diff --git a/puppet/services/nova-libvirt.yaml b/puppet/services/nova-libvirt.yaml index f777f55dcd..6688d20536 100644 --- a/puppet/services/nova-libvirt.yaml +++ b/puppet/services/nova-libvirt.yaml @@ -209,6 +209,8 @@ outputs: nova::compute::libvirt::qemu::configure_qemu: true nova::compute::libvirt::qemu::max_files: 32768 nova::compute::libvirt::qemu::max_processes: 131072 + nova::migration::qemu::migration_port_min: 61152 + nova::migration::qemu::migration_port_max: 61215 nova::compute::libvirt::vncserver_listen: str_replace: template: @@ -220,7 +222,7 @@ outputs: '200 nova_libvirt': dport: - 16514 - - '49152-49215' + - '61152-61215' - '5900-6923' - diff --git a/releasenotes/notes/live_migration_port_range-54c28faf0a67a3fc.yaml b/releasenotes/notes/live_migration_port_range-54c28faf0a67a3fc.yaml new file mode 100644 index 0000000000..d9b71a4945 --- /dev/null +++ b/releasenotes/notes/live_migration_port_range-54c28faf0a67a3fc.yaml @@ -0,0 +1,11 @@ +--- +fixes: + - | + By default, libvirtd uses ports from 49152 to 49215 for live-migration + as specified in qemu.conf, that becomes a subset of ephemeral ports + (from 32768 to 61000) used by many linux kernels. + The issue here is that these ephemeral ports are used for outgoing TCP + sockets. And live-migration might fail, if there are no port available + from the specified range. + Moving the port range out of ephemeral port range to be used only for + live-migration.