OpenStack Identity (keystone)

  1. Bug #1253482
  2. Comment #4

Comment 4 for bug 1253482

Revision history for this message
Dolph Mathews (dolph) wrote : Re: Keystone default port in linux local ephemeral port range. Devstack should shift range.

In keystone and openstack-manuals, I think we should add documentation recommending that deployers explicitly exclude port 35357 from the available ephemeral ports, regardless of what the ephemeral port range (ip_local_port_range ) is configured to be. In a clean linux environment, this would be as simple as:

    echo 35357 > /proc/sys/net/ipv4/ip_local_reserved_ports