第 1 章 为 Red Hat OpenStack Platform Director 配置防火墙规则
本文描述了 Red Hat OpenStack Platform 8 中控制器所需的网络端口。
service | 协议 | 端口 | 注 |
---|---|---|---|
mongodb_config | TCP | 27019 | mongodb_config |
mongodb_sharding | TCP | 27018 | mongodb_sharding |
mongodb | TCP | 27017 | MongoDB |
mysql_galera | TCP | 873 | MySQL |
mysql_galera | TCP | 3306 | |
mysql_galera | TCP | 3306 | |
mysql_galera | TCP | 4444 | |
mysql_galera | TCP | 4567 | |
mysql_galera | TCP | 4568 | |
mysql_galera | TCP | 9200 | galera-monitor |
ntp | UDP | 123 | NTP |
VRRP | VRRP | VRRP | |
haproxy_stats | TCP | 1993 | |
redis | TCP | 6379 | 内部服务协调 |
redis | TCP | 26379 | |
rabbitmq | TCP | 5672 | rabbitmq |
rabbitmq | TCP | 35672 | rabbitmq |
ceph | TCP | 6789 | |
ceph | TCP | 6800-6810 | |
keystone | TCP | 5000 | Keystone 公共 API |
keystone | TCP | 13000 | Keystone 公共 API (SSL) |
keystone | TCP | 35357 | Keystone Admin API |
keystone | TCP | 13357 | Keystone Admin API (SSL) |
Glance | TCP | 9292 | Glance API |
Glance | TCP | 9191 | Glance Registry API |
Glance | TCP | 13292 | Glance API (SSL) |
nova | TCP | 6080 | Nova novnc Proxy |
nova | TCP | 13080 | Nova novnc Proxy (SSL) |
nova | TCP | 8773 | Nova EC2 API |
nova | TCP | 3773 | Nova EC2 API (SSL) |
nova | TCP | 8774 | Nova API |
nova | TCP | 13774 | Nova API (SSL) |
nova | TCP | 8775 | Nova 元数据 |
neutron | TCP | 9696 | Neutron API |
neutron | TCP | 13696 | Neutron API (SSL) |
neutron_DHCP | TCP | 67 | 置备 Overcloud |
neutron_DHCP | UDP | 68 | |
neutron_vxlan | UDP | 4789 | VXLAN |
cinder | TCP | 8776 | Cinder API |
cinder | TCP | 13776 | Cinder API (SSL) |
iSCSI | TCP | 3260 | |
memcached | TCP | 11211 | |
Swift | TCP | 8080 | Swift 代理 |
Swift | TCP | 13808 | Swift 代理(SSL) |
Swift | TCP | 873 | Rsync |
Swift | TCP | 6000 | 对象服务器 |
Swift | TCP | 6001 | Container Server |
Swift | TCP | 6002 | 帐户服务器 |
ceilometer | TCP | 8777 | Ceilometer API |
ceilometer | TCP | 13777 | Ceilometer API (SSL) |
heat | TCP | 8000 | Heat AWS CloudFormation 兼容 API |
heat | TCP | 13800 | Heat AWS CloudFormation 兼容 API (SSL) |
heat | TCP | 8003 | Heat AWS CloudWatch 兼容 API |
heat | TCP | 13003 | Heat AWS CloudWatch 兼容 API (SSL) |
heat | TCP | 8004 | Heat API 端点 |
heat | TCP | 13004 | Heat API 端点(SSL) |
Horizon | TCP | 80 | Dashboard |
Horizon | TCP | 443 | Dashboard |
SNMP | UDP | 161 | ceilometer |
根据您的部署,可能还需要以下端口:
service | 协议 | 端口 | 注 |
---|---|---|---|
Ironic API | TCP | 6385 | |
Ironic API (SSL) | TCP | 13385 | |
Manila API 端口 | TCP | 8786 | |
Manila API Port (SSL) | TCP | 13786 | |
mistral API | TCP | 8989 | |
mistral API (SSL) | TCP | 13989 | |
Sahara API | TCP | 8386 | |
sahara API (SSL) | TCP | 13386 | |
Trove API | TCP | 8779 | |
Trove API (SSL) | TCP | 13779 | |
Zaqar API | TCP | 8888 | |
Zaqar API (SSL) | TCP | 13888 | |
Ceph RGW | TCP | 8080 | |
Ceph RGW (SSL) | TCP | 13808 | |
Zaqar Web Service | TCP | 9000 | |
barbican API | TCP | 9311 | |
barbican API (SSL) | TCP | 13311 | |
Docker Registry | TCP | 8787 | |
Docker Registry (SSL) | TCP | 13787 | |
Gnocchi API | TCP | 8041 | |
Gnocchi API (SSL) | TCP | 13041 |