Adds iptable rules

[hiwakaba]

Relevant Issue (if applicable)

N/A

Details

This PR will accept packets that trove and k2hr3 system work correctly in virtual machines in VirtualBox and some public cloud environments.

• Adds rules to FORWARD chain to allow k2hr3 system to query DNS for packages distribution servers

    sudo iptables -A LIBVIRT_FWX -i br-ex -s 172.24.4.0/24 -p udp -m udp --dport 53 -j ACCEPT
    sudo iptables -A LIBVIRT_FWX -o br-ex -d 172.24.4.0/24 -p udp -m udp --sport 53 -j ACCEPT
    sudo iptables -A LIBVIRT_FWX -i br-ex -s 172.24.4.0/24 -p tcp -m tcp --dport 53 -j ACCEPT
    sudo iptables -A LIBVIRT_FWX -o br-ex -d 172.24.4.0/24 -p tcp -m tcp --sport 53 -j ACCEPT

• Adds rules to FORWARD chain to allow k2hr3 system to download packages using HTTP and HTTPS.

    sudo iptables -A LIBVIRT_FWX -i br-ex -s 172.24.4.0/24 -p tcp -m tcp --dport 80 -j ACCEPT
    sudo iptables -A LIBVIRT_FWX -o br-ex -d 172.24.4.0/24 -p tcp -m tcp --sport 80 -j ACCEPT
    sudo iptables -A LIBVIRT_FWX -i br-ex -s 172.24.4.0/24 -p tcp -m tcp --dport 443 -j ACCEPT
    sudo iptables -A LIBVIRT_FWX -o br-ex -d 172.24.4.0/24 -p tcp -m tcp --sport 443 -j ACCEPT

• Adds rules to FORWARD chain: allow to k2hr3 system to sync time with time servers.

    sudo iptables -A LIBVIRT_FWX -i br-ex -s 172.24.4.0/24 -p udp -m udp --dport 123 -j ACCEPT
    sudo iptables -A LIBVIRT_FWX -o br-ex -d 172.24.4.0/24 -p udp -m udp --sport 123 -j ACCEPT

• Adds rules to INPUT chain: allow k2hr3 api to connect with OpenStack services.

    sudo iptables -A LIBVIRT_INP -i br-ex -s 172.24.4.0/24 -p tcp -m state --state NEW -m tcp --dport 80 -j ACCEPT
    sudo iptables -A LIBVIRT_INP -i br-ex -s 172.24.4.0/24 -p tcp -m state --state NEW -m tcp --dport 443 -j ACCEPT

• Adds rules to INPUT chain: allow trove system to connect with RabbitMQ and k2hr3 system.

    sudo iptables -A LIBVIRT_INP -i br-ex -s 172.24.4.0/24 -p tcp -m state --state NEW -m tcp --dport 18080 -j ACCEPT
    sudo iptables -A LIBVIRT_INP -i br-ex -s 172.24.4.0/24 -p tcp -m state --state NEW -m tcp --dport 28080 -j ACCEPT
    sudo iptables -A LIBVIRT_INP -i br-ex -s 172.24.4.0/24 -d 172.24.4.0/24 -p tcp -m state --state NEW -m tcp --dport 5672 -j ACCEPT