Bug 1342045
| Summary: | port-map: respect local port range as well as local reserved ports | ||
|---|---|---|---|
| Product: | [Community] GlusterFS | Reporter: | Prasanna Kumar Kalever <prasanna.kalever> |
| Component: | rpc | Assignee: | Prasanna Kumar Kalever <prasanna.kalever> |
| Status: | CLOSED CURRENTRELEASE | QA Contact: | |
| Severity: | unspecified | Docs Contact: | |
| Priority: | unspecified | ||
| Version: | mainline | CC: | bugs |
| Target Milestone: | --- | ||
| Target Release: | --- | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | |||
| Fixed In Version: | glusterfs-4.1.3 (or later) | Doc Type: | If docs needed, set a value |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2018-08-29 03:35:30 UTC | Type: | Bug |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
REVIEW: http://review.gluster.org/14613 (port-map: respect local port range as well as local reserved ports) posted (#1) for review on master by Prasanna Kumar Kalever (pkalever) REVIEW: http://review.gluster.org/14613 (port-map: respect local port range as well as local reserved ports) posted (#2) for review on master by Prasanna Kumar Kalever (pkalever) REVIEW: http://review.gluster.org/14613 (port-map: respect local port range as well as local reserved ports) posted (#3) for review on master by Prasanna Kumar Kalever (pkalever) REVIEW: http://review.gluster.org/14613 (port-map: respect local port range as well as local reserved ports) posted (#4) for review on master by Prasanna Kumar Kalever (pkalever) REVIEW: http://review.gluster.org/14613 (port-map: respect local port range as well as local reserved ports) posted (#5) for review on master by Prasanna Kumar Kalever (pkalever) REVIEW: http://review.gluster.org/14613 (port-map: respect local port range as well as local reserved ports) posted (#6) for review on master by Prasanna Kumar Kalever (pkalever) REVIEW: http://review.gluster.org/14613 (port-map: respect local port range as well as local reserved ports) posted (#7) for review on master by Prasanna Kumar Kalever (pkalever) REVIEW: http://review.gluster.org/15358 (port-map: add a testcase for new port map architecture) posted (#2) for review on master by Prasanna Kumar Kalever (pkalever) REVIEW: http://review.gluster.org/14613 (port-map: respect local port range as well as local reserved ports) posted (#8) for review on master by Prasanna Kumar Kalever (pkalever) This update is done in bulk based on the state of the patch and the time since last activity. If the issue is still seen, please reopen the bug. |
Description of problem: respect local port range as well as local reserved ports local port ranges: ----------------- The ports mentioned in '/proc/sys/net/ipv4/ip_local_port_range' separated by space defines the local port range that are used by TCP and UDP traffic to choose the local port, only a port from this range is allowed to use by applications, this makes the life of admin easy to open firewall to this range local reserved ports: --------------------- The ports mentioned in '/proc/sys/net/ipv4/ip_local_reserved_ports' separated by comma (,) or hyphen (-) are reserved for some specific applications this ports can be ingested only by mentioning that port number with bind() Problem: -------- In the existing implementation of portmap registry, the bricks port range was strictly limited within 49152-65535 (follow IANA standard) and the client port ranges from 0 - 49151 (secure & in-secure). Also we have our own function 'gf_get_reserved_ports' that will read admin mentioned reserved ports from '/proc/sys/net/ipv4/ip_local_reserved_ports' and marks them as false (not to use) in port mapper registry [0 - 65535] maintained by glusterd across nodes; but the actual problem is that glusterfs don't respect local port range '/proc/sys/net/ipv4/ip_local_port_range' which is something disappoints admins. Version-Release number of selected component (if applicable): mainline