Network & Security: Difference between revisions
Phase 2 P2.2: new § 1 page (skeleton) — network + access security; verifiable content + TODO for data-security policy and interconnect (via create-page on MediaWiki MCP Server) |
No edit summary |
||
| Line 7: | Line 7: | ||
Internally, the compute nodes and the [[Filesystems | Lustre filesystem]] are linked by a high-speed, low-latency interconnect, which is what lets the parallel filesystem and multi-node jobs perform well. <!-- TODO: confirm the current interconnect (Omnipath and/or InfiniBand) and topology — keep in sync with Cluster Architecture Overview. --> | Internally, the compute nodes and the [[Filesystems | Lustre filesystem]] are linked by a high-speed, low-latency interconnect, which is what lets the parallel filesystem and multi-node jobs perform well. <!-- TODO: confirm the current interconnect (Omnipath and/or InfiniBand) and topology — keep in sync with Cluster Architecture Overview. --> | ||
From outside, the cluster | From outside, the cluster services are reached through two loadbalancers. SSH to <code>login.anunna.wur.nl</code>, other services to their respective URLs . Access to some services may be restricted to certain IP ranges, and are thus are only reachable over the WUR VPN or from within WURNET. See [[Log in to Anunna]] for how to connect. | ||
== Authentication == | == Authentication == | ||
You log in with your WUR account. For stronger protection you can add multi-factor authentication to your SSH access using a hardware security key — see [[Using a hardware key for better security]]. You can also configure key-based login so you are not prompted for a password each time; see [[Ssh without password]]. | You log in with your WUR or outside group account. For stronger protection you can add multi-factor authentication to your SSH access using a hardware security key — see [[Using a hardware key for better security]]. You can also configure key-based login so you are not prompted for a password each time; see [[Ssh without password]]. | ||
== Data security == | == Data security == | ||
Latest revision as of 08:07, 19 June 2026
This page describes how Anunna is connected and how access to it is secured.
Network
Internally, the compute nodes and the Lustre filesystem are linked by a high-speed, low-latency interconnect, which is what lets the parallel filesystem and multi-node jobs perform well.
From outside, the cluster services are reached through two loadbalancers. SSH to login.anunna.wur.nl, other services to their respective URLs . Access to some services may be restricted to certain IP ranges, and are thus are only reachable over the WUR VPN or from within WURNET. See Log in to Anunna for how to connect.
Authentication
You log in with your WUR or outside group account. For stronger protection you can add multi-factor authentication to your SSH access using a hardware security key — see Using a hardware key for better security. You can also configure key-based login so you are not prompted for a password each time; see Ssh without password.
Data security
For how file and folder permissions work on the cluster, see Shared folders. For storing confidential data, contact the HPC team via Support.