[mirror-admin] Fedora mirrors: new Tier 0 mirrors / Internet2 joy

[Kambiz Aghaiepour]

Matt Domsch wrote:
> On Thu, Apr 10, 2008 at 05:23:13PM -0300, Carlos Carvalho wrote:
>> Matt Domsch (Matt_Domsch at dell.com) wrote on 10 April 2008 11:51:
>>  >So, the change.  We have 2 "Tier 0" servers now:
>>  >fedora-archives.ibiblio.org and archives.linux.duke.edu.  These have
>>  >static routes set up to get the content from the download1 server over
>>  >Internet2.  Our Tier 1 mirrors that have previously been using
>>  >download*.f.r.c should now use one of these two.
>>
>> They should already have the acls for the current tier 1 mirrors then...
>> They don't, so I request access to fedora.c3sl.ufpr.br (200.17.202.1).
>>
>> It's not clear to me why the tier 1 that are in internet2 cannot
>> access download1 directly.
> 
> The problem is routing.  For each host that will connect to download1,
> Red Hat needs to ensure there are routes to it over Internet2, and not
> over the commercial links.  Routing is messed up, and will be fixed correctly
> when a new netblock is assigned to them by the Internet2 provider.
> That has taken quite some time to get, and isn't here yet.  Without
> this, per-target static routes need to be set up, which is a PITA and
> isn't guaranteed to always work either.  Once the netblock is in
> place, we can revert back to normal operations.  To be safe, I don't
> expect that to be in place before we need to launch F9.
> 
> 

The rsync target on archive.linux.duke.edu should be on port 874 and is 
open to all mirrors listed under:

https://admin.fedoraproject.org/mirrormanager/rsync_acl

Kambiz

-- 
+-  .--.  ----------------------------------+
|  |o_o |      Kambiz Aghaiepour            |
|  |:_/ |    -=-=-=-=-=-=-=-=-=-=-=-=-      |
| //   \ \  "Freedom is not worth having if |
|(|     | ) it does not include the freedom |
/'\_   _/`\ to make mistakes." --M. Gandhi  |
\___)=(___/ --------------------------------+

--