openstack/openstack-ansible
Code Issues Proposed changes
openstack-ansible/doc/source/install-guide/configure-rabbitmq.rst
Alexandra e78c9e3ac2 DOCS: Configuration section - cleanup 
As per discussion in the OSA docs summit session, clean up
of installation guide. This fixes typos, minor RST mark up
changes, and passive voice.

This patch also merges a some of the sections into the larger
chapter. This is in an effort to remove multiple smaller
files.

This patch is the first of many to avoid major conflicts.

Change-Id: I5b6d540bfa691b36dbe9cf909de8e61affb0cd92
2016-05-11 17:37:23 +01:00

1.4 KiB
Raw Blame History

Home OpenStack-Ansible Installation Guide

Configuring RabbitMQ (optional)

RabbitMQ provides the messaging broker for various OpenStack services. The OpenStack-Ansible project configures a plaintext listener on port 5672 and a SSL/TLS encrypted listener on port 5671.

Customize your RabbitMQ deployment in /etc/openstack_deploy/user_variables.yml.

Add a TLS encrypted listener to RabbitMQ

The OpenStack-Ansible project provides the ability to secure RabbitMQ communications with self-signed or user-provided SSL certificates. Refer to Securing services with SSL certificates for available configuration options.

Enable encrypted connections to RabbitMQ

The control of SSL communication between various OpenStack services and RabbitMQ is via the Ansible variable rabbitmq_use_ssl:

rabbitmq_use_ssl: true

Setting this variable to true adjusts the RabbitMQ port to 5671 (the default SSL/TLS listener port) and enables SSL connectivity between each OpenStack service and RabbitMQ.

Setting this variable to false disables SSL encryption between OpenStack services and RabbitMQ. Use the plaintext port for RabbitMQ, 5672, for all services.