perfSONAR User Q&A and Other Discussion

[Hyojoon Kim <>]

Hi all, 

I got a question about limiting tests on perfSONAR nodes. Maybe this came up sometime in the past, but I was not able to find a thread about this on the mailing list. 

Is there a way to limit who can initiate a perfSONAR test that uses my perfSONAR node? To clarify, I’m *not* talking about limiting which perfSONAR nodes my perfSONAR nodes can run tests with. I’m talking about who can send a request to run a test.

For example, nothing is stopping me from running below from my machine, even if I don’t own and administer "albq-pt1.es.net” and "ameslab-pt1.es.net”. I get results right away. 

   $ pscheduler task trace --source albq-pt1.es.net --dest ameslab-pt1.es.net

Now assume I am an admin of albq-pt1.es.net or ameslab-pt1.es.net. How do I prevent some arbitrary person from initiating a perfSONAR test that uses my perfSONAR node? Is this even possible to prevent? Or maybe limiting this does not align with the philosophy of open and public perfSONAR? 

 

I’ve found a related documentation here. However, I think this is more about limiting nodes which my node can run tests with. 

http://docs.perfsonar.net/config_pscheduler_limits.html#identifiers-who-s-asking

In other words, I think “requester” above actually means "another perfSONAR node to run tests with”, not a person/node who is asking (or requesting) to run some test with my node and some other node. The documentation is not really clear about this, so I’m a unsure. 

Thanks, 

Joon