Hi,
we changed the IP addresses to at 11:03 today, and users are now accessing the Feide login system through the new load balancers.
We have not seen any problems related to this change, but if you have any questions or concerns about it, please contact us at support@feide.no.
Best regards, Olav Morken Uninett / Feide
________________________________ From: updates-request@feide.no updates-request@feide.no on behalf of Olav Morken updates@feide.no Sent: Monday, February 10, 2020 12:39 To: tekniske-vertsorg@feide.no tekniske-vertsorg@feide.no; berettigede@feide.no berettigede@feide.no; tekniske-sp@feide.no tekniske-sp@feide.no; updates@feide.no updates@feide.no Subject: [Feide Updates] Feide IP address changes Monday 24 February
Hi,
we are going to be changing the IP addresseshttps://en.wikipedia.org/wiki/IP_address of the Feide login service at https://idp.feide.no/ Monday 24 February at 11:00.
Most organizations will not not need to do anything, as the change does not affect connections from Feide to user directories (LDAP).
However, if you have any firewall policies or other IP address restrictions configured today that allows web access to Feide, those may need to be updated.
For example, if you have restricted networks for final examinations or other tests, you may have to update the restrictions to allow access to the new IP addresses for the Feide login service.
The following addresses will be the new IP addresses for idp.feide.no:
* 158.36.100.54 * 158.36.100.118 * 2001:700:2:8500::54 * 2001:700:2:8600::54
(Note that as part of this change we are adding IPv6 support to the Feide login service.)
In addition, we have a set of IP addresses to a hot standby (backup) system:
* 158.36.100.7 * 158.36.100.71 * 2001:700:2:8500::7 * 2001:700:2:8600::7
These addresses are not active normally, but will be used in case of failures at our primary installation. You must make sure that your networks allow connections to these addresses as well, since we can switch to these addresses at any time with no notice.
The new IP addresses are already available, so you can verify connectivity to idp.feide.no at the new addresses, for example by adding the addresses to a hosts-filehttps://en.wikipedia.org/wiki/Hosts_(file).
The new IP addresses connect to new load balancers for the Feide login system. These new load balancers have already been in use for the test system at https://idp-test.feide.no/ since 21 January. A set of similarly configured load balancers have been in use for our standby system since 2017.
If you have any questions about this change, please contact us at support@feide.nomailto:support@feide.no.
Best regards, Olav Morken Uninett / Feide