Description of problem: Ephemeral ports are not open in compute firewall thus breaking live migration. Live migration fails with: Live Migration failure: unable to connect to server at 'comp-r00-01.redhat.local:49152': No route to host Version-Release number of selected component (if applicable): openstack-tripleo-heat-templates-5.0.0-0.9.0rc3.el7ost.noarch How reproducible: 100% Steps to Reproduce: 1. Deploy overcloud with 2 computes, launch an instance 2. Try to live migrate it to the other node Actual results: Live migration fails. Expected results: Live migration succeeds. Additional info: According to the docs we need the ephemeral ports(49152-49215) to be opened on the compute node: https://access.redhat.com/documentation/en/red-hat-openstack-platform/9/paged/migrating-instances/chapter-1-how-to-migrate-a-live-instance
Merged in stable/newton. Next rebased build will include it.
*** Bug 1393135 has been marked as a duplicate of this bug. ***
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://rhn.redhat.com/errata/RHEA-2016-2948.html