Skip to content

Firewall Configuration#

Pulp on a Single Server#

If installed on a single server, Pulp only needs the 2 webserver ports open:

Port Variable Purpose
80 pulp_webserver_http_port Redirecting to https
443 pulp_webserver_https_port The entire Pulp application

To open these ports with firewalld (default firewall on Fedora, RHEL, CentOS)

firewall-cmd --add-service=http
firewall-cmd --permanent --add-service=http
firewall-cmd --add-service=https
firewall-cmd --permanent --add-service=https

To open these ports on ufw (default firewall on Ubuntu)

ufw allow "Nginx Full"

Pulp on a Cluster#

If each role is installed to a cluster, the host must have open the ports for its role:

Port Variable Role Accessed by Purpose
80 pulp_webserver_http_port pulp_webserver API and content users/clients Redirecting to https
443 pulp_webserver_https_port pulp_webserver API and content users/clients The entire Pulp application
5432 See "Purpose" pulp_database pulp_api, pulp_content, pulp_workers The PostgreSQL database server. It is configured by overrding the variable postgresql_global_config_options ( as seen in pulp_database vars.yml) to include an additional array item of a dictionary, with the variable under it "option" set to "port", and the variable "value" set to the port number.
6379 pulp_redis_bind pulp_redis pulp_api, pulp_content, pulp_workers Redis cache server
24816 pulp_content_bind pulp_content pulp_webserver The pulp Content service
24817 pulp_api_bind pulp_api pulp_webserver The pulp API service

Last update: 2023-01-23