while creating keystone endpoints i noticed that for keystone there is admin port 35357 while for all other services there is only one port.Why only kestone has two ports one for admin and other for generic. What is the significance of this port 35357 and why not separate admin ports for other services.
Keystone service has types of ports admin and public. And as the name says, the admin port is reuiqred when we do admin activities like creating a tenant, registering a user/service, creating endpoints etc. Where as the public port is used for authentication, getting tokens.
Generally the port 35357 is not open for all. Means if we need to do any admin activities, then we can do it only from a machine where keystone is running.
the admin port is generally not open for all the users, i.e, telnet to 35357 will not work from all the machines by default. Only datacenter people have access to it and they can add users and services. For restricting this access keystone has two types of ports.
Asked: 2014-09-18 02:54:01 -0500
Seen: 232 times
Last updated: Sep 18 '14
