documentation/docs/engineering-guide/nx_nomachine/design.md

NoMachine - Design

Remote Access (nx.psi.ch)

• The rules for merlin-nx and ra-nx are not managed by rama.psi.ch. They need to be setup "manually".
• Access to nx.psi.ch is only possible with PSI accounts (internal, external), no e-accounts, gac-, etc. are supported.

Security Policy

The remote access server must only give access to systems/nodes that are located in secured networks (i.e. networks that are not directly reachable from the PSI Intranet).

Agreed exception to this rules are the two login clusters:

• merlin-nx.psi.ch
• ra-nx.psi.ch

Access must only be granted to personal accounts.

Terminal Server

Nomachine Proxy

• The AD group svc-nx defines who can login to the nomachine proxy service
• The attached nodes only provide a minimal desktop with a browser but no additional tools

ra-nx

• ra-nx is administered by Ivano Talamo / Leonardo Sala

merlin-nx

• merlin-nx is administered by Marc Caubet