Bug 1811680 - Missing firewall rules for RabbitMQ CLI tools
Summary: Missing firewall rules for RabbitMQ CLI tools
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat OpenStack
Classification: Red Hat
Component: openstack-tripleo-heat-templates
Version: 16.0 (Train)
Hardware: All
OS: Linux
high
high
Target Milestone: beta
: 16.1 (Train on RHEL 8.2)
Assignee: John Eckersberg
QA Contact: David Rosenfeld
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2020-03-09 14:31 UTC by John Eckersberg
Modified: 2023-09-07 22:16 UTC (History)
5 users (show)

Fixed In Version: openstack-tripleo-heat-templates-11.3.2-0.20200315025718.033aae9.el8ost
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2020-07-29 07:50:57 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Launchpad 1866958 0 None None None 2020-03-11 07:34:02 UTC
OpenStack gerrit 712089 0 None MERGED rabbitmq: Open ports 25673-25683 for CLI tools 2021-02-02 21:47:57 UTC
Red Hat Issue Tracker OSP-3293 0 None None None 2022-08-23 18:26:03 UTC
Red Hat Product Errata RHBA-2020:3148 0 None None None 2020-07-29 07:51:20 UTC

Description John Eckersberg 2020-03-09 14:31:17 UTC
Description of problem:
With newer RabbitMQ, the CLI tools need to be able to bind and receive callback messages on 35672-35682 for certain operations such as listing queues and connections.

See: https://www.rabbitmq.com/networking.html#ports

Version-Release number of selected component (if applicable):
rabbitmq-server-3.7.23-2.el8ost.x86_64
openstack-tripleo-heat-templates-11.3.2-0.20200211065543.d3d6dc3.el8ost.noarch

How reproducible:
Always

Steps to Reproduce:
1. Within rabbitmq bundle, `rabbitmqctl list_queues`

Actual results:
Local queues will print, and then the command will hang while it waits for replies from other cluster members, eventually failing with:

{:badrpc, {:timeout, 60.0, "Some queue(s) are unresponsive, use list_unresponsive_queues command."}}


Expected results:
All queues print and the command returns successfully after only one second or so.

Comment 5 Luca Miccini 2020-03-17 11:41:38 UTC
Last login: Tue Mar 17 11:40:14 2020 from 192.168.24.254
[heat-admin@messaging-0 ~]$ sudo -i
[root@messaging-0 ~]# iptables -L |grep -i rabb
ACCEPT     tcp  --  anywhere             anywhere             multiport dports vtr-emulator,epmd,amqp,25672,25673:25683 state NEW /* 109 rabbitmq-bundle ipv4 */

Comment 8 Alex McLeod 2020-06-16 12:28:49 UTC
If this bug requires doc text for errata release, please set the 'Doc Type' and provide draft text according to the template in the 'Doc Text' field. The documentation team will review, edit, and approve the text.

If this bug does not require doc text, please set the 'requires_doc_text' flag to '-'.

Comment 10 errata-xmlrpc 2020-07-29 07:50:57 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2020:3148


Note You need to log in before you can comment on or make changes to this bug.