Network

Network access to the nodes of the cluster is limited to the minimum to bolster security.

Outgoing Traffic

All nodes can reach the ETH network and internet without restrictions.

Incoming Traffic

Connections to systems is limited as follows:

System	Ports/Service	ETH Network	Internet
`student-files.inf.ethz.ch`	SMB	YES	NO (use VPN)
`student-cluster.inf.ethz.ch`	SSH	YES	YES
`student-jupyter.inf.ethz.ch`	HTTPS	YES	YES
All GPU nodes	8800-8899	YES	NO (use VPN)
All CPU nodes	-	-	-

Applications with Web UI

For access to Jupyter use the Jupyter Hub at https://student-jupyter.inf.ethz.ch and follow the instructions for how to set up Jupyter in your home directory.

If you run an application that provides a web interface then use a free port from the range of 8800 to 8899. To find a free port you an use the following tool on a node:

/cluster/tools/bin/free-port

This will print out a free port number that is not in use right now. On single user nodes like thew gb10 systems the ports are always free.

If your application provides a web interface it will be accessible by anyone in the ETH network. At the very least make sure that you use authentication if available. For added privacy also enable SSL/TLS.