I completely agree with Henry. Not having network connectivity for the
nodes means you have to do things another way. And I think that this WN
isolation is worth in terms of ease of MW deployment, portability,
security and firewall constraints, IP address management, scalability...
LHC Computer Grid - Rollout wrote:
>Henry Nebrensky <[log in to unmask]> writes:
>
>
>
>>my view is that we should be going towards having the WNs totally
>>sandboxed off from the rest of the world with all interactions going
>>through the local service nodes...
>>
>>
>
>I don't think that's necessarily a good idea. What you gain is chiefly
>some extra time to patch your nodes for remote vulnerabilites. (You
>*have* to keep your nodes secure anyway!)
>
>On the other hand, not having general network connectivity for the
>nodes means you lose the ability to do all sorts of nifty things. I'm
>not sure it's worth it.
>
>--
>Leif Nixon - Systems expert
>------------------------------------------------------------
>National Supercomputer Centre - Linkoping University
>------------------------------------------------------------
>
>
>
>
--
**************************************************
Eduardo Huedo Cuesta
Laboratorio de Computación Avanzada, Simulación
y Aplicaciones Telemáticas
Centro de Astrobiología (CSIC-INTA)
Ctra. de Ajalvir Km 4
28850 Torrejón de Ardoz, Madrid
Spain
Tel: +34 91 520 64 28
Fax: +34 91 520 10 74
Email: [log in to unmask]
Web: http://www.cab.inta.es/~huedoce
**************************************************
GridWay, The Way to Grid! http://www.gridway.org
|