LHC Computer Grid - Rollout
> [mailto:[log in to unmask]] On Behalf Of Paul Kyberd said:
> If we don't have a robust an believable response then
> university
> computer centres will just close the ports and if that stops
> us working then ... well it is our problem.
What are you planning on doing about your worker nodes? At the moment,
to be useful they are expected to have unrestricted outbound access - we
have no way to advertise that only specific ports are open, and I'm not
sure that we'd want to do it anyway ... of course, people have been
saying for a long time that that should be changed, but so far it hasn't
happened. And what do you do about globus, which normally chooses ports
at random in a specified range?
The answer may be simply that grid systems should be outside the
firewalls and not inside ...
Stephen
|