perfSONAR User Q&A and Other Discussion

[Peter Lambrechtsen <>]

Just downloaded perfsonar and getting my head around the toolset.

In my situation I am looking to have a mix of probes that are all on the internet. Some of them will be behind consumer grade routers and NATed, others will be directly connected.

For the NATed devices, has anyone put any thoughts into using the upnp interface to poke open ports on demand?

Another option would be to have the management channel secured over openvpn or similar which is how I have run my ad-hoc testing to date. When I deploy a node I include a openvpn client cert so the box boots and then opens the openvpn tunnel back to my central server. So I can then remotely ssh back into the box and do whatever I want.

Using the miniupnpc client I have opened ports on the consumer grade router for iperf/iperf3 and then been able to run iperf tests in both directions.

To me it would make sense that if you can inform the testpoint or it detects itself that it's behind a NAT, then just statically or on demand using upnpc opens the ports required for the test.