1191089 - Making a local device server farm available across Mozilla intranet

Status: RESOLVED FIXED

(Infrastructure & Operations Graveyard :: NetOps: Office Other, task)

Description

[Jonathan Almeida [:jonalmeida]]

On the mobile team in SF, we currently have an experimental setup of a device farm for all our android devices to allow them to be controlled from one location via the browser (See: https://github.com/openstf/stf). Currently, our setup includes a static ip for the machine which is accessed by it's local DNS alias. 

We want to allow our team who work in other offices in Mozilla and remotely full-time to access these devices. To do that now, they need to always be connected to the Mozilla VPN which isn't inconvenient since this is the only use case for them to use the VPN.

Is it possible to extend access to this server across Mozilla's intranet to so that those connected via 'Mozilla' wifi in other locations can access it? (It makes sense for those outside to use the VPN for now, until we have a solution like persona for access.

Comment 1

[Justin Dow [:jabba]]

Netops should evaluate this request. I believe they have infrastructure set up for this kind of stuff already in other vlans.

Comment 2

[James Barnell [:jbarnell]]

(In reply to Jonathan Almeida (:jonalmeida) from comment #0)
> On the mobile team in SF, we currently have an experimental setup of a
> device farm for all our android devices to allow them to be controlled from
> one location via the browser (See: https://github.com/openstf/stf).
> Currently, our setup includes a static ip for the machine which is accessed
> by it's local DNS alias. 
> 
> We want to allow our team who work in other offices in Mozilla and remotely
> full-time to access these devices. To do that now, they need to always be
> connected to the Mozilla VPN which isn't inconvenient since this is the only
> use case for them to use the VPN.
> 
> Is it possible to extend access to this server across Mozilla's intranet to
> so that those connected via 'Mozilla' wifi in other locations can access it?
> (It makes sense for those outside to use the VPN for now, until we have a
> solution like persona for access.

Questions:

1.  Can you please provide a description of the devices we're talking about (model, how the access the network, length of time you expect this to be in production, etc).

2.  Is there a specific group of users we're talking about here?

Comment 3

[Jonathan Almeida [:jonalmeida]]

(In reply to James Barnell [:jbarnell] from comment #2)
> 1.  Can you please provide a description of the devices we're talking about
> (model, how the access the network, length of time you expect this to be in
> production, etc).

- This device farm is for Android devices ranging from Android 2.3+. For now, I've connected a Nexus 5, Nexus 9, Galaxy Nexus, Galaxy Tab and Transformer Prime. Since each device is physically present in SF, it will have access to the network via Mozilla Guest.

Currently an experiment to share use of our Android devices with those working remotely as opposed to shipping out devices by courier. There are also deployment notes[1] that can be used to deploy the service in multiple locations to share devices from more than one location (will only get to this step if we see how useful making the SF devices end up being).

> 2.  Is there a specific group of users we're talking about here?

This is meant to be accessible by only the mobile development team (Firefox for Android & iOS). There is an authentication system that is used for storing user settings, which can be used with OAuth or LDAP login[2].


[1]: https://github.com/openstf/stf/blob/master/doc/DEPLOYMENT.md
[2]: https://github.com/openstf/stf/issues/47#issuecomment-127509404

Comment 4

[Jonathan Almeida [:jonalmeida]]

Adding needinfo in case jbarnell doesn't see this.

Comment 5

[Arzhel Younsi [:XioNoX]]

Jonathan, do you have some example hostnames/IPs for those devices?

Comment 6

[Arzhel Younsi [:XioNoX]]

Talked to Jonathan over IRC, I confirmed that was working from other offices including Portland.

Please reopen if there is any other issue.