[Lustre-discuss] iptables rules for lustre 1.6.x and MGS recovery procedures

[Isaac Huang]

Hi,

AFAIK, UDP is not used in LNet, the Lustre networking sub-system. TCP
port usage depends on the LNDs (Lustre Network Driver) you're using.

For LNDs that rely on LNet acceptor to establish connections (ciblnd,
openiblnd, ralnd, and socklnd), the acceptor port must be open.
Acceptor port can be configured via lnet module parameter "accept_port",
which defaults to 988.

The o2iblnd creates connections via OFED RDMA CM API, which requires no
TCP/UDP port to work despite the fact that it utilises IP addresses.
The viblnd should also fail into this category.

Hope this helps,
Isaac

On Mon, Oct 15, 2007 at 12:00:32PM -0700, Anand Bisen wrote:
> Hi,
> 
> I would like to know what TCP/UDP ports should i keep open in my  
> firewall policies on my MGS server such that I can have my MGS server  
> fire-walled. Also if in a event of loss of MGT would it be possible  
> to recreate the MGT without loosing data or bringing the filesystem  
> down (i.e. by using cached information from MDT's and OST's)
> 
> Thanks
> 
> Anand