[Planetlab-users] unc.edu planetlab nodes

[bil]

Thanks Marc.

Just as a heads up, we'll be moving planetlab1.cs.unc.edu over to an open 
network, telenet.unc.edu, this afternoon. I'm going to see if we can't 
alias the name planet1.cs.unc.edu to make this move more transparent. We'll 
let the node sit there as a test for a while, so if anyone notices any 
differences between planetlab2.cs.unc.edu and planetlab1.telenet.unc.edu, 
please send me an email. Thanks for the help,
bil


--On Thursday, September 13, 2007 10:40 PM -0400 "Marc E. Fiuczynski" 
<mef at CS.Princeton.EDU> wrote:

> Hello Bil,
>
> bil wrote:
>> My feeling is that it would be better to have these machines open on
>> the internet side and to cs.unc.edu than to have them behind an IDS or
>> IPS system (which is the case now).
>
> I am glad you are considering of moving away from this. From what I
> recall, various experiments (specifically "all pairs ping") actually
> caused your IDS system to fail as it couldn't track all of the concurrent
> connections (from all other PlanetLab nodes) that were being made to our
> PlanetLab nodes.  As mentioned by others, it is best to put the machines
> outside of any firewall, yet configure it such that machines inside
> *.unc.edu can connect to the machines.
>> Also, if any out there has had similar conversations with university
>> security personnel, I'd appreciate hearing what the outcome was.
>
> We put something together in collaboration with security personnel in the
> UK.  Let me see if I can dig this up and send to you
>
> Marc



--

________________________
bil hays
Network Manager
Computer Science, UNC CH