Changes between Version 4 and Version 5 of Internal/SharedNAT


Ignore:
Timestamp:
Sep 24, 2014 5:30:26 PM (10 years ago)
Author:
sklower
Comment:

In response to questions and misunderstandings that lawler and bks had.

Legend:

Unmodified
Added
Removed
Modified
  • Internal/SharedNAT

    v4 v5  
    77the previous Risky Experiment mechanism, but gives some additional capabilites.
    88
     9== Caveats and testing ==
     10
     11Please note that like the risky experiment facility that it extends, '''you cannot use ping (icmp) to verify that the access is functioning'''.
     12
     13The system gives specific access with different port sets to TCP and UDP and does not support ICMP at all.
     14
    915== Dynamic modification/access ==
    1016
    11 If you have an an existing experiment, and you want to grant it external    access, you can do so , even if it is already swapped in, without restarting the experiment.
     17If you have an an existing experiment, and you want to grant it external access, you can do so , even if it is already swapped in, without restarting the experiment.
    1218
    1319You use a web page {{{https://<testbed>/expcxa.php?pid=<pid>&eid=<eid>}}} and fill out the same form that is used by the "Make Experiment Risky" page, parsed with almost the same rules.
     
    2430for "Experiment need outside connetctivity" even if you've already
    2531granted it.
     32
     33To dynamically '''remove''' access granted either by using the CXA webpage, or as a result of the NS File extensions described
     34below, us the CXA webpage again, and delete the entries in the boxes as you would for modifying a risky experiment.
    2635
    2736If your experiment already has specified nodes with external
     
    8897the HTTP port on the experiment node named "web" and to the daytime UDP port on the experiment host called "othernode".
    8998
     99For any experiment having a tb-allow-external call in the ns file (even with no parameters), a swap-modify will '''overrule''' any changes
     100instituted using the dynamic CXA webpage above.
     101
    90102
    91103== DNS stuff ==