GBase 8a 防火墙端口

GBase 8a 开启防火墙的端口列表

组件名称	默认端口	端口协议类型	端口含义
GCluster	5258	TCP	Coordinator 集群节点对外提 供服务的端口
GNode	5050	TCP	Data 集群节点对外提供服务的端口
GCware	5918	TCP/UDP	gcware 节点间通讯端口
gcware	5919	TCP	外部连接 gcware 节点端口
syncServer	5288	TCP	syncServer 服务端口
GcrecoverMonit	6288	TCP	Gcrecover 服务端口
数据远程导出端口	16066-16166	TCP	数据远程导出端口（客户端开放）

防火墙命令：

# gcluster节点
firewall-cmd --permanent --add-rich-rule="rule family="ipv4" source address="192.168.140.68" port protocol="tcp" port="5258" accept"
firewall-cmd --permanent --add-rich-rule="rule family="ipv4" source address="192.168.140.69" port protocol="tcp" port="5258" accept"
firewall-cmd --permanent --add-rich-rule="rule family="ipv4" source address="192.168.140.70" port protocol="tcp" port="5258" accept"

# gnode节点
firewall-cmd --permanent --add-rich-rule="rule family="ipv4" source address="192.168.140.68" port protocol="tcp" port="5050" accept"
firewall-cmd --permanent --add-rich-rule="rule family="ipv4" source address="192.168.140.69" port protocol="tcp" port="5050" accept"
firewall-cmd --permanent --add-rich-rule="rule family="ipv4" source address="192.168.140.70" port protocol="tcp" port="5050" accept"

# gcware节点(节点之间互相)
firewall-cmd --permanent --add-rich-rule="rule family="ipv4" source address="192.168.140.68" port protocol="tcp" port="5918" accept"
firewall-cmd --permanent --add-rich-rule="rule family="ipv4" source address="192.168.140.69" port protocol="tcp" port="5918" accept"
firewall-cmd --permanent --add-rich-rule="rule family="ipv4" source address="192.168.140.70" port protocol="tcp" port="5918" accept"
# gcware 有两种协议
firewall-cmd --permanent --add-rich-rule="rule family="ipv4" source address="192.168.140.68" port protocol="udp" port="5918" accept"
firewall-cmd --permanent --add-rich-rule="rule family="ipv4" source address="192.168.140.69" port protocol="udp" port="5918" accept"
firewall-cmd --permanent --add-rich-rule="rule family="ipv4" source address="192.168.140.70" port protocol="udp" port="5918" accept"

# gcware节点(外部连接)
firewall-cmd --permanent --add-rich-rule="rule family="ipv4" source address="192.168.140.68" port protocol="tcp" port="5919" accept"
firewall-cmd --permanent --add-rich-rule="rule family="ipv4" source address="192.168.140.69" port protocol="tcp" port="5919" accept"
firewall-cmd --permanent --add-rich-rule="rule family="ipv4" source address="192.168.140.70" port protocol="tcp" port="5919" accept"

# syncServer服务
firewall-cmd --permanent --add-rich-rule="rule family="ipv4" source address="192.168.140.68" port protocol="tcp" port="5288" accept"
firewall-cmd --permanent --add-rich-rule="rule family="ipv4" source address="192.168.140.69" port protocol="tcp" port="5288" accept"
firewall-cmd --permanent --add-rich-rule="rule family="ipv4" source address="192.168.140.70" port protocol="tcp" port="5288" accept"

# GcRecover服务
firewall-cmd --permanent --add-rich-rule="rule family="ipv4" source address="192.168.140.68" port protocol="tcp" port="6268" accept"
firewall-cmd --permanent --add-rich-rule="rule family="ipv4" source address="192.168.140.69" port protocol="tcp" port="6268" accept"
firewall-cmd --permanent --add-rich-rule="rule family="ipv4" source address="192.168.140.70" port protocol="tcp" port="6268" accept"

# 数据远程导出
firewall-cmd --permanent --add-rich-rule="rule family="ipv4" source address="192.168.140.68" port protocol="tcp" port="16066-16166" accept"
firewall-cmd --permanent --add-rich-rule="rule family="ipv4" source address="192.168.140.69" port protocol="tcp" port="16066-16166" accept"
firewall-cmd --permanent --add-rich-rule="rule family="ipv4" source address="192.168.140.70" port protocol="tcp" port="16066-16166" accept"