Hi everyone,<br><br>Thanks for your responses. I think they've answered my question, and the answer is that what I want to do is not possible.<br><br>Yes, Matthew Chambers has it right.<br><br>My current grid setup involves a number of computers (
192.168.0.*), each running smpd on port 8676. I have one of those computers as the "gateway", that has 2 network cards, with one connected to the public network and one connected to the private network. I want to give any computer in the public network access to the computers on the private network by opening up a range of ports on the gateway computer. This approach is exactly how I open up Remote Desktop (RDP) currently.
<br><br>So for example, I want to set up the forwarding as:<br>gateway:10101 --> slave01:8676<br>gateway:10102 --> slave02:8676<br>gateway:10103 --> slave03:8676<br>etc.<br><br>As you've said, this approach is currently not possible -- the machine file doesn't allow it. For various reasons, I cannot put all of the computers on the private network onto the public network -- using NAT is my only option.
<br><br>Sorry for the confusion of firewall vs. NAT. The port forwarding rules are firewall exceptions in the control panel, so I get confused.<br><br>So.....does anyone know if there are plans to implement this kind of fine-grained control over the network connections? I think it would greatly enhance the ways that MPICH2 clusters can be deployed.
<br><br>Thanks for your help,<br>-Matt<br><br><br><div><span class="gmail_quote">On 4/20/07, <b class="gmail_sendername">Matthew Chambers</b> <<a href="mailto:matthew.chambers@vanderbilt.edu">matthew.chambers@vanderbilt.edu
</a>> wrote:</span><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
<div link="blue" vlink="blue" lang="EN-US">
<div>
<p><font color="navy" face="Arial" size="2"><span style="font-size: 10pt; font-family: Arial; color: navy;">I don't understand how that could
solve his problem. I think Matt Valerio's initial description of
the problem was misleading, though. It seems to me that he is not trying
to connect through a simple firewall, he is trying to connect through a NAT.
It seems he wants to use port forwarding set up on the NAT in way that will
enable him, from a computer outside the NAT, to create a machine config file that
connects to the same host IP (e.g. the WAN IP of the NAT) with different ports,
which will logically connect to multiple machines inside of the NAT. However,
as you say, that is not possible with the current SMPD machine config file. I
do think that is bad design on the part of the config file though. Would
it be very difficult to extend the config file to support specification of port
as well as host/IP?</span></font></p>
<p><font color="navy" face="Arial" size="2"><span style="font-size: 10pt; font-family: Arial; color: navy;"> </span></font></p>
<div style="border-style: none none none solid; border-color: -moz-use-text-color -moz-use-text-color -moz-use-text-color blue; border-width: medium medium medium 1.5pt; padding: 0in 0in 0in 4pt;">
<div>
<div style="text-align: center;" align="center"><font face="Times New Roman" size="3"><span style="font-size: 12pt;">
<hr align="center" size="2" width="100%">
</span></font></div>
<p><b><font face="Tahoma" size="2"><span style="font-size: 10pt; font-family: Tahoma; font-weight: bold;">From:</span></font></b><font face="Tahoma" size="2"><span style="font-size: 10pt; font-family: Tahoma;"> owner-<a href="mailto:mpich-discuss@mcs.anl.gov" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">
mpich-discuss@mcs.anl.gov</a>
[mailto:<a href="mailto:owner-">owner-</a><a href="mailto:mpich-discuss@mcs.anl.gov" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">mpich-discuss@mcs.anl.gov</a>]
<b><span style="font-weight: bold;">On Behalf Of </span></b>Jayesh Krishna<br>
<b><span style="font-weight: bold;">Sent:</span></b> Friday, April 20, 2007 10:56
AM<br>
<b><span style="font-weight: bold;">To:</span></b> 'Matt Valerio'<br>
<b><span style="font-weight: bold;">Cc:</span></b> <a href="mailto:mpich-discuss@mcs.anl.gov" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">mpich-discuss@mcs.anl.gov</a><br>
<b><span style="font-weight: bold;">Subject:</span></b> RE: [MPICH] Re: Using
MPICH2 on different ports</span></font></p>
</div><div><span class="e" id="q_1120fd5945e0e7fc_1">
<p><font face="Times New Roman" size="3"><span style="font-size: 12pt;"> </span></font></p>
<p><font color="blue" face="Arial" size="2"><span style="font-size: 10pt; font-family: Arial; color: blue;">Hi,</span></font></p>
<p><font color="blue" face="Arial" size="2"><span style="font-size: 10pt; font-family: Arial; color: blue;"> SMPD, by default, runs on the same
port (8676) on all computers. However you can specify the port that smpd
needs to run using the "-port" option while starting smpd (You can
also ask smpd to run on any port assigned by OS using the "-anyport"
option). The machine config file does not support specifying port names along
with the machine name & number of procs.</span></font></p>
<p><font color="blue" face="Arial" size="2"><span style="font-size: 10pt; font-family: Arial; color: blue;"> Instead of mapping the port numbers
to IP+port you could allow connections from a certain list of client
machines/IPs to certain port (say 8000) numbers on computer1/2/..</span></font></p>
<p><font color="blue" face="Arial" size="2"><span style="font-size: 10pt; font-family: Arial; color: blue;"> Let us know if you require any
further information.</span></font></p>
<p><font face="Times New Roman" size="3"><span style="font-size: 12pt;"> </span></font></p>
<p><font color="blue" face="Arial" size="2"><span style="font-size: 10pt; font-family: Arial; color: blue;">Regards,</span></font></p>
<p><font color="blue" face="Arial" size="2"><span style="font-size: 10pt; font-family: Arial; color: blue;">Jayesh</span></font></p>
<p><font face="Times New Roman" size="3"><span style="font-size: 12pt;"> </span></font></p>
<div style="text-align: center;" align="center"><font face="Times New Roman" size="3"><span style="font-size: 12pt;">
<hr align="center" size="2" width="100%">
</span></font></div>
<p style="margin-bottom: 12pt;"><b><font face="Tahoma" size="2"><span style="font-size: 10pt; font-family: Tahoma; font-weight: bold;">From:</span></font></b><font face="Tahoma" size="2"><span style="font-size: 10pt; font-family: Tahoma;">
owner-<a href="mailto:mpich-discuss@mcs.anl.gov" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">mpich-discuss@mcs.anl.gov</a>
[mailto:<a href="mailto:owner-">owner-</a><a href="mailto:mpich-discuss@mcs.anl.gov" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">mpich-discuss@mcs.anl.gov</a>]
<b><span style="font-weight: bold;">On Behalf Of </span></b>Matt Valerio<br>
<b><span style="font-weight: bold;">Sent:</span></b> Wednesday, April 18, 2007
11:04 AM<br>
<b><span style="font-weight: bold;">To:</span></b> <a href="mailto:mpich-discuss@mcs.anl.gov" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">mpich-discuss@mcs.anl.gov</a><br>
<b><span style="font-weight: bold;">Subject:</span></b> [MPICH] Re: Using MPICH2
on different ports</span></font></p>
<p style="margin-bottom: 12pt;"><font face="Times New Roman" size="3"><span style="font-size: 12pt;">Ok, let me try to
simplify the question.<br>
<br>
Does smpd need to run on the same port on all computers?<br>
Can I tell mpiexec that it needs to connect to all of the smpd computers on
different ports?<br>
<br>
I know that the machine config file can specify different computers, but the
same port. I am just curious if the machine config file can specify
different computers as well as different ports. <br>
<br>
Any help would be greatly apppreciated. Thanks!<br>
-Matt<br>
<br>
<br>
</span></font></p>
<div>
<p><span><font face="Times New Roman" size="3"><span style="font-size: 12pt;">On 4/16/07, <b><span style="font-weight: bold;">Matt
Valerio</span></b> <<a href="mailto:matt.valerio@gmail.com" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">matt.valerio@gmail.com
</a>> wrote:</span></font></span> </p>
<p style="margin-bottom: 12pt;"><font face="Times New Roman" size="3"><span style="font-size: 12pt;">Hello MPICH2 users,<br>
<br>
I am wondering if there is a way to instruct mpiexec to use multiple computers
running smpd on different ports. <br>
<br>
For example, I have 10 computers behind a firewall. Each of those 10
computers is running smpd on the same port (let's say 8000). <br>
I want to put rules into a firewall computer that maps an externally-available
port to the specific computer<br>
<br>
firewall:8001 ----(maps to)----------> computer1:8000<br>
firewall:8002 ----(maps to)----------> computer2:8000 <br>
...<br>
firewall:8010 ----(maps to)----------> computer10:8000<br>
<br>
Then in the machine configuration file, I need to be able to tell mpiexec that
it can use the same computer but different ports (8000-8010), like<br>
<br>
firewall:8001 <br>
firewall:8002<br>
...<br>
firewall:8010<br>
<br>
etc.<br>
<br>
Is this currently possible? I know the machine file format is wrong
because the number after the colon specifies the number of processes, not the
port number. <br>
<br>
Does anyone have any ideas as to whether this kind of thing could work?
Is there a better way? Any help would be greatly appreciated.<br>
<br>
Thanks!<br>
<span>-Matt</span><br>
<br>
<br>
</span></font></p>
</div>
<p><font face="Times New Roman" size="3"><span style="font-size: 12pt;"> </span></font></p>
</span></div></div>
</div>
</div>
</blockquote></div><br>