ISTI-ansible-roles
/
ansible-role-linux-firewall
5
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Simplify the ininispan rules.

This commit is contained in:
Andrea Dell'Amico 2022-12-29 17:55:25 +01:00
parent eedcaed32b
commit 269afd9fb8
Signed by: adellam
GPG Key ID: 147ABE6CEB9E20FF
1 changed files with 5 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
templates/iptables-rules.v4.j2
View File

@ -201,10 +201,13 @@
{% endif %}
{% if jgroups_cluster_enabled %}
# tomcat/jboss/wildfly cluster
# infinispan/jgroups
-A INPUT -m pkttype --pkt-type multicast -d {{ jgroups_multicast_addr }} -j ACCEPT
-A INPUT -m pkttype --pkt-type multicast -d {{ jgroups_mping_multicast_addr | default(jgroups_multicast_addr) }} -j ACCEPT
{% if jgroups_mping_multicast_addr is defined and jgroups_mping_multicast_addr != jgroups_multicast_addr %}
-A INPUT -m pkttype --pkt-type multicast -d {{ jgroups_mping_multicast_addr }} -j ACCEPT
{% endif %}
-A INPUT -m state --state NEW -p tcp -m tcp --dport {{ jgroups_multicast_port }} -j ACCEPT
-A INPUT -p udp -m udp --dport {{ jgroups_multicast_port }} -j ACCEPT
{% if jgroups_multicast_net is defined %}
-A INPUT -d {{ jgroups_multicast_net }} -j ACCEPT
{% endif %}