Hi.

I've just converted my standalone ovirt engine from iptables to firewalld.  The configuration of the internal zone includes:

  <service name="ssh"/>
  <service name="dhcpv6-client"/>
  <service name="http"/>
  <service name="https"/>
  <service name="postgresql"/>
  <service name="ovn-central-firewall-service"/>
  <service name="ovirt-provider-ovn"/>
  <port protocol="tcp" port="2222"/>
  <port protocol="tcp" port="6100"/>
  <port protocol="udp" port="7410"/>
  <port protocol="tcp" port="54323"/>

I'm wondering why the ovirt ports for 2222, 6100, 7410, and 54323 etc. aren't encapsulated in a service file installed by ovirt?  Is this because I had initially installed iptables?  I suspect the answer is no because on my ovirt hosts (which I also converted to firewalld), I was able to find all the proper service files:

 <service name="ssh"/>
  <service name="dhcpv6-client"/>
  <service name="cockpit"/>
  <service name="libvirt-tls"/>
  <service name="snmp"/>
  <service name="vdsm"/>
  <service name="ovirt-imageio"/>
  <service name="ovirt-vmconsole"/>
  <service name="ovn-host-firewall-service"/>
I'm also wondering whether ovirt will tell me if I go to upgrade any additional ports that need to be added for additional services?

Thanks!

Jason.
_______________________________________________
Users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/[email protected]/message/ONXBX36FOW6NASF6TKQELP35WA6PDTYU/

Reply via email to