Evgene, I do not believe you can retrieve this information. These fields
in the schema were originally introduced with this use case in mind but
I do not believe this work was ever completed. It was to be done by a
summer student at CERN and the guy who supervised him has left CERN now.
I will ask around to see what became of this work.
I am not convinced that the data there means anything. I looked at a
selection of sites and they all has 0.0.0.0 or 0.0.0.0/255.255.255.255
I suggest you open a savannah ticket against GOCDB so that we don't
forget about it.
John
> -----Original Message-----
> From: LHC Computer Grid - Rollout
> [mailto:[log in to unmask]] On Behalf Of Eygene Ryabinkin
> Sent: 21 April 2008 07:24
> To: [log in to unmask]
> Subject: [LCG-ROLLOUT] Getting IP prefixes from GOC DB -- how
> to do it?
>
> Good day.
>
> I need to get the IP ranges for the Grid sites registered in
> the GOC DB -- I am trying to restrict our worker nodes at our
> firewall to confine their outgoing connections only to the
> (certified and
> production) Grid sites. ALICE VO requested us to permit all
> outgoing connections from them and I am deperately trying to
> tighten the setup.
>
> So, what I need is the way to obtain the "site name", "IP range"
> pairs for the various site attributes; currently the
> attributes are "Certification status" and "Production
> status", thus I will potentially need four lists.
>
> I think that the daily updates will be fine with me.
> Moreover, if it is not against some rules and someone will
> want this functionality (and I will be given access to this
> information ;)), I can offer to make these lists available
> via HTTP(S) for the downloads to lower the load to the GOC
> DB, if many sites will want to get these lists.
> The details (authentication, restriction by IP, etc) can be
> discuissed.
>
> Thanks!
> --
> Eygene Ryabinkin, Russian Research Centre "Kurchatov Institute"
>
|