From 3b0b6dadd0e8d3b744a73361aa6e43070be7b724 Mon Sep 17 00:00:00 2001 From: Don Domingo Date: Mon, 3 Feb 2014 16:49:33 +1000 Subject: [PATCH] Added XML files for default ports sect and tables This patch adds XML files for: - brief overview of firewall configuration - table listing ports used by main openstack components - table listing ports used by other services required by OpenStack The resulting section will be added as an appendix to the Config Ref Guide. Change-Id: Ib7edf8f827cd0c31c51a9cbdaff475384960c7ee Related-Bug: #1261617 --- doc/config-reference/app_firewalls-ports.xml | 23 ++++ doc/config-reference/bk-config-ref.xml | 33 +++--- ...able_default-ports-peripheral-services.xml | 61 ++++++++++ .../table_default-ports-primary-services.xml | 112 ++++++++++++++++++ 4 files changed, 215 insertions(+), 14 deletions(-) create mode 100644 doc/config-reference/app_firewalls-ports.xml create mode 100644 doc/config-reference/table_default-ports-peripheral-services.xml create mode 100644 doc/config-reference/table_default-ports-primary-services.xml diff --git a/doc/config-reference/app_firewalls-ports.xml b/doc/config-reference/app_firewalls-ports.xml new file mode 100644 index 0000000000..495ccf49a9 --- /dev/null +++ b/doc/config-reference/app_firewalls-ports.xml @@ -0,0 +1,23 @@ + + + Firewalls and default ports + On some deployments, such as ones where restrictive + firewalls are in place, you might need to manually configure a + firewall to permit OpenStack service traffic. + To manually configure a firewall, you must permit traffic + through the ports that each OpenStack service uses. This table + lists the default ports that each OpenStack service + uses: + + To function properly, some OpenStack components depend on + other, non-OpenStack services. For example, the OpenStack + dashboard uses HTTP for non-secure communication. In this + case, you must configure the firewall to allow traffic to and + from HTTP. + This table lists the ports that other OpenStack components + use: + + diff --git a/doc/config-reference/bk-config-ref.xml b/doc/config-reference/bk-config-ref.xml index faf44516f5..f6313189f9 100644 --- a/doc/config-reference/bk-config-ref.xml +++ b/doc/config-reference/bk-config-ref.xml @@ -46,7 +46,8 @@ Removes content addressed in installation, merges duplicated - content, and revises legacy references. + content, and revises legacy + references. @@ -66,9 +67,11 @@ - Moves Block Storage driver configuration information - from the Block Storage Administration Guide - to this reference. + Moves Block Storage driver + configuration information from the + Block Storage + Administration Guide to + this reference. @@ -78,7 +81,8 @@ - Initial creation of Configuration Reference. + Initial creation of Configuration + Reference. @@ -86,21 +90,22 @@ - + - + - + - + - + - + - + - + + + - diff --git a/doc/config-reference/table_default-ports-peripheral-services.xml b/doc/config-reference/table_default-ports-peripheral-services.xml new file mode 100644 index 0000000000..9d1a3f0148 --- /dev/null +++ b/doc/config-reference/table_default-ports-peripheral-services.xml @@ -0,0 +1,61 @@ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Default ports that secondary services related to + OpenStack components use
ServiceDefault portUsed by
HTTP80OpenStack dashboard (Horizon) + when it is not configured to use secure + access.
HTTP alternate8080OpenStack Object Storage + (swift) service.
HTTPS443Any OpenStack service that is enabled for SSL, + especially secure-access dashboard.
rsync873OpenStack Object Storage. Required.
iSCSI target3260OpenStack Block Storage. Required.
MySQL database service3306Most OpenStack components.
Message Broker (AMQP traffic)5672OpenStack Block Storage, Networking, + Orchestration, and Compute.
+ diff --git a/doc/config-reference/table_default-ports-primary-services.xml b/doc/config-reference/table_default-ports-primary-services.xml new file mode 100644 index 0000000000..40794fd39e --- /dev/null +++ b/doc/config-reference/table_default-ports-primary-services.xml @@ -0,0 +1,112 @@ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Default ports that OpenStack components use
OpenStack serviceDefault portsPort type
Block Storage (cinder)8776publicurl and adminurl
Compute (nova) endpoints8774publicurl and adminurl
Compute API (nova-api)8773, 8775 +
Compute ports for access to virtual machine + consoles5900-5999 +
Compute VNC proxy for browsers ( + openstack-nova-novncproxy)6080
Compute VNC proxy for traditional VNC clients + (openstack-nova-xvpvncproxy)6081 +
Proxy port for HTML5 console used by Compute + service6082 +
Identity Service (keystone) + administrative endpoint35357adminurl
Identity Service public endpoint5000publicurl
Image Service (glance) API9292publicurl and adminurl
Image Service registry9191 +
Networking (neutron)9696publicurl and adminurl
Object Storage (swift)6000, 6001, 6002 +
Orchestration (heat) + endpoint8004publicurl and adminurl
Orchestration AWS CloudFormation-compatible API + (openstack-heat-api-cfn)8000 +
Orchestration AWS CloudWatch-compatible API + (openstack-heat-api-cloudwatch)8003 +
Telemetry (ceilometer)8777publicurl and adminurl
+