allow remote connection conf in linux

Moderators: Site Moderators, FAHC Science Team

Post Reply
openaspace
Posts: 1
Joined: Sun Feb 09, 2020 4:43 pm

allow remote connection conf in linux

Post by openaspace »

Hello,
I'm running the client within virtualized system on my servers in a data center.
wich is the config string to allow the client to connect remotely to the fahcore?

thanks.
bruce
Posts: 20910
Joined: Thu Nov 29, 2007 10:13 pm
Location: So. Cal.

Re: allow remote connection conf in linux

Post by bruce »

Are you talking about the client downloading a FAHCore from a FAH server? FAHCient connects to the internet to download a fresh copy of a FAHCore if it can't find a local copy. It's only an issue if the connection is blocked by a firewall or if FAHClient can't write the FAHCore locally.

Incoming connections from other machines don't connect remotely to a FAHCore. The FAHCore is simply started by FAHClient with an appropriate set of parameters and then FAHClient waits for a Return Code.

All incoming remote connections are parsed by FAHClient.

FAHControl can manage multiple FAH clients on various remote IP clients from a single Windows machine. Configure them in the left Clients panel although disabling or bypassing the FAH security settings can be a bit of a pain.
gordonbb
Posts: 510
Joined: Mon May 21, 2018 4:12 pm
Hardware configuration: Ubuntu 22.04.2 LTS; NVidia 525.60.11; 2 x 4070ti; 4070; 4060ti; 3x 3080; 3070ti; 3070
Location: Great White North

Re: allow remote connection conf in linux

Post by gordonbb »

Add to config.xml one or both of:

Code: Select all

<!-- HTTP Server -->
  <allow v='127.0.0.1 192.168.1.0/24'/>

  <!-- Remote Command Server -->
  <command-allow-no-pass v='127.0.0.1 192.168.1.0/24'/>
Substituting the IP you will be connecting from for 192.168.1.0/24

The http service is for web Control on TCP port 7396 and the remote command server is for the Python Advanced Control or Telnet access on TCP port 36330

You will have to restart the FAHclient Service to get it to read the updated config.

Code: Select all

sudo service FAHClient restart
You may also have to adjust the firewall on the host to permit the traffic.

Code: Select all

telnet <IP Address> 36330
is a good way to test but the telnet client must be Unix friendly.

If your connecting from an external IP you will likely want to add a password but be aware as the remote command server uses telnet underneath passwords are sent in clear text so a SSH tunnel or VPN is preferred.
Image
Post Reply