3.11. Tips for Installation

3.11.1. Firewalls

When Pgpool-II connects to other Pgpool-II servers or PostgreSQL servers, the target port must be accessible by enabling firewall management softwares.

Here is an example for CentOS/RHEL7 when access to PostgreSQL is required.

    firewall-cmd --permanent --zone=public --add-service=postgresql
    firewall-cmd --reload
   

"postgresql" is the service name assigned to PostgreSQL. The list of service names can be obtained by:

    firewall-cmd --get-services
   

Note that you can define your own service name in /usr/lib/firewalld/services/.

If PostgreSQL is listening on 11002 port, rather than the standard 5432 port, you can do:

    firewall-cmd --zone=public --remove-service=postgresql --permanent
    firewall-cmd --zone=public --add-port=11002/tcp --permanent
    firewall-cmd --reload