[Swift-user] Running swift from firewalled host

[Michael Wilde]

On 11/16/08 11:39 AM, Mihael Hategan wrote:
> On Sun, 2008-11-16 at 11:25 -0600, Michael Wilde wrote:
>> Will swift running on a host with limited inbound port connectivity be 
>> able to run jobs on a WS-GRAM site?
>>
>> Based on the Globus firewall wiki page
> 
> Link?

http://dev.globus.org/wiki/FirewallHowTo

>>  seems it should work (see below), 
>> but thought I would ask before trying it.
>>
>> - Mike
>>
>> WS-GRAM:
>>
>> Connections back to client (controllable ephemeral port to controllable 
>> ephemeral port) required if executable or data staged from client or 
>> output from job sent back to client.
>>
>> ^^^ I assume Swift does not do either of these?
> 
> Yes, however what that text fails to mention is that only polling for
> job status will work (not notifications). Swift does not use polling, so
> you need a an open port for the notification server.

Alas. So no way to run Swift-to-Globus from a host that you cant open up 
  "controllable" ephemeral ports (like GLOBUS_TCP_PORT_RANGE) on, it seems?

- Mike

>> Port 8443/tcp is default and configurable.
>>
>> GirdFTP:
>>
>> In the case of a single data channel, the connection is established from 
>> a controllable ephemeral port on the client to a controllable ephemeral 
>> port on the server.
>>
>> ^^^ Is this is what Swift does?
> 
> Yes. So that's one additional port for each concurrent transfer.
> Basically you need a reasonable port range.
> 
>