<html><body><p><font size="2">Hello Juri, Keith,</font><br><br><font size="2">thank you for your responses.</font><br><br><font size="2">The internal services communicate on the privileged ports, for backwards compatibility and firewall simplicity reasons. We can not just assume all nodes in the cluster are at the latest level.</font><br><br><font size="2">Running two services at the same port on different IP addresses could be an option to consider for co-existance of the GUI and another service on the same node.</font><br><font size="2">However we have not set up, tested nor documented such a configuration as of today. </font><br><br><font size="2">Currently the GUI service manages the iptables redirect bring up and tear down.</font><br><font size="2">If this would be managed externally it would be possible to bind services to specific ports based on specific IPs.</font><br><br><font size="2">In order to create custom redirect rules based on IP address it is necessary to instruct the GUI to </font><br><font size="2">- not check for already used ports when the GUI service tries to start up</font><br><font size="2">- don't create/destroy port forwarding rules during GUI service start and stop.</font><br><font size="2">This GUI behavior can be configured using the internal flag UPDATE_IPTABLES in the service configuration with the 5.0.1.2 GUI code level.</font><br><br><font size="2">The service configuration is not stored in the cluster configuration and may be overwritten during code upgrades, so these settings may have to be added again after an upgrade.</font><br><br><font size="2">See this KC link:</font><br><a href="https://www.ibm.com/support/knowledgecenter/en/STXKQY_5.0.1/com.ibm.spectrum.scale.v5r01.doc/bl1adv_firewallforgui.htm"><font size="2">https://www.ibm.com/support/knowledgecenter/en/STXKQY_5.0.1/com.ibm.spectrum.scale.v5r01.doc/bl1adv_firewallforgui.htm</font></a><br><br><font size="2" face="Arial">Mit freundlichen Grüßen / Kind regards</font><br><br><b><font face="Arial">Dr. Markus Rohwedder</font></b><br><br><font size="1" face="Arial">Spectrum Scale GUI Development</font><table border="0" cellspacing="0" cellpadding="0"><tr valign="top"><td class="small_font" width="600" colspan="4" valign="middle"><hr width="100%" size="2" align="left" style="color:#0055AA; "></td></tr>
<tr valign="top"><td class="small_font" width="600" colspan="4" valign="middle"><img width="1" height="1" src="cid:1__=8FBB0861DFAFE5508f9e8a93df938690918c8FB@" border="0" alt=""></td></tr>
<tr valign="top"><td class="inner" width="39" valign="middle"><font size="1" color="#0055AA" face="Arial">Phone:</font></td><td class="inner" width="157" valign="middle"><font size="1" color="#0055AA" face="Arial">+49 7034 6430190</font></td><td class="inner" width="246" valign="middle"><font size="1" color="#0055AA" face="Arial"> IBM Deutschland Research & Development</font></td><td width="158" rowspan="4" valign="middle"><div align="right"><img src="cid:2__=8FBB0861DFAFE5508f9e8a93df938690918c8FB@" width="158" height="40" align="bottom"></div></td></tr>
<tr valign="top"><td class="inner" width="39" valign="middle"><font size="1" color="#0055AA" face="Arial">E-Mail:</font></td><td class="inner" width="157" valign="middle"><font size="1" color="#0055AA" face="Arial">rohwedder@de.ibm.com</font></td><td class="inner" width="246" valign="middle"><font size="1" color="#0055AA" face="Arial"> Am Weiher 24</font></td></tr>
<tr valign="top"><td class="inner" width="39" valign="middle"><img width="1" height="1" src="cid:1__=8FBB0861DFAFE5508f9e8a93df938690918c8FB@" border="0" alt=""></td><td class="inner" width="157" valign="middle"><img width="1" height="1" src="cid:1__=8FBB0861DFAFE5508f9e8a93df938690918c8FB@" border="0" alt=""></td><td class="inner" width="246" valign="middle"><font size="1" color="#0055AA" face="Arial"> 65451 Kelsterbach</font></td></tr>
<tr valign="top"><td class="inner" width="39" valign="middle"><img width="1" height="1" src="cid:1__=8FBB0861DFAFE5508f9e8a93df938690918c8FB@" border="0" alt=""></td><td class="inner" width="157" valign="middle"><img width="1" height="1" src="cid:1__=8FBB0861DFAFE5508f9e8a93df938690918c8FB@" border="0" alt=""></td><td class="inner" width="246" valign="middle"><font size="1" color="#0055AA" face="Arial"> Germany</font></td></tr>
<tr valign="top"><td class="small_font" width="600" colspan="4" valign="middle"><hr width="100%" size="2" align="left" style="color:#0055AA; "></td></tr>
<tr valign="top"><td class="small_font" width="600" colspan="4" valign="middle"><img width="1" height="1" src="cid:1__=8FBB0861DFAFE5508f9e8a93df938690918c8FB@" border="0" alt=""></td></tr></table><br><img width="16" height="16" src="cid:3__=8FBB0861DFAFE5508f9e8a93df938690918c8FB@" border="0" alt="Inactive hide details for "Daniel Kidger" ---23.08.2018 12:13:36---Keith, I have another IBM customer who also wished to move"><font size="2" color="#424282">"Daniel Kidger" ---23.08.2018 12:13:36---Keith, I have another IBM customer who also wished to move Scale GUI's https ports. In their case</font><br><br><font size="2" color="#5F5F5F">From: </font><font size="2">"Daniel Kidger" <daniel.kidger@uk.ibm.com></font><br><font size="2" color="#5F5F5F">To: </font><font size="2">gpfsug-discuss@spectrumscale.org</font><br><font size="2" color="#5F5F5F">Cc: </font><font size="2">gpfsug-discuss@spectrumscale.org</font><br><font size="2" color="#5F5F5F">Date: </font><font size="2">23.08.2018 12:13</font><br><font size="2" color="#5F5F5F">Subject: </font><font size="2">Re: [gpfsug-discuss] Changing Web ports for the Spectrum Scale GUI</font><br><font size="2" color="#5F5F5F">Sent by: </font><font size="2">gpfsug-discuss-bounces@spectrumscale.org</font><br><hr width="100%" size="2" align="left" noshade style="color:#8091A5; "><br><br><br><font face="Arial">Keith,</font><br><font face="Arial"> </font><br><font face="Arial">I have another IBM customer who also wished to move Scale GUI's https ports.</font><br><font face="Arial">In their case because they had their own web based management interface on the same https port.</font><br><font face="Arial">Is this the same reason that you have?</font><br><font face="Arial">If so I wonder how many other sites have the same issue?</font><br><font face="Arial"> </font><br><font face="Arial">One workaround that was suggested at the time, was to add a second IP address to the node (piggy-backing on 'eth0').</font><br><font face="Arial">Then run the two different GUIs, one per IP address.</font><br><font face="Arial">Is this an option, albeit a little ugly?</font><br><font size="2">Daniel</font><br><font size="1"><br> </font><table border="0" cellspacing="0" cellpadding="0"><tr valign="top"><td width="3" valign="middle"><a href="https://www.youracclaim.com/user/danel-kidger" target="_blank"></a></td><td width="352" valign="middle"><a href="https://www.youracclaim.com/user/danel-kidger"><img src="cid:4__=8FBB0861DFAFE5508f9e8a93df938690918c8FB@" width="352" height="352" align="bottom" border="0"></a></td><td width="4" valign="middle"> </td><td width="4" valign="middle"> </td><td width="4" valign="middle"> </td><td width="225" valign="middle"><b><font face="Arial">Dr Daniel Kidger</font></b><font face="Arial"><br>IBM Technical Sales Specialist<br>Software Defined Solution Sales<br><br>+</font><font color="#5F5F5F" face="Verdana">44-(0)7818 522 266 </font><font color="#5F5F5F" face="Arial"><br>daniel.kidger@uk.ibm.com</font></td></tr></table><font size="2"> </font><br><font face="Arial"> </font><br><font face="Arial"> </font><br><font face="Arial">----- Original message -----<br>From: "Markus Rohwedder" <rohwedder@de.ibm.com><br>Sent by: gpfsug-discuss-bounces@spectrumscale.org<br>To: gpfsug main discussion list <gpfsug-discuss@spectrumscale.org><br>Cc:<br>Subject: Re: [gpfsug-discuss] Changing Web ports for the Spectrum Scale GUI<br>Date: Thu, Aug 23, 2018 9:51 AM<br> </font><p><font size="2" face="Arial">Hello Keith,</font><font face="Arial"><br></font><font size="2" face="Arial"><br>it is not so easy.</font><font face="Arial"><br></font><font size="2" face="Arial"><br>The GUI receives events from other scale components using the currently defined ports.<br>Changing the GUI ports will cause breakage in the GUI stack at several places (internal watchdog functions, interlock with health events, interlock with CES).<br>Therefore at this point there is no procedure to change this behaviour across all components.</font><font face="Arial"><br></font><font size="2" face="Arial"><br>Because the GUI service does not run as root. the GUI server does not serve the privileged ports 80 and 443 directly but rather 47443 and 47080.<br>Tweaking the ports in the server.xml file will only change the native ports that the GUI uses.<br>The GUI manages IPTABLES rules to forward ports 443 and 80 to 47443 and 47080. <br>If these ports are already used by another service, the GUI will not start up.</font><font face="Arial"><br></font><font size="2" face="Arial"><br>Making the GUI ports freely configurable is therefore not a strightforward change, and currently no on our roadmap.<br>If you want to emphasize your case as future development item, please let me know.</font><font face="Arial"><br></font><font size="2" face="Arial"><br>I would also be interested in:<br>> Scale version you are running<br>> Do you need port 80 or 443 as well?<br>> Would it work for you if the xCAT service was bound to a single IP address?</font><font face="Arial"><br></font><font size="2" face="Arial"><br>Mit freundlichen Grüßen / Kind regards</font><font face="Arial"><br></font><b><font face="Arial"><br>Dr. Markus Rohwedder</font></b><font face="Arial"><br></font><font size="1" face="Arial"><br>Spectrum Scale GUI Development</font><p><table border="0" cellspacing="0" cellpadding="0"><tr valign="top"><td width="600" colspan="4" valign="middle"><hr width="100%" size="2" align="left"></td></tr>
<tr valign="top"><td width="600" colspan="4" valign="middle"><img src="cid:1__=8FBB0861DFAFE5508f9e8a93df938690918c8FB@" width="1" height="1" align="bottom"></td></tr>
<tr valign="top"><td width="39" valign="middle"><font size="1" color="#0055AA" face="Arial">Phone:</font></td><td width="157" valign="middle"><font size="1" color="#0055AA" face="Arial">+49 7034 6430190</font></td><td width="246" valign="middle"><font size="1" color="#0055AA" face="Arial">IBM Deutschland Research & Development</font></td><td width="158" rowspan="4" valign="middle"><div align="right"><img src="cid:2__=8FBB0861DFAFE5508f9e8a93df938690918c8FB@" width="158" height="40" align="bottom"></div></td></tr>
<tr valign="top"><td width="39" valign="middle"><font size="1" color="#0055AA" face="Arial">E-Mail:</font></td><td width="157" valign="middle"><font size="1" color="#0055AA" face="Arial">rohwedder@de.ibm.com</font></td><td width="246" valign="middle"><font size="1" color="#0055AA" face="Arial">Am Weiher 24</font></td></tr>
<tr valign="top"><td width="39" valign="middle"><img src="cid:1__=8FBB0861DFAFE5508f9e8a93df938690918c8FB@" width="1" height="1" align="bottom"></td><td width="157" valign="middle"><img src="cid:1__=8FBB0861DFAFE5508f9e8a93df938690918c8FB@" width="1" height="1" align="bottom"></td><td width="246" valign="middle"><font size="1" color="#0055AA" face="Arial">65451 Kelsterbach</font></td></tr>
<tr valign="top"><td width="39" valign="middle"><img src="cid:1__=8FBB0861DFAFE5508f9e8a93df938690918c8FB@" width="1" height="1" align="bottom"></td><td width="157" valign="middle"><img src="cid:1__=8FBB0861DFAFE5508f9e8a93df938690918c8FB@" width="1" height="1" align="bottom"></td><td width="246" valign="middle"><font size="1" color="#0055AA" face="Arial">Germany</font></td></tr>
<tr valign="top"><td width="600" colspan="4" valign="middle"><hr width="100%" size="2" align="left"></td></tr>
<tr valign="top"><td width="600" colspan="4" valign="middle"><img src="cid:1__=8FBB0861DFAFE5508f9e8a93df938690918c8FB@" width="1" height="1" align="bottom"></td></tr></table><font face="Arial"><br></font><img src="cid:3__=8FBB0861DFAFE5508f9e8a93df938690918c8FB@" width="16" height="16" alt="Inactive hide details for Keith Ball ---22.08.2018 21:33:25---Hello All, Does anyone know how to change the HTTP ports for the "><font size="2" color="#424282" face="Arial">Keith Ball ---22.08.2018 21:33:25---Hello All, Does anyone know how to change the HTTP ports for the Spectrum Scale GUI?</font><font face="Arial"><br></font><font size="2" color="#5F5F5F" face="Arial"><br>From: </font><font size="2" face="Arial">Keith Ball <bipcuds@gmail.com></font><font size="2" color="#5F5F5F" face="Arial"><br>To: </font><font size="2" face="Arial">gpfsug-discuss@spectrumscale.org</font><font size="2" color="#5F5F5F" face="Arial"><br>Date: </font><font size="2" face="Arial">22.08.2018 21:33</font><font size="2" color="#5F5F5F" face="Arial"><br>Subject: </font><font size="2" face="Arial">[gpfsug-discuss] Changing Web ports for the Spectrum Scale GUI</font><font size="2" color="#5F5F5F" face="Arial"><br>Sent by: </font><font size="2" face="Arial">gpfsug-discuss-bounces@spectrumscale.org</font><font face="Arial"> </font><hr width="100%" size="2" align="left"><font face="Arial"><br><br><br>Hello All,<br><br>Does anyone know how to change the HTTP ports for the Spectrum Scale GUI? Any documentation or RedPaper I have found deftly avoids discussing this. The most promising thing I see is in /opt/ibm/wlp/usr/servers/gpfsgui/server.xml:<br><br> <httpEndpoint id="defaultHttpEndpoint" host="*" httpPort="47080" httpsPort="47443"><br> <tcpOptions soReuseAddr="true"/><br> </httpEndpoint><br><br>but it appears that port 80 specifically is used also by the GUI's Web service. I already have an HTTP server using port 80 for provisioning (xCAT), so would rather change the Specturm Scale GUI configuration if I can.<br><br>Many Thanks,<br> Keith</font><tt><br>_______________________________________________<br>gpfsug-discuss mailing list<br>gpfsug-discuss at spectrumscale.org</tt><tt><u><font color="#0000FF"><br></font></u></tt><a href="http://gpfsug.org/mailman/listinfo/gpfsug-discuss" target="_blank"><tt><u><font color="#0000FF">http://gpfsug.org/mailman/listinfo/gpfsug-discuss</font></u></tt></a><font face="Arial"><br><br><br> </font><br><tt><font size="2">_______________________________________________<br>gpfsug-discuss mailing list<br>gpfsug-discuss at spectrumscale.org</font></tt><tt><u><font size="2" color="#0000FF"><br></font></u></tt><a href="http://gpfsug.org/mailman/listinfo/gpfsug-discuss" target="_blank"><tt><u><font size="2" color="#0000FF">http://gpfsug.org/mailman/listinfo/gpfsug-discuss</font></u></tt></a><br><font face="Arial"> </font><br>Unless stated otherwise above:<br>IBM United Kingdom Limited - Registered in England and Wales with number 741598. <br>Registered office: PO Box 41, North Harbour, Portsmouth, Hampshire PO6 3AU<br><tt><font size="2">_______________________________________________<br>gpfsug-discuss mailing list<br>gpfsug-discuss at spectrumscale.org<br></font></tt><tt><font size="2"><a href="http://gpfsug.org/mailman/listinfo/gpfsug-discuss">http://gpfsug.org/mailman/listinfo/gpfsug-discuss</a></font></tt><tt><font size="2"><br></font></tt><br><br><BR>
</body></html>