Task #1343: Permit connections to the mongodb servers from the EGI cloud networks - D4Science Infrastructure - D4science

Actions

Copy link

Task #1343

closed

Permit connections to the mongodb servers from the EGI cloud networks

Added by Andrea Dell'Amico over 9 years ago. Updated over 9 years ago.

Status:

Closed

Priority:

High

Assignee:

Andrea Dell'Amico

Category:

System Application

Target version:

UnSprintable

Start date:

Dec 17, 2015

Due date:

% Done:

100%

Estimated time:

(Total: 0.00 h)

Infrastructure:

Development, Pre-Production, Production

Description

The smartgears nodes instantiated to the EGI cloud providers need to talk to our mongodb servers.
I have temporarily opened the mongodb to all while we gather the right network addresses.

Subtasks 1 (0 open — 1 closed)

Actions

Copy link

Updated by Andrea Dell'Amico over 9 years ago

The CESNET network is 147.228.240.0/22

Actions

Copy link

Updated by Andrea Dell'Amico over 9 years ago

Status changed from New to In Progress
% Done changed from 0 to 20

About the Catania provider, we can assume that the public network for the cloud images is 90.147.16.0/22

Actions

Copy link

Updated by Andrea Dell'Amico over 9 years ago

Is this still valid, or all the apps are now using the http URIs?

Actions

Copy link

Updated by Fabio Sinibaldi over 9 years ago

In my understanding connections were opened by storage handler, which now should use http connection to the URI resolver if needed. I don't fully understand the logic, so I'd ask @roberto.cirillo@isti.cnr.it to clarify on this.

Actions

Copy link

Updated by Roberto Cirillo over 9 years ago

This is still valid: the smart-generic-worker downloads files by connection to mongodb servers.
Now the mongodb access is opened to all the world or only to the Catania provider network and CESNET network? If is open to all the world, could you restrict the connections only to Catania provider and CESNET networks, please?
Anyway I'm going to open a ticket to change the behavior of smart-generic-worker.

Actions

Copy link

Updated by Andrea Dell'Amico over 9 years ago

Roberto Cirillo wrote:

This is still valid: the smart-generic-worker downloads files by connection to mongodb servers.

Now the mongodb access is opened to all the world or only to the Catania provider network and CESNET network? If is open to all the world, could you restrict the connections only to Catania provider and CESNET networks, please?

mongo is now open to the world. This ticket's goal was to gather information about the cloud providers we are going to use. I'm going to add CESNET and INFN-CATANIA and remove the global ACL.

Actions

Copy link