diff --git a/puppet/services/designate-mdns.yaml b/puppet/services/designate-mdns.yaml
index bb0a934016..d2e7959ab0 100644
--- a/puppet/services/designate-mdns.yaml
+++ b/puppet/services/designate-mdns.yaml
@@ -82,6 +82,15 @@ outputs:
               query:
                 read_default_file: /etc/my.cnf.d/tripleo.cnf
                 read_default_group: tripleo
+          tripleo.designate_mdns.firewall_rules:
+            '142 designate_mdns udp':
+              proto: 'udp'
+              dport:
+                - 5354
+            '143 designate_mdns tcp':
+              proto: 'tcp'
+              dport:
+                - 5354
         -
           if:
           - designate_workers_zero