AFS Behind Firewalls

[Love]

"Aaron J. Angel" <aangel at myrealbox.com> writes:

> What rules are needed to make an AFS server that resides behind a
> firewall accessible?

For a fileserver

   7000/udp need to be open from 7001/udp and 4711/udp
   
   You should consider allowing any port from the clients, not just
   7001/udp and 4711/udp so arla-cli and Hartmut Reuter's fs
   writefile/readfile works too)

   It the db-servers is the other side of the fileserver you'll need to
   open vldb (for VL_RegisterAddrs) and pr-server (pts server) for the
   fileserver.

For the db-servers

   You'll need to open the approprite port depending on what servers you
   are running. Just check conf/services in the arla tree for
   afs3-{callback,prserver,vlserver,kaserver,volsers,bos,...} for the
   appropriate port number.

   These need to open for if you want the client programs to work.
   (vos/pts/bos).

   fs usully works throu the cache-manager (thus port 7001 and 4711). This
   isn't true for all commands `fs mkm' talks to the vldbserver so you
   better open to vldb-servers.

Love