1255166 - Request for separate wireless network for CD Smart Home Space in Mountain View

Status: RESOLVED INCOMPLETE

(Infrastructure & Operations Graveyard :: NetOps: Office Wireless, task)

Description

[Hema Koka [:hema]]

Hi there,
 
As part of the Connected Devices projects, we are embarking into newer domains such as Smart Home. There are a few projects that got kick-started recently around this -- Project Link and Project Smart Home focused on bringing in useful experiences connecting multiple devices such as smart lights, thermostats, smart door locks, motion sensors, speakers etc. We would like to use one of the conference rooms in Mountain View (preferably the Battlestar Gallactica -- the one with a home like setting with sofas in the second floor) and turn that into a smart home simulation connecting these devices, so people working on the project can use and test.
 
For the setup, we would like a separate wireless network for this purpose that does not interfere with current Mozilla network used for work (aside from Mozilla or Mozilla Guest). Please let us know what needs to be done to get this network implemented in Mountain View. We would like to do the same in SF office as well.
 
Service Desk suggested we open a bugzilla ticket to track this. 
 
Thanks
Hema
 
P.S: we already have a set of smart devices purchased and ready to be hooked up for creating a "Smart Home Space" experience.

Comment 1

[Dave Miller [:justdave]]

Is this in any way related to bug 1249168?  Would it work to provide your own router and plug it into the network we're creating over there?  (My understanding is you're trying to emulate a home environment, thus you probably want a consumer router directly connected to the internet...)

Comment 2

[Dave Miller [:justdave]]

I apparently had my wires crossed when thinking these bugs were related, however we certainly had you guys in mind with the netblock allocated for that bug (thinking there'd be stuff coming up like you're now requesting is exactly why we did it).

so anyway, additional questions about some forward-thinking stuff to make sure we're best serving you:

I'm guessing you want to emulate a home internet connection for a lot of your testing.  We can give you a range of public IP addresses with DHCP and appropriate filters that an ISP might provide (i.e. blocking inbound to mail, web and file server ports, blocking outbound smtp on port 25, etc) if that's what you want.

I'm hesitating on the "stick a consumer wifi router into the conference room" on the grounds that it might cause interference elsewhere in the office, but then again it wouldn't be much worse than someone turning on their cellphone hotspot as long as you don't have a ton of them all over the place.  It'll also be easier to patch you to the internet with a consumer router than trying to add a new SSID to our access point pool.  Each SSID we add *does* introduce interference across the entire office.

Comment 3

[Dave Miller [:justdave]]

My questions are thinking about the Connected Devices project in general, not just your Smart Home demo room...  on the grounds that your demo room might be a good subset of it, and might as well take care of it all at once.

Comment 4

[Dave Miller [:justdave]]

looks like bug 1251564 is the one I was thinking of actually.

Comment 5

[Hema Koka [:hema]]

(In reply to Dave Miller [:justdave] ([e-mail]) from comment #2)
> I apparently had my wires crossed when thinking these bugs were related,
> however we certainly had you guys in mind with the netblock allocated for
> that bug (thinking there'd be stuff coming up like you're now requesting is
> exactly why we did it).
> 
> so anyway, additional questions about some forward-thinking stuff to make
> sure we're best serving you:
> 
> I'm guessing you want to emulate a home internet connection for a lot of
> your testing.  We can give you a range of public IP addresses with DHCP and
> appropriate filters that an ISP might provide (i.e. blocking inbound to
> mail, web and file server ports, blocking outbound smtp on port 25, etc) if
> that's what you want.

Right we are trying to simulate the home internet connection here. And want to make sure this does not interfere with other networks in office. We may possibly also have a need soon to simulate neighboring home use-case with two networks each with a IOT hub/controller connecting multiple devices to it. 

The other bug that Christiane opened (bug 1251564) is for "traveling mozillian" use-case where people carrying their routers and connected smart home devices from one office to another should be able to easily set up a test environment. At the London office we had trouble getting this setup for one of our workweeks last month. The next stage to her request is being able to connect these routers that project members are using such that you can remotely access it.

> 
> I'm hesitating on the "stick a consumer wifi router into the conference
> room" on the grounds that it might cause interference elsewhere in the
> office, but then again it wouldn't be much worse than someone turning on
> their cellphone hotspot as long as you don't have a ton of them all over the
> place.  It'll also be easier to patch you to the internet with a consumer
> router than trying to add a new SSID to our access point pool.  Each SSID we
> add *does* introduce interference across the entire office.


Dave, We need to figure this out for our SF office as well. Possibly in London and Berlin too.

Comment 6

[David Bialer [:dbialer]]

Is it possible to have a router/bridge to Mozilla Guest?  Maybe that is enough to start with?

Comment 7

[Hema Koka [:hema]]

We need public IP for the home controller/hub so it can be reached from outside the home network simulating the case where a user can monitor and control smart devices at home remotely from app on their mobile devices.

Comment 8

[Naoki Hirata :nhirata (please use needinfo instead of cc)]

Basically we need a DMZ of "Smart Home Simulation" Not just for development or show case, but also for QA.  It would be great if we had 3 different Smart Home simulation networks within not just San Francisco/ Mnt View office; Toronto, Vancouver, London, Berlin and Taipei.

Comment 10

[James Barnell [:jbarnell]]

justdave, we had provisioned a public address for the webrtc team.  This should be back in the pool and available.  Can you confirm that we can do a static nat on this.

Comment 11

[James Barnell [:jbarnell]]

hema, sorry i missed this one about the public ip.  Can you let me know if this is still needed, where it will be running, and details on the ports/protocols you're using.

Comment 12

[Dave Miller [:justdave]]

We have a pool of public IP addresses in mtv2 that can be assigned directly to ports if needed (no NAT involved)

The other offices don't have that yet, but it should be possible. The base config for it is available in Ansible now, just need to pick an IP range for each office.

Comment 13

[Michal Purzynski [:michal`] (use NEEDINFO)]

Please put the same set of filters as we use on our edge, so either rate limiting or dropping SNMP, NTP, UDP/1900 and dropping TCP 135-139, TCP/445 and TCP/25 both inbound and outbound.

Comment 14

[Michal Purzynski [:michal`] (use NEEDINFO)]

(In reply to Hema Koka [:hema] from comment #7)
> We need public IP for the home controller/hub so it can be reached from
> outside the home network simulating the case where a user can monitor and
> control smart devices at home remotely from app on their mobile devices.

I would say you are not achieving your goal this way. A Home Internet connection will have a public IP on the router+firewall+AP device that's doing NAT and that smart light bulb will have an internal IP.

Comment 15

[Dave Curado :dcurado]

This bug is rotting in our queue.
If there are no updates to it in the next few days, I am going to close it.