Skip to main content

Firewall rules needed for Rocket's server

  • January 19, 2021
  • 4 replies
  • 0 views
A
Hi, 

Is it documented anywhere what addresses and ports we need open on our firewall to reach the conda servers (both free and paid for) at Rocket? I'll have to make a request and have it approved, and I really don't want to have to go through that pain more than once.. :-)

Thanks

------------------------------
Andy Styles
z/Series System Programmer
Lloyds Banking Group
------------------------------

    4 replies

    Alexander Klochkov
    Forum|alt.badge.img+1
    Hi, 

    Is it documented anywhere what addresses and ports we need open on our firewall to reach the conda servers (both free and paid for) at Rocket? I'll have to make a request and have it approved, and I really don't want to have to go through that pain more than once.. :-)

    Thanks

    ------------------------------
    Andy Styles
    z/Series System Programmer
    Lloyds Banking Group
    ------------------------------
    Hi Andy Styles,

    As I know you should allow outgoing to https(443) and http(80) ports.
    If you behind a company proxy check this link:
    https://docs.anaconda.com/anaconda/user-guide/tasks/proxy/

    Thanks,
    Alexander

    ------------------------------
    Alexander Klochkov
    Rocket Software
    ------------------------------
    Bruce Hewson
    Forum|alt.badge.img
    • Bruce Hewson
    • Participating Frequently
    • 11 replies
    • January 18, 2022
    Hi, 

    Is it documented anywhere what addresses and ports we need open on our firewall to reach the conda servers (both free and paid for) at Rocket? I'll have to make a request and have it approved, and I really don't want to have to go through that pain more than once.. :-)

    Thanks

    ------------------------------
    Andy Styles
    z/Series System Programmer
    Lloyds Banking Group
    ------------------------------
    Hello Andy/Alex,

    Did you get the rules sorted?

    I am now at the stage where I need to get through DNS/PROXY/FIREWALL.

    I get:-

    ITSXSA3:/u/itsxsa3: >host condaserver.rocketsoftware.com

    EZZ8342I condaserver.rocketsoftware.com: Unknown host



    I have seen where Alex says " allow outgoing to https(443) and http(80) ports."

    but no mention regarding connection protocols like TLS, SFTP, need for certificates. 
    Proxy servers are also involved.

    What protocols does CONDA use to retrieve files?

    etc.

    Regards
    Bruce



    ------------------------------
    Bruce Hewson
    Infra Tech Lead Analyst
    Citigroup Singapore Ltd
    Singapore SG
    ------------------------------
    Bruce Hewson
    Forum|alt.badge.img
    • Bruce Hewson
    • Participating Frequently
    • 11 replies
    • January 18, 2022
    Hello Andy/Alex,

    Did you get the rules sorted?

    I am now at the stage where I need to get through DNS/PROXY/FIREWALL.

    I get:-

    ITSXSA3:/u/itsxsa3: >host condaserver.rocketsoftware.com

    EZZ8342I condaserver.rocketsoftware.com: Unknown host



    I have seen where Alex says " allow outgoing to https(443) and http(80) ports."

    but no mention regarding connection protocols like TLS, SFTP, need for certificates. 
    Proxy servers are also involved.

    What protocols does CONDA use to retrieve files?

    etc.

    Regards
    Bruce



    ------------------------------
    Bruce Hewson
    Infra Tech Lead Analyst
    Citigroup Singapore Ltd
    Singapore SG
    ------------------------------
    What would be nice, I guess, is a script that can be run in our system prior to installing CONDA, that tests for the correct connectivity, and makes recommendations when problems are found.

    ------------------------------
    Bruce Hewson
    Infra Tech Lead Analyst
    Citigroup Singapore Ltd
    Singapore SG
    ------------------------------
    Alexander Klochkov
    Forum|alt.badge.img+1
    What would be nice, I guess, is a script that can be run in our system prior to installing CONDA, that tests for the correct connectivity, and makes recommendations when problems are found.

    ------------------------------
    Bruce Hewson
    Infra Tech Lead Analyst
    Citigroup Singapore Ltd
    Singapore SG
    ------------------------------

    Hi Bruce,
    We don't have any script like that...

    If you are behind a proxy, try these steps:
    1. download the latest miniconda from the customer portal
    2. upload and install it  (read miniconda doc how to do that) on your lpar, choose "N" when the installer asks for "Configure to use Rocket's secure conda server? [Y/n] " 
    3. after complete installation and all steps from doc run the following commands in cmd line:
    conda activate
    export https_proxy=https://user:password@yourproxy:proxyport

    in case if your proxy has SSL processing you also need to add your company or/and proxy certificate to the end of miniconda/ssl/cacert.pem

    after that, you can try to use conda via proxy

    e.g. :

    conda search curl -c https://conda.anaconda.org/zoss-appdev

    also, check the link above to docs.anaconda.com

    Thanks,

    Alexander



    ------------------------------
    Alexander Klochkov
    QA
    Rocket Internal - All Brands
    Vilnius LT
    ------------------------------


    Terms & ConditionsAccessibility statement