CS:GO - How to build the network for a Tier 1(?) tournament.


How to build the network for a Tier 1(?) tournament.

Posted: 03 Sep 2018 12:47 PM PDT

Hello all,

This is something new for me which I have been thinking about doing for a while, more or less ever since CORSAIR DreamHack Masters Marseille 2018 where we had a few technical issues (threads here and here). It became clear to me that this sub-reddit has a few IT/Infrastructure/Network interested readers and that's why I thought that getting to know how we build the network for a event like CORSAIR DreamHack Masters Stockholm 2018 might be interesting for some of you.

First a few disclaimers:
* We do not use any special equipment that is not used by large ISP's or enterprises today.
* This post will in some parts be very technical.
* I do not claim that this is the best way, or the only way to build a network for a event like this. This is how I do it at DreamHack.
* My drawings are really bad.
* My posting skills on reddit are really bad.

Network changes done since Marseille:
* We have implemented a very simple script that resets the computers ethernet interface at startup.
* We have segmented each team into separate VLAN which isolates them from potential loops and duplicate mac addresses.

Hardware

As router we used a Juniper MX104.
Our distribution switch was Juniper EX4600-40F.
As access switches we use both Cisco 2960G and 2960X switches.
For our point to point connection between venue and studio we used in the studio end a Juniper EX4300.

Internet

The event has two incoming fibers for internet, one that is supplied by our partner Com Hem and one that is supplied by ourself from our hosting facility.

Towards ComHem we had redundancy to two different routers using one fiber. This was done with technology called DWDM which gives you several channels in one fiber line. We announced our IP networks under AS25037 (DreamHack Event ASN) towards ComHem who acted as transit provider.

The second fiber link was connected directly to our datacenter in Stockholm to two different routers using CWDM technology (wavelengths) where we used a subnet from our hosting environment. Our datacenter is directly connected with Twitch over Netnod which gives us a very good and stable connection for sending our streams.

This setup gave us redundancy to 4 different routers at two different ISP's and a total capacity of 40Gbit/s. The whole configuration for internet was done in the Juniper MX104 router using VRF's where one VRF was for routing to ComHem and one for our datacenter. We used BGP as routing protocol for both ComHem and datacenter with the only difference that towards ComHem it was eBGP and our datacenter it was iBGP.

Local (Production network)

Our production network is not in any way special, it's a RFC1918 network behind a firewall (NAT). We use pfsense as firewall-OS on most of our productions as these are easy to deploy and with today's intel CPU's there are very good support for AES-NI which makes OpenVPN tunnels work very well with high bandwidth. The firewall for this event was located in our datacenter which is not the usual way for us, but worked perfectly.

Local (Player network)

The player network for CS:GO is a bit different compared other games, ever since DreamHack Winter 2014 we have been using a special set of rules where we only allow very specific traffic to internet from these networks. This to not allow the clients to access services that could potentially allow it to download data to the machine they're playing on.

This is how the ruleset looks like:
We allow traffic to Valve (AS32590)
We allow NTP traffic to selected NTP servers
We allow DNS traffic to specific DNS resolvers
We allow KMS traffic to our KMS server (Microsoft Licensing)
We allow UDP traffic to selected CSDM servers

Basically we allow the client to only send and receive traffic to Valve (AS32590) and a few different services.

Local (Practice network)

At this event we assigned all computers with public IP's routed directly in the MX104 which gave them the best possible connection. The practice area was connected with 10Gbit/s.

Venue <-> Studio

Unique for this event was that we produced the whole event (group-stage and playoffs) from a studio instead of on site. This studio is located 20 kilometers away from the venue (Globen), and this in itself is not that special. But we sent all our camera feeds to the studio and the game feed from studio to the venue over network using a protocol called NDI, which is to my knowledge first time in our industry.

How was this done?
We asked our ISP (ComHem) to create a L2 connection between the venue and our studio (they're also supplier of internet to our studio) and over that we then sent all our camera feeds. This link was on 10Gbit/s in order to make sure we could send all our feeds, and it ended up working extremely well. We used around 1Gbit/s of traffic with a few times going over 1Gbit/s.


Here is a graph on the link between studio and venue (from venue switch): here!
Here is a small drawing on how the network was built for the event: here!
Here is a picture of the flightcase where MX104 and other core services: here!
Here is a picture of our routers and some of the web-servers we have in our datacenter: here!

submitted by /u/suom1
[link] [comments]

The MAC-10 still have one ammo in it when it's empty

Posted: 03 Sep 2018 02:42 AM PDT

CS:GO Blog: "FACEIT 2018 – Ways to Watch"

Posted: 03 Sep 2018 03:58 PM PDT

Thorin throwing some shade towards the FaceIT major

Posted: 03 Sep 2018 02:05 PM PDT

A glimpse from the past (counter-strike 1.6 knife remake)

Posted: 03 Sep 2018 04:36 AM PDT

The Hero (Based on a TRUE story). Saltcade #6

Posted: 03 Sep 2018 08:37 AM PDT

Windigo vs G2 / epicenter 2018 europe closed qualifier / Post-Match Discussion

Posted: 03 Sep 2018 12:48 PM PDT

Windigo 2 - 1 G2

Inferno 9 - 16

Overpass 16 - 8

Dust 2 16 - 12

G2 has been eliminated.

Windigo will advance to grand final. They will face against ence esports for a spot on Epicenter 2018.

submitted by /u/FisuKala
[link] [comments]

Hey guys, I worked with Rez from NIP to resolve his wrist pain. He agreed to share the details of the case to benefit the community :)

Posted: 03 Sep 2018 05:11 PM PDT

Zool fixing the bullet on the mac 10

Posted: 03 Sep 2018 10:16 AM PDT

Never lose hope! ( How I met Ropz yesterday )

Posted: 03 Sep 2018 03:51 AM PDT

I spent all my money to travel to Dreamhack, I am 14 so I don't have a real income yet :( and my main goal (it was also a dream of mine) was to meet Ropz and talk with him a little bit, I made 3 fan signs for Mouz and Ropz, even had an Estonian flag with me :D but they did not have signing sessions because crowd was mainly cheering for Swedish and Danish teams, and big company teams like Faze. I asked the dreamhack staff if I could meet them in anyway or only ropz but they said no, I left Stockholm with a okay-ish mood because I learned so much stuff from pros and the plays but I did not meet Ropz, at the airport (Arlanda to Tallinn) I entered the plane and sat down, suddenly Ropz enters the plane and I literally lose my mind, I thought of it earlier that MAYBE he will go with the same plan and he did, I fistbumped him and at Tallinn I got a photo with him <3

https://imgur.com/a/hsA9Qel

update: Thank you so much for your support, makes me so happy! Thanks for the kind words! Its the first day of school and you guys made me happy, usually I would be sad :D

submitted by /u/realMKL
[link] [comments]

n0thing to stand in for NRG for Epicenter qualifiers, while daps is an analyst at the major.

Posted: 03 Sep 2018 06:33 PM PDT

Coldzera on Spawn: “I've been following this guy since i started playing cs 1.6, Spawn you're a legend ��”

Posted: 03 Sep 2018 05:23 PM PDT

Cache B main wallbang collat

Posted: 03 Sep 2018 02:51 AM PDT

HLTV Rankings | September 3rd

Posted: 03 Sep 2018 09:20 AM PDT

WAT DOINK??? #1 with Frozen (starting a series of interviewing all FPL players and allowing people to get to know them better)

Posted: 03 Sep 2018 09:54 AM PDT

What can Nade do? Dealing damage? No. Walling...Yes

Posted: 03 Sep 2018 06:53 AM PDT

Hello Reddit, My name is Jonathan and I'm playing with a trackball and only 2 fingers! Check this out

Posted: 03 Sep 2018 06:18 PM PDT

Hello Reddit,

My name is Jonathan and I want to share with you how I play this lovely game with my trackball because yeah I have a handicap, only two fingers, one per hand. Yeah something like this ¯_(ツ)_/¯ hahaha Preview1

Today I've launch my youtube channel with 4 videos, I hope you guys enjoy! :D Preview 2 Preview 3

Here is my social media links, feel free to follow me if you want :D https://twitter.com/Frag_csgo https://www.twitch.tv/frag_csgo

Oh and yeah ofc you can ask me what you want. I will try to answer as much as possible but please be nice :p (sorry my english is not perfect)

Thanks youuuu and Peace! :-)

submitted by /u/Frag_csgo
[link] [comments]

Esports Kingdom's Tier Rankings (After DreamHack Masters Stockholm & ZOTAC Cup Masters)

Posted: 03 Sep 2018 01:34 AM PDT

Beautiful Get_Right drawing with charcoal pencils by u/no2ail

Posted: 03 Sep 2018 09:41 AM PDT

Ropz wins Breakthrough Of The Year trophy from Stockholm International Esport Awards

Posted: 03 Sep 2018 11:56 AM PDT

OpTic withdraws from NA ESL Pro League and moved to EU MDL Season 29

Posted: 03 Sep 2018 07:59 AM PDT

Giants Present A New Portuguese Superteam With Fox And Mutiris

Posted: 03 Sep 2018 11:46 AM PDT

D0cc crazy flick

Posted: 03 Sep 2018 09:29 AM PDT

i got no friends to show this, so i'll just put it here

Posted: 03 Sep 2018 06:33 PM PDT

When You Get What You Deserve

Posted: 03 Sep 2018 04:14 AM PDT

Post a Comment

Powered by Blogger.