[atlas] atlas on a public subnet

Thanks!
-James

-----Original Message-----
From: Robert Kisteleki [mailto:robert at ripe.net] 
Sent: Thursday, August 14, 2014 12:27 AM
To: James Sink; ripe-atlas at ripe.net
Subject: Re: [atlas] atlas on a public subnet

Hi,

On 2014.08.13. 18:15, James Sink wrote:
> 
> Hello all,
> I just received my atlas probe and am about to deploy it. 
> However I have a question about the subnet I am going to place it it on. 
> Is it safe to put it on an unfiltered public ip?

That depends on your definition of "safe" :-)

The probe does not have any open ports, it only makes outgoing connections.
This helps a lot being safe.

> If not what ACL should I place on the interface?

There's no problem with this. If you want to do this, then make sure all outgoing connections, as well as replies to these packets, can make it through. The probes work well behind NATs too, which have very similar effects in this regard.

Regards,
Robert

> Thanks
> 
> ---
> 
> James Sink
> Network Engineer
> P: 800-477-1477 x: 813
> 
> 
> 
>