ocata版本openstack防火墙

作者：【吴业亮】云计算开发工程师
博客：http://blog.csdn.net/wylfengyujiancheng

1、rabbitmq

# firewall-cmd --add-port={11211/tcp,5672/tcp} --permanent 
# firewall-cmd --reload

2、ntp

# firewall-cmd --add-service=ntp --permanent 

3、mysql

# firewall-cmd --add-service=mysql --permanent 

4、keystone

# firewall-cmd --add-port={5000/tcp,35357/tcp} --permanent

5、glance

# firewall-cmd --add-port={9191/tcp,9292/tcp} --permanent

6、nova

# firewall-cmd --add-port={6080/tcp,8774/tcp,8775/tcp,8778/tcp} --permanent

7、neutron

# firewall-cmd --add-port=9696/tcp --permanent

8、horizon

# firewall-cmd --add-service={http,https} --permanent

9、cinder
controller

# firewall-cmd --add-port=8776/tcp --permanent

storage node

# firewall-cmd --add-service=iscsi-target --permanent

10、swift
controller

# firewall-cmd --add-port=8080/tcp --permanent

storage node

# firewall-cmd --add-port={873/tcp,6200/tcp,6201/tcp,6202/tcp} --permanent

11、heat

# firewall-cmd --add-port={8000/tcp,8004/tcp} --permanent

12、manila

# firewall-cmd --add-port=8786/tcp --permanent

Storage Node

# firewall-cmd --add-service=nfs --permanent

13、Barbican

# firewall-cmd --add-port=9311/tcp --permanent