CILogon Infrastructure Update

Scheduled Maintenance Report for CILogon

Completed

The following production CILogon services are now using the new compute infrastructure.

* cilogon.org
* crl.cilogon.org
* demo.cilogon.org
* ecp.cilogon.org

A few users experienced failed logins during the switchover. We apologize for the issue.

If you experience any problems with the new infrastructure, please contact help@cilogon.org .

Posted Oct 10, 2023 - 08:33 CDT

In progress

Scheduled maintenance is currently in progress. We will provide updates as necessary.

Posted Oct 10, 2023 - 08:00 CDT

Scheduled

NOW AVAILABLE FOR A ONE WEEK TESTING PERIOD. NO DOWNTIME IS EXPECTED.

On Tuesday, October 10, 2023, the compute infrastructure used by several CILogon services will be updated. The affected services include:

* cilogon.org (includes OAuth2/OIDC endpoints)
* crl.cilogon.org
* demo.cilogon.org
* ecp.cilogon.org

While the services themselves remain unchanged, the new compute infrastructure provides the following public-facing changes:

* IPv6 support - Services will have "dual stack" IPv4/IPv6 support. Both "A" and "AAAA" records will be added to DNS.
* Static IP addresses - By using AWS's Global Accelerator, services will be assigned static IP addresses. (Exception: this does not apply to crl.cilogon.org .)
* TLS/SSL certificates will be issued by the AWS Certificate Manager rather than the InCommon Certificate Manager.
* Services will be protected by AWS's Web Application Firewall to prevent access from known bad IP addresses, block common PHP and Linux web server attacks, and apply rate limiting to excessive traffic.

Over the next few weeks, the COmanage Registry services (e.g., registry.cilogon.org) will also be migrated to the new compute infrastructure.

This update is currently available for public testing on https://test.cilogon.org/ and https://demo-test.cilogon.org/ . We recommend OIDC clients verify functionality before October 10 by setting the discovery endpoint to the appropriate CILogon TEST instance (e.g., https://test.cilogon.org/.well-known/openid-configuration). See https://www.cilogon.org/oidc for more information.

Please report issues to help@cilogon.org .

Posted Oct 03, 2023 - 13:20 CDT

This scheduled maintenance affected: cilogon.org.