Notifications for NSLS-II Computer Users

["Wilkins, Stuart (NSLS2 JIRA)" <nsls2jira AT bnl.gov>]

NATIONAL SYNCHROTRON LIGHT SOURCE II

 

NOTIFY-41

NSLS2 Accelerator Outages: outbound email, status updates, legacy websites

 

Reported by:	Cowan, Matt
Assigned to:	Wilkins, Stuart
Priority	High
Outage/Maintenance on	29/Dec/21 12:00 PM
Last updated	30/Dec/21 7:56 AM
Expected Resolution	04/Jan/22 5:00 PM

 

Description

As part of major cybersecurity improvements, external connectivity to nsls2 "perimeter" systems (eg. box64-[#], ssh-acc (nee ssh01), reverse proxies, etc) is being moved from the BNL Campus network to the BNL Science network.  This will result in more secure, direct and robust service, but requires some significant disruption.

Several outages current or upcoming: 

• Outbound email from nsls2 accelerator 
• File transfer to status.nsls2.bnl.gov 
• Legacy campus exposed websites  (partial list of impacted sites at end)
  Details below.

—
What:  outage of outbound email from nsls2 accelerator
When:  now until Tuesday Jan 4th
Why:  planned improvements
Details:

Effective immediately, the legacy outbound email gateway for the nsls2 accelerator network: 
    tcp port 25 to any of:  mail.cs.nsls2.local, controlsweb01, 10.0.137.13  (all the same outdated Debian system) 
has been discontinued.

Please reconfigure any applications which send email to use:  
   tcp port 25 to smtpgw.bnl.gov

The conduit needed to access smtpgw.bnl.gov will not be in place until Tues Jan 4th, so connection to it will not work until then.

—
What:  outage of status file transfers for status.nsls2.bnl.gov
When: now until Tuesday Jan 4th
Why:  planned improvements
Details:

Once a conduit is put in place Tues, the backend status monitoring systems within nsls2 (cssssp, cssssp-vm) will have more direct, robust, and reliable connectivity to transfer files to the internet exposed webserver operated by ITD (nsls2ops.bnl.gov).  But until then, https://status.nsls2.bnl.gov will not receive updated status info.

—
What:  outage of legacy campus exposed websites
When:  Tomorrow until approx Tuesday Jan 4th
Why:  planned improvements
Details:

several nsls2 websites/pages are either inaccessible from campus starting NOW or in some cases tomorrow (Thurs 12/30), including:

NOTE:  in almost all cases, these should still be reachable within the nsls2 accelerator network via the direct internal names:  eg. gitlab.cs.nsls2.local

logbook.nsls2.bnl.gov

gitlab.nsls2.bnl.gov

expdev.nsls2.bnl.gov
expdev-test.nsls2.bnl.gov

apnotebook.nsls2.bnl.gov

controlsweb.nsls2.bnl.gov
controlsweb01.nsls2.bnl.gov
controlsweb04.nsls2.bnl.gov

etc.

Areas Affected

* Outbound email from nsls2 accelerator 
* File transfer to status.nsls2.bnl.gov 
* Legacy campus exposed websites  (see included partial list of impacted sites)