November 2015 - mice-discuss - lists.micemn.net

Re: VM donation- change control/graph data backup

by Andrew Hoyos

> On Nov 17, 2015, at 11:20 AM, Doug McIntyre <merlyn(a)iphouse.net> wrote: > > On Tue, Nov 17, 2015 at 09:38:16AM -0600, Andrew Hoyos wrote: >> I’d like to offer up a VM donation located in Madison, WI to at least run RANCID to grab config backups of the IX switches, as well as a backup target for any data (graphs, route-server config, etc). > > Sure. Although I do have some backups of the main switch/bird configs located here > in my location (not at 511, but still Minneapolis). I have considered > adding the configs I touch to my RANCID, but didn't find enough value I suppose. I think one of the things that was touched on in the meeting yesterday was change control. RANCID diffs running on a 15/30 minute basis could be a cheap verification. Probably even from multiple places wouldn’t hurt. > I already had a tech list setup (MICE-TECH), but then I started > thinking about who should have access to what, and what should be an > archive (public? Semi-public?) of tech discussions, vs. something that > may have a little sensitive value (ie. config snippets with SNMP > communities, CoPP firewall rules, etc.). vs. most of it (ie. BGP setup > & questions/problems). I’d support this, and would happily participate in these discussions. Maybe just a members only list, added only by someone in some official capacity? Private archives would solve some issue there, and RANCID will by default, redact passwords/community strings.

Nov. 17, 2015

Re: VM donation- change control/graph data backup

by Doug McIntyre

On Tue, Nov 17, 2015 at 09:38:16AM -0600, Andrew Hoyos wrote: > I’d like to offer up a VM donation located in Madison, WI to at least run RANCID to grab config backups of the IX switches, as well as a backup target for any data (graphs, route-server config, etc). Sure. Although I do have some backups of the main switch/bird configs located here in my location (not at 511, but still Minneapolis). I have considered adding the configs I touch to my RANCID, but didn't find enough value I suppose. I already had a tech list setup (MICE-TECH), but then I started thinking about who should have access to what, and what should be an archive (public? Semi-public?) of tech discussions, vs. something that may have a little sensitive value (ie. config snippets with SNMP communities, CoPP firewall rules, etc.). vs. most of it (ie. BGP setup & questions/problems). So I didn't really move forward too much in having people use it. I had thought of doing RANCID into the MICE-TECH list, but again, archives and access to them came up in my mind as problematic things. What are others' thoughts? -- Doug McIntyre <merlyn(a)iphouse.net> ~.~ ipHouse ~.~ Network Engineer/Provisioning/Jack of all Trades

Nov. 17, 2015

Re: VM donation- change control/graph data backup

by Justin Krejci

Currently the cacti graph data is all physically stored in Minnetonka in the US Internet data center, where the server lives. We have a dedicated VM instance currently for the MICE cacti server. This server (rrd files, mysql data, etc) is backed up to our own internal server backup system. Adding additional MICE services to this VM are definitely acceptable: rancid, syslog, etc. if so requested by MICE. This is perhaps getting deeper into implementation design than is appropriate at this point in the discussion but I suggest syslog data be sent and stored locally to the exchange to minimize the potential for data loss in the event of a network issue. Adding a secondary external syslog server might make sense too, such as to the Hoyos referenced VM offer, to the USI cacti server, etc. It could even be stored on a dedicated machine within the MICE network and then copied off site as well: syslog can do this in real time, other files/data could be rsynced or similar on the same backup job, a traditional backup application could be used, etc. ________________________________________ From: MICE Discuss [MICE-DISCUSS(a)LISTS.IPHOUSE.NET] on behalf of Andrew Hoyos [hoyosa(a)GMAIL.COM] Sent: Tuesday, November 17, 2015 9:38 AM To: MICE-DISCUSS(a)LISTS.IPHOUSE.NET Subject: [MICE-DISCUSS] VM donation- change control/graph data backup Hi folks, One of the things that was discussed in the meeting yesterday as change control and config backups. Perhaps along those same lines, we should think about also backing up the graph data somewhere. I’m not sure where any of this data physically lives right now, but perhaps it would make sense to put somewhere *other* than the 511 bldg. I’d like to offer up a VM donation located in Madison, WI to at least run RANCID to grab config backups of the IX switches, as well as a backup target for any data (graphs, route-server config, etc). Effort involved should be minimal, but we’d happily take point on getting RANCID set up and configured as well, and sending diffs to the technical committee, as well as whomever else might see value in seeing config changes happen (perhaps a list?) Let me know, and we’ll make it happen. -- Andrew Hoyos hoyosa(a)gmail.com

Nov. 17, 2015

VM donation- change control/graph data backup

by Andrew Hoyos

Hi folks, One of the things that was discussed in the meeting yesterday as change control and config backups. Perhaps along those same lines, we should think about also backing up the graph data somewhere. I’m not sure where any of this data physically lives right now, but perhaps it would make sense to put somewhere *other* than the 511 bldg. I’d like to offer up a VM donation located in Madison, WI to at least run RANCID to grab config backups of the IX switches, as well as a backup target for any data (graphs, route-server config, etc). Effort involved should be minimal, but we’d happily take point on getting RANCID set up and configured as well, and sending diffs to the technical committee, as well as whomever else might see value in seeing config changes happen (perhaps a list?) Let me know, and we’ll make it happen. -- Andrew Hoyos hoyosa(a)gmail.com

Nov. 17, 2015

Re: Website Version Control

by Mike Horwath

On Tue, Nov 17, 2015 at 12:41:26AM -0600, Richard Laager wrote: > I've put the website code here for now: > https://github.com/rlaager/mice-website Awesome, thanks! -- Mike Horwath, reachable via drechsau(a)Geeks.ORG

Nov. 17, 2015

Website Version Control

by Richard Laager

I've put the website code here for now: https://github.com/rlaager/mice-website Once we get non-profit status, I should be able to get a free github "organization" account for MICE. That would be more correct. -- Richard

Nov. 17, 2015

Re: Member SLA's

by Reid Fishler

Or, it would need to be a risk that the SLA vendor takes. Remember, the SLA vendor could, in the end, just remove the cross connect if they have access to the customers gear... Reid On Tue, Nov 17, 2015 at 12:52 AM, Richard Laager <rlaager(a)wiktel.com> wrote: > On 11/16/2015 07:19 PM, Nevin Lyne wrote: > >> why would this "SLA vendor" have access to make changes to the Exchanges >> equipment if the SLA vendor is not hired by the Exchange itself? >> > > I assume that, in order to _guarantee_ they could meet the SLA needs of > "Behemoth", the "SLA vendor" would have to employ someone (or better, > multiple someones) with admin access to the switches. > > Let's assume that none of the employers of the existing technical > committee members want to take on the role of "SLA vendor". Let's also > assume the "SLA vendor" doesn't hire any existing technical committee > members. For this to work, the "SLA vendor" would have to convince the MICE > board/membership to add new people (employees of "SLA vendor") to the > technical committee. > > -- > Richard > > -- Reid Fishler Director Hurricane Electric +1-510-580-4178

Nov. 17, 2015

Re: Member SLA's

by Richard Laager

On 11/16/2015 07:19 PM, Nevin Lyne wrote: > why would this "SLA vendor" have access to make changes to the Exchanges equipment if the SLA vendor is not hired by the Exchange itself? I assume that, in order to _guarantee_ they could meet the SLA needs of "Behemoth", the "SLA vendor" would have to employ someone (or better, multiple someones) with admin access to the switches. Let's assume that none of the employers of the existing technical committee members want to take on the role of "SLA vendor". Let's also assume the "SLA vendor" doesn't hire any existing technical committee members. For this to work, the "SLA vendor" would have to convince the MICE board/membership to add new people (employees of "SLA vendor") to the technical committee. -- Richard

Nov. 17, 2015

Re: MICE Fees Nay Fundraising

by Reid Fishler

As discussed at the meeting, just as soon as we have confirmation that everything is in on the 501 c6 registration (which should be very shortly) we can start to solicit donations. Reid On Mon, Nov 16, 2015 at 5:58 PM, Hannigan, Martin <marty(a)akamai.com> wrote: > > > Why overthink it? Why not just ask for donations and see what happens? > > > > On Nov 16, 2015, at 22:47, Justin Krejci <JKrejci(a)USINTERNET.COM > <JKrejci(a)usinternet.com>> wrote: > > In an effort to not extend the UG discussion further on the "how to get > MICE some money" topic today, and as specifically directed by the board, I > am posting this idea to the mail list. > > > Given the suggestion of caution that MICE should use when discussing the > process of raising funds, I propose the traditional method various > associations use of voluntary/charitable donations. The "how much do you > feel you and the community benefits from the existence and success of > MICE?" approach. Then the little flyer cards with the check boxes next to > various suggested dollar amounts is what comes to mind. > > (hypothetical example) > [ ] - $100 / month > [ ] - $250 / month > [ ] - $500 / month > [ ] - $1000 / month > [ ] - $_____ / month > [ ] - $_____ / one-time > > > MICE could even make note of donor levels if we wanted to get fancy like > at all the trade shows: platinum sponsors, gold, silver, tin, plastic, etc. > This could be an opt-in choice for donating members if they want to get a > little sponsor reference to their website a la CentOS mirros ( > https://www.centos.org/download/mirrors/ > <https://urldefense.proofpoint.com/v2/url?u=https-3A__www.centos.org_downloa…> > ) > > Yes, there are logistical issues that would need to be worked out: someone > or something to generate payable invoices, the completion of MICE's > non-profit status, someone to receive/process payments to MICE, etc. Given > the collective knowledge and capabilities of all of the members involved, I > don't think any such hurdles are insurmountable. > > I believe some/many organizations would be willing to make or keep on > making financial contributions, I know US Internet fits this category. I > wonder how comfortable organizations that are against forced payment for > MICE membership would be to contribute voluntarily to MICE in such a > fashion. This would at least provide a way to start building some reliable > capital vs the ad hoc method of "hey we need to pay the lawyer, can > everyone pitch in?" method. I think it would be better to have the funds > when needed than to ask for the funds when needed. > > In any case, I hope to least get the ball rolling on the general topic of > funding MICE. > > Thoughts? Comments? Feedback? > > > > ------------------------------ > > To unsubscribe from the MICE-DISCUSS list, click the following link: > http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1 > <https://urldefense.proofpoint.com/v2/url?u=http-3A__lists.iphouse.net_cgi-2…> > > > ------------------------------ > > To unsubscribe from the MICE-DISCUSS list, click the following link: > http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1 > -- Reid Fishler Director Hurricane Electric +1-510-580-4178

Nov. 17, 2015

Re: Member SLA's

by Nevin Lyne

On Monday, November 16, 2015 6:15pm, "Jamison Masters" <jamison(a)VERUSCORP.COM> said: > However, the SLA vendor would require management access to the IXP equipment to > support its SLA, and that is where my concern is. Uh maybe I am missing something but why would this "SLA vendor" have access to make changes to the Exchanges equipment if the SLA vendor is not hired by the Exchange itself? The infrastructure is not owned or operated by "Behemoth", and the Exchange is not beholden to some SLA that "Behemoth" and "SLA vendor" created between each other. "SLA vendor" would need to go through the existing people/steps involved/in place for adding a new person to the exchange, or moving someone between a GigE and a 10GE port for example. Random members of the Exchange can't make changes to the switches or bird now, why would this relationship above lead to some SLA vendor being any different? -- Nevin Lyne -- Founder & Director of Technology -- Arcustech, LLC. - arcustech.com -- Gippy's Internet Solutions, LLC. - enginehosting.com

Nov. 17, 2015