DHCP Overview
Helps devices when cabled, reach the internet by configuring IP settings
The MoJO-DHCP service is a client device facing service which automatically configures client device settings when cabled.
User needs
Allows Public internet connectivity for prison staff and enables modern devices.
Principles
Enable onsite support staff to manage local devices e.g. DHCP reservation using GOV.UK Design System styles and patterns.
Use cloud first To meet point 5 of the Technology Code of Practice (TCoP) and the government’s cloud first policy.
Infrastructure as Code provides a complete audit of changes, versioning of cloud infrastructure and DNS server application, automated testing and redeployment of the service in the event of disaster.
Tools
The DHCP service uses ISC KEA containers running on AWS ECS Fargate. We use Terraform and Infrastructure as Code to provide a complete audit of changes, versioning of components and the DNS server application, automated testing and redeployment of the service in the event of disaster.
Diagram
Repositories
| Repository | Description |
|---|---|
| DHCP admin portal | Admin Portal for managing staff device DNS forwarders and zone configuration. |
| DHCP server | This repository contains the Dockerfile to create the ISC DHCP server Docker image. The configuration for this server is managed in the Admin Portal. |
| Shared Infrastructure CI/CD | This creates the shared infrastructure for the main account, named Shared Services. This account is used to host CI/CD pipelines. |
| DHCP disaster recovery | This repo contains an interactive script which can be used to roll back a corrupt config file for the DHCP service. |
| DHCP performance testing | Using perfdhcp to simulate leases |
Useful links
| Link | Description |
|---|---|
| DHCP admin portal | Admin Portal for managing staff device DNS forwarders and zone configuration. Please not you need to be a member of the AzureAD group MoJO-EntApp-DNSDHCP_Viewer to view and MoJO-EntApp-DNSDHCP_Editor to edit.
|
| Monitoring and alerting guide | List Grafana dashboards for health of the products and slack channels in use for alerts. |
| Transit gateway | Connects the service to wider MoJ networks as a virtual WAN |