From 8e52547ee49130322778b3d2a1d3b62acee06c11 Mon Sep 17 00:00:00 2001 From: Fabio Andrijauskas Date: Wed, 7 Dec 2022 10:16:00 -0800 Subject: [PATCH 1/2] Update install-origin.md --- docs/data/stashcache/install-origin.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/docs/data/stashcache/install-origin.md b/docs/data/stashcache/install-origin.md index a60666f3b..b4b8391e1 100644 --- a/docs/data/stashcache/install-origin.md +++ b/docs/data/stashcache/install-origin.md @@ -36,8 +36,8 @@ Before starting the installation process, consider the following requirements: * __Host certificate:__ Required for authentication. See our [host certificate documentation](../../security/host-certs.md) for instructions on how to request and install host certificates. * __Network ports:__ The origin service requires the following ports open: - * Inbound TCP port 1094 for unauthenticated file access via the XRoot or HTTP protocols (unauthenticated origin only) - * Inbound TCP port 1095 for authenticated file access via the XRoot or HTTPS protocols (authenticated origin only) + * Inbound TCP port 1094 for unauthenticated file access via the XRoot or HTTP protocols (unauthenticated origin only). In case of an origin with restricted access, it is interesting to open the range to 129.93.244.192/26 for the monitoring system. + * Inbound TCP port 1095 for authenticated file access via the XRoot or HTTPS protocols (authenticated origin only). In case of an origin with restricted access, it is interesting to open the range to 129.93.244.192/26 for the monitoring system. * Outbound TCP port 1213 to `redirector.osgstorage.org` for connecting to the data federation * Outbound UDP port 9930 for reporting to `xrd-report.osgstorage.org` and `xrd-mon.osgstorage.org` for monitoring. * __Hardware requirements:__ We recommend that an origin has at least 1Gbps connectivity and 8GB of RAM. From 11102e67570f3da1927dccb1bf3912012cf9799f Mon Sep 17 00:00:00 2001 From: Fabio Andrijauskas Date: Wed, 7 Dec 2022 10:18:02 -0800 Subject: [PATCH 2/2] Update install-cache.md --- docs/data/stashcache/install-cache.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/docs/data/stashcache/install-cache.md b/docs/data/stashcache/install-cache.md index 1d11a92a1..64a7ebdb5 100644 --- a/docs/data/stashcache/install-cache.md +++ b/docs/data/stashcache/install-cache.md @@ -21,9 +21,9 @@ Before starting the installation process, consider the following requirements: * __Host certificate:__ Required for authentication. See our [host certificate documentation](../../security/host-certs.md) for instructions on how to request and install host certificates. * __Network ports:__ The cache service requires the following ports open: - * Inbound TCP port 1094 for file access via the XRootD protocol - * Inbound TCP port 8000 for file access via HTTP and/or - * Inbound TCP port 8443 for authenticated file access via HTTPS + * Inbound TCP port 1094 for file access via the XRootD protocol. In case of an cache with restricted access, it is interesting to open the range to 129.93.244.192/26 for the monitoring system. + * Inbound TCP port 8000 for file access via HTTP and/or (In case of an cache with restricted access, it is interesting to open the range to 129.93.244.192/26 for the monitoring system.) + * Inbound TCP port 8443 for authenticated file access via HTTPS. In case of an cache with restricted access, it is interesting to open the range to 129.93.244.192/26 for the monitoring system. * Outbound UDP port 9930 for reporting to `xrd-report.osgstorage.org` and `xrd-mon.osgstorage.org` for monitoring * __Hardware requirements:__ We recommend that a cache has at least 10Gbps connectivity, 1TB of disk space for the cache directory, and 12GB of RAM.