Gig.
  3. Would like to have access to staging server.

Kindly do the needful.

Thank you.
Rahul

Actions #1

Updated by pjessen almost 5 years ago

  • Due date set to 2019-04-12
  • Category set to Mirrors
  • Status changed from New to In Progress
  • Assignee set to pjessen
  • Private changed from Yes to No

Hello Rahul

I have removed the rsync service from our database.

Wrt stage access, both of the addresses (103.97.46.254, 2001:df4:a300:1::ffff) for 'opensuse.mirrors.estointernet.in' have access already, see https://progress.opensuse.org/issues/44903

Actions #2

Updated by rahulmkhj@gmail.com almost 5 years ago

Hi,

The mirror is being moved to new host, please update the allowed IP
addresses to following:

IPv4: 103.123.235.250
IPv6: 2403:8940:3:1::/64

Thank you.
Rahul

Actions #3

Updated by rahulmkhj@gmail.com almost 5 years ago

Hi.

Please do the needful.

Thank you.
Rahul

Actions #4

Updated by pjessen almost 5 years ago

  • Status changed from In Progress to Feedback

rahulmkhj@gmail.com wrote:

Hi,

The mirror is being moved to new host, please update the allowed IP
addresses to following:

IPv4: 103.123.235.250
IPv6: 2403:8940:3:1::/64

THe latter is a range, please specify the host address.

Actions #5

Updated by rahulmkhj@gmail.com almost 5 years ago

Yes, that is a prefix. Because the server generates a new/random IP address
from the assigned prefix (based on MAC address, I guess) for security
purposes. I believe allowing a prefix should not be an issue. Please let me
know if that really is an issue.

Actions #6

Updated by pjessen almost 5 years ago

  • Status changed from Feedback to In Progress

rahulmkhj@gmail.com wrote:

Yes, that is a prefix. Because the server generates a new/random IP address
from the assigned prefix (based on MAC address, I guess) for security
purposes.

This method is rarely if ever used with servers, they require a fixed address.

I believe allowing a prefix should not be an issue. Please let me
know if that really is an issue.

Opening our rsync server to an entire /64 prefix is not an option.

A DNS lookup reveals '2403:8940:3:1::f' as the correct address:

host opensuse.mirrors.estointernet.in
opensuse.mirrors.estointernet.in has address 103.123.235.250
opensuse.mirrors.estointernet.in has IPv6 address 2403:8940:3:1::f

I have updated the ACL according to the above.

Actions #7

Updated by rahulmkhj@gmail.com almost 5 years ago

Yes, those are correct IP addresses to reach server from outside world, but
for connection from the server going towards internet the OS uses some tmp
address. Anyways, thanks for the update, I'll change my configuration as
per that.

Actions #8

Updated by pjessen almost 5 years ago

  • Due date deleted (2019-04-12)
  • Status changed from In Progress to Resolved
  • % Done changed from 0 to 100

I think we are done here? Closing.

Actions

Also available in: Atom PDF