Update on major initiatives Directions for next year Decisions/Policies Computer Oversight Committee...
-
Upload
aldous-anthony -
Category
Documents
-
view
213 -
download
1
Transcript of Update on major initiatives Directions for next year Decisions/Policies Computer Oversight Committee...
Update on major initiatives
Directions for next year
Decisions/Policies
Computer Oversight CommitteeMarch 24, 2004
Update on major initiatives
LDEO
Netscreen FW
MorningsideCommodity &
I2
AcIS 7400
AcIS 2691
100Mbit MW
10Mbit 802.11bAcIS 2691
AcIS 3660
Quest BostonCommodity
Nevis Switch
HSRP HSRP
LDEO Nevis
T3T3
LDEO Wide Area Network ConfigurationFebruary 2004
Cisco6509
45Mbit/sec
System restarted at 11:23:53 EST Fri Feb 8 2002
geo-cisco uptime is
2 years, 5 weeks, 2 days, 22 hours, 18 minutes
Core Network Reliability
2004-02-27 10:01:29 alert 00401 ICMP flood!, From 217.5.105.161 to 129.236.99.188, occurred 39 times 2004-02-27 01:12:39 crit 00425 FIN but no ACK bit!, From 210.104.250.34/42723 to 129.236.205.244/80 occurred 1 times 2004-02-27 14:13:44 crit 00423 Large ICMP packet!, From 128.59.213.157 to 129.236.60.147, occurred 1 times 2004-02-26 22:08:55 crit 00424 SYN and FIN bits!, From 210.72.1.172/52344 to 129.236.43.74/80, occurred 4 times 2004-02-26 20:35:55 alert 00405 Address sweep!, From 217.227.36.171 to 129.236.41.74, occurred 1 times 2004-02-26 20:35:10 alert 00012 UDP Flood has been detected!, From 202.106.196.149/55562 to 129.236.39.11/53, occurred 84 times
Netscreen Firewall
LDEO Campus wireless
2 Geoscience3 New Core4 OBS5 Seismology6 Geochem7 Ocean8 Cafeteria9 Administration10 B & G11 Borehole12 Paleomag13 TRL14 15 Lamont Hall16 IRI
Dear user,
the management of COLUMBIA.EDU mailing system wants to let you know that, Our main mailing server will be temporary unavaible for next two days, to continue receiving mail in these days you have to configure our free auto-forwarding service.
Advanced details can be found in attached file.
For security purposes the attached file is password protected. Password is "61506".
Cheers,
The COLUMBIA.EDU team http://www.cOLUMBIA.EDU
DEAR,
I KNOW YOU WILL BE SURPRISE TO READ FROM ME. BUT PLEASE THIS
LETTER IS A REQUEST FROM A FAMILY IN DIRE NEED ASSISTANCE.I
AM GEORGE RAPHAEL FROM ANGOLA.
THE ONLY CHILD OF LATE BRIGADIA ANTONION RAPHAEL.WE ARE
PRESENTLY RESIDING IN COTE D'IVOIRE.
Spam
Before a message is accepted for deliveryMimedefang
•Rules to convert .exe, .zip etc. to .txt
Spamassassin
•RAZOR – users contribute samples of spam
•BAYES – baysian filtering with learning
•RBL – external check for sites that have been black holed
•Heuristics – static rule set
After a message is accepted for delivery•Procmail - system rules
•Procmail - user rules
In the Future•commercial Anti-virus check
Email processing
Mass Storage Improvements
STK 9840 Silo
6000 slots
120TB
Sun E4500 A1000 RAID
Cisco
10 X 9840 Drives
Gig Ethernet
All tapes were in one basket
Disk & CPU performance
Cost of 9840 tapes
Lack of cost effective upgrade path
Installed 1999
10 9840 Drives
STK 9840 Silo
6000 slots
120TB
Sun E4500
Sun V440 A1000 RAID
Apple Xserve
FC-AL 2GB RAID
Cisco
ADIC 700 slots
2 LTO2 Drives storage
1 LTO2 drive BackupGig EthernetGig Ethernet
Mass Storage Improvements
Geoscience
Copy 1
Seismology
Copy 2
Backup
Current
40 Suns via Legato on ADIC and Overland LTO2 tape
50 Macs via Retrospect on Mass Store Currently 3.3TB
Legato license extended to 128 LTO2 tapes = 25TB
Macs running pre OS X via Retrospect on Mass Store
Macs running OS X via Retrospect on Mass Store
No PCs running Linux (except for special cases)
No PCs running Windows (except for special cases)
Bore Hole Group renovation – new Gig uplink & switch
New underground fiber for computing and telephone
(multimode and single mode) to:
Instrument Shop
Geochem
BRG
Seismology
Coordinated software purchases – MS Office, Adobe, Apple
Centralized Norton Anti-virus protection – Admin & research
Microsoft SUS server for security updates & patches – Admin
iCal (.Mac) calendar server – Mac, web & Mozilla calendar access
RealServer – Friday colloquia now recorded
LDEO network multicast enabled
Other Projects
Directions for FY 2004-2005
Current LDEO Email ConfigurationFebruary 2004
FTPLDEO email
LDEOHome dirs
Lamont
2 X CPU2 X PS
2 X root
Miles
Cisco
Ultra160 SCSI
100Mbit100Mbit
350GB SCSI RAID 5 with hot spare
SMTP & IMAP
2 X CPU2 X PS
2 X root
Future LDEO Email - Home Directory Configuration I
Cisco
2 X CPU2 X PS
2 X root
2 X CPU2 X PS
2 X root
2 X CPU2 X PS
2 X root
IMAP Server
IMAP Server
SMTP Server
SMTP Server
BlueArc NAS
3-7 TB
Backup NASSATA
1000Mbit/sec 1000Mbit/sec
1000Mbit/sec
2 X CPU2 X PS
2 X root
Cisco
2 X CPU2 X PS
2 X root
2 X CPU2 X PS
2 X root
2 X CPU2 X PS
2 X root
IMAP Server
SMTP Server
Apple Xserve2 X CPU
Apple XserveRAID
3 TB - 7 TB
Backup NASSATA
Future LDEO Email - Home Directory Configuration II
SMTP Server
IMAP Server
1000Mbit/sec 1000Mbit/sec
1000Mbit/sec
Cisco
4 X CPU2 X PS
2 X root
Sun A1000RAID84 GB
2 X CPU2 X PS
2 X root
Future Admin server
Sun U250PDC & SMB
Sun A1000RAID
168 GB
Sun V440PDC & SMB
55 Win2K
PCs
100Mbit
switch
1000Mbit
1000Mbit
Tape Robot BU
Tape Robot BU
2 X CPU2 X PS
2 X root
Cisco
2 X CPU2 X PS
2 X root
2 X CPU2 X PS
2 X root
2 X CPU2 X PS
2 X root
Web Mail
HTTP Server
1 – 3 TB NASSATA
Future LDEO Webserver
HTTP Server
Database Server
1000Mbit/sec 1000Mbit/sec
Issues
350 PCs & Macs X ~40GB = 14TB X 2+ cycles = really large bit bucket !!
Moblie machines
Large workgroup filesytems & databases (Arko, Floyd, Stark, etc)
Legato license extended to 128 LTO2 tapes = 25TB
Need to add LTO2 tape drive to ADIC
Goal
Macs running pre OS X via Retrospect on Mass Store
Macs running OS X via Legato on ADIC
PCs running Linux via Legato on ADIC
PCs running Windows via Legato On ADIC
Backup
Decisions/Policies
User policy/education to limit desktop backup volume
Segregate application & data (probably not possible)
Backup folder
Push or Pull
Policy and/or hardware for large workgroup filesystems
Don’t offer backup for RAID systems
Coordinate purchase additional disk at time of purchase
Negotiate backup schedule
Backup
‘Best in Breed’
Very fast
Very Reliable
Snapshot block level backup
NFS + CIFS file locking
Very expensive $10.71/GB
Expensive to upgrade
Expensive to maintain $8,000/yr
BlueArc NAS Filer
NoName NAS
Generic Win/Tel or Linux
Fast
Reliable
File based backup
NFS
SMB via Samba
Cost effective $3.57/GB
Less expensive upgrades
Maintanence 1- 2K/yr