-----web, ftp, smtp server-----
outside.cs.bell-labs.com = plan9.bell-labs.com outside = 135.104.24.16 = mince

only way in is via console: "C outside"; but you can edit files there
via "9fs outside" on a cpu server (because bootes's factotum on cpu
servers holds keys with owner=* for general use).  "9fs outside"
actually imports outside's namespace, so "bind /n/outside/proc /proc;
ps" will work.  particularly revealing files are:

	/n/outfs/cfg/mince/cpurc
	/n/outfs/cfg/mince/service

outside directly runs ftpd, dns, dhcp, wiki.  indirectly hosts
imap-ssl, smtp, exportfs...  from chips; see
/cfg/chips/startoutsideservices, invoked by chips cpurc and
/cron/bootes/cron.  The services are listed in the directory
/cfg/chips/service.outside.  N.B.: startoutsideservices puts outside's
network stack on chips's /srv/cmnet, and chips then announces (listens
for services) on outside's network interface.

outside runs httpd, started as a side effect of importing read-only
/usr/web from chips; see /n/outfs/cfg/mince/service/tcp667 and
/cfg/chips/startoutsidehttpd, invoked by chips cpurc and
/cron/bootes/cron.

hostowner "bootes" on chips has factotum loaded from secstore with

key proto=p9sk1 dom=cs.bell-labs.com user=bootes !password?
key proto=rsa service=tls owner=* size=1024 ek=10001 n=E4D13...4EA7D !dk? !p? !q? !kp? !kq? !c2?
key proto=rsa service=sshserve owner=* size=1024 ek=91 n=b8d5e...6c0b4b5 !dk? !p? !q? !kp? !kq? !c2?
key proto=p9sk1 dom=outside.plan9.bell-labs.com user=glenda role=speakfor !password?
key proto=p9sk1 dom=outside.plan9.bell-labs.com user=bootes role=speakfor !password?
key proto=p9sk1 dom=outside.cs.bell-labs.com user=webmaster role=speakfor !password?

All of the Plan 9 distribution is done from the outside, i.e., the
distributions files are out there.  /sys/lib/dist/mkfile copies the
newly-made distributions there.

haggis is our `outside sources' machine.  it boots from outfs.  For
emergency fossil repairs, one can re-cable and boot on the inside.
There is one fossil file system, sources, which uses the local inside
venti as its block store.  outside.plan9.bell-labs.com is used for the
sources fossil and its authentication.  On the inside file server(s),
/sys/lib/dist/outside contains much of what is needed to rebuild
haggis.

-----specialized gateways-----
lookout
boundary
vespine
vespine2
vfw
inet

-----project machines-----
haggis == sources
huygens.org       console is "C roku"

=====================================================================

-----file servers-----
pie = fs	fossil and venti

-----cpu servers-----
chips		runs services on outside
achille = 135.104.9.2
		should move internal http elsewhere

-----project machines-----
go


periodically check outside servers for running short of memory:
   date;cat /dev/swap; ps|grep '[0-9][0-9][0-9][0-9]K'

killtcpport xxx
	will kill off any process with that port open.
killnetalt
	will kill off any process with /net.alt/* open.