1. Disaster Relief by the Pound CS5260 Semester Project University of Colorado at Colorado Springs By Robin Kimzey and Cliff McCullough 02 May 2011

2. Disaster Relief Information Collection and Distribution Research Group DRINCDR Main Page. February 15, 2011. http://gandalf.uccs.edu/drincdr/index.php/Main_Page (accessed April 23, 2011). 02 May 20112Robin Kimzey and Cliff McCullough

3. Mashup Combines data and functionality from more than one source Layered content ◦ Each layer of content comes from different servers in the cloud ◦ Some layers are classified, others are not Pound acts as a functional smoke screen providing one point of contact for users 02 May 20113Robin Kimzey and Cliff McCullough

4. Implementation 02 May 20114Robin Kimzey and Cliff McCullough

5. Easy Maintenance No hardware purchases No HVAC No rack space 02 May 20115Robin Kimzey and Cliff McCullough

6. Remain Dormant Amazon EC2: Turn on instances once a month for updates and patches When a disaster occurs, turn on more backend servers as demand increases 02 May 20116Robin Kimzey and Cliff McCullough

7. Disadvantages Computing services must be geographically dispersed Must trust the security of the commercial provider 02 May 20117Robin Kimzey and Cliff McCullough

8. Pound Reverse Proxy 02 May 20118Robin Kimzey and Cliff McCullough

9. Pound: Features Not a server Separate layers of service ◦ allows for isolated secure and un-secure backend servers Backend server of any type Virtual Host Service Tracks backend servers that are down Filtering 02 May 20119Robin Kimzey and Cliff McCullough

10. Security Pound requires minimal, initial access with the hard-disk ◦ reads the configuration file ◦ reads the certificate ◦ reads error messages ◦ writes log entries Normal operating activities are all in memory 02 May 201110Robin Kimzey and Cliff McCullough

11. Pound Configuration ListenHTTP Address128.198.0.1 Port80 Service Backend Address172.20.80.81 Port80 End Backend Address172.20.80.82 Port80 End 02 May 201111Robin Kimzey and Cliff McCullough

12. Configure SSL ListenHTTPS Address128.198.0.1 Port443 Cert"/etc/pound/pound.pem" Service Backend Address172.20.43.81 Port443 End 02 May 201112Robin Kimzey and Cliff McCullough

13. Filtering CheckURL"(^\/|\.html|\.jpg|\.png)$" Service Backend Address172.20.80.81 Port80 URL"(^\/|\.html|\.png)$" End Backend Address172.20.80.82 Port80 URL"(^\/|\.html|\.jpg)$" End 02 May 201113Robin Kimzey and Cliff McCullough

14. Virtual Host Service HeadRequire"Host:.*www.drincdr.org.*" Backend Address 172.20.72.72 Port80 End 02 May 201114Robin Kimzey and Cliff McCullough

15. Session Aware Service... Session TypeIP TTL300 End Backend... End 02 May 201115Robin Kimzey and Cliff McCullough

16. Demonstration 02 May 201116Robin Kimzey and Cliff McCullough

17. Future Work Properly evaluate customer requirements Compare Reverse Proxy Servers ◦ Pound ◦ Apache ◦ Nginx Backend network is plain text Single point of failure 02 May 201117Robin Kimzey and Cliff McCullough

18. Questions 02 May 201118Robin Kimzey and Cliff McCullough