On 04/02/2017 03:53 PM, Leon Goldberg wrote:
Hey,
We're gathering information regarding the ports we open as part of the
firewalld migration research.
We have most of the current ports covered by either firewalld itself
or by 3rd party packages, however some questions remain unanswered:
IPTablesConfigForVirt:
- serial consoles (tcp/2223): Is this required? can't find a single
reference to a listening entity. Either way, I couldn't find a
relevant service that provides it.
It is required:
* on each virtualization host (e.g. the same machine who runs Vdsm)
* IF the virtual serial console is enabled (it is by default)
The listening entity is the external service
"ovirt-vmconsole-host-sshd", which is one special-configured sshd instance.
Bests,
--
Francesco Romani
Senior SW Eng., Virtualization R&D
Red Hat
IRC: fromani github: @fromanirh