The wiki is deprecated and due to be decommissioned by the end of September 2022.
The content is being migrated to other supports, new updates will be ignored and lost.
If needed you can get in touch with EGI SDIS team using operations @ egi.eu.
Federated Cloud siteconf
Jump to navigation
Jump to search
| Overview | For users | For resource providers | Infrastructure status | Site-specific configuration | Architecture |
The main purpose of this page is to collect site-specific configuration parameters of the Federated Cloud sites, allowing comparison among them, identify differences, get parameters for a specific site.
If you have any comments on the content of this page, please contact operations @ egi.eu.
Parameters provided by each site are:
- default network name, as the name of the network assigned by default when firing up a VM to the site; at the moment, it might be that the network is private, public or not assigned at all; example: /network/PRIVATE
- default network type, can be public, private, or N/A (not available)
- public network name: name of the public network to be used; usually this is different from the default network, which is private in most of the cases; example: /network/PUBLIC
- port default firewall policy: default policy available at infrastructure level (firewall); usually it's either "all open" or "all closed"
- ports firewall configuration: port configuration on top of the default firewall policy; so you can specify i.e. which ports are open on the firewall if the default configuration is "all closed"; example: 22, ICMP open
- ports default CMF policy: on OpenStack, it is possible to open/close ports using the OpenStack user interface; these "security groups" feature is an additional firewall feature, independent from the infrastructure (low level) firewall, and can be configured by the user (using the Horizon interface) or by API, or asking for support through the EGI Helpdesk. Example: "all open" or "all closed".
- ports policy on CMF: if ports default CMF policy is "all closed", you may want to specify here if there are exceptions. Example: ssh.
- mandatory closed ports: if there are ports that cannot be opened due to local rules or national regulations or infrastructure constraints. Example: 25 is usually not available for security reasons (used 587 instead).
- port configuration requests method: how the site allows to fulfill port reconfiguration requests. Examples: GGUS, Horizon, other ways.
- users requests: please mention here any special requests come from users in the past and that you have worked in order to make a specific use case run on your site.
- comments: if you have any comments to report here that could help us in improving this page.
Site-specific configuration
| default network name | default network type | public network name | port default firewall policy | ports firewall configuration | ports default CMF policy | ports policy on CMF | mandatory closed ports | port configuration requests method | users requests | comments | |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 100IT | private | private | public | all open | all closed | none | OpenStack Horizon, GGUS | ||||
| BEgrid-BELNET | /network/1 | public | /network/1 | all closed | 22, ICMP | GGUS ticket | 80, 8080, 443 | some users have requested to limit access to their VMs to a given list of source IPs | |||
| BIFI | all closed | 22,ICMP open | GGUS,email | 8080, 8081 8888, 9443, 61616 (Training VO) to be opened | |||||||
| CESGA | |||||||||||
| CESNET-MetaCloud | |||||||||||
| CLOUDIFIN | |||||||||||
| CYFRONET-CLOUD | |||||||||||
| FZJ | |||||||||||
| GoeGrid | |||||||||||
| HG-09-Okeanos-Cloud | |||||||||||
| IFCA-LCG2 | |||||||||||
| IISAS-FedCloud | |||||||||||
| IISAS-Nebula | |||||||||||
| IISAS-GPUCloud | |||||||||||
| IN2P3-IRES | |||||||||||
| INFN-CATANIA-STACK | |||||||||||
| INFN-PADOVA-STACK | |||||||||||
| RECAS-BARI | |||||||||||
| SCAI | |||||||||||
| TR-FC1-ULAKBIM | |||||||||||
| UPV-GRyCAP | |||||||||||
| NCG-INGRID-PT |