On Tue, Mar 29, 2011 at 04:27:38PM -0400, Jay Hacker wrote: > I'd like to be able to open just the required ports in my firewall. Typically, monitors are on TCP port 6789, but (especially when multiple are deployed on a single host, for testing) may also use 6789+n, up to how many monitors you have. Ultimately, it's whatever the config file says to listen on. Anything else will open (multiple!) ephemeral ports in the range 6800..6900, and register with the monitors. These constants are defined in src/include/msgr.h. For example, in my dev cluster, as created by vstart.sh, cosd binds to 3 dynamic ports. It seems there's supposed to be some support for configuring static ports to listen on, by putting something like this in the config file: [osd.0] public addr = 10.1.2.3:4567 But that definitely does not work, if you include the port (it tries to bind multiple sockets to the same static port). Using just the IP does let you pick what IP address the daemon uses. I filed ticket http://tracker.newdream.net/issues/957 about that. -- :(){ :|:&};: -- To unsubscribe from this list: send the line "unsubscribe ceph-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html