标签：组件 https heat mini 限制 OLE ice mat idt
在某些部署中，例如已设置限制性防火墙的部署，您可能需要手动配置防火墙以允许OpenStack服务流量。
要手动配置防火墙，您必须允许通过每个OpenStack服务使用的端口的流量。下表列出了每个OpenStack服务使用的默认端口：
OpenStack组件使用的默认端口
| OpenStack service | Default ports | Port type |
| Application Catalog (murano) | 8082 | |
| Block Storage (cinder) 8776 | 8776 | publicurl and adminurl |
| Compute (nova) endpoints | 8774 | publicurl and adminurl |
| Compute API (nova-api) | 8773,8775 | |
| Compute ports for access to virtual machine consoles | 5900-5999 | |
| Compute VNC proxy for browsers ( openstack-nova-novncproxy) | 6080 | |
| Compute VNC proxy for traditional VNC clients (openstack-nova-xvpvncproxy) | 6081 | |
| Proxy port for HTML5 console used by Compute service | 6082 | |
| Data processing service (sahara) endpoint | 8386 | publicurl and adminurl |
| Identity service (keystone) administrative endpoint | 35357 | adminurl |
| Identity service public endpoint | 5000 | publicurl |
| Image service (glance) API | 9292 | publicurl and adminurl |
| Image service registry | 9191 | |
| Networking (neutron) | 9696 | publicurl and adminurl |
| Object Storage (swift) | 6000, 6001, 6002 | |
| Orchestration (heat) endpoint | 8004 | |
| Orchestration AWS CloudFormation-compatible API (openstack-heat-api-cfn) | 8000 | |
| Orchestration AWS CloudWatch-compatible API (openstack-heat-api-cloudwatch) | 8003 | |
| Telemetry (ceilometer) | 8777 | publicurl and adminurl |
为了正常运行，某些OpenStack组件依赖于其他非OpenStack服务。例如，OpenStack仪表板使用HTTP进行非安全通信。在这种情况下，您必须配置防火墙以允许与HTTP之间的通信。
下表列出了其他OpenStack组件使用的端口：
与OpenStack组件相关的辅助服务使用的默认端口
| Service | Default port | Used by |
| HTTP | 80 | OpenStack dashboard (Horizon) when it is not configured to use secure access. |
| HTTP alternate | 8080 | OpenStack Object Storage (swift) service. |
| HTTPS | 443 | Any OpenStack service that is enabled for SSL, especially secure-access dashboard. |
| rsync | 873 | OpenStack Object Storage. Required. |
| iSCSI target | 3260 | OpenStack Block Storage. Required. |
| MySQL database service | 3306 | Most OpenStack components. |
| Message Broker (AMQP traffic) | 5672 | OpenStack Block Storage, Networking, Orchestration, and Compute. |
参考链接：https://docs.openstack.org/mitaka/config-reference/firewalls-default-ports.html
标签：组件 https heat mini 限制 OLE ice mat idt
原文地址：https://www.cnblogs.com/Wang-Hongwei/p/13159196.html
