Does anyone have mongodb instances for their HPC infrastructure that are also accessible to external providers such as XSEDE?
As access to HPC resources continues moving behind VPN and 2FA this becomes an issue. I guess we could setup a science DMZ and only allow access thru firewall from limited set of IP though maintaining that list from various XSEDE sites could be a nuisance.
Greetings!
It doesn’t put it on premises, but you could get a Jetstream allocation and bring up an API side instance with Mongodb and use Openstack security groups to limit access to specific IPs or ranges. This would save setting up a DMZ and local firewall changes, at least.
Jetstream docs are here - http://wiki.jetstream-cloud.org/
You can ping me if you want to discuss more in-depth!
Thanks,
J
Jeremy, a fantastic idea! I think the lab in question may even have an XSEDE allocation. Let me talk with them and get back to you.
If they don’t have an allocation, there are step by step instructions here:
http://wiki.jetstream-cloud.org/Jetstream+Allocations
and then instructions for getting API access are here:
http://wiki.jetstream-cloud.org/Using+the+Jetstream+API
You can reach out here or via help@xsede.org if there are questions!