Open ports for mosh in firewall

[aneeshusa]

Mosh is now installed on our machines, but it requires UDP ports 60000-61000 to be opened. (It starts allocating ports per connection at 60000 and goes up, so we can also open fewer ports, e.g. 60000 - 60010).

I believe these are currently being filtered by the AWS network infrastructure (not iptables). Would it be possible to open these ports so mosh can be used?

[aneeshusa]

cc @edunham

[edunham]

AWS is now set to allow UDP 60000-61000 on servo-master.

[aneeshusa]

Thanks! mosh is installed on all of the machines, so can you open those ports on the builders as well?

[edunham]

Opened on the builders for now; eventually I'd like to switch to a model of accessing everything through a bastion host with better logging and detection of unusual access.