Re: [OMPI users] Help: Firewall problems

[Lee Amy]

On Fri, Nov 6, 2009 at 7:15 PM, Jeff Squyres  wrote:
> On Nov 6, 2009, at 5:49 AM, Lee Amy wrote:
>
>> Thanks. And actually I don't know if I need to disable iptables to run
>> MPI programs properly. Obviously from your words Open MPI will use
>> random ports so how do I set up in iptables then let trusted machines
>> open their random ports?
>>
>
>
> I'm afraid I'm not enough of an iptables expert to know (I don't know if
> anyone else on this list will be, either) -- you'll need to check the
> iptables docs to see.
>
> Sorry!
>
> --
> Jeff Squyres
> jsquy...@cisco.com
>
> ___
> users mailing list
> us...@open-mpi.org
> http://www.open-mpi.org/mailman/listinfo.cgi/users
>

That's okay. Thank you all the same. You provide me lots of
information about that.

Thanks.

Amy

Re: [OMPI users] Help: Firewall problems

[Jeff Squyres]

On Nov 6, 2009, at 5:49 AM, Lee Amy wrote:


Thanks. And actually I don't know if I need to disable iptables to run
MPI programs properly. Obviously from your words Open MPI will use
random ports so how do I set up in iptables then let trusted machines
open their random ports?




I'm afraid I'm not enough of an iptables expert to know (I don't know  
if anyone else on this list will be, either) -- you'll need to check  
the iptables docs to see.


Sorry!

--
Jeff Squyres
jsquy...@cisco.com

Re: [OMPI users] Help: Firewall problems

[Lee Amy]

On Fri, Nov 6, 2009 at 2:39 AM, Jeff Squyres  wrote:
> On Nov 5, 2009, at 11:28 AM, Lee Amy wrote:
>
>> I remembered MPI does not count on TCP/IP but why default iptables
>> will prevent the MPI programs from running? After I stop iptables then
>> programs run well. I use Ethernet as connection.
>>
>
>
> Note that Open MPI *can* use TCP as an interface for MPI messaging.  It
> definitely uses TCP for administrative control of MPI jobs, even if TCP is
> not used for MPI messaging.  Open MPI therefore basically requires the
> ability to open sockets between all nodes in the job on random TCP ports.
>
> Your could probably configure iptables to "trust" all the machines in your
> cluster (i.e., allow TCP sockets to/from random ports) but disallow most
> (all?) TCP connections from outside your cluster, if you wanted to...?
>
> --
> Jeff Squyres
> jsquy...@cisco.com
>
> ___
> users mailing list
> us...@open-mpi.org
> http://www.open-mpi.org/mailman/listinfo.cgi/users
>

Thanks. And actually I don't know if I need to disable iptables to run
MPI programs properly. Obviously from your words Open MPI will use
random ports so how do I set up in iptables then let trusted machines
open their random ports?

Regards,

Amy

Re: [OMPI users] Help: Firewall problems

[Terry Dontje]

Technically MPI Spec may not put a requirement on TCP/IP, however Open 
MPI's runtime environment needs some way to launch jobs and pass data 
around in a standard way and it currently uses TCP/IP.  That being said 
there have been rumblings for some time to use other protocols but that 
has not yet come into being.


--td


*Subject:* [OMPI users] Help: Firewall problems
*From:* Lee Amy (/openlinuxsource_at_[hidden]/)
*Date:* 2009-11-05 11:28:50

Hi,

I remembered MPI does not count on TCP/IP but why default iptables
will prevent the MPI programs from running? After I stop iptables then
programs run well. I use Ethernet as connection.

Could anyone tell me tips about fix this problem?

Thank you very much.

Amy

[OMPI users] Help: Firewall problems

[Lee Amy]

Hi,

I remembered MPI does not count on TCP/IP but why default iptables
will prevent the MPI programs from running? After I stop iptables then
programs run well. I use Ethernet as connection.

Could anyone tell me tips about fix this problem?

Thank you very much.

Amy