Re: firewall questions

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Thu, 21 May 2015, Ken Dreyer wrote:
> On 05/20/2015 04:53 PM, Sage Weil wrote:
> >> 2. I talked recently with Sam about the possible ports an OSD could use,
> >> and our conversation made me think that our firewall docs for OSDs and
> >> MDSs might need to be updated: http://tracker.ceph.com/issues/11688
> >>
> >> Currently the docs say "calculate the number of OSDs or MDSs you're
> >> running and that will tell you what ports to open". That makes it hard
> >> to write a service definition for firewalld, since those are just a list
> >> of static ports.
> > 
> > Yeah, I'm afraid it should just be teh full range we allow... I think 
> > 6800-7100 by default?
> 
> src/common/config_opts.h from master says:
> 
>   OPTION(ms_bind_port_min, OPT_INT, 6800)
>   OPTION(ms_bind_port_max, OPT_INT, 7300)
> 
> I think that would mean we'd want to open 6800-7300 by default?
> 
> And for this firewalld service name, I was thinking of naming this
> 6800-7300 rule "ceph", since it encompasses both the OSD and MDS
> services. Does that name sound ok? (And I'd name the 6789 rule "ceph-mon".)

Yep, sounds good to me!

sage
--
To unsubscribe from this list: send the line "unsubscribe ceph-devel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html




[Index of Archives]     [CEPH Users]     [Ceph Large]     [Information on CEPH]     [Linux BTRFS]     [Linux USB Devel]     [Video for Linux]     [Linux Audio Users]     [Yosemite News]     [Linux Kernel]     [Linux SCSI]
  Powered by Linux