To avoid T716 issues again, we could create a secondary network between Ysul and Dwellers.
That would also allow to listen to this private IP to exchange data between the servers without listening to world.
Description
Description
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Resolved | dereckson | T928 Deploy Vault to store credentials | |||
| Resolved | dereckson | T923 Switch Vault to restricted network | |||
| Resolved | dereckson | T722 Provide a network for Stormshear instances | |||
| Resolved | dereckson | T723 [Tracker] Plan a maintenance window to reboot Ysul after 2016-02-12 | |||
| Resolved | dereckson | T732 [Policy] Maintenance windows for Ysul | |||
| Duplicate | None | T974 Move uncle-slovius to Docker Engine |
Event Timeline
Comment Actions
Stormshear
Created a new network IntraStorm.
Dwellers
The new ethernet card has correctly been detected, see P158.
It's available as ens224.
Ysul
According this pfSense forum thread, there wouldn't be any hotplug detection of network card in FreeBSD.
So that will wait next reboot. It's expected to be available as em1.
This comment was removed by dereckson.
Comment Actions
Network configuration done.
Range will be 10.1.7.*, 100- for Ysul, 120- for Dwellers.
Mumble jails should get 10.1.7.101, and MySQL server on Ysul will listen on 10.1.7.100 to allow Murmur to connect from the jail to the MySQL server. But to try to bind to two IP addresses specifying interfaces cut the network on main IP.
Dwellers
/etc/sysconfig/network-scripts/ifcfg-ens224
TYPE=Ethernet BOOTPROTO=none DEVICE=ens224 DEFROUTE=yes IPV4_FAILURE_FATAL=no IPV6_FAILURE_FATAL=no NAME=ens224 ONBOOT=yes IPADDR=10.1.7.120 PREFIX=32 HWADDR=00:0c:29:4e:06:ec
Ysul
/etc/rc.local
[…] # # IntraStorm # ifconfig em1 up ifconfig em1 10.1.7.100 netmask 255.255.255.0 ifconfig em1 10.1.7.101 netmask 255.255.255.255 alias […]
We would also like to:
/etc/jail.conf
[…]
mumble {
[…]
ip4.addr += "10.1.7.101/32";
[…]
}
[…]