OpenBIG remote - a tool to deploy, maintain and monitor openERP servers. Clemens Rambow, openbig

Dienstag, 2. Juli 13
Clemens Rambow
A tool to deploy, maintain and monitor
OpenERP-Servers
OpenERP Open Days 2013

OpenERP Open Days 2013 / OpenBIG-Remote (Clemens Rambow, OpenBIG.org)
2

3
Education
§  Bachelor of Science in Kommunikationsinformatik
(Applied Computer Science)
§  Offensive Security Certified Professional
Occupation at OpenBIG
§  System Operations
§  Software Development
§  Implementation and Integration

4
Company Facts
§  Founded in 2000
§  Central office in Cloppenburg,
Germany
§  Main OpenERP contributor for german localization
§  Developer of Hibiscus and DATEV interfaces to OpenERP
Scope of business in OpenERP services:
§  Trainings
§  Implementation and migration assistance
§  Development services
§  Managed hosting and managed in-house operation

5

6
We needed access to a customer‘s in-house OpenERP-Server.
The customer...
§ Did have a common NAT router setup
§ Did not have any VPN setup (and didn‘t want to have it also)
§ Did not have personal on disposal for confguring their routers/firewalls
§ Wanted also to have access to the OpenERP webclient for home office
§ Needed a quick solution (as always)
But the customer did have...
- Unrestricted outgoing connections from the customer‘s site

7
SSH remote port forwarding
aka
Reverse SSH tunneling

8

9
Wouldn‘t it be great to have that
done automatically?

10

11

12

13

14

15

16
Key Features
§ Managed via intuitive and lightweight Webinterface
§ Automatically sets up reverse SSH tunnels
§ Integrated HTTPS reverse proxy
§ Dynamically add or remove tunnels on runtime
§ Easily deployable on clientside with deb packages
§ Add new clientservers with activation keys

17

18

19
More features
Benefits for system administrators
§ Multi user support
§ Logging functionalities
§ Health monitoring
§ Status of available package upgrades (via Landscape)
§ Email notifications about clientserver state

20

21

22
...even more features...
Benefits for customers
§ Customer restricted access to webinterface
§ Ticket reporting to OpenERP as backend (Project Issue)
§ Webinterface focused on easy usability
§ Prepared for localized email notifications
§ Access to logging functionalities
§ Access to health monitoring
§ Access to package upgrade status

23

24

25
...and yet some other features
§ Exposure of tunneled ports can be toggled on demand
§ Works also without SSH tunneling (e.g. for sole monitoring purposes)
§ Can be easily modified include other TCP based services
§ REST inspired interface can also be used by 3rd party software

26
OpenBIG-Remote-Server
§  Easily installable using a deb-Package
§  Works out-of-the-box
§  Configuration with simple configfiles (e.g. for external services)
§  Supports Ubuntu 12.04 LTS
OpenBIG-Remote-Client
§  Easily installable using a deb-Package
§  Works out-of-the-box
§  Depends only on default linux userland tools (autossh, curl, openssl, netstat)
§  Registration by entering Activation key
§  If needed, also manually configurable with configfile
§  Supports any Ubuntu starting from 8.04 LTS

27
OpenBIG-Remote-Server Security
§  Webinterface access encrypted via HTTPS
§  User‘s passwords stored as salted hashes
§  Secure and simple user access and privilege management
§  Consequent input validation and XSS and CSRF protection
§  Integrated SSH Access usage auditing functionality
§  Runs in seperate low privilege user contexts
§  Additionally protected with WebApp Firewall (WAF)

28
OpenBIG-Remote-Client Security
§  Configuration and Health communication via HTTPS
§  Tunnels encrypted via SSH
§  Clientside HTTPS certificate and SSH-Fingerprint validation
§  Runs in low privilege user context

29
OpenBIG-Remote
§  Lightweight alternative to full blown VPN solutions
§  Access to in-house services without the need of network configuration
§  No additional software on the users side needed (e.g. for home office)
§  Greatly aids in remote OpenERP deployment on in-house servers
§  Greatly aids the system administrators work in general
§  Customizable for almost any TCP based service
§  OpenBIG-Remote-Client trivially portable to other linux distributions
§  Future-proof also for IPv6

30

31

32
feel free to contact us at info@openbig.org
or visit www.openbig.org

OpenBIG remote - a tool to deploy, maintain and monitor openERP servers. Clemens Rambow, openbig

Recommandé

Recommandé

Contenu connexe

Similaire à OpenBIG remote - a tool to deploy, maintain and monitor openERP servers. Clemens Rambow, openbig

Similaire à OpenBIG remote - a tool to deploy, maintain and monitor openERP servers. Clemens Rambow, openbig (20)

Plus de Odoo

Plus de Odoo (20)

Dernier

Dernier (20)

OpenBIG remote - a tool to deploy, maintain and monitor openERP servers. Clemens Rambow, openbig