Update on major initiatives

Directions for next year

Decisions/Policies

Computer Oversight CommitteeMarch 24, 2004

Update on major initiatives

LDEO

Netscreen FW

MorningsideCommodity &

I2

AcIS 7400

AcIS 2691

100Mbit MW

10Mbit 802.11bAcIS 2691

AcIS 3660

Quest BostonCommodity

Nevis Switch

HSRP HSRP

LDEO Nevis

T3T3

LDEO Wide Area Network ConfigurationFebruary 2004

Cisco6509

45Mbit/sec

System restarted at 11:23:53 EST Fri Feb 8 2002

geo-cisco uptime is

2 years, 5 weeks, 2 days, 22 hours, 18 minutes

Core Network Reliability

 2004-02-27 10:01:29 alert 00401 ICMP flood!, From 217.5.105.161 to 129.236.99.188, occurred 39 times 2004-02-27 01:12:39 crit 00425 FIN but no ACK bit!, From 210.104.250.34/42723 to 129.236.205.244/80 occurred 1 times 2004-02-27 14:13:44 crit 00423 Large ICMP packet!, From 128.59.213.157 to 129.236.60.147, occurred 1 times 2004-02-26 22:08:55 crit 00424 SYN and FIN bits!, From 210.72.1.172/52344 to 129.236.43.74/80, occurred 4 times 2004-02-26 20:35:55 alert 00405 Address sweep!, From 217.227.36.171 to 129.236.41.74, occurred 1 times 2004-02-26 20:35:10 alert 00012 UDP Flood has been detected!, From 202.106.196.149/55562 to 129.236.39.11/53, occurred 84 times

Netscreen Firewall

LDEO Campus wireless

2 Geoscience3 New Core4 OBS5 Seismology6 Geochem7 Ocean8 Cafeteria9 Administration10 B & G11 Borehole12 Paleomag13 TRL14 15 Lamont Hall16 IRI

Dear user,

the management of COLUMBIA.EDU mailing system wants to let you know that, Our main mailing server will be temporary unavaible for next two days, to continue receiving mail in these days you have to configure our free auto-forwarding service.

Advanced details can be found in attached file.

For security purposes the attached file is password protected. Password is "61506".

Cheers,

The COLUMBIA.EDU team http://www.cOLUMBIA.EDU

DEAR,

 

I KNOW YOU WILL BE SURPRISE TO READ FROM ME. BUT PLEASE THIS

LETTER IS A REQUEST FROM A FAMILY IN DIRE NEED ASSISTANCE.I

AM GEORGE RAPHAEL FROM ANGOLA.

THE ONLY CHILD OF LATE BRIGADIA ANTONION RAPHAEL.WE ARE

PRESENTLY RESIDING IN COTE D'IVOIRE.

Spam

Before a message is accepted for deliveryMimedefang

•Rules to convert .exe, .zip etc. to .txt

Spamassassin

•RAZOR – users contribute samples of spam

•BAYES – baysian filtering with learning

•RBL – external check for sites that have been black holed

•Heuristics – static rule set

After a message is accepted for delivery•Procmail - system rules

•Procmail - user rules

In the Future•commercial Anti-virus check

Email processing

Mass Storage Improvements

STK 9840 Silo

6000 slots

120TB

Sun E4500 A1000 RAID

Cisco

10 X 9840 Drives

Gig Ethernet

All tapes were in one basket

Disk & CPU performance

Cost of 9840 tapes

Lack of cost effective upgrade path

Installed 1999

10 9840 Drives

STK 9840 Silo

6000 slots

120TB

Sun E4500

Sun V440 A1000 RAID

Apple Xserve

FC-AL 2GB RAID

Cisco

ADIC 700 slots

2 LTO2 Drives storage

1 LTO2 drive BackupGig EthernetGig Ethernet

Mass Storage Improvements

Geoscience

Copy 1

Seismology

Copy 2

Backup

Current

40 Suns via Legato on ADIC and Overland LTO2 tape

50 Macs via Retrospect on Mass Store Currently 3.3TB

Legato license extended to 128 LTO2 tapes = 25TB

Macs running pre OS X via Retrospect on Mass Store

Macs running OS X via Retrospect on Mass Store

No PCs running Linux (except for special cases)

No PCs running Windows (except for special cases)

Bore Hole Group renovation – new Gig uplink & switch

New underground fiber for computing and telephone

(multimode and single mode) to:

Instrument Shop

Geochem

BRG

Seismology

Coordinated software purchases – MS Office, Adobe, Apple

Centralized Norton Anti-virus protection – Admin & research

Microsoft SUS server for security updates & patches – Admin

iCal (.Mac) calendar server – Mac, web & Mozilla calendar access

RealServer – Friday colloquia now recorded

LDEO network multicast enabled

Other Projects

Directions for FY 2004-2005

Current LDEO Email ConfigurationFebruary 2004

FTPLDEO email

LDEOHome dirs

Lamont

2 X CPU2 X PS

2 X root

Miles

Cisco

Ultra160 SCSI

100Mbit100Mbit

350GB SCSI RAID 5 with hot spare

SMTP & IMAP

2 X CPU2 X PS

2 X root

Future LDEO Email - Home Directory Configuration I

Cisco

2 X CPU2 X PS

2 X root

2 X CPU2 X PS

2 X root

2 X CPU2 X PS

2 X root

IMAP Server

IMAP Server

SMTP Server

SMTP Server

BlueArc NAS

3-7 TB

Backup NASSATA

1000Mbit/sec 1000Mbit/sec

1000Mbit/sec

2 X CPU2 X PS

2 X root

Cisco

2 X CPU2 X PS

2 X root

2 X CPU2 X PS

2 X root

2 X CPU2 X PS

2 X root

IMAP Server

SMTP Server

Apple Xserve2 X CPU

Apple XserveRAID

3 TB - 7 TB

Backup NASSATA

Future LDEO Email - Home Directory Configuration II

SMTP Server

IMAP Server

1000Mbit/sec 1000Mbit/sec

1000Mbit/sec

Cisco

4 X CPU2 X PS

2 X root

Sun A1000RAID84 GB

2 X CPU2 X PS

2 X root

Future Admin server

Sun U250PDC & SMB

Sun A1000RAID

168 GB

Sun V440PDC & SMB

55 Win2K

PCs

100Mbit

switch

1000Mbit

1000Mbit

Tape Robot BU

Tape Robot BU

2 X CPU2 X PS

2 X root

Cisco

2 X CPU2 X PS

2 X root

2 X CPU2 X PS

2 X root

2 X CPU2 X PS

2 X root

Web Mail

HTTP Server

1 – 3 TB NASSATA

Future LDEO Webserver

HTTP Server

Database Server

1000Mbit/sec 1000Mbit/sec

Issues

350 PCs & Macs X ~40GB = 14TB X 2+ cycles = really large bit bucket !!

Moblie machines

Large workgroup filesytems & databases (Arko, Floyd, Stark, etc)

Legato license extended to 128 LTO2 tapes = 25TB

Need to add LTO2 tape drive to ADIC

Goal

Macs running pre OS X via Retrospect on Mass Store

Macs running OS X via Legato on ADIC

PCs running Linux via Legato on ADIC

PCs running Windows via Legato On ADIC

Backup

Decisions/Policies

User policy/education to limit desktop backup volume

Segregate application & data (probably not possible)

Backup folder

Push or Pull

Policy and/or hardware for large workgroup filesystems

Don’t offer backup for RAID systems

Coordinate purchase additional disk at time of purchase

Negotiate backup schedule

Backup

‘Best in Breed’

Very fast

Very Reliable

Snapshot block level backup

NFS + CIFS file locking

Very expensive $10.71/GB

Expensive to upgrade

Expensive to maintain $8,000/yr

BlueArc NAS Filer

NoName NAS

Generic Win/Tel or Linux

Fast

Reliable

File based backup

NFS

SMB via Samba

Cost effective $3.57/GB

Less expensive upgrades

Maintanence 1- 2K/yr