Security¶
How should I set up the firewall rules on my node?¶
The nodes will need to be able to talk to the SSMAN controller and vice versa. Most of the communication goes through the VPN tunnel, which is established from the node to the controller. However, some traffic, like OS updates, etc., will use standard HTTP and HTTPS outside of the VPN. Thus, the nodes need to be able to reach the controller and any OS mirror servers.
The SwiftStack specific firewall rules on SSNODEs are configured during the SSNODE installation. Specific settings are located in SwiftStack Node Security
Note
To temporarily disable the firewall to ensure that everything is working, you run the following command:
$ sudo iptables -F INPUT
Running the command iptables will activate the firewall rules again
upon reboot unless you create permanent firewall rules to allow access.
