From 520832712e7897c70ab3cd0fdc948ac7aac84404 Mon Sep 17 00:00:00 2001
From: Trumeet <yuuta@yuuta.moe>
Date: Thu, 2 Sep 2021 12:54:23 -0700
Subject: Update topology

---
 index.html | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/index.html b/index.html
index c518d1e..0231c30 100644
--- a/index.html
+++ b/index.html
@@ -144,7 +144,7 @@
 </div>
 </section>
 <section>
-	<h2 class="en">Topology</h2>
+	<h2 class="en">Topology and Technologies</h2>
 	<div class="section-content en">
 		<p>We have seven nodes across the world:</p>
 		<br />
@@ -188,9 +188,10 @@
 		<br />
 		<p>I deployed a /56 subnet to each geographical region. Currently, some random backbone nodes are full-meshed. Most nodes are intra-connected by iBGP and OSPF (all area 0).<p>
 		<p>I am planning to move away from full-meshing and give each geographical region an OSPF area. An upgrade to switch all clearnet regions from /56 to /48 for easier announcement is on the way.</p>
-		<p>Most nodes run Arch Linux at this time. We are considering to upgrade our architecture to VyOS for simpler management.</p>
+		<p>Most nodes run Arch Linux at this time. We are considering to upgrade our architecture to NixOS for simpler management.</p>
 		<p>Particial topology diagram:</p>
 		<img src="topology.png" />
+		<p>Administration and SSO: We currently deployed a LDAP server and a Kerberos KDC. They altogether provide unified identity and access management. Most of our nodes are enrolled in the LDAP and Krb system, which will enable NOCs to seamlessly logon to any servers.</p>
 	</div>	
 </section>
 <section>
-- 
cgit v1.2.3