[atlas] New on RIPE Labs: The Next Generation of RIPE Atlas Anchors

Le mercredi 19 juillet 2017 à 14:54 +0200, Alun Davies a écrit :
> Dear Colleagues,
> 
> The RIPE NCC is in the process of testing hardware for the next
> generation of RIPE Atlas anchors. Here’s a detailed overview of the
> process:

You should go with the APU2. 

PC Engines lead engineer used to work for Soekeris.  Pc Engines
hardware rocks. The APU2 is a marvelous platform and frankly you don't
even need to rack it is 1U, as it looks like a embedded platform but is
in fact a full Quad-code computer with up to 4Gb of RAM. It is also
very stable, designed in Europe. It is relatively open, as hardware
plans are available, so you know what is inside.

Please also ask network card firmwares. I asked them to Pc Engines but
was never able to get them (as Pc Engines might not have them, or shall
not be able to distribute them).

>From my memory (this has to be verified), the APU serial port is hard-
wired on the motherboard itself. So you cannot disable the serial port.
Everyone with access to the hardware may be able to hack it without
user or password.

You should also look into the posibility to make signed kernel boot and
signed partitions, so that we are sure that RIPE is not altered during
shipment from your premisses to the user client.

PC Engines will probably never go bust as they only produce on demand.
On their website, they receive orders and only build the required
platforms.

So it is defenitely a good solution.

Kind regards,
Jean-Michel