Project

General

Profile

tickets #67444

IPv4 network renumbering of machines in Provo

Added by lrupp over 1 year ago. Updated over 1 year ago.

Status:
Resolved
Priority:
High
Assignee:
Category:
Servers hosted in Provo
Target version:
-
Start date:
2020-06-05
Due date:
2020-06-07
% Done:

90%

Estimated time:
4.00 h

Description

SUSE is getting a new ISP in Provo - and a new set of external IP addresses.

So far, openSUSE got 91.193.113.64/27 assigned, which allows the usage of 32 IPv4 addresses. There is currently no IPv6 available in the new network, but people are working on this.

Default Gateway for all machines will be 91.193.113.94

Please have a look at the checklist for affected machines and their (old) => new IP address assignments.

The new network is protected by a stateful firewall, managed by SUSE-IT. The attached pdf contains the services and ports that are currently requested.


Checklist

  • proxy-prv.opensuse.org (130.57.72.1) => 91.193.113.65
  • proxy-prv1.opensuse.org (130.57.72.2) => 91.193.113.66
  • proxy-prv2.opensuse.org (130.57.72.3) => 91.193.113.67
  • ns4.opensuse.org (130.57.72.15) => 91.193.113.68
  • provo-gate.opensuse.org (130.57.72.5) => 91.193.113.69
  • provo-mirror.opensuse.org (130.57.72.10) => 91.193.113.70
  • provo-downloadcontent.opensuse.org (130.57.72.9) => 91.193.113.71
  • status2.opensuse.org (130.57.72.11) => 91.193.113.72
  • twsnapshot.opensuse.org (130.57.72.8) => 91.193.113.73
  • login3.opensuse.org (130.57.72.20) => 91.193.113.74
  • login3-1.opensuse.org (130.57.72.21) => 91.193.113.75
  • login3-2.opensuse.org (130.57.72.22) => 91.193.113.76

History

#1 Updated by lrupp over 1 year ago

  • Private changed from Yes to No

All machines are pre-configured now with the new IP addresses.

Left TODO:

  1. Re-configure the default gateway
    • uncomment the new default route in /etc/sysconfig/network/routes
    • restart network or (alternatively) ip r change default via 91.193.113.94
  2. Change DNS entries
  3. Change ACLs on download.opensuse.org
  4. Change IPs in monitoring

#2 Updated by lrupp over 1 year ago

  • Checklist set to [x] login3-2.opensuse.org (130.57.72.22) => 91.193.113.76

#3 Updated by lrupp over 1 year ago

  • Checklist set to [x] login3-1.opensuse.org (130.57.72.21) => 91.193.113.75

#4 Updated by lrupp over 1 year ago

  • Checklist set to [x] login3.opensuse.org (130.57.72.20) => 91.193.113.74

#5 Updated by lrupp over 1 year ago

  • Checklist set to [x] status2.opensuse.org (130.57.72.11) => 91.193.113.72

#6 Updated by lrupp over 1 year ago

  • Checklist set to [x] provo-downloadcontent.opensuse.org (130.57.72.9) => 91.193.113.71

#7 Updated by lrupp over 1 year ago

  • Checklist set to [x] provo-mirror.opensuse.org (130.57.72.10) => 91.193.113.70

#8 Updated by lrupp over 1 year ago

  • Checklist set to [x] provo-gate.opensuse.org (130.57.72.5) => 91.193.113.69

#9 Updated by lrupp over 1 year ago

  • Checklist set to [x] ns4.opensuse.org (130.57.72.15) => 91.193.113.68

#10 Updated by lrupp over 1 year ago

  • Checklist set to [x] proxy-prv2.opensuse.org (130.57.72.3) => 91.193.113.67

#11 Updated by lrupp over 1 year ago

  • Checklist set to [x] proxy-prv1.opensuse.org (130.57.72.2) => 91.193.113.66

#12 Updated by lrupp over 1 year ago

  • Checklist set to [x] proxy-prv.opensuse.org (130.57.72.1) => 91.193.113.65

#13 Updated by lrupp over 1 year ago

  • Status changed from Workable to Resolved
  • % Done changed from 0 to 90

Two rules are missing at the DMZ firewall, but as people can reach the twsnapshot content also via provo-mirror.opensuse.org, we decided to see this not as critical and allow MF-IT and SUSE-IT to work on their other topics over the weekend.

DNS changes are done, reverse PTR entries are requested, MirrorBrain adjusted. Hopefully, we did not forgot anything...

Marking this as resolved for now.

Happy weekend, everyone!

#14 Updated by lrupp over 1 year ago

Reverse DNS also done.

Also available in: Atom PDF