The branch, master has been updated
       via  1608aa38a2ca9bd49debc5577ee38e2726303eda (commit)
      from  fd136a4d826d9eb2509dbb8d2869575ff8e74434 (commit)


- Log -----------------------------------------------------------------
commit 1608aa38a2ca9bd49debc5577ee38e2726303eda
Author:     Nikolay Aleksandrov <[email protected]>
AuthorDate: Mon Nov 25 17:26:53 2024 +0100
Commit:     Michael Niedermayer <[email protected]>
CommitDate: Tue Sep 30 13:14:03 2025 +0200

    doc/infra: More details about hosting and security
    
    Signed-off-by: Michael Niedermayer <[email protected]>
    
    I have redacted the exact location of the FFmpeg server as writing
    that in public seems just a bad idea

diff --git a/doc/infra.txt b/doc/infra.txt
index 490c6cdbd9..b5546aedd4 100644
--- a/doc/infra.txt
+++ b/doc/infra.txt
@@ -24,6 +24,26 @@ Our Main server is hosted at telepoint.bg
 for more details see: https://www.ffmpeg.org/#thanks_sponsor_0001
 Nothing runs on our main server directly, instead several VMs run on it.
 
+Main server security:
+---------------------
+Telepoint is one of the largest Bulgarian DC providers with multiple sibling 
companies offering
+Internet, SDH, DWDM, peering exchange and hosting. They have multiple DC 
buildings in Sofia and
+FFmpeg is hosted in XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX. The building is locked 
down and accessible
+only with personal key cards that are registered. People who are granted 
access to a rack have
+to go through the access center with their ID to get logged and receive a 
one-time access card
+that can open the service elevator and only the hall where the destination 
rack is. All racks are
+locked, once access is granted to someone they will get a key for the rack for 
the duration of
+their visit. There are security cameras everywhere and personnel in the access 
center 24/7. As for
+software security, our BIOS and IPMI are protected by password and encrypted 
connection, and
+the machines can be accessed only by root administrators with their SSH keys. 
They're using
+a Ubuntu LTS release and get regular security updates as they are released. We 
also get
+notified by email for various security related events (e.g. failed sudo).
+
+Side note - Telepoint provides the rack and physical infrastructure, their 
sibling company called
+            Telehouse which is an ISP provides the connectivity, they are 
directly connected with
+            over 15 tier-1 service providers and have over 100 PoPs (points of 
presence)
+            in various cities. You can see more on www.telehouse.bg
+
 
 ffmpeg.org VM:
 --------------

-----------------------------------------------------------------------

Summary of changes:
 doc/infra.txt | 20 ++++++++++++++++++++
 1 file changed, 20 insertions(+)


hooks/post-receive
-- 

_______________________________________________
ffmpeg-cvslog mailing list -- [email protected]
To unsubscribe send an email to [email protected]

Reply via email to