Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

iptables changes for odcs, for new gluster.

Browse source
This commit is contained in:
Ralph Bean 2017-09-27 13:21:15 +00:00
parent 8449774d3d
commit 80ce4224d5
4 changed files with 24 additions and 10 deletions
Download patch file Download diff file Expand all files Collapse all files

7
inventory/group_vars/odcs-backend
View file

@ -9,9 +9,12 @@ freezes: false
tcp_ports: [ tcp_ports: [
3000, 3001, 3002, 3003, 3000, 3001, 3002, 3003,
3004, 3005, 3006, 3007, 3004, 3005, 3006, 3007,
# This port is required by gluster # These ports all required for gluster
6996, 111, 24007, 24008, 24009, 24010, 24011,
49152, 49153, 49154, 49155,
] ]
# Also for gluster.
udp_ports: [ 111 ]
# These people get told when something goes wrong. # These people get told when something goes wrong.
fedmsg_error_recipients: fedmsg_error_recipients:

7
inventory/group_vars/odcs-backend-stg
View file

@ -9,9 +9,12 @@ freezes: false
tcp_ports: [ tcp_ports: [
3000, 3001, 3002, 3003, 3000, 3001, 3002, 3003,
3004, 3005, 3006, 3007, 3004, 3005, 3006, 3007,
# This port is required by gluster # These ports all required for gluster
6996, 111, 24007, 24008, 24009, 24010, 24011,
49152, 49153, 49154, 49155,
] ]
# Also for gluster.
udp_ports: [ 111 ]
# These people get told when something goes wrong. # These people get told when something goes wrong.
fedmsg_error_recipients: fedmsg_error_recipients:

10
inventory/group_vars/odcs-frontend
View file

@ -14,10 +14,14 @@ wsgi_fedmsg_service: odcs
wsgi_procs: 2 wsgi_procs: 2
wsgi_threads: 2 wsgi_threads: 2
tcp_ports: [ 80, tcp_ports: [
# This port is required by gluster 80,
6996, # These ports all required for gluster
111, 24007, 24008, 24009, 24010, 24011,
49152, 49153, 49154, 49155,
] ]
# Also for gluster.
udp_ports: [ 111 ]
# Neeed for rsync from log01 for logs. # Neeed for rsync from log01 for logs.
custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.13 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT' ] custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.13 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT' ]

10
inventory/group_vars/odcs-frontend-stg
View file

@ -14,10 +14,14 @@ wsgi_fedmsg_service: odcs
wsgi_procs: 2 wsgi_procs: 2
wsgi_threads: 2 wsgi_threads: 2
tcp_ports: [ 80, tcp_ports: [
# This port is required by gluster 80,
6996, # These ports all required for gluster
111, 24007, 24008, 24009, 24010, 24011,
49152, 49153, 49154, 49155,
] ]
# Also for gluster.
udp_ports: [ 111 ]
# Neeed for rsync from log01 for logs. # Neeed for rsync from log01 for logs.
custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.13 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT' ] custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.13 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT' ]