ALL NPPS Members

[Torre Wenaus <wenaus AT gmail.com>]

Xin can probably relate npps0 setup to the machines like pandaserver02 which are inside the firewall but accessible after authentication? Then once you are authenticated it is transparent to use the service just like it was local, should work

ZjQcmQRYFpfptBannerStart

This Message Is From an External Sender

This message came from outside your organization.

 

ZjQcmQRYFpfptBannerEnd

Xin can probably relate npps0 setup to the machines like pandaserver02 which are inside the firewall but accessible after authentication? Then once you are authenticated it is transparent to use the service just like it was local, should work for ollama as it does for other things?

  Torre

On Wed, Sep 10, 2025 at 1:11 PM Ye, Shuwei <yesw AT bnl.gov> wrote:

Hi Torre,

By default, Ollama servers do not require authentication when running locally.

The machine currently is behind the BNL campus firewall, so its IP address is only visible to the BNL campus.

We can use a reverse proxy (such as Caddy or Ngnix) to secure Ollama behind a proxy.

--Shuwei

---

From: phys-npps-members-l-request AT lists.bnl.gov <phys-npps-members-l-request AT lists.bnl.gov> on behalf of Torre Wenaus <wenaus AT gmail.com>
Sent: Wednesday, September 10, 2025 12:57 PM
To: NPPS members <Phys-npps-members-l AT lists.bnl.gov>; Qian, Xin <xqian AT bnl.gov>; Yu, Haiwang <hyu AT bnl.gov>
Subject: Re: [[Phys-npps-members-l] ] Wed NPPS AI/ML agenda

 

I was just talking in the ePIC S&C meeting about how we're setting up npps0 as an LLM host people can use. The natural question of authentication came up. Can we put this machine behind the same federated authentication that the testbed

ZjQcmQRYFpfptBannerStart

This Message Is From an External Sender

This message came from outside your organization.

 

ZjQcmQRYFpfptBannerEnd

I was just talking in the ePIC S&C meeting about how we're setting up npps0 as an LLM host people can use. The natural question of authentication came up. Can we put this machine behind the same federated authentication that the testbed etc. are behind? (No I'm not going to open its use to the whole EIC community :-) And once we do authenticate can tools like Aider operate against it from anywhere, ie point to it as the model used? I assume so but good to have a solid answer.

  Torre

On Mon, Sep 8, 2025 at 8:51 AM Torre Wenaus <wenaus AT gmail.com> wrote:

Hi all,

A reminder of the agenda for this week's AI/ML focused NPPS meeting

• Standing agenda item - AI/ML news and tips. Add your news and tips!

• Updating the BNL HEP AI/ML vision (2021) - Xin Qian  

• Draft document:

Rucio MCP/RAG… and more - Cedric

AI/ML tools, assistants, infrastructure update - Shuwei

MCP in PanDA - Paul/Tadashi

MCP in the ePIC streaming workflow testbed - Torre

  Torre

--

-- Torre Wenaus, BNL NPPS Group Leader, ATLAS and ePIC experiments

-- BNL 510A 1-222 | 631-681-7892

--

-- Torre Wenaus, BNL NPPS Group Leader, ATLAS and ePIC experiments

-- BNL 510A 1-222 | 631-681-7892

--

-- Torre Wenaus, BNL NPPS Group Leader, ATLAS and ePIC experiments

-- BNL 510A 1-222 | 631-681-7892