[Opensim-users] about OpenSim GRID security.

[James Stallings II]

Just a note on proper use of the word 'griever' vs the word 'griefer'. A
'griever' is someone who is in a state of grief; as in grieving for a loved
one lost to the ravages of time or the brutality of an accident. A
'griefer' is someone who sows grief. In this context, 'griever' is misused,
and 'griefer' is the right and proper term.


On Wed, Jun 4, 2014 at 5:38 PM, Seren Seraph <seren.seraph at gmail.com> wrote:

>
> On 06/02/2014 04:16 PM, David Saunders wrote:
> > GRid Security?
> >
> > Well there is a lacking of  it. I been working on a ways to prevent
> > grids/Simulators to connect to our network.  Its built around allowing
> > sims to authenticate with a configuration server that will open the
> > door for them to connect to the grid services.  But I not found a list
> > of ports that need to open for clients to use,  and been testing a
> > list simulator ports to splite the services from the client to a
> > public set of ports and the simulator a set of private port that can
> > be open when they connect.
>
> Why not do it at the server side with a whitelist?  If the requester is
> not on the list then they get no service.
> >
> >  This would be easy if we did not allow trusted remote simulators to
> > connect.
>
> What would be the point of grid services is trusted sims could not
> connect?
> >
> > When I asked about security lasst I was given you keep the ports a
> > secret and only give them out to people you trust.
>
> You could have one server process/virtual machine that listens on the
> ports, does the whitelist and forwards legitimate requests to the actual
> services.   Really this isn't an opensim question but a general securing
> services question.   There are many different ways to do it including
> firewall, VPN, whitelist, load balancer, gating service and so on.
>
> - s
>
> _______________________________________________
> Opensim-users mailing list
> Opensim-users at opensimulator.org
> http://opensimulator.org/cgi-bin/mailman/listinfo/opensim-users
>



-- 
===================================
http://osgrid.org/
http://simhost.com
http://twitter.com/jstallings2
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://opensimulator.org/pipermail/opensim-users/attachments/20140605/2417c8b1/attachment.html>