From: John Spray Date: Tue, 26 Sep 2017 16:09:50 +0000 (+0100) Subject: doc: update firewall doc to mention ceph-mgr X-Git-Tag: v13.0.1~655^2 X-Git-Url: http://git-server-git.apps.pok.os.sepia.ceph.com/?a=commitdiff_plain;h=3365b09c4088dd6a411ddd11f186d2f98e5d4cd2;p=ceph.git doc: update firewall doc to mention ceph-mgr Signed-off-by: John Spray --- diff --git a/doc/rados/configuration/network-config-ref.rst b/doc/rados/configuration/network-config-ref.rst index d9b930622bbe..97985b3ad8fc 100644 --- a/doc/rados/configuration/network-config-ref.rst +++ b/doc/rados/configuration/network-config-ref.rst @@ -99,18 +99,18 @@ public network and ``{netmask}`` with the netmask for the public network. :: sudo iptables -A INPUT -i {iface} -p tcp -s {ip-address}/{netmask} --dport 6789 -j ACCEPT -MDS IP Tables -------------- - -A :term:`Ceph Metadata Server` listens on the first available port on the public -network beginning at port 6800. Note that this behavior is not deterministic, so -if you are running more than one OSD or MDS on the same host, or if you restart -the daemons within a short window of time, the daemons will bind to higher -ports. You should open the entire 6800-7300 range by default. When you add the -rule using the example below, make sure you replace ``{iface}`` with the public -network interface (e.g., ``eth0``, ``eth1``, etc.), ``{ip-address}`` with the IP -address of the public network and ``{netmask}`` with the netmask of the public -network. +MDS and Manager IP Tables +------------------------- + +A :term:`Ceph Metadata Server` or :term:`Ceph Manager` listens on the first +available port on the public network beginning at port 6800. Note that this +behavior is not deterministic, so if you are running more than one OSD or MDS +on the same host, or if you restart the daemons within a short window of time, +the daemons will bind to higher ports. You should open the entire 6800-7300 +range by default. When you add the rule using the example below, make sure +you replace ``{iface}`` with the public network interface (e.g., ``eth0``, +``eth1``, etc.), ``{ip-address}`` with the IP address of the public network +and ``{netmask}`` with the netmask of the public network. For example::