Barbara Martelli INFN - CNAF La gestione delle macchine al CNAF stato degli strumenti e prospettive per un progetto di collaborazione Barbara Martelli INFN - CNAF

Outline Present status: Tier1DB Evolution: Conclusions Architecture Functionalities What is missing Evolution: DOCET Data Oriented CEntre Tool Conclusions 08/05/2009 CCR Workshop - Palau

Tier1DB Home-made application aimed at: collecting information about Tier1 H/W resources like servers, storage devices, network switches, IP-controlled PDUs Administrative information such as vendor, purchase date, assistance phone number and assistance conditions h/w configuration information physical location in the data center, power cabling, network cabling s/w configuration: operating system, network configuration Optimizing and automating management of servers: Automatic switch port configuration Automatic DHCP configuration Automatic DNS configuration Power switch on/off 08/05/2009 CCR Workshop - Palau

Tier1DB Architecture Application composed by: A PostgreSQL database back-end A PHP user interface On Apache web server A series of plug-in (C, bash scripts, perl scripts) Called by the PHP interface Access via https web interface, X.509 certificate based authentication Check user group affiliation on LDAP for authorization if in tier1 group -> all resources are visible/manageable if in another group -> read-only access limited to your resources Mettere le versioni 08/05/2009 CCR Workshop - Palau

Tier1DB Architecture Kerberos Server LDAP Server On the same physical machine DNS Server DHCP Server PHP Application Web Server IP Controlled PDU Network Switch PostgreSQL DB 08/05/2009 CCR Workshop - Palau

Tier1DB: Functionalities Batch insertion of large amount of homogeneous hardware In each purchase tender is required a CSV file containing MAC addresses, serial number and position DNS automatic configuration via web interface nsupdate DHCP automatic configuration via web interface dhcpd.conf file is created, dhcpd service restart, a static dhcpd.conf part is maintained Network switch configuration Automatic VLAN tagging via web interface, an ad-hoc user created on each managed switch Commands change on different switches PDU control via web interface Panic button in case of disaster Some trivial monitoring: ping, h/w configuration consistency check Aggiungere switch supportati\ Massive… 08/05/2009 CCR Workshop - Palau

08/05/2009 CCR Workshop - Palau

08/05/2009 CCR Workshop - Palau

Tier1DB: What Is Missing User interface quite trivial, needs an improvement Blade server support h/w configuration creation process need to be more flexible and general in order to support new h/w types Virtual machines support No way to add virtual machines information and relation between virtual and physical machines 08/05/2009 CCR Workshop - Palau

IPMI/console management Infrastructure inventory and monitoring hierarchical/emergency power-off management History of h/w and s/w configurations, failures, interventions Reliability and availability reports

Evolution: DOCET Classical three-tier architecture with presentation, logic and data tiers Data-centric application: strong data consistency and manipulation logic are implemented directly in the RDBMS Table-driven logic (i.e. behavior strongly dependent on database contents) Stored procedure, triggers Highly modular: possible to add plug-in written in whatever language Main tool is Java 1.6 on Glassfish application server v2 and PostgreSQL 8.1 DB, with particular attention to SQL standard compliance Scalability and high availability 08/05/2009 CCR Workshop - Palau

DOCET Architecture Java User Interface Web Server LDAP Server Presentation Layer LDAP Server DNS Server Logic Layer Application Server Kerberos Server DHCP Server IPMI Network Switch Custom plug-in PostgreSQL DB Data Layer 08/05/2009 CCR Workshop - Palau 12

Conclusions We developed a tool which has been useful to ease the management of a large number of server/devices The h/w evolution of last years requires an upgrade and a design improvement which can be a good occasion to create a product usable by other sites The new design is highly modular and aims to enable the introduction of high availability and scalability solution at each layer enable everyone to develop his own plug-in We would like to have a tight interaction with potentially interested INFN sites in order to create a product usable also outside CNAF Different use cases? Already available/in use products? Documentation available on http://forge.cnaf.infn.it/projects/docet/