openstack/openstack-manuals
Code Issues Proposed changes
bf0d3f65d7
openstack-manuals/doc/admin-guide-cloud/source/compute-default-ports.rst
Joseph Robinson 8e9507bf9a Moving .rst format files to main admin-guide-cloud folder 
This change moves the .rst files into the main adming-guide-cloud
folder now conversion is complete. changes to the project config
and to the openstack manuals to stop sync of .xml files
are also needed.

Change-Id: I498e8d6ac3cb80da413e23b14a0959abd58e7d79
Implements: blueprint reorganise-user-guides
2015-08-21 09:37:08 +02:00

1.1 KiB
Raw Blame History

Compute service node firewall requirements

Console connections for virtual machines, whether direct or through a proxy, are received on ports 5900 to 5999. The firewall on each Compute service node must allow network traffic on these ports.

This procedure modifies the iptables firewall to allow incoming connections to the Compute services.

Configuring the service-node firewall

  1. Log in to the server that hosts the Compute service, as root.

  2. Edit the /etc/sysconfig/iptables file, to add an INPUT rule that allows TCP traffic on ports from 5900 to 5999. Make sure the new rule appears before any INPUT rules that REJECT traffic:

    -A INPUT -p tcp -m multiport --dports 5900:5999 -j ACCEPT

  3. Save the changes to /etc/sysconfig/iptables file, and restart the iptables service to pick up the changes:

    $ service iptables restart

  4. Repeat this process for each Compute service node.