LAM/MPI logo

LAM/MPI General User's Mailing List Archives

  |   Home   |   Download   |   Documentation   |   FAQ   |   all just in this list

From: Bogdan Costescu (Bogdan.Costescu_at_[hidden])
Date: 2005-07-01 09:13:49


On Fri, 1 Jul 2005, Jeff Squyres wrote:

> Is there any chance that TCP/UDP ports could be opened only between
> those machines? For cluster usage, this is relatively common.

I would advise against using any kind of firewall on the machine
itself that is supposed to be used for MPI jobs. Linux's netfilter
overhead for inspecting packets is non-negligible; as soon as you have
even one firewall rule, all packets have to be inspected. I don't know
much anything about OSX, I only make the assumption that any kind of
firewall would work in the same way, generating higher CPU load and
reduced network performance.

My suggestion would be to have a firewall on the router that separates
these machines from the Internet and only allow certain connections
between these machines and the outside world and let the machines
communicate with each other without any barrier.

--
Bogdan Costescu
IWR - Interdisziplinaeres Zentrum fuer Wissenschaftliches Rechnen
Universitaet Heidelberg, INF 368, D-69120 Heidelberg, GERMANY
Telephone: +49 6221 54 8869, Telefax: +49 6221 54 8868
E-mail: Bogdan.Costescu_at_[hidden]