Execution Worker Access
An
Xpress Insight Execution Worker is an instance of the Mosel Remote Launcher program running on a local or remote machine. The default configuration sets this service to accept requests to execute models from any requestor using the correct protocol.
The
<installdir>/bin/xprmsrv.cfg file on the machine on which that the service is installed has several parameters for controlling the access and allowed operations as follows:
- XPRMSRV_ACCESS specifies which IP addresses are allowed when accepting connections from remote requestors.
- MOSEL_RESTR restricts what actions an executing model is allowed to perform (for example file I/O, shell commands, and so forth). The default is no restrictions.
Out of the box Xpress Insight will connect to the Execution Worker via TCP socket and will pass the data across this protocol in plain text. This can be secured by changing the connection string to use the xssh driver as opposed to the xsrv driver. This establishes a connection to the xprmsrv through an encrypted SSH tunnel. See the Adding or Editing an Execution Worker topic in http://www.fico.com/fico-xpress-optimization/docs/latest/insight_admin/index.html for details on how to do this.
 | Note By default the
xssh driver will use port 2515. This can be changed via the
SSH_PORT configuration parameter within the
xprmsrv.cfg file. Please ensure that any firewall rules are changed appropriately to allow remote access to this port.
|
For more information on the parameters in the configuration file of the Mosel Remote Launcher, see the information about Modules (mmjobs) in the Mosel Language Reference Manual.