perfSONAR User Q&A and Other Discussion

[Mark Feit <>]

Tadeja Saje writes:

    Hi!
    We would like to allow doing test by certain IPs on our testpoint by , 
    and we do not allow others doing tests.
   
    Debbuging by schedular:
    Hints:
       requester: 127.0.0.1
       server: 12.34.56.78
    Identified as local-interfaces
    Classified as friendlies
    Application: Hosts we trust to do everything
       Group 1: Limit 'always' passed
       Group 1: Want all, 1/1 passed, 0/1 failed: PASS
       Application PASSES
    Proposal meets limits

Correct, because 127.0.0.1 is identified as "local-interfaces," which is 
classified under "friendlies," which is allowed to do anything.
    
    For task starting at 2019-09-12T05:12:56 lasting PT30S:
    
    Hints:
       requester: 9.0.9.0
       server: 12.34.56.78
    Made no identifications.
    
Not knowing what the actual requester IP was, I can't say much more than it 
didn't match anything the identifiers look for.  That's a quick path to 
denial.

If I understand your policy correctly, you'd like to allow selected IPs to do 
testing and deny it to all others.  You're mostly on the right track; all 
that's missing is an identifier for the IP(s) you'd like to let through.  
Create that (perhaps as an ip-cidr-list), add it to the "friendlies" 
classifier and you'll be all set.

The limit configuration we ship with the toolkit has an identifier called 
"everybody" that always identifies no matter what, and that forces evaluation 
of the rest of the configuration.  Using no matching identifiers as a way to 
short-cut denials is a workable strategy if that's the route you want to go.  
The configuration we ship with the toolkit has an "everybody" identifier that 
always matches and is used for applying defaults to requests that aren't 
given elevated status by being considered friendly.
    
    
    We  also installed perfsonar toolkit.
    We configured tests in web interface. Is possible configure test between 
    two different host or just between toolkit and other host?

The web interface is only for configuring tests that run on the local system. 
   If you're looking to coordinate activities among multiple systems, 
consider using pSConfig and, optionally, PWA 
(https://docs.perfsonar.net/pwa.html).

--Mark