Network & Security - Revision history

Honfi001 at 15:07, 23 July 2026

2026-07-23T15:07:49Z

← Older revision		Revision as of 15:07, 23 July 2026
Line 5:		Line 5:
	== Network ==		== Network ==

	Internally inside the cluster, the compute nodes and the[[Filesystems \| Lustre filesystem]] are linked by a high-speed, low-latency interconnect, which is what lets the parallel filesystem and multi-node jobs perform well.		Internally inside the cluster, the compute nodes and the[[Filesystems \| Lustre filesystem]] are linked by OmniPath, a high-speed, low-latency interconnect, which is what lets the parallel filesystem and multi-node jobs perform well.

	From outside, the cluster services are reached through two loadbalancers, which are connected to the internet over 100Gbit links.		From outside, the cluster services are reached through two loadbalancers, which are connected to the internet over 100Gbit links.
Line 13:		Line 13:
	== Authentication ==		== Authentication ==

	~~You log in with your~~ WUR ~~or outside group~~ account~~. For stronger protection you can add multi-factor authentication~~ to your SSH access using a hardware security key — see [[Using a hardware key for better security]]. You can also configure key-based login so you are not prompted for a password each time; see [[Ssh without password]].		Anunna is public facing, servicing organisation withing and outside of the WUR but access requires an account to be activated by the HPC admins.

	If you use the wrong credentials, your access ~~will~~ be blocked, see [[Unblocking your IP]]		Users from the WUR can request an account and once the account is activated, they can login with the same credentials as their WUR account.

			In a similar fashion, organisations outside of the WUR can request submit account requests to the admins. Once the account is created, the users receive an email with their login details, which they are advised to change when first logging in.

			For stronger protection you can add multi-factor authentication to your SSH access using a hardware security key — see [[Using a hardware key for better security]]. You can also configure key-based login so you are not prompted for a password each time; see [[Ssh without password]].

			If you use the wrong credentials, your access may be blocked, see [[Unblocking your IP]]

	== Data security ==		== Data security ==

Haars001 at 12:00, 14 July 2026

2026-07-14T12:00:29Z

← Older revision		Revision as of 12:00, 14 July 2026
Line 15:		Line 15:
	You log in with your WUR or outside group account. For stronger protection you can add multi-factor authentication to your SSH access using a hardware security key — see [[Using a hardware key for better security]]. You can also configure key-based login so you are not prompted for a password each time; see [[Ssh without password]].		You log in with your WUR or outside group account. For stronger protection you can add multi-factor authentication to your SSH access using a hardware security key — see [[Using a hardware key for better security]]. You can also configure key-based login so you are not prompted for a password each time; see [[Ssh without password]].

	If you use the wrong credentials, your access will be blocked.		If you use the wrong credentials, your access will be blocked, see [[Unblocking your IP]]

	== Data security ==		== Data security ==
Line 27:		Line 27:
	* [[Cluster Architecture Overview]]		* [[Cluster Architecture Overview]]
	* [[Log in to Anunna]]		* [[Log in to Anunna]]
			* [[Unblocking your IP]]
	* [[Using a hardware key for better security]]		* [[Using a hardware key for better security]]
	* [[Filesystems]]		* [[Filesystems]]

Haars001 at 11:53, 14 July 2026

2026-07-14T11:53:58Z

← Older revision		Revision as of 11:53, 14 July 2026
Line 5:		Line 5:
	== Network ==		== Network ==

	Internally, the compute nodes and the [[Filesystems \| Lustre filesystem]] are linked by a high-speed, low-latency interconnect, which is what lets the parallel filesystem and multi-node jobs perform well. ~~<!-- TODO: confirm the current interconnect (Omnipath and/or InfiniBand) and topology — keep in sync with Cluster Architecture Overview. -->~~		Internally inside the cluster, the compute nodes and the[[Filesystems \| Lustre filesystem]] are linked by a high-speed, low-latency interconnect, which is what lets the parallel filesystem and multi-node jobs perform well.

	From outside, the cluster services are reached through two loadbalancers. SSH to <code>login.anunna.wur.nl</code>, other services to their respective URLs . Access to some services ~~may be~~ restricted to certain IP ranges, and are thus are only reachable over the WUR VPN or from within WURNET. See [[Log in to Anunna]] for how to connect.		From outside, the cluster services are reached through two loadbalancers, which are connected to the internet over 100Gbit links.

			SSH to access <code>login.anunna.wur.nl</code>, other services can be reached through their respective URLs. Access to some services are restricted to certain IP ranges, and are thus are only reachable over the WUR VPN or from within WURNET. See [[Log in to Anunna]] for how to connect.

	== Authentication ==		== Authentication ==

	You log in with your WUR or outside group account. For stronger protection you can add multi-factor authentication to your SSH access using a hardware security key — see [[Using a hardware key for better security]]. You can also configure key-based login so you are not prompted for a password each time; see [[Ssh without password]].		You log in with your WUR or outside group account. For stronger protection you can add multi-factor authentication to your SSH access using a hardware security key — see [[Using a hardware key for better security]]. You can also configure key-based login so you are not prompted for a password each time; see [[Ssh without password]].

			If you use the wrong credentials, your access will be blocked.

	== Data security ==		== Data security ==

Haars001 at 08:07, 19 June 2026

2026-06-19T08:07:37Z

← Older revision		Revision as of 08:07, 19 June 2026
Line 7:		Line 7:
	Internally, the compute nodes and the [[Filesystems \| Lustre filesystem]] are linked by a high-speed, low-latency interconnect, which is what lets the parallel filesystem and multi-node jobs perform well. <!-- TODO: confirm the current interconnect (Omnipath and/or InfiniBand) and topology — keep in sync with Cluster Architecture Overview. -->		Internally, the compute nodes and the [[Filesystems \| Lustre filesystem]] are linked by a high-speed, low-latency interconnect, which is what lets the parallel filesystem and multi-node jobs perform well. <!-- TODO: confirm the current interconnect (Omnipath and/or InfiniBand) and topology — keep in sync with Cluster Architecture Overview. -->

	From outside, the cluster is reached ~~over~~ SSH at <code>login.anunna.wur.nl</code> ~~(TCP port 22)~~. Access may be restricted to certain IP ranges, and ~~some services~~ are only reachable over the WUR VPN. See [[Log in to Anunna]] for how to connect.		From outside, the cluster services are reached through two loadbalancers. SSH to <code>login.anunna.wur.nl</code>, other services to their respective URLs . Access to some services may be restricted to certain IP ranges, and are thus are only reachable over the WUR VPN or from within WURNET. See [[Log in to Anunna]] for how to connect.

	== Authentication ==		== Authentication ==

	You log in with your WUR account. For stronger protection you can add multi-factor authentication to your SSH access using a hardware security key — see [[Using a hardware key for better security]]. You can also configure key-based login so you are not prompted for a password each time; see [[Ssh without password]].		You log in with your WUR or outside group account. For stronger protection you can add multi-factor authentication to your SSH access using a hardware security key — see [[Using a hardware key for better security]]. You can also configure key-based login so you are not prompted for a password each time; see [[Ssh without password]].

	== Data security ==		== Data security ==

Haars001: Phase 2 P2.2: new § 1 page (skeleton) — network + access security; verifiable content + TODO for data-security policy and interconnect (via create-page on MediaWiki MCP Server)

2026-06-18T11:11:30Z

Phase 2 P2.2: new § 1 page (skeleton) — network + access security; verifiable content + TODO for data-security policy and interconnect (via create-page on MediaWiki MCP Server)

New page

This page describes how Anunna is connected and how access to it is secured.

== Network ==

Internally, the compute nodes and the [[Filesystems | Lustre filesystem]] are linked by a high-speed, low-latency interconnect, which is what lets the parallel filesystem and multi-node jobs perform well. 

From outside, the cluster is reached over SSH at <code>login.anunna.wur.nl</code> (TCP port 22). Access may be restricted to certain IP ranges, and some services are only reachable over the WUR VPN. See [[Log in to Anunna]] for how to connect.

== Authentication ==

You log in with your WUR account. For stronger protection you can add multi-factor authentication to your SSH access using a hardware security key — see [[Using a hardware key for better security]]. You can also configure key-based login so you are not prompted for a password each time; see [[Ssh without password]].

== Data security ==



For how file and folder permissions work on the cluster, see [[Shared folders]]. For storing confidential data, contact the HPC team via [[Support]].

== See also ==

* [[Cluster Architecture Overview]]
* [[Log in to Anunna]]
* [[Using a hardware key for better security]]
* [[Filesystems]]