[SAC] [Hosting] Maintenance - VPN Migration - 2023-08-07

[Lance Albertson]

*Summary:*

We are migrating services running on a legacy system which hosts OpenVPN
and routing for some of our NAT networks to a newer set of machines. This
will also upgrade our OpenVPN server to a newer version along with
upgrading the default ciphers supported.In addition, this will be setup
with a primary-secondary set of servers so we have some high
availability with this service moving forward.

We have updated our documentation [1] concerning our OpenVPN service which
will be current after the maintenance next week. If you are running on an
operating system which uses OpenSSL 3.x by default, you will need to get a
new certificate from us which is signed using sha256 instead of sha1.
Please see this section [2] of the documentation on how to get a new
certificate. We'll send the updated certificates after the maintenance has
been completed.

[1] https://wiki.osuosl.org/howtos/vpn_config.html
[2] https://wiki.osuosl.org/howtos/vpn_config.html#unable-to-connect

*Affected Time (UTC):*
2023-08-07 21:00:00 - 2023-08-07 23:00:00 [0d 2h 0m 0s]

Actual outage should only be a few minutes at most if everything goes well.

*Affected services:*
- OpenVPN (vpn.osuosl.org)
- NAT routers for the following networks:
  - 10.0.0.0/23
  - 10.1.0.0/23
  - 10.1.50.0/24
- Hosts connected the subnets above will experience a brief outage

-- 
Lance Albertson
Director
Oregon State University | Open Source Lab
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.osgeo.org/pipermail/sac/attachments/20230801/346e55f0/attachment.htm>
-------------- next part --------------
_______________________________________________
Hosting mailing list
Hosting at osuosl.org
https://lists.osuosl.org/mailman/listinfo/hosting