The SDSC Satellite Reverse Proxy Service for Launching Secure Jupyter Notebooks on High-Performance Computing Systems

TL;DR

The paper introduces the SDSC Satellite Proxy Service, a secure reverse proxy solution that enables safe, token-authenticated access to Jupyter Notebooks on high-performance computing systems, enhancing security and usability.

Contribution

It presents a novel reverse proxy service that simplifies secure access to Jupyter Notebooks in HPC environments, addressing key security challenges.

Findings

Provides secure token-authenticated HTTPS access

Reduces security risks associated with Jupyter in HPC

Simplifies user access with a single URL

Abstract

Using Jupyter notebooks in an HPC environment exposes a system and its users to several security risks. The Satellite Proxy Service, developed at SDSC, addresses many of these security concerns by providing Jupyter Notebook servers with a token-authenticated HTTPS reverse proxy through which end users can access their notebooks securely with a single URL copied and pasted into their web browser.