Recent changes to SecurityGroupSetup

Discussion for SecurityGroupSetup page

Joseph D — Thu, 04 Jun 2015 19:42:16 -0000

This error message is shown when using -> kl-create-sg mycluster
Client.InvalidParameterValue: Invalid security group description. Valid descriptions are strings less than 256 characters from the following set: a-zA-Z0-9. _-:/()#,@[]+=&;{}!$* (Service: AmazonEC2; Status Code: 400; Error Code: InvalidParameterValue; Request ID: 53793411-6c62-416a-9a24-8838e6abd89e)

Discussion for SecurityGroupSetup page

Tal Weiss — Thu, 18 Sep 2014 06:15:15 -0000

"Amazon's firewall setting are by default very restrictive", but in a good way. This security group is a tad too promiscuous...

WikiPage SecurityGroupSetup modified by Daniel Povey

Daniel Povey — Sun, 24 Mar 2013 00:14:16 -0000

--- v3
+++ v4
@@ -1,4 +1,4 @@
-# Setting up a security group
+## Setting up a security group

 Amazon's firewall setting are by default very restrictive.  You need to set up a "security group" that will allow all your machines to communicate with each other.  The "kluster" tools have a script that will do this for you.  Type `kl-create-sg mycluster`.  (Note: here, "mycluster" is an arbitrary name that you can change to whatever you want.)  You should see output like the following:

WikiPage SecurityGroupSetup modified by Daniel Povey

Daniel Povey — Fri, 22 Mar 2013 03:29:46 -0000

--- v2
+++ v3
@@ -20,4 +20,6 @@

     ec2-delete-group mycluster

+
 Next: [Creating a key-pair](CreatingKeyPair)
+Up: [Kluster Wiki](Home)

WikiPage SecurityGroupSetup modified by Daniel Povey

Daniel Povey — Wed, 20 Mar 2013 21:42:28 -0000

--- v1
+++ v2
@@ -20,4 +20,4 @@

     ec2-delete-group mycluster

-Next: [Creating a Debian Linux Instance](CreatingInstance)
+Next: [Creating a key-pair](CreatingKeyPair)

WikiPage SecurityGroupSetup modified by Daniel Povey

Daniel Povey — Wed, 20 Mar 2013 21:36:54 -0000

Setting up a security group

Amazon's firewall setting are by default very restrictive. You need to set up a "security group" that will allow all your machines to communicate with each other. The "kluster" tools have a script that will do this for you. Type kl-create-sg mycluster. (Note: here, "mycluster" is an arbitrary name that you can change to whatever you want.) You should see output like the following:

kl-create-sg  mycluster
/root/kluster-code2/bin/kl-create-sg: Creating security group mycluster
GROUP   sg-50de323b mycluster  Security group for cluster 'mycluster'
/root/kluster-code2/bin/kl-create-sg: Adding permissions for security group mycluster
GROUP           mycluster
PERMISSION      mycluster  ALLOWS  tcp 0   65535   FROM    USER        NAME mycluster         ingress
GROUP           mycluster
PERMISSION      mycluster  ALLOWS  udp 0   65535   FROM    USER        NAME mycluster    ingress
GROUP           mycluster
PERMISSION      mycluster  ALLOWS  icmp    -1  -1  FROM    USER        NAME mycluster     ingress
GROUP           mycluster
PERMISSION      mycluster  ALLOWS  tcp 22  22  FROM    CIDR    0.0.0.0/0   ingress

/root/kluster-code2/bin/kl-create-sg: Done adding permissions.

Look at the script bin/kl-create-sg and see what it is doing. It just has some very simple calls to commands such as ec2-create-group and ec2-authorize-group. If at some point you want to delete this security group, you can do so with

ec2-delete-group mycluster

Next: Creating a Debian Linux Instance