[Beowulf] iptaled

[Bogdan Costescu]

On Thu, 29 Sep 2005, Glen Gardner wrote:

> Exposing compute nodes and even I/O servers to the outside is common 
> in grids.

For communication between nodes from different sites or for user 
access ? In any case, wouldn't a VPN (virtual private network) offer 
both direct access (without firewall piercing), uniform IP range and 
security bewteen sites ? Users could log on to a local node from which 
they would submit and control their jobs.

A VPN can be set up between the firewalls or main nodes of the 
different sites. Both major firewall appliances manufacturers (like 
Cisco) and main node OSes (like Linux) offer VPN these days. Nodes 
would not need anymore protection against threats from outside - of 
course, there is still the issue of trust between the different sites, 
but they are present as well at some other levels (user auth, data 
migration, etc.)

--
Bogdan Costescu

IWR - Interdisziplinaeres Zentrum fuer Wissenschaftliches Rechnen
Universitaet Heidelberg, INF 368, D-69120 Heidelberg, GERMANY
Telephone: +49 6221 54 8869, Telefax: +49 6221 54 8868
E-mail: Bogdan.Costescu at IWR.Uni-Heidelberg.De