openstack/openstack-ansible
Code Issues Proposed changes
e971e15997
openstack-ansible/doc/source/install-guide/configure-rabbitmq.rst
Amy Marrich 3d5cfda52b Update RabbitMQ install guide for correct ssl variable 
configure-rabbitmq.rst updated from rabbit_use_ssl to rabbitmq_use_ssl

Change-Id: I8cb3d584e7aef84264040db518e6ff0a3e2c1793
Closes-bug: #1541943
2016-02-04 11:28:03 -06:00

1.4 KiB
Raw Blame History

Home OpenStack-Ansible Installation Guide

Configuring RabbitMQ (optional)

RabbitMQ provides the messaging broker for various OpenStack services. The OpenStack-Ansible project configures a plaintext listener on port 5672 and a SSL/TLS encrypted listener on port 5671.

Customizing the RabbitMQ deployment is done within /etc/openstack_deploy/user_variables.yml.

Add a TLS encrypted listener to RabbitMQ

The OpenStack-Ansible project provides the ability to secure RabbitMQ communications with self-signed or user-provided SSL certificates. Refer to Securing services with SSL certificates for available configuration options.

Enable encrypted connections to RabbitMQ

SSL communication between various OpenStack services and RabbitMQ is controlled via the Ansible variable rabbitmq_use_ssl:

rabbitmq_use_ssl: true

Setting this variable to true will adjust the RabbitMQ port to 5671 (the default SSL/TLS listener port) and enable SSL connectivity between each OpenStack service and RabbitMQ.

Setting this variable to false will disable SSL encryption between OpenStack services and RabbitMQ. The plaintext port for RabbitMQ, 5672, will be used for all services.