Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
bitTorrent in a corporate environment / replacement 4 rsync
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index Networking & Security
View previous topic :: View next topic  
Author Message
ruizs
n00b
n00b


Joined: 14 Jul 2004
Posts: 18

PostPosted: Tue Dec 14, 2004 1:19 am    Post subject: bitTorrent in a corporate environment / replacement 4 rsync Reply with quote

Hi All -

not sure if this is the best place to post this, but thought I'd give it a try.

Trying to figure out a better way to distribute files here. We currently have a star architecture, with one main site pushing data to approx 15 sites worldwide. We probably push out 20-200GB daily, depending on the number of changes.

In trying to move away from a star architecture and better utilize our availlable bandwidth worldwide, bitTorrent sounds like a great technology. However, most of the use I've seen is for public file sharing. Anybody know of someone who's done this already, documentation, etc? Other ideas?

thanks!
Back to top
View user's profile Send private message
useperl
n00b
n00b


Joined: 14 Dec 2004
Posts: 19

PostPosted: Tue Dec 14, 2004 1:44 am    Post subject: Reply with quote

While this idea certainly has merits, some sites have firewalls that specifically block p2p (yes even BT) without any chance of ever changing that policy.

Currently we deploy roughly 2 - 3 gentoo based systems a month. Each requiring a scheduled opening of rsync each time. I'm more keen to possibly using SSH instead of the rsync protocol to download portage.

--useperl
Back to top
View user's profile Send private message
dsf
n00b
n00b


Joined: 16 Nov 2004
Posts: 21

PostPosted: Tue Dec 14, 2004 3:00 am    Post subject: Reply with quote

Why not use rsync over ssh? Best of both worlds.

Before rsync 2.6.0, you had to use 'rsync --rsh=/usr/bin/ssh <any flags>', but starting with 2.6.0, it defaults to using ssh.

You can set up a passphrase-less identity file and use, e.g.:

'rsync --rsh=/usr/bin/ssh -i $HOME/.ssh/someidentity' <rsync flags> ...'

Benefit is, you get to use rsync's synchronization features while distributing files over a secure channel that presumably doesn't require ACL opening.

Also, you may also benefit by deploying a local Gentoo mirror and pointing all your Gentoo boxes to it via appropriate make.conf entries; that allows you to better control access for rsync/ssh as well as get better transfer times, while decreasing the load on the Internet-based Gentoo mirrors.
Back to top
View user's profile Send private message
useperl
n00b
n00b


Joined: 14 Dec 2004
Posts: 19

PostPosted: Tue Dec 14, 2004 3:12 am    Post subject: Reply with quote

That's exactly my point. Portage should default to SSH as the transport. Is this supported by any of the mirrors?

--useperl
Back to top
View user's profile Send private message
anderiv
Tux's lil' helper
Tux's lil' helper


Joined: 29 Mar 2004
Posts: 79

PostPosted: Tue Dec 14, 2004 4:13 am    Post subject: Reply with quote

useperl wrote:
That's exactly my point. Portage should default to SSH as the transport. Is this supported by any of the mirrors?

Why? That's a horrible idea if you ask me...

1. Portage/emerge transfers no sensitive data.

and

2. The overhead of having to compress/encrypt all the data would cause incredible load on the mirror servers when compared to normal cleartext rsync/http/ftp.
Back to top
View user's profile Send private message
useperl
n00b
n00b


Joined: 14 Dec 2004
Posts: 19

PostPosted: Tue Dec 14, 2004 4:18 am    Post subject: Reply with quote

However, no firewall I know of blocks outgoing SSH. :-)

If the mirrors are going to be terribly inconvienced by SSH as a transport..........

erm

--useperl
Back to top
View user's profile Send private message
Jengu
Guru
Guru


Joined: 28 Oct 2004
Posts: 384

PostPosted: Tue Dec 14, 2004 7:42 am    Post subject: Reply with quote

The mirrors could be setup to use blowfish (can use with the -c cml arg), which is much faster than what ssh defaults to (rsa). Not sure if this would still stress the servers though.

Back on topic -- I remember slashdot covering a story awhile back of people demonstrating legitimate use of bittorrent technology by using it to distribute a video from congress. May want to search back through their news.

That said, kludging something like this I don't think would be too hard given the plethora of command line torrent clients for linux. Use existing rsync to distribute the .torrent file, and then have all the client machines start downloading it.
Back to top
View user's profile Send private message
anderiv
Tux's lil' helper
Tux's lil' helper


Joined: 29 Mar 2004
Posts: 79

PostPosted: Tue Dec 14, 2004 3:44 pm    Post subject: Reply with quote

useperl wrote:
However, no firewall I know of blocks outgoing SSH. :-)

Then you need to get around and check out a few more firewalls...*many* corporate firewalls block all outgoing ports, allowing http/https only through a proxy.
Back to top
View user's profile Send private message
G.N.A.
Tux's lil' helper
Tux's lil' helper


Joined: 15 Mar 2004
Posts: 81

PostPosted: Tue Dec 14, 2004 9:07 pm    Post subject: Reply with quote

Just so you know, the update system for World of Warcraft uses bittorrent to distribute updates.

So now you have at least one example of a commercial package using bittorrent.

GNA
Back to top
View user's profile Send private message
ruizs
n00b
n00b


Joined: 14 Jul 2004
Posts: 18

PostPosted: Tue Dec 14, 2004 9:20 pm    Post subject: Reply with quote

This was more for internal data and tools, not for doing OS updates like w/ portage. We're a fabless semiconductor company, so the things we push around are tools (synopsys, magma, etc) and libraries (std. cells, design kits, etc.), which get pretty large sometimes.

Network/firewall is not an issue, we own the network pipes, firewalls, etc., and security isn't so much of an issue, as all our network links are private VPN's. This would be completely internal, no outside access here (we would, and probably do, block all p2p ports at the corporate gateway).

The problem we're trying to solve, illustrated by an example:
We have a /tools/ directory that is common across our environments (solaris, linux, etc) and sites (worldwide). To acheive this, we do a nightly rsync for each architecture, pushing from our main site out to 15 sites worldwide.
Instead of using 1 site (and taking all the bandwidth for the central site) to push to 15 others, how do we harness the power of bittorrent to distribute the network load among all our sites?

I like Jengu's idea, using rsync to distribute a .torrent, and then cron jobs to start the client download... Anybody have a similar, or more in-depth methodology like this?

thanks for all the responses :)
-Steve-
Back to top
View user's profile Send private message
ruizs
n00b
n00b


Joined: 14 Jul 2004
Posts: 18

PostPosted: Thu Dec 16, 2004 9:47 pm    Post subject: Reply with quote

bump - man, so many posts here things get lost quicly...
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Networking & Security All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum