Configuration options for ATLAS Connect Remote Sites

ATLAS Connect Client (Option 1)

Requirements

The collector, negotiator, and schedd host(s) will need to have public IP addresses in order for the Connect client to work.

If a firewall is in place, It is also necessary to have firewall settings relaxed for the following IP subnets and ports:

• 192.170.226.0/23
• 128.135.158.128/25

Table of Connectivity

	9618	22	10002	11000	80
Negotiator	Both	Inbound	Both	Both	-
Collector	Both	Inbound	Both	Both	-
Schedd	Both	Inbound	Both	Both	Inbound
Startd	Outbound	-	Outbound	Both	Inbound

Setup

To set up the Connect client, you'll simply need to do the following on your submit host:

• Create a user account for ATLAS Connect. (we suggest 'atlasconnect', but it can be anything you like)
• Add the following public key to ~/.ssh/authorized_keys:

ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEArJkP7MMb8P0PxU7E/pPFZabPmbbN6VDt006vPMrJFt53sgmhzyRVCp+0stWgvmT08WuSycPqnTGbOBwq8bCJ6teaXMJzvp7DWirHDblsucoin3NnUA4yoo1mmCMbE+72EA91wzkZ7fhjgVrb4kJS75y0v9OFTjIOHXOUt+d+sr/kkOH3mTFqyeaIl2fr3ukJvRVBZiSK49PfxcvoV71wtl3OxYTfEEQGTPQvIAIdcdgm85L0hXjNJXz6vanEYxzzvqCtUnxgvhWlebZImLG9+TffSnjw6t2/GypljMkHy6a14+dkip4T+mm2Eh3QdTS+Syuhdp6nkxwcEoSvsiF00w==

• Any additional parameters that need to be injected into jobs (e.g., +AccountingGroup for HTCondor).
• Send us an email with the login information (username / hostname).

Condor Connection Brokering (Option 2)

The Condor Connection Broker (CCB) allows communication for HTCondor startds (workers) from behind NAT to the outside world via the HTCondor Collector daemon. To set up CCB, you'll first need to set the following on all nodes:

PRIVATE_NETWORK_NAME=subdomain.domain.tld

substituting subdomain.domain.tld for your own values (e.g., atlas.csufresno.edu). The addition of the PRIVATE_NETWORK_NAME everywhere should ensure that communication within the private network remains the same.

Collector/Schedd/Negotiator

Additionally, on your HTCondor Collector, you should set the following values:

BIND_ALL_INTERFACES = TRUE
PRIVATE_NETWORK_INTERFACE = [private IP]
NETWORK_INTERFACE = [public IP]

again, substituting for your own values. If your Schedd and Negotiator are on separate hosts, you probably want these configuration settings there as well.

Startd

On your worker nodes, you'll need to also add the following:

CCB_ADDRESS= $(COLLECTOR_HOST)

Restart and test

It would be a wise idea to restart all HTCondor daemons at this point and do a test submission. If things aren't working, feel free to contact us and attach the Schedd, Collector, and Negotiator logs.

-- LincolnBryant - 14 Nov 2013