From 23d2740241af2118652fef6e7d6a286f338a18f2 Mon Sep 17 00:00:00 2001 From: Pierre Riteau Date: Mon, 22 Apr 2024 11:28:53 +0200 Subject: [PATCH] doc/rados: fix outdated value for ms_bind_port_max The highest port number used by OSD or MDS daemons was increased from 7300 to 7568 in [1] but the documentation still refers to 7300 in multiple locations. [1] https://github.com/ceph/ceph/pull/42210 Fixes: https://tracker.ceph.com/issues/65609 Signed-off-by: Pierre Riteau --- doc/rados/configuration/network-config-ref.rst | 12 ++++++------ doc/rados/troubleshooting/troubleshooting-mon.rst | 4 ++-- 2 files changed, 8 insertions(+), 8 deletions(-) diff --git a/doc/rados/configuration/network-config-ref.rst b/doc/rados/configuration/network-config-ref.rst index 81e85c5d1b2..252b43d67ff 100644 --- a/doc/rados/configuration/network-config-ref.rst +++ b/doc/rados/configuration/network-config-ref.rst @@ -56,7 +56,7 @@ Recommendations - Networks`_ for additional details. IP Tables ========= -By default, daemons `bind`_ to ports within the ``6800:7300`` range. You may +By default, daemons `bind`_ to ports within the ``6800:7568`` range. You may configure this range at your discretion. Before configuring your IP tables, check the default ``iptables`` configuration. @@ -96,7 +96,7 @@ A :term:`Ceph Metadata Server` or :term:`Ceph Manager` listens on the first available port on the public network beginning at port 6800. Note that this behavior is not deterministic, so if you are running more than one OSD or MDS on the same host, or if you restart the daemons within a short window of time, -the daemons will bind to higher ports. You should open the entire 6800-7300 +the daemons will bind to higher ports. You should open the entire 6800-7568 range by default. When you add the rule using the example below, make sure you replace ``{iface}`` with the public network interface (e.g., ``eth0``, ``eth1``, etc.), ``{ip-address}`` with the IP address of the public network @@ -106,7 +106,7 @@ For example: .. prompt:: bash $ - sudo iptables -A INPUT -i {iface} -m multiport -p tcp -s {ip-address}/{netmask} --dports 6800:7300 -j ACCEPT + sudo iptables -A INPUT -i {iface} -m multiport -p tcp -s {ip-address}/{netmask} --dports 6800:7568 -j ACCEPT OSD IP Tables @@ -136,7 +136,7 @@ Each Ceph OSD Daemon on a Ceph Node may use up to four ports: \---------------/ When a daemon fails and restarts without letting go of the port, the restarted -daemon will bind to a new port. You should open the entire 6800-7300 port range +daemon will bind to a new port. You should open the entire 6800-7568 port range to handle this possibility. If you set up separate public and cluster networks, you must add rules for both @@ -149,7 +149,7 @@ public or cluster network. For example: .. prompt:: bash $ - sudo iptables -A INPUT -i {iface} -m multiport -p tcp -s {ip-address}/{netmask} --dports 6800:7300 -j ACCEPT + sudo iptables -A INPUT -i {iface} -m multiport -p tcp -s {ip-address}/{netmask} --dports 6800:7568 -j ACCEPT .. tip:: If you run Ceph Metadata Servers on the same Ceph Node as the Ceph OSD Daemons, you can consolidate the public network configuration step. @@ -314,7 +314,7 @@ Bind ---- Bind settings set the default port ranges Ceph OSD and MDS daemons use. The -default range is ``6800:7300``. Ensure that your `IP Tables`_ configuration +default range is ``6800:7568``. Ensure that your `IP Tables`_ configuration allows you to use the configured port range. You may also enable Ceph daemons to bind to IPv6 addresses instead of IPv4 diff --git a/doc/rados/troubleshooting/troubleshooting-mon.rst b/doc/rados/troubleshooting/troubleshooting-mon.rst index 443d6c443be..636bb4da2c0 100644 --- a/doc/rados/troubleshooting/troubleshooting-mon.rst +++ b/doc/rados/troubleshooting/troubleshooting-mon.rst @@ -493,10 +493,10 @@ trying to connect to Ceph daemons. For example:: It might also be necessary to add rules to iptables on your Ceph hosts to ensure that clients are able to access the TCP ports associated with your Ceph -monitors (default: port 6789) and Ceph OSDs (default: 6800 through 7300). For +monitors (default: port 6789) and Ceph OSDs (default: 6800 through 7568). For example:: - iptables -A INPUT -m multiport -p tcp -s {ip-address}/{netmask} --dports 6789,6800:7300 -j ACCEPT + iptables -A INPUT -m multiport -p tcp -s {ip-address}/{netmask} --dports 6789,6800:7568 -j ACCEPT Monitor Store Failures