topic Re: Problem: loss of firewall rules when reloading the firewalld service in Dynatrace Managed Q&A

Problem: loss of firewall rules when reloading the firewalld service

patrick_romee — Thu, 01 Jun 2023 12:44:35 GMT

Hello,

When our infrastructure team performs deployments for patch management the command firewall-cmd --reload is executed. The result is that all rules dynatrace in firewalld are destroyed.

Could you make the rules persistent to prevent this problem ?

Regards

Patrick

Re: Problem: loss of firewall rules when reloading the firewalld service

Radoslaw_Szulgo — Thu, 01 Jun 2023 13:37:23 GMT

Please align with your infrastructure team to ensure ./reconfigure.sh is run after system patching. This should apply required firewall rules at the cluster node.

Re: Problem: loss of firewall rules when reloading the firewalld service

patrick_romee — Wed, 07 Jun 2023 12:57:18 GMT

Hello,

Thank you for your anwser.

It isn't possible for us we had considered this solution but given the number of customers our system team did not see to manage specificities for each of them. And

Regards

Re: Problem: loss of firewall rules when reloading the firewalld service

Radoslaw_Szulgo — Mon, 12 Jun 2023 09:35:42 GMT

Would at least restart of the machine be possible? A restart of firewall service also recreates rules.

Re: Problem: loss of firewall rules when reloading the firewalld service

patrick_romee — Thu, 15 Jun 2023 14:04:17 GMT

Hello,

Yes it is, but our system team can't tell us when the reload is done so between the reload and time when the problem is detected the cluster is unavailable even if the problem is detected rapidly in production environement this isn't acceptable.

Regards

Patrick

Re: Problem: loss of firewall rules when reloading the firewalld service

patrick_romee — Tue, 04 Jul 2023 06:45:52 GMT

Hello,

Any other solution ?

Best regards

Patrick