working on stunnel for bigcouch clustering

1 files changed, 15 insertions, 1 deletions

diff --git a/puppet/modules/site_shorewall/manifests/couchdb.pp b/puppet/modules/site_shorewall/manifests/couchdb.pp
index 9fa59569..5fa1861b 100644
--- a/puppet/modules/site_shorewall/manifests/couchdb.pp
+++ b/puppet/modules/site_shorewall/manifests/couchdb.pp
@@ -3,10 +3,13 @@ class site_shorewall::couchdb {
   include site_shorewall::defaults
 
   $couchdb_port = '6984'
+  # Erlang Port Mapper daemon, used for communication between
+  # bigcouch cluster nodes
+  $portmapper_port = '5369'
 
   # define macro for incoming services
   file { '/etc/shorewall/macro.leap_couchdb':
-    content => "PARAM   -       -       tcp    $couchdb_port",
+    content => "PARAM   -       -       tcp    $couchdb_port $portmapper_port",
     notify  => Service['shorewall'],
     require => Package['shorewall']
   }
@@ -20,4 +23,15 @@ class site_shorewall::couchdb {
         order       => 200;
   }
 
+  shorewall::rule {
+    'dnat-bigcouch-clustering-to-stunnel':
+      destination     => "net:${::ipaddress}:8080",
+      destinationport => $portmapper_port,
+      source          => '$FW',
+      proto           => 'tcp',
+      order           => 200,
+      action          => 'DNAT';
+  }
+
+
 }