[AG-TECH] VenueServer "network requirements"

[Ben Green]

Salut Philippe,

I am happy to hear about someone in France using Access Grid ! Will you be running this on GEANT2 ?

Most Linux servers should run Toolkit without much intervention - just a few firewall changes should be necessary.

The network adaptor should be running Full Duplex with Auto-negotiation set to 'Yes' or 'On'.

The following INPUT/OUTPUT rules will need to be added to your netfiler (this one is based on my REDHAT server 195.194.48.209):

-A INPUT -d 195.194.48.209 -i eth1 -p tcp -m tcp --sport 1024:65535 --dport 50000:50020 -m state --state NEW -j ACCEPT (Data Transfer)
-A INPUT -d 195.194.48.209 -i eth1 -p tcp -m tcp --sport 1024:65535 --dport 1992 -m state --state NEW -j ACCEPT (Bridge Listening)
-A INPUT -d 195.194.48.209 -i eth1 -p tcp -m tcp --sport 1024:65535 --dport 8000 -m state --state NEW -j ACCEPT (VenueServer)
-A INPUT -d 195.194.48.209 -i eth1 -p tcp -m tcp --sport 1024:65535 --dport 8002 -m state --state NEW -j ACCEPT (Event)
-A INPUT -d 195.194.48.209 -i eth1 -p tcp -m tcp --sport 1024:65535 --dport 8006 -m state --state NEW -j ACCEPT (Data)
-A INPUT -d 195.194.48.209 -i eth1 -p tcp -m tcp --sport 1024:65535 --dport 8030 -m state --state NEW -j ACCEPT (Bridge Registry)
-A INPUT -d 195.194.48.209 -i eth1 -p tcp -m tcp --sport 1024:65535 --dport 5223 -m state --state NEW -j ACCEPT (Text Chat)
-A INPUT -i eth1 -p udp -j ACCEPT (Audio/Video Packets)
-A OUTPUT -s 195.194.48.209 -o eth1 -p udp -j ACCEPT (Audio/Video Packets)

Is it a problem for you to open all your UDP ports ? I think there is a specific range, but I am not sure of them currently.

You can certainly run both the VenueServer and BridgeServer on the same machine.

We are doing this on various different machines, all of which have Dual Pentium or Xeon CPUs, 1GB of memory etc... nothing special !

J'espere que sa aide....

Ben.

-----------------------------------------
Ben Green

Access Grid Support Centre
Research Computing Services
University of Manchester
Room 73A, Devonshire House, Precinct Centre,
Oxford Road, Manchester, M13 9PL
tel: +44 (0)161 306 6621
fax: +44 (0)161 275 6120
email - ben.green at manchester.ac.uk
web - www.agsc.ja.net
-----------------------------------


-----Original Message-----
From: ag-tech-bounces at lists.mcs.anl.gov [mailto:ag-tech-bounces at lists.mcs.anl.gov] On Behalf Of Philippe d'Anfray
Sent: 07 April 2009 16:19
To: ag-tech at lists.mcs.anl.gov
Cc: Marcolino PIRES; Marie Tétard; Chabanne Michel (M.)
Subject: [AG-TECH] VenueServer "network requirements"

Bonjour,

Aristote is a french learned society in computer science and networking.
we have set up (since last year) an  AccessGrid working group and we have just installed a Venue Server at Ecole Polytechnique (generally known as X) which is  -as an institution- a member of our association.
https://aristote-venues.polytechnique.fr:8000/Venues/default
I browsed through the available AccessGrid documentation but could not find a list a of the "network requirements" for our Venue Server to work correctly. Network people at X are willing to help but of course do not want to "open more than necessary".
We will install a bridge too and another question is, can the bridge and the Venue Server "live" on the same (rather powerful) computer ? (we will use two different names and IPs).
Any help welcome !!!!!
bien cordialement

Philippe d'Anfray