Revert "rhel, xenserver: Punch holes through firewall for VXLAN."

shettyg · shettyg · commit c2301fbfc819 · 2013-04-16T15:29:56.000-07:00
This reverts commit 5902b4e. For end users that do not plan to use tunnels or use only selected tunnels, it probably is a bad idea to punch firewall holes by default. Opening holes like this may surprise the user. Signed-off-by: Gurucharan Shetty <gshetty@nicira.com>
diff --git a/rhel/etc_init.d_openvswitch b/rhel/etc_init.d_openvswitch
@@ -49,7 +49,6 @@ start () {
     "$@"
 
     ovs_ctl --protocol=gre enable-protocol
-    ovs_ctl --protocol=udp --dport=8472 enable-protocol
 
     touch /var/lock/subsys/openvswitch
 }
diff --git a/xenserver/etc_init.d_openvswitch b/xenserver/etc_init.d_openvswitch
@@ -82,7 +82,6 @@ start () {
     start_ovs_xapi_sync
 
     ovs_ctl --protocol=gre enable-protocol
-    ovs_ctl --protocol=udp --dport=8472 enable-protocol
 
     touch /var/lock/subsys/openvswitch
 }

Original file line number	Diff line number	Diff line change
`@@ -49,7 +49,6 @@ start () {`
`49`	`49`	`"$@"`
`50`	`50`
`51`	`51`	`ovs_ctl --protocol=gre enable-protocol`
`52`		`- ovs_ctl --protocol=udp --dport=8472 enable-protocol`
`53`	`52`
`54`	`53`	`touch /var/lock/subsys/openvswitch`
`55`	`54`	`}`
Original file line number	Diff line number	Diff line change
`@@ -82,7 +82,6 @@ start () {`
`82`	`82`	`start_ovs_xapi_sync`
`83`	`83`
`84`	`84`	`ovs_ctl --protocol=gre enable-protocol`
`85`		`- ovs_ctl --protocol=udp --dport=8472 enable-protocol`
`86`	`85`
`87`	`86`	`touch /var/lock/subsys/openvswitch`
`88`	`87`	`}`