diff options
| author | James Shubin <james@shubin.ca> | 2012-07-27 20:12:37 -0400 |
|---|---|---|
| committer | James Shubin <james@shubin.ca> | 2012-07-27 20:12:37 -0400 |
| commit | 35b338115cef478ed2baa1f4ca16e3652b45de7b (patch) | |
| tree | bb9a0f5e078bb0769ef15a6f92978974a19af6ff /manifests | |
| parent | ab471b49d7f8740177b399f3146c57668a5509b1 (diff) | |
| download | puppet-gluster-35b338115cef478ed2baa1f4ca16e3652b45de7b.tar.gz puppet-gluster-35b338115cef478ed2baa1f4ca16e3652b45de7b.tar.xz puppet-gluster-35b338115cef478ed2baa1f4ca16e3652b45de7b.zip | |
Cleaned up firewalling slightly.
Diffstat (limited to 'manifests')
| -rw-r--r-- | manifests/server.pp | 17 |
1 files changed, 12 insertions, 5 deletions
diff --git a/manifests/server.pp b/manifests/server.pp index fb33f7c..08b8958 100644 --- a/manifests/server.pp +++ b/manifests/server.pp @@ -91,12 +91,20 @@ class gluster::server( ############################################################################ # ACTION SOURCE DEST PROTO DEST SOURCE ORIGINAL # PORT PORT(S) DEST - # TODO: I've never seen anything connect on 24008. Is it ever used? - shorewall::rule { 'glusterd': + shorewall::rule { 'glusterd-management': rule => " - ACCEPT ${zone}:${source_ips} $FW tcp 24007:24008 + ACCEPT ${zone}:${source_ips} $FW tcp 24007 ", - comment => 'Allow incoming tcp:24007-24008 from each other glusterd or client.', + comment => 'Allow incoming tcp:24007 from each other glusterd or client.', + before => Service['glusterd'], + } + + # NOTE: used by rdma + shorewall::rule { 'glusterd-rdma': + rule => " + ACCEPT ${zone}:${source_ips} $FW tcp 24008 + ", + comment => 'Allow incoming tcp:24008 for rdma.' before => Service['glusterd'], } @@ -124,7 +132,6 @@ class gluster::server( #$nfs_endport = inline_template('<%= 38465+hosts.count %>') # XXX: is there one brick per server or two ? what does 'brick' mean in the context of open ports? #shorewall::rule { 'gluster-24000': # rule => " - # ACCEPT ${zone} $FW tcp 24007,24008 # ACCEPT ${zone} $FW tcp 24009:${endport} # ", # comment => 'Allow 24000s for gluster', |