Merge "Modify libvirt port range for live-migration"

puppet/services/nova-libvirt.yaml

@@ -209,6 +209,8 @@ outputs:
             nova::compute::libvirt::qemu::configure_qemu: true
             nova::compute::libvirt::qemu::max_files: 32768
             nova::compute::libvirt::qemu::max_processes: 131072
+            nova::migration::qemu::migration_port_min: 61152
+            nova::migration::qemu::migration_port_max: 61215
             nova::compute::libvirt::vncserver_listen:
               str_replace:
                  template:
@@ -220,7 +222,7 @@ outputs:
               '200 nova_libvirt':
                 dport:
                   - 16514
-                  - '49152-49215'
+                  - '61152-61215'
                   - '5900-6923'
 
           -

releasenotes/notes/live_migration_port_range-54c28faf0a67a3fc.yaml

@@ -0,0 +1,11 @@
+---
+fixes:
+  - |
+    By default, libvirtd uses ports from 49152 to 49215 for live-migration
+    as specified in qemu.conf, that becomes a subset of ephemeral ports
+    (from 32768 to 61000) used by many linux kernels.
+    The issue here is that these ephemeral ports are used for outgoing TCP
+    sockets. And live-migration might fail, if there are no port available
+    from the specified range.
+    Moving the port range out of ephemeral port range to be used only for
+    live-migration.