Changes between Version 1 and Version 2 of Internal/SharedNAT

Timestamp:

Jul 28, 2014 5:51:47 PM (10 years ago)

Author:

sklower

Comment:

--

Internal/SharedNAT

@@ -36 +36 @@
 
 {{{
-    tb-allow-external $node [<cookietype> [key1 value1] [key 2 value2] .... ]
+      [<cookietype> [key1 value1] [key 2 value2] .... ]
 }}}
 
 if the cookieype is "shared", then only the keyN valueN pairs will
-be entered in virt parameters table, and no pseudonode with vname
+be entered in virt_parameters table in the testbed database, and no pseudonode with vname
 external_ipaddr<N> will be requested by the experiment.
 
-The CXA backend will examine the virtual parameters whenever an
-an ns file is (re-)parsed and will (re-)initialize the risky experiment
-table entries for the experiment based on the values for two
-keys, namely "nat" and "rdr".
+The CXA backend will examine the virtual parameters specified above whenever an
+an ns file is (re-)parsed and will (re-)initialize the risky_experiment
+table entries in the testbed database, based on the values for two
+specific keys, namely "nat" and "rdr".
+
+The terminology is borrowed from the BSD packet filter; "nat" indicates (towards in the internet) network address translation
+(for otherwise unroutable testbed nodes), and "rdr" indicates in-bound (toward experiment nodes) port redirection or forwarding.
+
+Each of these keys may be specified a maximum of one time.
 
 The values are a quoted string of whitespace separated targets,
@@ -55 +60 @@
 modifyexp or endexp is run on the testbed.
 
-We allow some abbreviations for convience.
+We allow some abbreviations for convenience.
 
 For "rdr" targets, one may use triples as in the web page.
@@ -72 +77 @@
 defaulting to tcp and the <port> default to 0 meaning all ports.
 
+Here's an example of all six forms:
+
+{{{
+        tb-allow-external $node shared nat "192.154.6.22/udp/13 192.154.6.21/25 128.32.112.228" rdr "22 mywebserver/80 othernode/udp/13"
+}}} 
+
+This allows any node in the experiment to send traffic to udp port 13 or boss.ucb.deterlab.net (which must be specified by dotted quad,
+to the SMTP port on 192.154.6.21 and to any TCP port on 128.32.112.228.  hosts on the internet can also connect to an address and
+port and protocol which will be listed on the experiment page, and variously forward to the SSH port on the node named "node",
+the SMTP port on the experiment node named "mywebserver" and to the daytime UDP port on the experiment host called "othernode".
+
+
 == DNS stuff ==