openstack-ansible/releasenotes/notes/tls-migration-3ed93cc04dab5eee.yaml
Dmitriy Rabotyagov a0cfc507ed Freeze roles for Xena RC1
We will also create stable/xena branch from this commit.

Change-Id: I2c887fa031a6001431bf5075fb9a58e5726f64ca
2021-12-10 21:23:04 +00:00

14 lines
483 B
YAML

---
features:
- |
Nova now defaults to to using the "QEMU-native TLS" feature
for live migrations, rather than the deprecated SSH method.
A pre-existing PKI (Public Key Infrastructure) setup is
required.
QEMU-native TLS requires all compute hosts to accept TCP connections on
port 16514 and port range 49152 to 49261.
More information can be found here:
https://docs.openstack.org/nova/latest/admin/secure-live-migration-with-qemu-native-tls.html