Hello,
I'm working on migrating an existing ovirt setup to a new hosted-engine
setup and I've been seeing messages about iptables support being deprecated
and slated to be removed.
Can I continue using iptables to manage the firewalls on my ovirt hosts if
I don't care about allowing ovirt to configure the firewalls?
We manage all of our machines with puppet and iptables is deeply integrated
into this. It would be non-trivial to migrate to firewalld support.
As it stands I already manage the firewall rules for our ovirt hosts with
puppet and iptables and have always ignored the "Automatically Configure
Firewall" option when adding new hosts. Will this continue to work?
Also with hosted engine, I had to cowboy enable firewalld to get the engine
installed, but now that I've got a cluster up and running with hosted
engine enabled on several hosts, can I just switch back from firewalld to
iptables assuming I've got all the correct ports open?
Thank you,
Jordan Conway