Skip to content

Firewall and Routing Information

Jump to bottom
kwrodarmer edited this page Jan 10, 2017 · 9 revisions

Firewall and Routing Information

The SRA Toolkit makes use of some network services at NCBI. The purpose of this page is to document connections, IP addresses, ports, and expectations.

Any tool that accesses a run by accession is likely to contact
"https://www.ncbi.nlm.nih.gov/Traces/names/names.cgi"
to request resolution of the raw accession into a URL. The exact URL returned depends upon the accession requested, and whether the run is public or protected (dbGaP). An example URL might be
"https://sra-download.ncbi.nlm.nih.gov/srapub/SRR000123".
When using ascp via prefetch, an example URL might be
"fasp://[email protected]:data/sracloud/srapub/SRR000002".

Servers

  1. dns1-ncbi.ncbi.nlm.nih.gov
  2. dns2-ncbi.ncbi.nlm.nih.gov
  3. ns2.nih.gov
  4. ns.nih.gov
  5. ns3.nih.gov
  6. www.ncbi.nlm.nih.gov
  7. sra-download.ncbi.nlm.nih.gov
  8. gap-download.ncbi.nlm.nih.gov
  9. ftp-trace.ncbi.nlm.nih.gov
  10. trace.ncbi.nlm.nih.gov
  11. eutils.ncbi.nlm.nih.gov

Ports

All tools will utilize some combination of the name servers for NCBI and NIH. They will of course need UDP and TCP ports for domain (53) to be open.

The general rule for SRA Toolkit tools is that they will use the https (443) port for TCP communications. One tool (test-sra) will make use of the http (80) port for testing, and one tool (prefetch) can make use of the ascp tool, which has its own usage requirements. ascp uses UDP ports 33001-33009 for data transfer.

During this period when we are still waiting for software in the field to be updated to https-compliant versions, our name server will be returning http URLs that will be refused by our servers, which helps us identify problems. For a short time, all SRA Toolkit tools may make use of both https and http for that reason.

Subnets

  • 130.14.0.0/16, netmask 255.255.0.0
  • 165.112.7.0/24, netmask 255.255.255.0
  • 165.112.9.0/24, netmask 255.255.255.0

IP Addresses

Many of the host-names mentioned above are load-balanced by NCBI DNS servers to multiple IP addresses.
** DISCLAIMER ** These addresses are subject to change.
Here are current resolutions:

www.ncbi.nlm.nih.gov

  • 130.14.29.110

sra-download.ncbi.nlm.nih.gov

  • 165.112.9.231
  • 165.112.9.232
  • 130.14.250.24
  • 130.14.250.25
  • 130.14.250.26
  • 130.14.250.27

gap-download.ncbi.nlm.nih.gov

  • 165.112.9.233
  • 165.112.9.234
  • 130.14.250.14
  • 130.14.250.15
  • 130.14.250.16
  • 130.14.250.17

ftp-trace.ncbi.nlm.nih.gov

used by test-sra

  • 165.112.9.228
  • 165.112.9.229
  • 165.112.9.230
  • 130.14.250.10
  • 130.14.250.11
  • 130.14.250.12
  • 130.14.250.13
  • 130.14.250.17

trace.ncbi.nlm.nih.gov

used by test-sra and ngs

  • 165.112.7.16
  • 130.14.29.113

eutils.ncbi.nlm.nih.gov

  • 130.14.29.110
Clone this wiki locally