[ixpmanager] member graphs

[Barry O'Donovan]

Hi Eric,

Eric Andrei Băleanu wrote:
> If you are logged in as client, you can not see the other clients
> graphs, but you can see more sensitive information such as inter-switch
> graphs, aggregated switch graphs, switch configuration (who else is
> connected, capacity details etc.).
> 
> Is this ok, or not?

The IX community in general seems to make these publicly available. Of
all the IXs using IXP Manager, I don't think we've ever been asked to
make them private.

For this reason - and principle of least astonishment - they are available.

A couple of people have asked a similar question to "is this ok" to
which the answer is that it really depends on what you want to do in
your own IX.

> So far at InterLAN we had public individual graphs and now we would like
> to make them available only to our members by logging in to IXP
> Mangager, but we don’t want to show to our customers the other graphs
> (inter-switch, aggregated switch etc.). These should be available only
> to our staff. Is this possible?

Short answer: yes. See:

http://docs.ixpmanager.org/features/grapher/#accessibility-of-aggregate-graphs

If you want to restrict these to just IX staff, then set the following
in .env:


GRAPHER_ACCESS_IXP=3
GRAPHER_ACCESS_INFRASTRUCTURE=3
GRAPHER_ACCESS_SWITCH=3
GRAPHER_ACCESS_TRUNK=3

NB: as a indicator as to how unusual it is to make these private, this
has only become available in the latest release (i.e. >= v4.7.0).


With regards to:

> switch configuration (who else is connected, capacity details etc.).

This is available in two ways:

1) for logged in users through a menu option
2) publicly via http://docs.ixpmanager.org/features/ixf-export/


Generally speaking, this information is typically publicly available at
nearly all IXs. I don't know any offhand that do not purposely make this
available.

 - Barry



> 
>  
> 
>  
> 
> Regards,
> 
>  
> 
> *Eric Andrei Băleanu*
> 
> *InterLAN Internet Exchange*
> 
> 8 Cezar Bolliac Street, Bucharest 030912, 3rd District
> 
> Phone: +40 31 710 2428
> 
> Mobile: +40 733 999 069
> 
> www.interlan.ro <http://www.interlan.ro/>
> 
> www.ronog.ro <http://www.ronog.ro/>
> 
>  
> 
> cid:image001.png at 01D2FA43.957F81C0
> 
>  
> 
> _______________________________________________
> INEX IXP Manager mailing list
> ixpmanager at inex.ie
> https://www.inex.ie/mailman/listinfo/ixpmanager

-- 

Kind regards,
Barry O'Donovan
INEX Operations

https://www.inex.ie/support/
+353 1 531 3339