596c8a8fbe
Editing the nested sections for the compute chapter. Mostly grammar, wording, style, convention, etc. This patch includes the final nested sections: system-admin, config-firewalls, and compute-pools. Change-Id: I6469364c37c23b57d66b0ddff754ddcb8e92bc28 Closes-Bug: #1251195
39 lines
1.7 KiB
XML
39 lines
1.7 KiB
XML
<?xml version="1.0" encoding="UTF-8"?>
|
|
<section xmlns="http://docbook.org/ns/docbook"
|
|
xmlns:xi="http://www.w3.org/2001/XInclude"
|
|
xmlns:xlink="http://www.w3.org/1999/xlink"
|
|
version="5.0"
|
|
xml:id="default_ports">
|
|
|
|
<title>Compute service node firewall requirements</title>
|
|
<para>Console connections for virtual machines, whether direct or through a
|
|
proxy, are received on ports <literal>5900</literal> to
|
|
<literal>5999</literal>. The firewall on each Compute service node must
|
|
allow network traffic on these ports.</para>
|
|
<para>This procedure modifies the <systemitem>iptables</systemitem> firewall
|
|
to allow incoming connections to the Compute services.</para>
|
|
<procedure>
|
|
<title>Configuring the service-node firewall</title>
|
|
<step>
|
|
<para>Log in to the server that hosts the Compute service, as
|
|
<systemitem>root</systemitem>.</para>
|
|
</step>
|
|
<step>
|
|
<para>Edit the <filename>/etc/sysconfig/iptables</filename> file, to add an
|
|
INPUT rule that allows TCP traffic on ports from
|
|
<literal>5900</literal> to <literal>5999</literal>. Make sure the new
|
|
rule appears before any INPUT rules that REJECT traffic:</para>
|
|
<programlisting language="ini">-A INPUT -p tcp -m multiport --dports 5900:5999 -j ACCEPT</programlisting>
|
|
</step>
|
|
<step>
|
|
<para>Save the changes to <filename>/etc/sysconfig/iptables</filename>,
|
|
and restart the <systemitem>iptables</systemitem> service to pick up
|
|
the changes:</para>
|
|
<screen><prompt>$</prompt> <userinput>service iptables restart</userinput></screen>
|
|
</step>
|
|
<step>
|
|
<para>Repeat this process for each Compute service node.</para>
|
|
</step>
|
|
</procedure>
|
|
</section>
|