From 24beceef6412010589252de0884addc363d7bf05 Mon Sep 17 00:00:00 2001 From: Jason Dillaman Date: Mon, 24 Sep 2018 10:32:25 -0400 Subject: [PATCH] doc: ceph-iscsi-api ports should not be public facing Signed-off-by: Jason Dillaman --- doc/rbd/iscsi-target-cli.rst | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/doc/rbd/iscsi-target-cli.rst b/doc/rbd/iscsi-target-cli.rst index 28a1d9af05a19..faba494121352 100644 --- a/doc/rbd/iscsi-target-cli.rst +++ b/doc/rbd/iscsi-target-cli.rst @@ -43,6 +43,11 @@ to the *Installing* section: #. If needed, open TCP ports 3260 and 5000 on the firewall. + .. note:: + Access to port 5000 should be restricted to a trusted internal network or + only the individual hosts where ``gwcli`` is used or ``ceph-mgr`` daemons + are running. + #. Create a new or use an existing RADOS Block Device (RBD). **Installing:** -- 2.39.5