端口 | 服务描述 |
22 | SSH |
3306 | MariaDB（MySQL） |
27017 | MongoDB |
5672、25672 | RabbitMQ |
4369 | Erlang端口映射守护进程（Erlang Port Mapper Daemon） |
11211 | Memcached |
35357 | OpenStack Identity Service of Apache HTTP Server（Admin） |
5000 | OpenStack Identity Service of Apache HTTP Server（User） |
9191 | OpenStack Image Service of Glance Registry |
9292 | OpenStack Image Service of Glance API |
8774、8775 | OpenStack Compute Service of Nova API |
6080 | OpenStack Compute Service of Nova Proxy |
9696 | OpenStack Networking Service of Neutron Server |
80 | OpenStack Dashboard Service of Apache HTTP Server |
8776 | OpenStack Block Storage Service of Cinder API |
8786 | OpenStack Shared File Systems Service of Manila API |
8080 | OpenStack Object Storage Service of Swift Proxy |
8000 | OpenStack Orchestration Service of Heat API (CloudFormation) |
8004 | OpenStack Orchestration Service of Heat API |
8777 | OpenStack Telemetry Alarming Service of Ceilometer API |
8042 | OpenStack Telemetry Alarming Service of Aodh API |
8779 | OpenStack Database Service of Trove API |
8386 | OpenStack Data Processing Service of Sahara API |
53 | Libvirt Dnsmasq |
3260 | OpenStack Block Storage Service of Tgtd（iSCSI target后台服务） |
873 | OpenStack Object Storage Service of Remote Sync |
6000 | OpenStack Object Storage Service of Object |
6001 | OpenStack Object Storage Service of Container |
6002 | OpenStack Object Storage Service of Account |
6379 | redis-server |
OpenStack组件使用的默认端口号 OpenStack service | Default ports | Port type |
Block Storage (cinder) | 8776 | publicurl and adminurl |
Compute (nova) endpoints | 8774 | publicurl and adminurl |
Compute API (nova-api) | 8773, 8775 | |
Compute ports for access to virtual machine consoles | 5900-5999 | |
Compute VNC proxy for browsers ( openstack-nova-novncproxy) | 6080 | |
Compute VNC proxy for traditional VNC clients (openstack-nova-xvpvncproxy) | 6081 | |
Proxy port for HTML5 console used by Compute service | 6082 | |
Data processing service (sahara) endpoint | 8386 | publicurl and adminurl |
Identity service (keystone) administrative endpoint | 35357 | adminurl |
Identity service public endpoint | 5000 | publicurl |
Image service (glance) API | 9292 | publicurl and adminurl |
Image service registry | 9191 | |
Networking (neutron) | 9696 | publicurl and adminurl |
Object Storage (swift) | 6000, 6001, 6002 | |
Orchestration (heat) endpoint | 8004 | publicurl and adminurl |
Orchestration AWS CloudFormation-compatible API (openstack-heat-api-cfn) | 8000 | |
Orchestration AWS CloudWatch-compatible API (openstack-heat-api-cloudwatch) | 8003 | |
Telemetry (ceilometer) | 8777 | publicurl and adminurl |
非OpenStack组件使用的默认端口号 | ||
Service | Default port | Used by |
HTTP | 80 | OpenStack dashboard (Horizon) when it is not configured to use secure access. |
HTTP alternate | 8080 | OpenStack Object Storage (swift) service. |
HTTPS | 443 | Any OpenStack service that is enabled for SSL, especially secure-access dashboard. |
rsync | 873 | OpenStack Object Storage. Required. |
iSCSI target | 3260 | OpenStack Block Storage. Required. |
MySQL database service | 3306 | Most OpenStack components. |
Message Broker (AMQP traffic) | 5672、25672 | OpenStack Block Storage, Networking, Orchestration, and Compute. |
MongoDB | 27017 | |
Memcached | 11211 | |
Libvirt Dnsmasq | 53 | |
Redis-Server | 6379 | |
参考：
https://docs.openstack.org/kilo/config-reference/content/firewalls-default-ports.html
