SSH tunnelling: Difference between revisions

Jump to navigation Jump to search
no edit summary
No edit summary
No edit summary
Line 14: Line 14:
In the context of the Alliance, SSH tunnelling is necessary in certain cases,
In the context of the Alliance, SSH tunnelling is necessary in certain cases,
because compute nodes on [[Niagara]], [[Béluga]] and [[Graham]] do not have direct access to
because compute nodes on [[Niagara]], [[Béluga]] and [[Graham]] do not have direct access to
the internet, nor can the compute nodes be contacted directly from the internet.
the Internet, nor can the compute nodes be contacted directly from the Internet.


<!--T:4-->
<!--T:4-->
Line 20: Line 20:


<!--T:5-->
<!--T:5-->
* Running commercial software on a compute node that needs to contact a license server over the internet;
* Running commercial software on a compute node that needs to contact a license server over the Internet;
* Running [[Visualization|visualization software]] on a compute node that needs to be contacted by client software on a user's local computer;
* Running [[Visualization|visualization software]] on a compute node that needs to be contacted by client software on a user's local computer;
* Running a [[Jupyter | Jupyter Notebook]] on a compute node that needs to be contacted by the web browser on a user's local computer;
* Running a [[Jupyter | Jupyter Notebook]] on a compute node that needs to be contacted by the web browser on a user's local computer;
Line 51: Line 51:
<!--T:9-->
<!--T:9-->
Certain commercially-licensed programs must connect to a license server machine  
Certain commercially-licensed programs must connect to a license server machine  
somewhere on the internet via a predetermined port. If the compute node where  
somewhere on the Internet via a predetermined port. If the compute node where  
the program is running has no access to the internet, then a ''gateway server''  
the program is running has no access to the Internet, then a ''gateway server''  
which does have access must be used to forward communications on that port,  
which does have access must be used to forward communications on that port,  
from the compute node to the license server. To enable this, one must set up  
from the compute node to the license server. To enable this, one must set up  
Line 140: Line 140:


<!--T:32-->
<!--T:32-->
There is Network Address Translation (NAT) on both Graham and Cedar allowing users to access the internet from the compute nodes. On Graham however, access is blocked by default at the firewall. Contact [[Technical support|technical support]] if you need to have a specific port opened, supplying the IP address or range of addresses which should be allowed to use that port.
There is Network Address Translation (NAT) on both Graham and Cedar allowing users to access the Internet from the compute nodes. On Graham however, access is blocked by default at the firewall. Contact [[Technical support|technical support]] if you need to have a specific port opened, supplying the IP address or range of addresses which should be allowed to use that port.


== From Linux or MacOS X == <!--T:51-->
== From Linux or MacOS X == <!--T:51-->
rsnt_translations
57,772

edits

Navigation menu