d4science-ghn-cluster: new infra dev VM. liferay cluster.

library/roles/iptables: snippet for the multicast part of tomcat clustering.

iptables/defaults/main.yml

@@ -44,3 +44,4 @@ iptables_banned_default_policy: DROP
 ganglia_enabled: False
 nagios_enabled: False
 iptables_open_all_to_isti_nets: False
+tomcat_cluster_enabled: False

iptables/templates/iptables-rules.v4.j2

@@ -173,6 +173,13 @@
 {% endif %}
 {% endif %}
 
+{% if tomcat_cluster_enabled %}
+# tomcat cluster
+-A INPUT -m pkttype --pkt-type multicast -d {{ tomcat_cluster_multicast_addr }} -j ACCEPT
+-A INPUT -m state --state NEW -p tcp -m tcp --dport {{ tomcat_cluster_multicast_port }} -j ACCEPT
+{% endif %}
+
+
 {% if ganglia_enabled is defined %}
 {% if ganglia_enabled %}
 {% if ganglia_gmond_cluster_port is defined %}