Argonne National Laboratory

Experimental Physics and
Industrial Control System

1994  1995  1996  1997  1998  1999  2000  2001  2002  2003  2004  2005  <20062007  2008  2009  2010  2011  2012  2013  2014  2015  2016  2017  Index 1994  1995  1996  1997  1998  1999  2000  2001  2002  2003  2004  2005  <20062007  2008  2009  2010  2011  2012  2013  2014  2015  2016  2017 
<== Date ==> <== Thread ==>

Subject: RE: TCP/UDP port for CA
From: "Jeff Hill" <johill@lanl.gov>
To: "'Sheng Peng'" <pengs@slac.stanford.edu>, <norume@aps.anl.gov>
Cc: "'Allison, Stephanie'" <saa@slac.stanford.edu>, "'Murray, Doug'" <drm@slac.stanford.edu>, "EPICS-tech-talk" <tech-talk@aps.anl.gov>
Date: Wed, 26 Apr 2006 17:17:19 -0600
Title: TCP/UDP port for CA

Of course, the advantage of using a non-standard port might be less likelihood of a test program or IOC making an inadvertent change to your operational system.

 

Now that firewalls and CA gateways are more common perhaps the risk is lower, but still very possible considering that at many sites users are routinely logged into computers that are behind the firewall.

 

I think that there would only be benefit if the typical log in state was set up to use the default port, and only a special operator login used the non-default port?

 

In the future I would like to see EPICS system complexity managed with domains. You might specify the non-default domain of the channel when you create a channel. Domains would be well isolated from each other, but gateways might be used to safely interconnect domains. Domains names instead of port numbers might also be much easier for the user.

 

So anyways, the number of gateway isolated domains {LINAC, RING, WHATEVER} might be a related issue (because at present if these domains share the same LAN (subnet) they will need to be accessed using unique port numbers).

 

Jeff

 


From: Sheng Peng [mailto:pengs@slac.stanford.edu]
Sent: Wednesday, April 26, 2006 11:21 AM
To: johill@lanl.gov; norume@aps.anl.gov
Cc: Allison, Stephanie; Murray, Doug
Subject: TCP/UDP port for CA

 

Hi,

There are environment variables thru which we can change the TCP/UDP ports used by CA.
EPICS_CA_REPEATER_PORT
EPICS_CA_SERVER_PORT

I saw someone had recommended to use the non-default port. I think I also saw someone on tech-talk to recommend using the default.

So what is your opnion?

Thanks.

Sheng


Navigate by Date:
Prev: RE: StripTool bogs down host? Chu, Paul C.
Next: RE: assert failed in db_post_single_event_private for CALC record Jeff Hill
Index: 1994  1995  1996  1997  1998  1999  2000  2001  2002  2003  2004  2005  <20062007  2008  2009  2010  2011  2012  2013  2014  2015  2016  2017 
Navigate by Thread:
Prev: RE: General lock question Jeff Hill
Next: R3.14 support for MIPS (hkbaja47) Matt Rippa
Index: 1994  1995  1996  1997  1998  1999  2000  2001  2002  2003  2004  2005  <20062007  2008  2009  2010  2011  2012  2013  2014  2015  2016  2017 
ANJ, 02 Sep 2010 Valid HTML 4.01! · Home · News · About · Base · Modules · Extensions · Distributions · Download ·
· EPICS V4 · IRMIS · Talk · Bugs · Documents · Links · Licensing ·