[IPython-dev] Security
Jason Grout
jason-sage at creativetrax.com
Wed Apr 11 08:32:46 EDT 2012
On 4/10/12 3:53 PM, MinRK wrote:
> I just tried IPC on my latptop, and it definitely does work, though the
> config is a bit weird, due to some assumptions that TCP is what people
> actually use:
>
> $> ipcontroller --transport=ipc --ip=$HOME/ipcluster/socket
>
> will result in a bunch of files called `$HOME/ipcluster/socket:12345`.
Thanks; I missed the --transport option. When you say it is a bit
weird, are you just talking about the --ip option? What if we make --ip
a synonym for --address? --address seems to be more general (though it
still doesn't seem to roll off the tongue as well as, say, --basename
and using filenames that were more descriptive when using ipc).
> This sets up IPC communication for the cluster.
>
> The only thing I don't know about is forwarding UDS connections from the
> client to the Hub, but if you know how to do that, you might be set
> (some code would need to change in the ssh forwarding utils, but that
> shouldn't be much).
I was thinking that if you had forwarding set up, then you were sshing
into the hub server and then running the client there. Hmmm...it does
seem like an interesting problem to tunnel a UDS connection from the
client machine to the hub machine. If you do tunnel, then you're
opening up a tcp port, so the advantages of not having a port open are
out the window, I guess. So maybe this is just a solution where the
client and hub are all on one computer. Or, like in our planned case,
we have Google App Engine messages coming in over a App Engine "channel"
to the hub computer, then sent to the hub.
Jason
More information about the IPython-dev
mailing list