Network Traffic and Firewall Issues in Grids
--
RobAllan - 02 Mar 2010
Note, many below are well known IANA service ports.
PKI, TLS and Digital Certificates
Introduction to PKI, TLS (SSL) and digital certificats:
http://www.grids.ac.uk/StarterKit/certificates.html
| port |
service |
incoming tcp |
incoming udp |
outgoing tcp |
outgoing udp |
| 7512 |
MyProxy |
x |
|
x |
|
Web and Portals
| port |
service |
incoming tcp |
incoming udp |
outgoing tcp |
outgoing udp |
| 22 |
ssh |
x |
|
x |
|
| 80 |
http |
x |
|
x |
|
| 443 |
https |
x |
|
x |
|
| 8080 |
http |
x |
|
x |
|
Access Grid
| port |
service |
incoming tcp |
incoming udp |
outgoing tcp |
outgoing udp |
Globus and related Middleware
A.J. Richards, R.J. Allan and D. Hanlon
Globus Toolkit Firewall Port Selection http://193.62.125.70/ETF/public/Security/FirewallPortSelection.pdf
Link to NGS document firewalls.html
For NW-GRID and the NGS, GLOBUS_TCP_PORT_RANGE=64000,62526
| port |
service |
incoming tcp |
incoming udp |
outgoing tcp |
outgoing udp |
| 2119 |
gsigatekeeper |
x |
|
x |
|
| 2222 |
gsissh |
x |
|
x |
|
| 2811 |
gsiftp |
x |
|
x |
|
Condor and related Middleware
Beckles, Son and Kewley
Current Methods for Negociating Firewalls for the Condor System http://epubs.cclrc.ac.uk/search?st=browse-by-author&pn=44853
| port |
service |
incoming tcp |
incoming udp |
outgoing tcp |
outgoing udp |
| 9611 |
Condor StartD |
|
|
|
|
| 9614 |
Condor Negociator |
|
|
|
|
| 9616 |
Condor Account |
|
|
|
|
| 9618 |
Condor Collector |
|
|
|
|
| 9620 |
Condor CredD |
|
|
|
|
| 9621 |
Stork |
|
|
|
|
Topic revision: r1 - 02 Mar 2010 - 11:13:07 -
RobAllan