https://ops.docs.72602.space/csp/index.html Managed Network Topology The two k3s clusters have different trust boundaries and service roles. zjlab is the private company-network workload plane; 72602 is the public service plane. ecs-99 is the shared public relay and SSH jump host. The diagram shows stable roles and paths, not a live health status. %%{init: {"flowchart": {"curve": "basis", "nodeSpacing": 30, "rankSpacing": 45}}}%% flowchart TB users["Public users"] operators["Operators"] subgraph relay["Aliyun ECS ecs-99 · public relay · 47.110.67.161"] direction LR web["HAProxy Web\n80 / 443"] mail["HAProxy Mail\n25 / 465 / 587 / 993"] sshPublic["72602 SSH\n10021 primary · 10022 backup"] sshPrivate["ZJLAB ProxyJump targets\n10023 primary · 10024 backup\nloopback only"] monitor["Tunnel monitors\nDingTalk alerts"] end subgraph servicePlane["72602-minipc · public k3s service plane"] direction LR ingress["ingress-nginx\n32080 / 32443"] mailu["Mailu\n25 / 465 / 587 / 993"] ssh72602["sshd\n22"] end subgraph privatePlane["zjlab-ubuntu · private k3s workload plane"] direction LR sshZJLAB["sshd\n22"] workloads["Private workloads\nand internal data"] end users -->|"HTTP(S)"| web users -->|"SMTP / IMAP"| mail operators -->|"source-restricted"| sshPublic operators -->|"ECS SSH 22 + ProxyJump"| sshPrivate web -->|"WireGuard UDP 51820"| ingress mail -->|"loopback backends over 10022"| mailu sshPublic -->|"reverse SSH tunnels"| ssh72602 sshPrivate -->|"reverse SSH tunnels"| sshZJLAB sshZJLAB --> workloads monitor -.-> sshPublic monitor -.-> sshPrivate classDef private fill:#e9f5ee,stroke:#1f7a4d,color:#123b27; classDef public fill:#eaf2ff,stroke:#2f63a8,color:#142b4a; classDef relay fill:#fff4df,stroke:#b87916,color:#4d3208; classDef service fill:#f4efff,stroke:#7650a8,color:#2d1e4a; class sshZJLAB,workloads private; class ingress,mailu,ssh72602 public; class web,mail,sshPublic,sshPrivate,monitor relay; class users,operators service; The data-path arrows point from the client-facing listener to the destination. The reverse SSH sessions themselves are initiated outbound by 72602-minipc and zjlab-ubuntu toward ECS. Hugo en Thu, 07 Mar 2024 15:00:59 +0800 https://ops.docs.72602.space/csp/72602/index.html Thu, 07 Mar 2024 15:00:59 +0800 https://ops.docs.72602.space/csp/72602/index.html Scope This section is the single source of truth for 72602 cluster operations. Topology Public ECS: 47.110.67.161 (2C4G, cn-hangzhou, zone cn-hangzhou-i) Active ingress domain: 72602.space; legacy .72602.online routes are retired ArgoCD host: argocd.72602.space k3s node: 72602-minipc (192.168.0.25, MiniPC N100 28G+1TB NVMe) SSH reverse tunnel: :10021 (main), :10022 (backup and Mailu loopback) Web tunnel: WireGuard UDP 51820 between ECS and minipc Ingress NodePort: 32080 (HTTP), 32443 (HTTPS) Ingress class: nginx Ingress namespace: basic-components cert-manager issuer: lets-encrypt Storage class: local-path (default, RWO) OS: Ubuntu 26.04 LTS (minipc) k3s version: v1.34.6+k3s1 (installed via install.sh) Traffic Path Web: https://ops.docs.72602.space/csp/aliyun/index.html Thu, 07 Mar 2024 15:00:59 +0800 https://ops.docs.72602.space/csp/aliyun/index.html OSSutil ECS DNS https://ops.docs.72602.space/csp/clashctl/index.html Mon, 01 Jan 0001 00:00:00 +0000 https://ops.docs.72602.space/csp/clashctl/index.html zjlab-ubuntu and 72602-minipc both use nelvko/clash-for-linux-install from /home/aaron/clashctl. This page is the shared host-level proxy runbook; cluster-specific bridges and application proxy variables remain documented on their respective cluster pages. Command Loading clashctl is a Bash function loaded by /home/aaron/.bashrc, not an executable installed in PATH. Non-interactive SSH and agent shells do not automatically load it, so command -v clashctl or a direct clashctl status can incorrectly report that the command is missing. https://ops.docs.72602.space/csp/huawei/index.html Mon, 01 Jan 0001 00:00:00 +0000 https://ops.docs.72602.space/csp/huawei/index.html https://ops.docs.72602.space/csp/tencent/index.html Thu, 07 Mar 2024 15:00:59 +0800 https://ops.docs.72602.space/csp/tencent/index.html https://ops.docs.72602.space/csp/zhejianglab/index.html Thu, 07 Mar 2024 15:00:59 +0800 https://ops.docs.72602.space/csp/zhejianglab/index.html 👨‍💻Schedmd Slurm Build & Install Install On Debian Install On Ubuntu Install From Binary Install From Helm Chart Install From K8s Operator Try OpenSCOW CheatSheet Common Environment Variables File Operations Submit Jobs Configuration Files Slurm Configuration File Slurmdbd Configuration File MPI Libs Test Intel MPI Jobs Test Open MPI Jobs Astro Code Data Warehouse Scope ZJLAB operational inventory and network details are private. Public pages contain reusable application guidance only; verify dynamic state against the live cluster before applying a runbook.