perfSONAR User Q&A and Other Discussion

[Mark Feit <>]

Roberto Carna writes:

 

Dear Mark, is there any way to put perfSONAR behind my corporate firewall, using NAT for going to Internet???

 

For most tests from a perfSONAR node inside your firewall, the inside node establishes all of the connections to the outside node and everything should work as you expect.  (This assumes that your firewall doesn’t inhibit outbound connections.)  This will work with NAT or PAT.  There are exceptions; you can’t tell a throughput test to do UDP in the reverse direction because your PAT firewall won’t know what to do with those packets.  That works fine for TCP because the connection gets established forward, the firewall understands it and the data gets sent backward through the TCP connection.

 

Testing from outside to inside is technically possible, but there are enough different ways to go about it and site-specific policies to deal with that we don’t provide guidelines on how to do it.

 

--Mark