20 | | |
21 | | == What machines should run fedd == |
22 | | |
23 | | Under fedd version 2.0 or later, the experiment controller - the fedd that accepts user requests- may run on any machine. It will be asserting [http://fedd.isi.deterlab.net/trac/wiki/FeddAbout#GlobalIdentifiers:Three-levelNames three-level names] so it is intuitive to colocate a controller that will be asserting identities from a given testbed, but not required. Any host with a [http://fedd.isi.deterlab.net/trac/wiki/FeddAbout#GlobalIdentifiers:Fedids fedid] can assert them, of course. |
24 | | |
25 | | The following discussion applies to the access controllers running on emulab-style testbeds. |
26 | | |
27 | | Depending on what sorts of resources you intend to make available to |
28 | | others and what modifications you are willing to make to your testbed, |
29 | | you may choose to run a fedd access controller in different configurations, with |
30 | | functionality partitioned between users and boss. |
31 | | |
32 | | If you intend to allow an access controller to either create projects from whole cloth, |
33 | | or to modify the access rights of projects or keys of users, at least |
34 | | some of fedd will have to run on boss. You can choose to run a fedd |
35 | | install on boss only, or run the main instantiation of fedd on users and |
36 | | the project manipulation functionality on boss. This depends on your |
37 | | particular comfort level with outside access to boss. Fedd's local |
38 | | accesses are all encrypted and controlled via fedids, and potentially by |
39 | | SSL as well. |
40 | | |
41 | | If you intend to only allow federation through static projects, fedd |
42 | | can run entirely on users, and need only be installed there. |
43 | | |
44 | | Fedd also needs to run a modified ns2 parser to split experiments. |
45 | | DETER exports an interface to that parser at |
46 | | !https://users.isi.deterlab.net:23235 , and the simplest configuration |
47 | | choice is to simply make use of that service. Should you choose to get |
48 | | the patches from us and run your own modified ns2 parser, you would |
49 | | probably want to run that service on your ops node. |
50 | | |
51 | | The [FeddConfigExamples examples page] has a concrete set of example layouts and appropriate configurations. |