<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
On 05/09/2012 02:52 AM, Federico Capoano wrote:
<blockquote cite="mid:4FAA2244.1080400@nemesisdesign.net"
type="cite">
<meta http-equiv="content-type" content="text/html;
charset=ISO-8859-1">
<font face="Helvetica, Arial, sans-serif">How could we conceive a
decentralized database model?<br>
</font></blockquote>
<br>
Multi master LDAP? Or rather LDAP front ends to some sort of other
distributed backend (couchdb?) <br>
<br>
<br>
<blockquote cite="mid:4FAA2244.1080400@nemesisdesign.net"
type="cite"><font face="Helvetica, Arial, sans-serif"> <br>
Here some of our networks (we call them "islands" cos on they
map they look like isolated networks) will need to access the
device via SSH.<br>
Many people already talk about developing something similar to
aircontrol in the near future to manage the network.<br>
</font></blockquote>
<br>
Also check out <br>
<br>
<a href="http://rundeck.org/">http://rundeck.org/</a><br>
<a href="http://doc36.controltier.org/wiki/Main_Page">http://doc36.controltier.org/wiki/Main_Page</a><br>
<br>
that's the software the Free Network Foundation is implementing.
(I'm the co founder and CTO of FNF). <br>
<br>
We are extremely interested in interop. <br>
<br>
Aircontrol is unfortunately not multi tenant and Ubiquity has no
plans to implement multi tenant features unfortunately. <br>
<br>
I tried to deploy <br>
<br>
<meta http-equiv="content-type" content="text/html;
charset=ISO-8859-1">
<a href="http://www.freeside.biz/freeside/">http://www.freeside.biz/freeside/</a><br>
<br>
as an all in one solution. I never did get it working. <br>
<br>
For the software FNF has settled on, see<br>
<br>
<meta http-equiv="content-type" content="text/html;
charset=ISO-8859-1">
<a href="http://freenetworkfoundation.org/?p=528">http://freenetworkfoundation.org/?p=528</a><br>
<br>
<br>
<br>
<blockquote cite="mid:4FAA2244.1080400@nemesisdesign.net"
type="cite"><font face="Helvetica, Arial, sans-serif"> <br>
Of course it wouldn't be smart to put all the passwords of the
devices of the entire network of an entire country on a single
database. We need to be able to split it. </font></blockquote>
<br>
Exactly. LDAP is the way to go. You can replicate on an OU basis. If
it's multi master, you just have each network run it's own master
and use replication for disaster recovery/scalability. <br>
<br>
FNF is building an LDAP appliance (via chef recipe). <br>
<br>
<blockquote cite="mid:4FAA2244.1080400@nemesisdesign.net"
type="cite"><font face="Helvetica, Arial, sans-serif">Decentralization
is also needed so the checks on the devices (SNMP for example,
but in Slovenia they made a custom way to retrieve stuff via
HTTP) can be performed in autonomy by every "island".<br>
</font></blockquote>
<br>
Right. <br>
<br>
I've built numerous large scale monitoring systems. The way to go is
with a checkin based model (devices check in to a NOC). That scales
very well. Outbound checks don't scale. <br>
<br>
<blockquote cite="mid:4FAA2244.1080400@nemesisdesign.net"
type="cite"><font face="Helvetica, Arial, sans-serif"> <br>
We mostly all need the nodes to be grouped, nodewatcher call it
project, some other nodeDBs call it zone or area.<br>
So that you can have project "Rome", project "Pisa" and project
"Milan", until here is easy.<br>
Suppose Pisa wants to be autonomous in managing their nodes,
they might want to host their database on one of their machines
in their network and performs monitoring checks in complete
autonomy.<br>
Suppose instead that Milan doesn't want to do so because they
don't yet have enough expertize or volounteers to do it, so they
want to stick with the main database until one day they might
switch.<br>
</font></blockquote>
<br>
Right. <br>
<br>
This is something we are trying to figure out for FreedomNOC. If
folks want to use the NOC originally and then take their data to
another system when they are ready. <br>
<br>
<br>
<pre class="moz-signature" cols="72">--
Charles N Wyble
@charlesnw <a class="moz-txt-link-abbreviated" href="mailto:charles@knownelement.com">charles@knownelement.com</a> (818) 280-7059
Building a cost effective, open, secure bit moving platform for tomorrows default free zone.
</pre>
</body>
</html>