[PL #6755] Which ports are used by the PLC?

[Mark Huang via RT]

Email Recipients (see http://www.planet-lab.org/Support)
       Owner: alk
       Requestor: alk at absarokasoft.com
       Ticket Ccs: Thierry.Parmentelat at sophia.inria.fr, abedma at mail.hadassah-col.ac.il, abenda at cs.huji.ac.il, alk at absarokasoft.com, alsbergt at cs.huji.ac.il, daniel51 at cs.huji.ac.il, devel-community at lists.planet-lab.org, jaffe at cs.huji.ac.il, jeff.sedayao at intel.com, nakao at iii.u-tokyo.ac.jp, renault.john at epfl.ch, smuir at cs.princeton.edu, winson.c.chan at intel.com

==================================================

Renault John via RT wrote:
> As you probably know we are trying to install a private planetlab  
> running in VMWare. As we don't want to give two IP per machine we are  
> using NAT between the virtual machine and the host.

Your mileage may vary. Most of the code that we write, assumes that 
nodes are not behind a NAT and that both forward and reverse DNS 
resolution works.

> I need to ensure that the PLC will be able to contact each nodes  
> therefor I have try to guess which port are used by the PLC by  
> looking at log files and I came with the following list:
> TCP: 32836, 50352

I don't know what these ports are.

> UPD: 32, 138

Or these.

> Port 21 and 22 are presumably used only for accessing nodes, so there  
> are not used by the PLC itself to access a node (is this correct?).

You will at least need to open TCP port 22 for SSH access and TCP port 
80 for web access to the PlanetFlow database. I don't know how you will 
handle inbound ICMP; NATing the node will almost certainly break any 
experiment that depends upon ICMP. We are discussing opening up Node 
Manager to external access, but have not decided yet. More ports may 
have to be opened eventually. So, for now, at least 22 and 80.

> Since I'm not able to access both new nodes I have installed, I guess  
> that PLC is using other port I'm not aware of, for instance, to copy  
> the public key. Can someone give me the list of used ports by the PLC  
> or point me to a file where I can find this information?

Software running on the node needs to contact both boot.planet-lab.org 
and www.planet-lab.org via outboudn HTTP (80) and HTTPS (443). If your 
NAT is filtering outbound traffic, turn this off.

--Mark