Re: IPv6 for Fedora services?
On Aug 17, 2009, at 19:43 , Mike McGrath wrote: On Mon, 17 Aug 2009, Jeff Garzik wrote: On 08/17/2009 10:01 AM, Mike McGrath wrote: On Mon, 17 Aug 2009, Jeff Garzik wrote: Is there any IPv6 plan for *.fedoraproject.org ? There is currently no plan. What needs to be done to create a plan, and move forward? Someone with a clear idea of the benefits, costs, and a plan for implementation. Besides the fact that we have to expect no more free IPv4 adresses available after 2012 and will then be forced to start working on it, the greatest benefit would be to start getting experience on the whole new IPv6 stack. As long as our uplink providers already support v6, the costs to enable services within the new address space should be minimal. Providers usually just charge a setup fee and are actually not allowed to charge more than that... I have already some experience with ipv6 from my workplace. The rough plan for the transition made so far was: * Enable v6 auto-configuration for all of our server vlans. Thus, all of our machines had v6 connectivity to the outside, and where able to use already existing v6 services. To work around any security bugs which this change could introduce, we configured stateful filtering on the routers, allowing only established connections from the outside to our machines. * Working on the support of internal, ancillary services, such as monitoring-, accouting- and documentation systems and setting up firewalls for v6 on all of the hosts. * Enabling the first non-critical test services, by adding additional addresses from another address space, which allow inbound connections. * Enabling more and more services, which are as well visible for our customers. DNS, SMTP, WEB,... Looking forward to work with you guys on the transition. Regards, Stefan. -- Stefan Schlesinger \ \\\ s...@ono.atSTS45-RIPE ___ Fedora-infrastructure-list mailing list Fedora-infrastructure-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
RE: F8/F9 torrent links
When I last did cleanup, it was before F9 went EOL, so it stayed.F9 has ~20 downloaders right now. I didn't nuke F8 just because there were still a few seeders and downloaders. I see there are 12 downloaders at present for it. https://www.redhat.com/archives/fedora-infrastructure-list/2009-May/msg00164.html describes the policy we have in place. By rights, if we move F9 to archive.fp.o, then we can nuke both F8 and F9 from torrent1. -- Matt Domsch Technology Strategist, Dell Office of the CTO linux.dell.com www.dell.com/linux -Original Message- From: sijis.avi...@gmail.com on behalf of Sijis Aviles Sent: Wed 8/26/2009 11:08 PM To: torrentadmin-memb...@fedoraproject.org Subject: F8/F9 torrent links Hey all, I was browsing the torrent.fedoraproject.org website and i noticed that there are torrent links still listed for F8 and F9. I was looking for a way to remove them via the fedora-web git repo but nb and G noticed the Torrent_SOP. I figured i'd email the torrent group and see if these should be removed since they are EOL. Let me know if in the future i should direct this to somewhere/someone else. Thanks, Sijis ___ Fedora-infrastructure-list mailing list Fedora-infrastructure-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
Re: IPv6 for Fedora services?
On Thu, Aug 27, 2009 at 01:07:49PM +0200, Stefan Schlesinger wrote: On Aug 17, 2009, at 19:43 , Mike McGrath wrote: On Mon, 17 Aug 2009, Jeff Garzik wrote: On 08/17/2009 10:01 AM, Mike McGrath wrote: On Mon, 17 Aug 2009, Jeff Garzik wrote: Is there any IPv6 plan for *.fedoraproject.org ? There is currently no plan. What needs to be done to create a plan, and move forward? Someone with a clear idea of the benefits, costs, and a plan for implementation. Besides the fact that we have to expect no more free IPv4 adresses available after 2012 and will then be forced to start working on it, the greatest benefit would be to start getting experience on the whole new IPv6 stack. As long as our uplink providers already support v6, the costs to enable services within the new address space should be minimal. Providers usually just charge a setup fee and are actually not allowed to charge more than that... I have already some experience with ipv6 from my workplace. The rough plan for the transition made so far was: * Enable v6 auto-configuration for all of our server vlans. Thus, all of our machines had v6 connectivity to the outside, and where able to use already existing v6 services. To work around any security bugs which this change could introduce, we configured stateful filtering on the routers, allowing only established connections from the outside to our machines. We don't have control over the routers in most of our data centers. RHEL5's ip6tables can't do stateful filtering either (no conntrack). I agree stateful would be nice, but is it strictly necessary? I don't believe so. -- Matt Domsch Technology Strategist, Dell Office of the CTO linux.dell.com www.dell.com/linux ___ Fedora-infrastructure-list mailing list Fedora-infrastructure-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
Re: Introduction
On Wed, 26 Aug 2009, Christian Del Pino wrote: Hello everyone, My name is Chris. I am looking to contribute my skills and time to the Fedora Infrastructure group. I started using Linux back in 1996 while in college. In 2005, I became a system administrator at a small company helping them build, deploy, and support Linux based laptops for use in capturing clinical data. Other tasks included projects to help the company scale our operations. I have a Bachelor's in Computer Science, and I am currently pursuing a Master's in Information Systems, with a couple of semesters to go. I also became a Red Hat Certified Technician back in 2004. My skills include: Bash scripting MySQL C++ HTML CSS Some Python Some PostgreSQL Started learning some Django. I want to be involved in the Fedora community by helping out where I can, and also learn some more new skills along the way. Hello Chris. We have several development projects going on at the moment. One you may be interested in is Fedora Community - https://admin.fedoraproject.org/community/ Here's the project page: https://fedorahosted.org/fedoracommunity/ We hang out on irc.freenode.net in #fedora-admin, stop by sometime. -Mike ___ Fedora-infrastructure-list mailing list Fedora-infrastructure-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
Re: Introduction
On 08/26/2009 09:35 AM, Christian Del Pino wrote: Hello everyone, My name is Chris. I am looking to contribute my skills and time to the Fedora Infrastructure group. I started using Linux back in 1996 while in college. In 2005, I became a system administrator at a small company helping them build, deploy, and support Linux based laptops for use in capturing clinical data. Other tasks included projects to help the company scale our operations. I have a Bachelor's in Computer Science, and I am currently pursuing a Master's in Information Systems, with a couple of semesters to go. I also became a Red Hat Certified Technician back in 2004. My skills include: Bash scripting MySQL C++ HTML CSS Some Python Some PostgreSQL Started learning some Django. I want to be involved in the Fedora community by helping out where I can, and also learn some more new skills along the way. If you're interested in Django, one project that started off purely in Fedora but has become more of its own upstream is transifex (http://www.transifex.org, #transifex on irc.freenode.net). diegobz, glezos, and ivazquez are all Fedora community members as well as transifex hackers. Our particular transifex instance is at: https://translate.fedoraproject.org Most of the rest of our web apps are written for the TurboGears 1 framework. We're going to port them to TG2 at some point in the indefinite future (probably when someone volunteers to make it their pet project :-). If there's one particular web application that you're interested in, I can help get you started. If you just want someone to suggest something, I can have you look through the tickets for the packagedb and we can find something for you to work on :-) best way to reach me is abadger1999 on irc.freenode.net -- #fedora-admin but email to this list also works. -Toshio signature.asc Description: OpenPGP digital signature ___ Fedora-infrastructure-list mailing list Fedora-infrastructure-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
