Presentation is loading. Please wait.

Presentation is loading. Please wait.

Revisiting APAN Services #2 Yoshikata Hattori, Pensri A., Lee,

Similar presentations

Presentation on theme: "Revisiting APAN Services #2 Yoshikata Hattori, Pensri A., Lee,"— Presentation transcript:

1 Revisiting APAN Services #2 Yoshikata Hattori, Pensri A., Lee, Jaehwa, APAN NOC 19 th APAN Meeting, Bangkok

2 What Are APAN Services? WWW – and DNS – and E-mail/mailing lists – Distributed among/operated by APAN- KR/ANF and APAN-JP NOCs

3 Why Revisiting? These are the most important services for us –to get information from APAN thru WWW –to communicate with others thru e-mail/mailing lists –based on the APAN DNS So they need –correctness of information –reliability and stability of operation/monitoring And they are naturally based upon the network architecture/operation. Now APAN network architecture/operation has changed greatly which requires revisiting the services. –24x7 operation/monitoring –GbE connection between JP and KR

4 (Previous) Problems WWW –Contents of and have 4 hours difference -> Harmful DNS –No backup of primary database(KR) -> Dangerous E-mail/mailing lists –No backup of mailing lists(KR) -> Dangerous Operated/monitored jointly by APAN-KR/ANF and APAN-JP NOCs –No 24x7 operation/monitoring on KR side

5 New Scheme Servers distributed among JP and KR –Controlled/operated/monitored by APAN NOC –Redundancy/reliability Information correctness, reliability, and stability –NFS between servers for WWW –Backup of data for WWW, DNS, Mailing Lists –Servers location independence of the sec.

6 Current Status/Follow-up WWW servers, = –2 official servers(JP and KR) with 1 hidden server( in Sec./TH) Sec controls the contents –Hidden server is rcynced by JP server (with a reliable backup) in every 4 hours Sec must have a way to trigger rsync –KR server NFS-mounting JP server contents KR must have a local copy : local copy of NFS-mounted contents –Need performance test for this scheme DNS servers –Primary server moved to APAN NOC from KAIST, but its hidden now –The same 2 servers(secondary) seen from outside –1 hidden server + 2 servers or just 2 servers? Mail server/mailing lists reconfiguration –Still pending Should follow WWW servers scheme – 2 official mail exchangers Sec must control ML lists Is it worth trying anycast for these services?

7 Current Status on KR Side KOREN/APAN-KR NOC has moved to Seoul with servers –I(JH Lee) am working for Convergence Lab., KT in Seoul Our new servers (still going on) –2 redundant 1-u servers for WWW, DNS, mail servers w/ storage servers These will host the APAN servers/services –Planning to have specialized servers for tunnel broker, AG bridge servers, SNMP servers, etc. Only in 6 years were going to have many new servers

8 Web Contents THJPKR = = = = Mounted with NFS Real-time updating can be done Synchronizing the contents by SSH-wrapped rsync every 4 hours A A www CNAME Master: Users can access JP or KR server using or The result of DNS query determines which server will be selected. Domain Name Servers of Results of DNS query are round robin. 1 st time %nslookup Name: Addresses:, 2 nd time %nslookup Name: Addresses:, 3 rd time %nslookup Name: Addresses:, Secretariats can edit and update web contents on This crontab with script on JP server remotely runs rsyncd command wrapped by SSH every 4 hours. Then rsync checks the updated contents on and transfers them to JP server. These A records and CNAME record realize round robin service. Previous rsync configuration between old KR server and JP had deleted. Old KR web server $ cat rsyncd.conf hosts allow = use chroot = no max connections = 4 syslog facility = local5 # pid file = /var/run/ timeout = 6000 [www] path = /usr/local/src/www/html/ lock file = /home/inetapan/rsyncd.lock uid = inetapan gid = users read only = true This rsyncd.conf on allows rsync accessing from JP server. Web Contents Figure of APAN Web Servers Relocation by Mr.Hattori JHLee-san sent CD-Rs to Pensri-san. They contain the whole web contents of And Pensri-san has uploaded them on %crontab –l 20 */4 * * * /usr/home/httpd/cron/wwwsync/ %cat /usr/home/httpd/cron/wwwsync/ #!/bin/sh /usr/local/bin/rsync -e ssh -aqz /home/httpd/ Master:

9 Redundancy for Web Service How to build redundancy for a nd –Synchronize contents from TH to JP and from JP to KR –Allocate 2 IP addresses (KR: and JP:203.18 1.248.30) for and –Use round robin DNS How to synchronize the web contents –The bandwidth and RTT of TH-JP and KR-JP are taken into account –KR-JP use NFS, enough bandwidth and good RTT –TH-JP use SSH-wrapped rsync because of limited bandwidt h

10 Building KR-JP Synchronization by NFS NFS for synchronization between KR and JP, an d he led the implementation –NFS has already showed enough performance within Korea –Fortunately, there is enough bandwidth between KR a nd JP –JP server, exports the web contents as read-only NFS server only to KR server –KR server remotely mounted them as NFS client Destination is from JP to KR Need further tests for NFS/WWW performance

11 New Services NTP Information/Routing Registry H.323/SIP APAN Observatory LDAP … Any services members want to have

12 Now comes the detailed report of the APAN services relocation by APAN/APAN- JP NOC

Download ppt "Revisiting APAN Services #2 Yoshikata Hattori, Pensri A., Lee,"

Similar presentations

Ads by Google