[Server-devel] VPN server for our project

2008-06-22 Thread s . boutayeb
Hi,

OLPC France is plannig a project Windrose
(http://wiki.laptop.org/go/Projects/WindroseOLPC ) consisting for the schools
among the world participating in the project to share and publish their contents
(text, images, videos, etc.) in a semi-private BLOG (likely EduBlogger).

My question: has anyone experimented the fonction of a VPN network involving
remote XS servers ?
Our concern is to protect the privacy of the kids, allowing private areas and
public areas and making the login process easier for the kids/teachers. The
communication/authentification to the VNP server will possibly be organised via
a local XS server.

Thank you for your comments

Best regards

Samy


___
Server-devel mailing list
Server-devel@lists.laptop.org
http://lists.laptop.org/listinfo/server-devel


Re: [Server-devel] VPN server for our project

2008-06-22 Thread James Cameron
I've tested PPTP and OpenVPN on XO.  Works fine.  The PPP MPPE module is
already present (drivers/net/ppp_mppe.ko).  Using a VPN adds overhead to
the network communication.  Isn't as secure as you might think.

I'm the release engineer for PPTP on Linux, and C. Scott Ananian in OLPC
is the author.

I've not tried it on XS.  PPTP project did some load calculations a year
or two ago, and found that a 500Mhz 64Mb server could handle several
hundred users so long as they did not try to do something all at the same
time.  It would be practical to test on XS, but it is a zero sum game,
you'd lose capacity.

In my opinion, avoid creating a false sense of security ... the kids
should be taught personal information privacy very early, and the best
way to do that is for them to make small mistakes and learn from them.

France.  Are you sure you can use strong cryptographic encryption?  I
seem to remember some hindrance at law.  I haven't kept up to date with
that.

-- 
James Cameronmailto:[EMAIL PROTECTED] http://quozl.netrek.org/
___
Server-devel mailing list
Server-devel@lists.laptop.org
http://lists.laptop.org/listinfo/server-devel


Re: [Server-devel] VPN server for our project

2008-06-22 Thread Martin Langhoff
On Sun, Jun 22, 2008 at 9:49 PM,  [EMAIL PROTECTED] wrote:
 My question: has anyone experimented the fonction of a VPN network involving
 remote XS servers ?

The hw will have no problem with running VPNs but many XS will be on
networks links that are very constrained and don't play well with VPNs
(such as satellite links).

cheers,



m
-- 
 [EMAIL PROTECTED]
 [EMAIL PROTECTED] -- School Server Architect
 - ask interesting questions
 - don't get distracted with shiny stuff - working code first
 - http://wiki.laptop.org/go/User:Martinlanghoff
___
Server-devel mailing list
Server-devel@lists.laptop.org
http://lists.laptop.org/listinfo/server-devel


Re: [Server-devel] VPN server for our project

2008-06-22 Thread s . boutayeb
Selon James Cameron [EMAIL PROTECTED]:

 I've tested PPTP and OpenVPN on XO.  Works fine.  The PPP MPPE module is
 already present (drivers/net/ppp_mppe.ko).  Using a VPN adds overhead to
 the network communication.  Isn't as secure as you might think.

Yes, we should find out the right balance between opposite concerns.

 I'm the release engineer for PPTP on Linux, and C. Scott Ananian in OLPC
 is the author.

 I've not tried it on XS.  PPTP project did some load calculations a year
 or two ago, and found that a 500Mhz 64Mb server could handle several
 hundred users so long as they did not try to do something all at the same
 time.  It would be practical to test on XS, but it is a zero sum game,
 you'd lose capacity.

ok

 In my opinion, avoid creating a false sense of security ... the kids
 should be taught personal information privacy very early, and the best
 way to do that is for them to make small mistakes and learn from them.


I imagine, that the kids will be monitored by their teachers, who will
eventually direct the reporting and publishing activities so that they are
acceptable depending of the privacy policy of the schools.

 France.  Are you sure you can use strong cryptographic encryption?  I
 seem to remember some hindrance at law.  I haven't kept up to date with
 that.

The length of the encryption keys may be limited. Not sure how long.
Another dimension is that the VPN server, if any, can be hosted here in France
or in another country where our future partners are be located.

Thank you for your usefull comments

Bests

Samy

 --
 James Cameronmailto:[EMAIL PROTECTED] http://quozl.netrek.org/



___
Server-devel mailing list
Server-devel@lists.laptop.org
http://lists.laptop.org/listinfo/server-devel


[Server-devel] Target price and quantitiy

2008-06-22 Thread Christopher Niemöller
Hi,

I was playing around with some embedded computing and rugged hardware
and got some questions.

Whats the target price for the school server?

How many school server are needed anyway?

As you might know, its my job to design such systems, please dont take
this questions the wrong way. I dont want to sell anything, but Im
interested in supporting this project. ;)

Best regards,

Christopher
___
Server-devel mailing list
Server-devel@lists.laptop.org
http://lists.laptop.org/listinfo/server-devel


Re: [Server-devel] Server-devel Digest, Vol 14, Issue 38

2008-06-22 Thread Tony Pearson
 From: James Cameron [EMAIL PROTECTED]
 In my opinion, avoid creating a false sense of security ... the kids
 should be taught personal information privacy very early, and the best
 way to do that is for them to make small mistakes and learn from them.

James,
While I agree this is a lesson everyone eventually learns, even IBM offers 
both for its employees, a blogging system that is internal (IBM employees 
only can read) and one that is external (all clients, prospects, 
competitors and analysts can read). We have found that some people need to 
practice on the bunny slopes first, and would prefer not to have their 
mistakes be so drastic or dire in consequences.

Offering a blog option for students/teachers eyes only might be the 
difference between a parent allowing their kid to participate or not 
participate.

-- Tony___
Server-devel mailing list
Server-devel@lists.laptop.org
http://lists.laptop.org/listinfo/server-devel


Re: [Server-devel] Target price and quantitiy

2008-06-22 Thread John Watlington

On Jun 22, 2008, at 2:19 PM, Christopher Niemöller wrote:

 Hi,

 I was playing around with some embedded computing and rugged hardware
 and got some questions.

 Whats the target price for the school server?

Around 500 USD for a server plus 500GB disk.
Networking (access points and switches) are additional
(although ideally a four port switch is built in...)

 How many school server are needed anyway?

One per school...   Larger schools need more capable servers.
There is no single solution, from a product design perspective.

If we concentrate on the needs of smaller rural schools (30-300 kids),
we are talking about the $500 server mentioned above, with
tough environmental constraints.  In this case, we are unfortunately
only talking about 5K-10K units per year, and these are spread across
multiple countries.

 As you might know, its my job to design such systems, please dont take
 this questions the wrong way. I dont want to sell anything, but Im
 interested in supporting this project. ;)

We have no problem with people interested in selling stuff.
We need to buy servers ourselves for use in trials, etc...

Cheers,
wad

___
Server-devel mailing list
Server-devel@lists.laptop.org
http://lists.laptop.org/listinfo/server-devel