Get webhook notifications whenever Network & Infrastructure creates an incident, updates an incident, resolves an incident or changes a component status.
We are going to change the settings of our internal routing in RBX between all datacenters and routers.
The aim is for the servers to communicate more directly between then if they are in different datacentres. The same way as for the access to NAS and backup.
The traffic for all servers of all DC in RBX
to the servers managed by vss-1/1b and rbx-s3/s4
passes directly instead of going out on
the backbone and then come back.
exchanges will therefore be more rapid
and with less latency.
The least is that we lose netflow
visibility netflow and therefore
the detection of scans and attacks
on the internal network. This problem
should be solved in a few weeks with
a new release of NX-OS for rbx-97-n7
which will enable the netflow on F2
maps (which we have implemented 6 months ago).
We will shortly be able to activate it and
then see if the netflow on F2 is sufficient
to detect scans / attacks or it is necessary
to change F2 cards to new M2 that so the
netflow 'better'.
Date: 2012-11-06 11:22:08 UTC We have moved prefixes
of rbx-s3/s4 in the new
zone. And the vss-1/1b
prefixes as well.
Date: 2012-11-06 10:08:20 UTC The 1st phase is completed.
We are going to make the internal routing direct via rbx-97-n7.
Date: 2012-11-06 10:06:48 UTC We are finishing all direct connections between ASR and rbx-97-n7.
g1 / rbx-97: doing
done
g2 / rbx-97: doing
done
Date: 2012-11-06 10:06:03 UTC Done.
We wait 2-3 minutes for all OSPF sessions to mount.
Date: 2012-11-06 10:05:28 UTC We are now changing the area of all routers B in all datacenters of RBX.
Date: 2012-11-06 10:04:53 UTC Done.
We are changing all services area (NAS, backup, etc...).
Done.
Date: 2012-11-06 10:03:33 UTC All A routers are in the new area.
We are now changing the rbx-97-n7 area.
Date: 2012-11-06 10:02:52 UTC Work in progress
Date: 2012-11-06 10:02:25 UTC Before changing the weights in the routing, we are going to change the setting of the internal routing zone to create a new zone.
Some perturbations are expected for a few minutes, the time to synchronise OSPF in a new area.