That reminds me, we also don't allow file transfers through the head node: chmod 750 /usr/bin/sftp /usr/bin/scp /usr/bin/rsync All file transfer operations must go through one of the file servers. On 02/09/17 12:13, Nicholas McCollum wrote:
While this isn't a SLURM issue, it's something we all face. Due to my system being primarily students, it's something I face a lot. I second the use of ulimits, although this can kill off long running file transfers. What you can do to help out users is set a low soft limit and a somewhat larger hard limit. Encourage users that want to do a file transfer to increase their limit (they wont be able to go over the hard limit). A method that I am testing to employ is having each login node as a KVM virtual machine, and then limiting the amount of CPU that the virtual machine can use. Each login-VM will be identical minus the MAC and the IP address, then using IP tables on the VM-host to push the connections out to the VM that responds first. The idea is that a loaded down VM would have a delay in responding and provide a user with a login node that doesn't have any users on it. I'm sure someone has already blazed this trail before, but this is how I am going about it.
-- Earth is a beta site.
