SlideShare ist ein Scribd-Unternehmen logo
1 von 21
Downloaden Sie, um offline zu lesen
Infrastructure Review
Sebastian Schubert
@bastischubert:matrix.org
Core Infra
● Cisco ASR 1006 for routing, ACLs, NAT64, DHCP
● Several Cisco C3750 Switches
● Two servers for all other Services - we’ll come back to them later
● All Monitoring done via Prometheus, Loki, and Grafana
● Data for Public Dashboards sent and persistent to VM outside ULB
Video
Capturing with our video boxes - improved version now with HDMI ;)
See https://github.com/FOSDEM/video for details
Send streams to render farm
Send streams off-site for livestreaming and cutting into finished videos
Semi-automated review and cutting process via https://github.com/yoe/sreview - this
year running on k8s for the first time
Render Farm 2023 Edition
DNS64
We ran the last years on bind9
Switched to CoreDNS for DNS64 at sunday of FOSDEM 2020
Significant reduction in CPU usage
This year we also replaced the remaining bind that handled our internal DNS
Timelines
Installation of router
2016: Friday
2017: December
2018: December
2019: December
2020: December
2023: January
Network up and Running
2015: Saturday 5:00
2016: Friday 19:00
2017: Friday 17:00
2018: Friday 12:00
2019: Thursday, last hiccups fixed Fri. 19:00
2020: Friday 18:00
2023: Friday 20:20
Timelines
Monitoring
2016: Saturday 12:00
2017: Saturday 09:00
2018: January
2019: January
2020: January (2019!)
2023: January 13th
Video
2016: Saturday 11:30
2017: Saturday 09:30
2018: Saturday 08:30
2019: Friday 21:00
2020: Friday 19:00
2023: Friday ~22:00
Story so far
Closed FOSDEM 2020 with an amazing run from tech perspective
All On-Site IT was completely managed via Ansible
Then there was this pandemic …
FOSDEM 2021 and 2022
No conference at ULB
No Infrastructure to manage 🤟
The maintainer of the infra left FOSDEM meanwhile 😣
Back again in persona
Looking at the two machines after almost 2 years - fingers crossed
We had a working ssh key
Tons of updates to be installed
Battery Packs of the RAID Controllers depleted - everything seemd else ok’ish
Automation, be gone!
Ansible repo for the main event servers not usable with current ansible versions
Timeline
● Servers alive : January 8th
● Services alive: January 13th
● DNS64: January 17th
● Centralized all logs: January 18th
● Jan 26 13:59:53 Line protocol on Interface TenGigabitEthernet2/0/20, changed state to up
● Jan 26 18:14 %BGP-5-ADJCHANGE: neighbor 87.237.12.129 Up / %BGP-5-ADJCHANGE: neighbor 2001:4C40:100:23::1 Up
● Jan 28 11:41 no more connectivity to our servers at ULB via the new BGP Session
● Jan 28 11:41 panic mode
Timeline
● Servers alive : January 8th
● Services alive: January 13th
● DNS64: January 17th
● Centralized all logs: January 18th
● Jan 26 13:59:53 Line protocol on Interface TenGigabitEthernet2/0/20, changed state to up
● Jan 26 18:14 %BGP-5-ADJCHANGE: neighbor 87.237.12.129 Up / %BGP-5-ADJCHANGE: neighbor 2001:4C40:100:23::1 Up
● Jan 28 11:41 no more connectivity to our servers at ULB via the new BGP Session
ipv6 was also br0ken somehow
● Jan 29 22:48 removed MTU glitch on Uplinks, restartet BGP Sessions
● Feb 04 19:30 moved BGP Sessions to second provider
Clone our Conference
● Checkout our public dashboards on https://dashboard.grafana.org
● Clone our Infrastructure: https://github.com/FOSDEM/infrastructure
Q & A

Weitere ähnliche Inhalte

Ähnlich wie OSMC 2023 | Running the Infra at FOSDEM by Sebastian Schubert

Sharing your-internet-connection-on-linux
Sharing your-internet-connection-on-linuxSharing your-internet-connection-on-linux
Sharing your-internet-connection-on-linux
jasembo
 

Ähnlich wie OSMC 2023 | Running the Infra at FOSDEM by Sebastian Schubert (20)

NFD9 - Dinesh Dutt, Data Center Architectures
NFD9 - Dinesh Dutt, Data Center ArchitecturesNFD9 - Dinesh Dutt, Data Center Architectures
NFD9 - Dinesh Dutt, Data Center Architectures
 
2014/09/02 Cisco UCS HPC @ ANL
2014/09/02 Cisco UCS HPC @ ANL2014/09/02 Cisco UCS HPC @ ANL
2014/09/02 Cisco UCS HPC @ ANL
 
Network Node is Not Needed Anymore - Completed Distributed Virtual Router / F...
Network Node is Not Needed Anymore - Completed Distributed Virtual Router / F...Network Node is Not Needed Anymore - Completed Distributed Virtual Router / F...
Network Node is Not Needed Anymore - Completed Distributed Virtual Router / F...
 
Forensic Tracing in the Internet: An Update
Forensic Tracing in the Internet: An UpdateForensic Tracing in the Internet: An Update
Forensic Tracing in the Internet: An Update
 
2017 03-01-forensics 1488330715
2017 03-01-forensics 14883307152017 03-01-forensics 1488330715
2017 03-01-forensics 1488330715
 
EMEA Airheads- Manage Devices at Branch Office (BOC)
EMEA Airheads- Manage Devices at Branch Office (BOC)EMEA Airheads- Manage Devices at Branch Office (BOC)
EMEA Airheads- Manage Devices at Branch Office (BOC)
 
Основные понятия и аспекты построения отказоустойчивых Site-to-Site VPN на ASA
Основные понятия и аспекты построения отказоустойчивых Site-to-Site VPN на ASAОсновные понятия и аспекты построения отказоустойчивых Site-to-Site VPN на ASA
Основные понятия и аспекты построения отказоустойчивых Site-to-Site VPN на ASA
 
Approaching hyperconvergedopenstack
Approaching hyperconvergedopenstackApproaching hyperconvergedopenstack
Approaching hyperconvergedopenstack
 
Modul 1 integration island
Modul 1   integration islandModul 1   integration island
Modul 1 integration island
 
Routed networks sydney
Routed networks sydneyRouted networks sydney
Routed networks sydney
 
Sharing your-internet-connection-on-linux
Sharing your-internet-connection-on-linuxSharing your-internet-connection-on-linux
Sharing your-internet-connection-on-linux
 
How we scaled Rudder to 10k, and the road to 50k
How we scaled Rudder to 10k, and the road to 50kHow we scaled Rudder to 10k, and the road to 50k
How we scaled Rudder to 10k, and the road to 50k
 
Site-to-Site VPNs - pfSense Hangout November 2015
Site-to-Site VPNs - pfSense Hangout November 2015Site-to-Site VPNs - pfSense Hangout November 2015
Site-to-Site VPNs - pfSense Hangout November 2015
 
IPv6 Basics - pfSense Hangout July 2015
IPv6 Basics - pfSense Hangout July 2015IPv6 Basics - pfSense Hangout July 2015
IPv6 Basics - pfSense Hangout July 2015
 
Hands-On: Deploy Remote Graphics Desktops for Content Production (CMP422) - A...
Hands-On: Deploy Remote Graphics Desktops for Content Production (CMP422) - A...Hands-On: Deploy Remote Graphics Desktops for Content Production (CMP422) - A...
Hands-On: Deploy Remote Graphics Desktops for Content Production (CMP422) - A...
 
Installation And Configuration Of DNS, Web And FTP Servers On Virtual Machine...
Installation And Configuration Of DNS, Web And FTP Servers On Virtual Machine...Installation And Configuration Of DNS, Web And FTP Servers On Virtual Machine...
Installation And Configuration Of DNS, Web And FTP Servers On Virtual Machine...
 
Matthew Mosesohn - Configuration Management at Large Companies
Matthew Mosesohn - Configuration Management at Large Companies Matthew Mosesohn - Configuration Management at Large Companies
Matthew Mosesohn - Configuration Management at Large Companies
 
BitVisor Summit 8「3. AQC107 Driver and Changes coming to network API」
BitVisor Summit 8「3. AQC107 Driver and Changes coming to network API」BitVisor Summit 8「3. AQC107 Driver and Changes coming to network API」
BitVisor Summit 8「3. AQC107 Driver and Changes coming to network API」
 
Simplifying open stack and kubernetes networking with romana
Simplifying open stack and kubernetes networking with romanaSimplifying open stack and kubernetes networking with romana
Simplifying open stack and kubernetes networking with romana
 
Rohit Yadav - The future of the CloudStack Virtual Router
Rohit Yadav - The future of the CloudStack Virtual RouterRohit Yadav - The future of the CloudStack Virtual Router
Rohit Yadav - The future of the CloudStack Virtual Router
 

Kürzlich hochgeladen

Jual obat aborsi Jakarta 085657271886 Cytote pil telat bulan penggugur kandun...
Jual obat aborsi Jakarta 085657271886 Cytote pil telat bulan penggugur kandun...Jual obat aborsi Jakarta 085657271886 Cytote pil telat bulan penggugur kandun...
Jual obat aborsi Jakarta 085657271886 Cytote pil telat bulan penggugur kandun...
ZurliaSoop
 
Bring back lost lover in USA, Canada ,Uk ,Australia ,London Lost Love Spell C...
Bring back lost lover in USA, Canada ,Uk ,Australia ,London Lost Love Spell C...Bring back lost lover in USA, Canada ,Uk ,Australia ,London Lost Love Spell C...
Bring back lost lover in USA, Canada ,Uk ,Australia ,London Lost Love Spell C...
amilabibi1
 
Uncommon Grace The Autobiography of Isaac Folorunso
Uncommon Grace The Autobiography of Isaac FolorunsoUncommon Grace The Autobiography of Isaac Folorunso
Uncommon Grace The Autobiography of Isaac Folorunso
Kayode Fayemi
 
Unlocking Exploration: Self-Motivated Agents Thrive on Memory-Driven Curiosity
Unlocking Exploration: Self-Motivated Agents Thrive on Memory-Driven CuriosityUnlocking Exploration: Self-Motivated Agents Thrive on Memory-Driven Curiosity
Unlocking Exploration: Self-Motivated Agents Thrive on Memory-Driven Curiosity
Hung Le
 
Proofreading- Basics to Artificial Intelligence Integration - Presentation:Sl...
Proofreading- Basics to Artificial Intelligence Integration - Presentation:Sl...Proofreading- Basics to Artificial Intelligence Integration - Presentation:Sl...
Proofreading- Basics to Artificial Intelligence Integration - Presentation:Sl...
David Celestin
 

Kürzlich hochgeladen (17)

Jual obat aborsi Jakarta 085657271886 Cytote pil telat bulan penggugur kandun...
Jual obat aborsi Jakarta 085657271886 Cytote pil telat bulan penggugur kandun...Jual obat aborsi Jakarta 085657271886 Cytote pil telat bulan penggugur kandun...
Jual obat aborsi Jakarta 085657271886 Cytote pil telat bulan penggugur kandun...
 
Digital collaboration with Microsoft 365 as extension of Drupal
Digital collaboration with Microsoft 365 as extension of DrupalDigital collaboration with Microsoft 365 as extension of Drupal
Digital collaboration with Microsoft 365 as extension of Drupal
 
AWS Data Engineer Associate (DEA-C01) Exam Dumps 2024.pdf
AWS Data Engineer Associate (DEA-C01) Exam Dumps 2024.pdfAWS Data Engineer Associate (DEA-C01) Exam Dumps 2024.pdf
AWS Data Engineer Associate (DEA-C01) Exam Dumps 2024.pdf
 
Dreaming Music Video Treatment _ Project & Portfolio III
Dreaming Music Video Treatment _ Project & Portfolio IIIDreaming Music Video Treatment _ Project & Portfolio III
Dreaming Music Video Treatment _ Project & Portfolio III
 
Bring back lost lover in USA, Canada ,Uk ,Australia ,London Lost Love Spell C...
Bring back lost lover in USA, Canada ,Uk ,Australia ,London Lost Love Spell C...Bring back lost lover in USA, Canada ,Uk ,Australia ,London Lost Love Spell C...
Bring back lost lover in USA, Canada ,Uk ,Australia ,London Lost Love Spell C...
 
Uncommon Grace The Autobiography of Isaac Folorunso
Uncommon Grace The Autobiography of Isaac FolorunsoUncommon Grace The Autobiography of Isaac Folorunso
Uncommon Grace The Autobiography of Isaac Folorunso
 
My Presentation "In Your Hands" by Halle Bailey
My Presentation "In Your Hands" by Halle BaileyMy Presentation "In Your Hands" by Halle Bailey
My Presentation "In Your Hands" by Halle Bailey
 
SOLID WASTE MANAGEMENT SYSTEM OF FENI PAURASHAVA, BANGLADESH.pdf
SOLID WASTE MANAGEMENT SYSTEM OF FENI PAURASHAVA, BANGLADESH.pdfSOLID WASTE MANAGEMENT SYSTEM OF FENI PAURASHAVA, BANGLADESH.pdf
SOLID WASTE MANAGEMENT SYSTEM OF FENI PAURASHAVA, BANGLADESH.pdf
 
in kuwait௹+918133066128....) @abortion pills for sale in Kuwait City
in kuwait௹+918133066128....) @abortion pills for sale in Kuwait Cityin kuwait௹+918133066128....) @abortion pills for sale in Kuwait City
in kuwait௹+918133066128....) @abortion pills for sale in Kuwait City
 
Dreaming Marissa Sánchez Music Video Treatment
Dreaming Marissa Sánchez Music Video TreatmentDreaming Marissa Sánchez Music Video Treatment
Dreaming Marissa Sánchez Music Video Treatment
 
Report Writing Webinar Training
Report Writing Webinar TrainingReport Writing Webinar Training
Report Writing Webinar Training
 
Zone Chairperson Role and Responsibilities New updated.pptx
Zone Chairperson Role and Responsibilities New updated.pptxZone Chairperson Role and Responsibilities New updated.pptx
Zone Chairperson Role and Responsibilities New updated.pptx
 
ICT role in 21st century education and it's challenges.pdf
ICT role in 21st century education and it's challenges.pdfICT role in 21st century education and it's challenges.pdf
ICT role in 21st century education and it's challenges.pdf
 
Unlocking Exploration: Self-Motivated Agents Thrive on Memory-Driven Curiosity
Unlocking Exploration: Self-Motivated Agents Thrive on Memory-Driven CuriosityUnlocking Exploration: Self-Motivated Agents Thrive on Memory-Driven Curiosity
Unlocking Exploration: Self-Motivated Agents Thrive on Memory-Driven Curiosity
 
Proofreading- Basics to Artificial Intelligence Integration - Presentation:Sl...
Proofreading- Basics to Artificial Intelligence Integration - Presentation:Sl...Proofreading- Basics to Artificial Intelligence Integration - Presentation:Sl...
Proofreading- Basics to Artificial Intelligence Integration - Presentation:Sl...
 
lONG QUESTION ANSWER PAKISTAN STUDIES10.
lONG QUESTION ANSWER PAKISTAN STUDIES10.lONG QUESTION ANSWER PAKISTAN STUDIES10.
lONG QUESTION ANSWER PAKISTAN STUDIES10.
 
Introduction to Artificial intelligence.
Introduction to Artificial intelligence.Introduction to Artificial intelligence.
Introduction to Artificial intelligence.
 

OSMC 2023 | Running the Infra at FOSDEM by Sebastian Schubert

  • 2. Core Infra ● Cisco ASR 1006 for routing, ACLs, NAT64, DHCP ● Several Cisco C3750 Switches ● Two servers for all other Services - we’ll come back to them later ● All Monitoring done via Prometheus, Loki, and Grafana ● Data for Public Dashboards sent and persistent to VM outside ULB
  • 3. Video Capturing with our video boxes - improved version now with HDMI ;) See https://github.com/FOSDEM/video for details Send streams to render farm Send streams off-site for livestreaming and cutting into finished videos Semi-automated review and cutting process via https://github.com/yoe/sreview - this year running on k8s for the first time
  • 4.
  • 5.
  • 6.
  • 8. DNS64 We ran the last years on bind9 Switched to CoreDNS for DNS64 at sunday of FOSDEM 2020 Significant reduction in CPU usage This year we also replaced the remaining bind that handled our internal DNS
  • 9. Timelines Installation of router 2016: Friday 2017: December 2018: December 2019: December 2020: December 2023: January Network up and Running 2015: Saturday 5:00 2016: Friday 19:00 2017: Friday 17:00 2018: Friday 12:00 2019: Thursday, last hiccups fixed Fri. 19:00 2020: Friday 18:00 2023: Friday 20:20
  • 10. Timelines Monitoring 2016: Saturday 12:00 2017: Saturday 09:00 2018: January 2019: January 2020: January (2019!) 2023: January 13th Video 2016: Saturday 11:30 2017: Saturday 09:30 2018: Saturday 08:30 2019: Friday 21:00 2020: Friday 19:00 2023: Friday ~22:00
  • 11. Story so far Closed FOSDEM 2020 with an amazing run from tech perspective All On-Site IT was completely managed via Ansible Then there was this pandemic …
  • 12. FOSDEM 2021 and 2022 No conference at ULB No Infrastructure to manage 🤟 The maintainer of the infra left FOSDEM meanwhile 😣
  • 13. Back again in persona Looking at the two machines after almost 2 years - fingers crossed We had a working ssh key Tons of updates to be installed Battery Packs of the RAID Controllers depleted - everything seemd else ok’ish
  • 14. Automation, be gone! Ansible repo for the main event servers not usable with current ansible versions
  • 15. Timeline ● Servers alive : January 8th ● Services alive: January 13th ● DNS64: January 17th ● Centralized all logs: January 18th ● Jan 26 13:59:53 Line protocol on Interface TenGigabitEthernet2/0/20, changed state to up ● Jan 26 18:14 %BGP-5-ADJCHANGE: neighbor 87.237.12.129 Up / %BGP-5-ADJCHANGE: neighbor 2001:4C40:100:23::1 Up ● Jan 28 11:41 no more connectivity to our servers at ULB via the new BGP Session ● Jan 28 11:41 panic mode
  • 16.
  • 17.
  • 18. Timeline ● Servers alive : January 8th ● Services alive: January 13th ● DNS64: January 17th ● Centralized all logs: January 18th ● Jan 26 13:59:53 Line protocol on Interface TenGigabitEthernet2/0/20, changed state to up ● Jan 26 18:14 %BGP-5-ADJCHANGE: neighbor 87.237.12.129 Up / %BGP-5-ADJCHANGE: neighbor 2001:4C40:100:23::1 Up ● Jan 28 11:41 no more connectivity to our servers at ULB via the new BGP Session ipv6 was also br0ken somehow ● Jan 29 22:48 removed MTU glitch on Uplinks, restartet BGP Sessions ● Feb 04 19:30 moved BGP Sessions to second provider
  • 19.
  • 20. Clone our Conference ● Checkout our public dashboards on https://dashboard.grafana.org ● Clone our Infrastructure: https://github.com/FOSDEM/infrastructure
  • 21. Q & A