You are viewing a plain text version of this content. The canonical link for it is here.
Posted to builds@apache.org by Meghna Baijal <me...@gmail.com> on 2017/10/04 22:39:34 UTC
IP Addresses used by Apache Master to Connect to Slaves
Hi All,
We have a set of slaves on Apache Jenkins that run MXNet builds. I want to
restrict the IP addresses that can access these slaves on port 22 (ubuntu)
or port 3389 (windows).
*Question*: Where can I find a fixed and sufficient set of IPs that the
Apache master uses to connect to these slaves?
Thanks,
Meghna Baijal
Re: IP Addresses used by Apache Master to Connect to Slaves
Posted by Meghna Baijal <me...@gmail.com>.
Great. Thanks!
On Thu, Oct 5, 2017 at 11:46 AM, Bert Huijben <be...@qqmail.nl> wrote:
>
>
> > -----Original Message-----
> > From: Meghna Baijal [mailto:meghnabaijal2017@gmail.com]
> > Sent: donderdag 5 oktober 2017 20:17
> > To: builds@apache.org
> > Subject: Re: IP Addresses used by Apache Master to Connect to Slaves
> >
> > Is this also true for windows slaves? Our windows slaves are currently
> *not
> > *open to this IP on the RDP port but work fine.
> > Can someone shed some light on how the master is connecting to the
> > windows slaves?
>
> I don't think RDP access is required for the Jenkins and/or buildbot
> master. On buildbot the only connection necessary is an outward connection
> to the buildmaster, but on Jenkins this might work the other way around.
> This won’t be over RDP.
>
> RDP access would be for remote administration by some human.
>
> Bert
>
>
RE: IP Addresses used by Apache Master to Connect to Slaves
Posted by Bert Huijben <be...@qqmail.nl>.
> -----Original Message-----
> From: Meghna Baijal [mailto:meghnabaijal2017@gmail.com]
> Sent: donderdag 5 oktober 2017 20:17
> To: builds@apache.org
> Subject: Re: IP Addresses used by Apache Master to Connect to Slaves
>
> Is this also true for windows slaves? Our windows slaves are currently *not
> *open to this IP on the RDP port but work fine.
> Can someone shed some light on how the master is connecting to the
> windows slaves?
I don't think RDP access is required for the Jenkins and/or buildbot master. On buildbot the only connection necessary is an outward connection to the buildmaster, but on Jenkins this might work the other way around. This won’t be over RDP.
RDP access would be for remote administration by some human.
Bert
Re: IP Addresses used by Apache Master to Connect to Slaves
Posted by Meghna Baijal <me...@gmail.com>.
Is this also true for windows slaves? Our windows slaves are currently *not
*open to this IP on the RDP port but work fine.
Can someone shed some light on how the master is connecting to the windows
slaves?
On Wed, Oct 4, 2017 at 4:30 PM, Meghna Baijal <me...@gmail.com>
wrote:
> Thanks Greg, that helps!
>
> On Wed, Oct 4, 2017 at 4:28 PM, Greg Stein <gs...@gmail.com> wrote:
>
>> Yup. That single IP is just fine. We just spun up the master at that
>> address this summer, and have no plans to move it.
>>
>> Cheers,
>> -g
>>
>> On Oct 4, 2017 18:01, "Meghna Baijal" <me...@gmail.com> wrote:
>>
>> > Thanks Gavin.
>> > I was not sure if a single static IP is sufficient.
>> >
>> >
>> >
>> > On Wed, Oct 4, 2017 at 3:53 PM, Gavin McDonald <ga...@16degrees.com.au>
>> > wrote:
>> >
>> > >
>> > > > On 5 Oct 2017, at 9:39 am, Meghna Baijal <
>> meghnabaijal2017@gmail.com>
>> > > wrote:
>> > > >
>> > > > Hi All,
>> > > > We have a set of slaves on Apache Jenkins that run MXNet builds. I
>> want
>> > > to
>> > > > restrict the IP addresses that can access these slaves on port 22
>> > > (ubuntu)
>> > > > or port 3389 (windows).
>> > > > *Question*: Where can I find a fixed and sufficient set of IPs that
>> the
>> > > > Apache master uses to connect to these slaves?
>> > >
>> > > PING jenkins-master.apache.org (62.210.60.235): 56 data bytes
>> > > 64 bytes from 62.210.60.235: icmp_seq=0 ttl=47 time=362.915 ms
>> > >
>> > >
>> > > >
>> > > > Thanks,
>> > > > Meghna Baijal
>> > >
>> > >
>> >
>>
>
>
Re: IP Addresses used by Apache Master to Connect to Slaves
Posted by Meghna Baijal <me...@gmail.com>.
Thanks Greg, that helps!
On Wed, Oct 4, 2017 at 4:28 PM, Greg Stein <gs...@gmail.com> wrote:
> Yup. That single IP is just fine. We just spun up the master at that
> address this summer, and have no plans to move it.
>
> Cheers,
> -g
>
> On Oct 4, 2017 18:01, "Meghna Baijal" <me...@gmail.com> wrote:
>
> > Thanks Gavin.
> > I was not sure if a single static IP is sufficient.
> >
> >
> >
> > On Wed, Oct 4, 2017 at 3:53 PM, Gavin McDonald <ga...@16degrees.com.au>
> > wrote:
> >
> > >
> > > > On 5 Oct 2017, at 9:39 am, Meghna Baijal <meghnabaijal2017@gmail.com
> >
> > > wrote:
> > > >
> > > > Hi All,
> > > > We have a set of slaves on Apache Jenkins that run MXNet builds. I
> want
> > > to
> > > > restrict the IP addresses that can access these slaves on port 22
> > > (ubuntu)
> > > > or port 3389 (windows).
> > > > *Question*: Where can I find a fixed and sufficient set of IPs that
> the
> > > > Apache master uses to connect to these slaves?
> > >
> > > PING jenkins-master.apache.org (62.210.60.235): 56 data bytes
> > > 64 bytes from 62.210.60.235: icmp_seq=0 ttl=47 time=362.915 ms
> > >
> > >
> > > >
> > > > Thanks,
> > > > Meghna Baijal
> > >
> > >
> >
>
Re: IP Addresses used by Apache Master to Connect to Slaves
Posted by Greg Stein <gs...@gmail.com>.
Yup. That single IP is just fine. We just spun up the master at that
address this summer, and have no plans to move it.
Cheers,
-g
On Oct 4, 2017 18:01, "Meghna Baijal" <me...@gmail.com> wrote:
> Thanks Gavin.
> I was not sure if a single static IP is sufficient.
>
>
>
> On Wed, Oct 4, 2017 at 3:53 PM, Gavin McDonald <ga...@16degrees.com.au>
> wrote:
>
> >
> > > On 5 Oct 2017, at 9:39 am, Meghna Baijal <me...@gmail.com>
> > wrote:
> > >
> > > Hi All,
> > > We have a set of slaves on Apache Jenkins that run MXNet builds. I want
> > to
> > > restrict the IP addresses that can access these slaves on port 22
> > (ubuntu)
> > > or port 3389 (windows).
> > > *Question*: Where can I find a fixed and sufficient set of IPs that the
> > > Apache master uses to connect to these slaves?
> >
> > PING jenkins-master.apache.org (62.210.60.235): 56 data bytes
> > 64 bytes from 62.210.60.235: icmp_seq=0 ttl=47 time=362.915 ms
> >
> >
> > >
> > > Thanks,
> > > Meghna Baijal
> >
> >
>
Re: IP Addresses used by Apache Master to Connect to Slaves
Posted by Meghna Baijal <me...@gmail.com>.
Thanks Gavin.
I was not sure if a single static IP is sufficient.
On Wed, Oct 4, 2017 at 3:53 PM, Gavin McDonald <ga...@16degrees.com.au>
wrote:
>
> > On 5 Oct 2017, at 9:39 am, Meghna Baijal <me...@gmail.com>
> wrote:
> >
> > Hi All,
> > We have a set of slaves on Apache Jenkins that run MXNet builds. I want
> to
> > restrict the IP addresses that can access these slaves on port 22
> (ubuntu)
> > or port 3389 (windows).
> > *Question*: Where can I find a fixed and sufficient set of IPs that the
> > Apache master uses to connect to these slaves?
>
> PING jenkins-master.apache.org (62.210.60.235): 56 data bytes
> 64 bytes from 62.210.60.235: icmp_seq=0 ttl=47 time=362.915 ms
>
>
> >
> > Thanks,
> > Meghna Baijal
>
>
Re: IP Addresses used by Apache Master to Connect to Slaves
Posted by Gavin McDonald <ga...@16degrees.com.au>.
> On 5 Oct 2017, at 9:39 am, Meghna Baijal <me...@gmail.com> wrote:
>
> Hi All,
> We have a set of slaves on Apache Jenkins that run MXNet builds. I want to
> restrict the IP addresses that can access these slaves on port 22 (ubuntu)
> or port 3389 (windows).
> *Question*: Where can I find a fixed and sufficient set of IPs that the
> Apache master uses to connect to these slaves?
PING jenkins-master.apache.org (62.210.60.235): 56 data bytes
64 bytes from 62.210.60.235: icmp_seq=0 ttl=47 time=362.915 ms
>
> Thanks,
> Meghna Baijal