The branch, master has been updated via 1608aa38a2ca9bd49debc5577ee38e2726303eda (commit) from fd136a4d826d9eb2509dbb8d2869575ff8e74434 (commit) - Log ----------------------------------------------------------------- commit 1608aa38a2ca9bd49debc5577ee38e2726303eda Author: Nikolay Aleksandrov <razor@blackwall.org> AuthorDate: Mon Nov 25 17:26:53 2024 +0100 Commit: Michael Niedermayer <michael@niedermayer.cc> CommitDate: Tue Sep 30 13:14:03 2025 +0200 doc/infra: More details about hosting and security Signed-off-by: Michael Niedermayer <michael@niedermayer.cc> I have redacted the exact location of the FFmpeg server as writing that in public seems just a bad idea diff --git a/doc/infra.txt b/doc/infra.txt index 490c6cdbd9..b5546aedd4 100644 --- a/doc/infra.txt +++ b/doc/infra.txt @@ -24,6 +24,26 @@ Our Main server is hosted at telepoint.bg for more details see: https://www.ffmpeg.org/#thanks_sponsor_0001 Nothing runs on our main server directly, instead several VMs run on it. +Main server security: +--------------------- +Telepoint is one of the largest Bulgarian DC providers with multiple sibling companies offering +Internet, SDH, DWDM, peering exchange and hosting. They have multiple DC buildings in Sofia and +FFmpeg is hosted in XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX. The building is locked down and accessible +only with personal key cards that are registered. People who are granted access to a rack have +to go through the access center with their ID to get logged and receive a one-time access card +that can open the service elevator and only the hall where the destination rack is. All racks are +locked, once access is granted to someone they will get a key for the rack for the duration of +their visit. There are security cameras everywhere and personnel in the access center 24/7. As for +software security, our BIOS and IPMI are protected by password and encrypted connection, and +the machines can be accessed only by root administrators with their SSH keys. They're using +a Ubuntu LTS release and get regular security updates as they are released. We also get +notified by email for various security related events (e.g. failed sudo). + +Side note - Telepoint provides the rack and physical infrastructure, their sibling company called + Telehouse which is an ISP provides the connectivity, they are directly connected with + over 15 tier-1 service providers and have over 100 PoPs (points of presence) + in various cities. You can see more on www.telehouse.bg + ffmpeg.org VM: -------------- ----------------------------------------------------------------------- Summary of changes: doc/infra.txt | 20 ++++++++++++++++++++ 1 file changed, 20 insertions(+) hooks/post-receive --