Firewalld no HA service

English Applications
#1

Hello Community,

I have checked the Administrastion Guide, but I can’t find the firewalld service for HA.
In RedHat the firewall service is called high-availability, but it seems that openSUSE Leap 15 doesn’t provide such .

So far, I have created my own firewall service , but I have the feeling that I might have missed something:


node1:~ # cat /etc/firewalld/services/high-availability.xml 
<?xml version="1.0" encoding="utf-8"?>
<service>
  <short>Custom High Availability Service</short>
  <description>This allows you to use the High Availability . Ports are opened for corosync, pacemaker_remote, dlm , hawk and corosync-qnetd.</description>
  <port protocol="tcp" port="7630"/>
  <port protocol="tcp" port="3121"/>
  <port protocol="tcp" port="5403"/>
  <port protocol="udp" port="5404"/>
  <port protocol="udp" port="5405"/>
  <port protocol="tcp" port="9929"/>
  <port protocol="udp" port="9929"/>
  <port protocol="tcp" port="21064"/>
</service>

Is there a HA firewalld service or the above is enough?

#2

I assume that you followed this up with

firewall-cmd --permanent --add-service=high-availability

firewall-cmd --reload

Does it work as expected?

I note that the admin guide you referred to mentions other related services that have their own ports assigned. You might want to review those further depending on your specific implementation perhaps