Bureaucrats, cc_docs_admin, cc_staff
2,879
edits
SSH tunnelling: Difference between revisions
Jump to navigation
Jump to search
→Contacting a license server from a compute node
(experimenting with SideCallout) |
|||
| Line 25: | Line 25: | ||
= Contacting a license server from a compute node = | = Contacting a license server from a compute node = | ||
{{Panel | {{Panel | ||
| Line 39: | Line 30: | ||
|panelstyle=SideCallout | |panelstyle=SideCallout | ||
|content= | |content= | ||
A port is a number used to distinguish different streams of communication from one another. You can think of it as loosely analogous to a radio frequency or a channel. Many port numbers are reserved, by rule or by convention, for certain types of traffic. See [https://en.wikipedia.org/wiki/List_of_TCP_and_UDP_port_numbers List of TCP and UDP port numbers] for more. | A port is a number used to distinguish different streams of communication | ||
from one another. You can think of it as loosely analogous to a radio frequency | |||
or a channel. Many port numbers are reserved, by rule or by convention, for | |||
certain types of traffic. See | |||
[https://en.wikipedia.org/wiki/List_of_TCP_and_UDP_port_numbers List of TCP and UDP port numbers] for more. | |||
}} | }} | ||
To | Certain commercially-licensed programs must connect to a license server machine | ||
information | somewhere on the internet via a predetermined port. If the compute node where | ||
the program is running has no access to the internet, then a ''gateway server'' | |||
which does have access must be used to forward communications, on that port, | |||
from the compute node to the license server. To enable this one must set up | |||
an ''SSH tunnel''. Such an arrangement is also called ''port forwarding''. | |||
In most cases, creating an SSH tunnel in a batch job requires just two or | |||
three commands in your job script. You will need the following information: | |||
# The IP address, or the name, of the license server. Let's call this LICSERVER. | # The IP address, or the name, of the license server. Let's call this LICSERVER. | ||
# The port number of the license service. Let's call this LICPORT. | # The port number of the license service. Let's call this LICPORT. | ||
You should obtain this information from whoever maintains the license server. | |||
That server | That server also must allow connections from the login nodes; for | ||
Niagara, outgoing IP addresses will range from 142.150.188.71 to | Niagara, outgoing IP addresses will range from 142.150.188.71 to | ||
142.150.188.77. | 142.150.188.77. | ||
With this information, one can now setup the SSH | With this information, one can now setup the SSH tunnel. For | ||
Graham, an alternative resolution is to request a firewall exception | Graham, an alternative resolution is to request a firewall exception | ||
for the license server LICSERVER and its specific port LICPORT. | for the license server LICSERVER and its specific port LICPORT. | ||