FirewallIssues < GridAndHPC

Tags: view all tags
---++ Network Traffic and Firewall Issues in Grids

-- Main.RobAllan - 02 Mar 2010

Note, many below are well known IANA service ports.

---+++ PKI, TLS and Digital Certificates

Introduction to PKI, TLS (SSL) and digital certificats: http://www.grids.ac.uk/StarterKit/certificates.html

| port | service | incoming tcp | incoming udp | outgoing tcp | outgoing udp |
| 7512 | !MyProxy | x | | x | |

---+++ Web and Portals

| port | service | incoming tcp | incoming udp | outgoing tcp | outgoing udp |
| 22 | ssh | x | | x | |
| 80 | http | x | | x | |
| 443 | https | x | | x | |
| 8080 | http | x | | x | |

---+++ Access Grid

| port | service | incoming tcp | incoming udp | outgoing tcp | outgoing udp |

---+++ Globus and related Middleware

A.J. Richards, R.J. Allan and D. Hanlon _Globus Toolkit Firewall Port Selection_ http://193.62.125.70/ETF/public/Security/FirewallPortSelection.pdf

Link to NGS document firewalls.html

For NW-GRID and the NGS, GLOBUS_TCP_PORT_RANGE=64000,62526

| port | service | incoming tcp | incoming udp | outgoing tcp | outgoing udp |
| 2119 | gsigatekeeper | x | | x | |
| 2222 | gsissh | x | | x | |
| 2811 | gsiftp | x | | x | |

---+++ Condor and related Middleware

Beckles, Son and Kewley _Current Methods for Negociating Firewalls for the Condor System_ http://epubs.cclrc.ac.uk/search?st=browse-by-author&pn=44853

| port | service | incoming tcp | incoming udp | outgoing tcp | outgoing udp |
| 9611 | Condor !StartD | | | | |
| 9614 | Condor Negociator | | | | |
| 9616 | Condor Account | | | | |
| 9618 | Condor Collector | | | | |
| 9620 | Condor !CredD | | | | |
| 9621 | Stork | | | | |
Topic revision: r1 - 02 Mar 2010 - RobAllan