Open VXLAN udp port

As we have no way knowing what ips the tunnel interfaces have we just
open the VXLAN udp port for all.

Closes-Bug: rhbz#1100993
Change-Id: Ide1b69c89dedcae2a054772a69009603cf3003cd
This commit is contained in:
Lukas Bezdicka
2014-06-05 20:13:58 +02:00
committed by Martin Magr
parent d666b3b7fc
commit 2fcc880bda

View File

@@ -755,14 +755,12 @@ def create_manifests(config, messages):
else:
config['FIREWALL_PROTOCOL'] = 'gre'
tunnel_port = 'undef'
for f_host in q_hosts:
config['FIREWALL_ALLOWED'] = "'%s'" % f_host
config['FIREWALL_SERVICE_NAME'] = "neutron tunnel port"
config['FIREWALL_SERVICE_ID'] = ("neutron_tunnel_%s_%s"
% (host, f_host))
config['FIREWALL_PORTS'] = tunnel_port
config['FIREWALL_CHAIN'] = "INPUT"
manifest_data += getManifestTemplate('firewall.pp')
config['FIREWALL_ALLOWED'] = "'ALL'"
config['FIREWALL_SERVICE_NAME'] = "neutron tunnel port"
config['FIREWALL_SERVICE_ID'] = ("neutron_tunnel")
config['FIREWALL_PORTS'] = tunnel_port
config['FIREWALL_CHAIN'] = "INPUT"
manifest_data += getManifestTemplate('firewall.pp')
appendManifestFile(manifest_file, manifest_data, 'neutron')