tickets #67444
closedIPv4 network renumbering of machines in Provo
90%
Description
SUSE is getting a new ISP in Provo - and a new set of external IP addresses.
So far, openSUSE got 91.193.113.64/27 assigned, which allows the usage of 32 IPv4 addresses. There is currently no IPv6 available in the new network, but people are working on this.
Default Gateway for all machines will be 91.193.113.94
Please have a look at the checklist for affected machines and their (old) => new IP address assignments.
The new network is protected by a stateful firewall, managed by SUSE-IT. The attached pdf contains the services and ports that are currently requested.
Files
Checklist
- proxy-prv.opensuse.org (130.57.72.1) => 91.193.113.65
- proxy-prv1.opensuse.org (130.57.72.2) => 91.193.113.66
- proxy-prv2.opensuse.org (130.57.72.3) => 91.193.113.67
- ns4.opensuse.org (130.57.72.15) => 91.193.113.68
- provo-gate.opensuse.org (130.57.72.5) => 91.193.113.69
- provo-mirror.opensuse.org (130.57.72.10) => 91.193.113.70
- provo-downloadcontent.opensuse.org (130.57.72.9) => 91.193.113.71
- status2.opensuse.org (130.57.72.11) => 91.193.113.72
- twsnapshot.opensuse.org (130.57.72.8) => 91.193.113.73
- login3.opensuse.org (130.57.72.20) => 91.193.113.74
- login3-1.opensuse.org (130.57.72.21) => 91.193.113.75
- login3-2.opensuse.org (130.57.72.22) => 91.193.113.76
Updated by lrupp almost 4 years ago
- Private changed from Yes to No
All machines are pre-configured now with the new IP addresses.
Left TODO:
- Re-configure the default gateway
- uncomment the new default route in
/etc/sysconfig/network/routes - restart network or (alternatively)
ip r change default via 91.193.113.94
- uncomment the new default route in
- Change DNS entries
- Change ACLs on download.opensuse.org
- Change IPs in monitoring
Updated by lrupp almost 4 years ago
- Checklist item changed from to [x] login3-2.opensuse.org (130.57.72.22) => 91.193.113.76
Updated by lrupp almost 4 years ago
- Checklist item changed from to [x] login3-1.opensuse.org (130.57.72.21) => 91.193.113.75
Updated by lrupp almost 4 years ago
- Checklist item changed from to [x] login3.opensuse.org (130.57.72.20) => 91.193.113.74
Updated by lrupp almost 4 years ago
- Checklist item changed from to [x] status2.opensuse.org (130.57.72.11) => 91.193.113.72
Updated by lrupp almost 4 years ago
- Checklist item changed from to [x] provo-downloadcontent.opensuse.org (130.57.72.9) => 91.193.113.71
Updated by lrupp almost 4 years ago
- Checklist item changed from to [x] provo-mirror.opensuse.org (130.57.72.10) => 91.193.113.70
Updated by lrupp almost 4 years ago
- Checklist item changed from to [x] provo-gate.opensuse.org (130.57.72.5) => 91.193.113.69
Updated by lrupp almost 4 years ago
- Checklist item changed from to [x] ns4.opensuse.org (130.57.72.15) => 91.193.113.68
Updated by lrupp almost 4 years ago
- Checklist item changed from to [x] proxy-prv2.opensuse.org (130.57.72.3) => 91.193.113.67
Updated by lrupp almost 4 years ago
- Checklist item changed from to [x] proxy-prv1.opensuse.org (130.57.72.2) => 91.193.113.66
Updated by lrupp almost 4 years ago
- Checklist item changed from to [x] proxy-prv.opensuse.org (130.57.72.1) => 91.193.113.65
Updated by lrupp almost 4 years ago
- Status changed from Workable to Resolved
- % Done changed from 0 to 90
Two rules are missing at the DMZ firewall, but as people can reach the twsnapshot content also via provo-mirror.opensuse.org, we decided to see this not as critical and allow MF-IT and SUSE-IT to work on their other topics over the weekend.
DNS changes are done, reverse PTR entries are requested, MirrorBrain adjusted. Hopefully, we did not forgot anything...
Marking this as resolved for now.
Happy weekend, everyone!