 |
 |
Hi Albert, Indeed, only a proxy server would work here. The only other option is to open up the xroot port in the firewall. Some, sites prefer that option since xroot protocol is rarely if ever exploited unlike other protocols. The particular reference is: https://xrootd.slac.stanford.edu/doc/dev53/pss_config.htm Andy On Mon, 11 Apr 2022, Albert Rossi wrote: > Hi Andy (et al.), > > A quick question. > > What are the options offered by xrootd for deployment or configuration when all data servers are behind a firewall which blocks all direct access by clients on an external network? > > Section 4.2 of the configuration documentation<https://xrootd.slac.stanford.edu/doc/dev55/xrd_config.htm#_Toc88513970> seems to suggest a proxy server would be necessary in this case. Is that correct? > > If so, what exactly does this proxy server do, and how is it set up? > > Thanks, > > Al > > ________________________________________________ > Albert L. Rossi > Senior Software Developer > Scientific Computing Division, Scientific Data Services, Distributed Data Development > FCC 229A > Mail Station 369 (FCC 2W) > Fermi National Accelerator Laboratory > Batavia, IL 60510 > (630) 840-3023 > > > ######################################################################## > Use REPLY-ALL to reply to list > > To unsubscribe from the XROOTD-DEV list, click the following link: > https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-DEV&A=1 > ######################################################################## Use REPLY-ALL to reply to list To unsubscribe from the XROOTD-DEV list, click the following link: https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-DEV&A=1