[Bugs] [Bug 1371633] New: mop off the glusterfs firewall service

bugzilla at redhat.com bugzilla at redhat.com
Tue Aug 30 16:58:11 UTC 2016


https://bugzilla.redhat.com/show_bug.cgi?id=1371633

            Bug ID: 1371633
           Summary: mop off the glusterfs firewall service
           Product: GlusterFS
           Version: mainline
         Component: glusterd
          Assignee: bugs at gluster.org
          Reporter: prasanna.kalever at redhat.com
                CC: bugs at gluster.org



Description of problem:
Currently glusterfs firewall service is created if firewalld installed.

It creates glusterfs firewall service during installation. 

glusterfs service : It contains all default ports which needs to be opened.

During installation  glusterfs.xml is copied into firewall service
directory(/usr/lib/firewalld/services/).

This is what currently happens:
    1.For bricks: It opens the 512 ports, if brick is running out side this
range(>49664) then admin need to open the port
    for that brick.
    2.By default this service is not enabled in any of zone.

    To enable this service(glusterfs) in firewall:

    1. Get active zone(s) in node
         firewall-cmd  --get-active-zones

    2. Attached this service(glusterfs) to zone(s)
       firewall-cmd  --zone=<zone_name>  --add-service=glusterfs              
--To apply runtime
       firewall-cmd  --permanent  --zone=<zone_name>  --add-service=glusterfs 
--To apply permanent



This mechanism for opening ports for firewall is no more needed with the new
port map architecture, hence we need to mop this off.


Version-Release number of selected component (if applicable):
mainline

-- 
You are receiving this mail because:
You are on the CC list for the bug.
You are the assignee for the bug.


More information about the Bugs mailing list