The data center; a sysadmin’s playground
During the USENIX ‘08 Annual Technical Conference in Boston this week I attended a session titled “Playing Fast and Loose with the Sysadmin Space-Time Continuum” led by a jokester named David Blank-Edelman, the director of technology at Northeastern University.
The interactive session was designed to help the sysadmins in attendance solve their most pressing data center challenges, and some creative solutions were thrown around.
But the best part of the 90 minute session had nothing to do with problem solving; it was the debauchery that Blank-Edelman coached attendees to employ in their data centers.
Blank-Edeleman warmed up the room of about 40 sysadmins with some critical bonus interface ideas, like how to get bird chirp sounds into server rooms. He directed attendees to the site Peep, which lets sysadmins monitor their networks with bird sounds instead of the traditional beeping.
“It is quite lovely, as long as there aren’t any issues, in which case the server rooms becomes a scene from Alfred Hitchcock’s movie ‘The Birds,’” he said.
Blank-Edelman, who also authored the book “Perl for System Administration; Managing Multi-Platform Environments with Perl” also showed his session attendees how to have some fun with Proxies. He told the story of a fellow sysadmin, Peter Stevens, who got sick of his next door neighbors using his wifi, and instead of encrypting it, decided to have some fun. Stevens arranged it so that any unauthorized users would be sent through a web browser that flipped the user’s webpage images upside down.
But of course, the purpose of introducing these antics wasn’t to inspire mayhem in data centers across the country - well, maybe a little - but mostly, it was to get the wheels of creativity turning.
“Being in the upper echelon of sysadmin society, you have to be able to improvise, and to do that you have to talk to other creative sysadmins and think outside the box,” Blank-Edelman said.
For instance, a creative firewall idea involving port knocking, which is used to keep external traffic - and hackers - out of systems. In general, when data gets transmitted to closed ports, it is received by a monitoring daemon that only opens ports when the correct port sequence is sent.
Blank-Edelman suggested starting out with a firewall that does not include any ports at all. Clients then attempt to open a random set of ports –say, 3, 7, 9, 12 - and only the clients that knock on the right set of ports are let in, he said.
“It’s a cool idea. When have you heard of starting with no access at all? People have taken this idea in all different directions,” Blank-Edelman said.
There were plenty of these little tips and tricks mixed in with funny antics during the session, and after a morning of technical whitepapers, this afternoon session was a sigh of relief.
Posted: June 27th, 2008 under Uncategorized, Data center physical infrastructure, Systems Management, Hardware and Performance monitoring, x86 servers.
No Comments »
No comments yet.