Print

Print


We also have a doc on how to setup (mostly for experienced folks like you:-) at

https://xrootd-howto.readthedocs.io

​--
Wei​

________________________________________
From: [log in to unmask] <[log in to unmask]> on behalf of Andrew Hanushevsky <[log in to unmask]>
Sent: Monday, April 11, 2022 12:21 PM
To: Albert Rossi
Cc: xrootd-dev; Dmitry O Litvintsev; Tigran Mkrtchyan via RT
Subject: Re: data server behind firewall

Hi Albert,

Indeed, only a proxy server would work here. The only other option is to
open up the xroot port in the firewall. Some, sites prefer that option
since xroot protocol is rarely if ever exploited unlike other protocols.

The particular reference is:
https://xrootd.slac.stanford.edu/doc/dev53/pss_config.htm

Andy

On Mon, 11 Apr 2022, Albert Rossi wrote:

> Hi Andy (et al.),
>
> A quick question.
>
> What are the options offered by xrootd for deployment or configuration when all data servers are behind a firewall which blocks all direct access by clients on an external network?
>
> Section 4.2 of the configuration
documentation<https://xrootd.slac.stanford.edu/doc/dev55/xrd_config.htm#_Toc88513970> seems to suggest a proxy server would be necessary in this case.  Is that correct?
>
> If so, what exactly does this proxy server do, and how is it set up?
>
> Thanks,
>
> Al
>
> ________________________________________________
> Albert L. Rossi
> Senior Software Developer
> Scientific Computing Division, Scientific Data Services, Distributed Data Development
> FCC 229A
> Mail Station 369 (FCC 2W)
> Fermi National Accelerator Laboratory
> Batavia, IL 60510
> (630) 840-3023
>
>
> ########################################################################
> Use REPLY-ALL to reply to list
>
> To unsubscribe from the XROOTD-DEV list, click the following link:
> https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-DEV&A=1
>

########################################################################
Use REPLY-ALL to reply to list

To unsubscribe from the XROOTD-DEV list, click the following link:
https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-DEV&A=1


########################################################################
Use REPLY-ALL to reply to list

To unsubscribe from the XROOTD-DEV list, click the following link:
https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-DEV&A=1