openstack M版安装 network(neutron)服务篇
安装配置network(neutron) 服务Mitaka版本网络有两个选择，Provider network 和Self-service network，这里我们选择第二种。
controller 节点
一、创建数据库
1
2
3
4
# mysql -u root -p
>>CREATE DATABASE neutron;
>>GRANT ALL PRIVILEGES ON neutron.* TO 'neutron'@'localhost' IDENTIFIED BY 'NEUTRON_DBPASS';
>>GRANT ALL PRIVILEGES ON neutron.* TO 'neutron'@'%' IDENTIFIED BY 'NEUTRON_DBPASS';
NEUTRON_DBPASS改为自己想要设置的密码
二、创建服务实体和api接口
1
2
3
4
5
6
7
# source /root/admin-openrc.sh
# openstack user create --domain default --password-prompt neutron
# openstack role add --project service --user neutron admin
# openstack service create --name neutron --description "OpenStack Networking" network
# openstack endpoint create --region RegionOne network public http://controller:9696
# openstack endpoint create --region RegionOne network internal http://controller:9696
# openstack endpoint create --region RegionOne network admin http://controller:9696
三、安装nuetron服务
1
# yum install openstack-neutron openstack-neutron-ml2openstack-neutron-linuxbridge ebtables
编辑neutron服务配置文件
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
# mv /etc/neutron/neutron.conf /etc/neutron/neutron.conf_bak
# vim /etc/neutron/neutron.conf
core_plugin = ml2
service_plugins = router
allow_overlapping_ips = True
rpc_backend = rabbit
auth_strategy = keystone
notify_nova_on_port_status_changes = True
notify_nova_on_port_data_changes = True
connection = mysql+pymysql://neutron:NEUTRON_DBPASS@controller/neutron#改为自己数据库密码
rabbit_host = controller
rabbit_userid = openstack
rabbit_password = RABBIT_PASS #改为rabbitmq的密码
auth_uri = http://controller:5000
auth_url = http://controller:35357
memcached_servers = controller:11211
auth_type = password
project_domain_name = default
user_domain_name = default
project_name = service
username = neutron
password = NEUTRON_PASS #改为自己neutron服务的密码
auth_url = http://controller:35357
auth_type = password
project_domain_name = default
user_domain_name = default
region_name = RegionOne
project_name = service
username = nova
password = NOVA_PASS#改为自己nova服务的密码
lock_path = /var/lib/neutron/tmp
编辑ML2插件的配置
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
#mv /etc/neutron/plugins/ml2/ml2_conf.ini /etc/neutron/plugins/ml2/ml2_conf.ini_bak
#vim /etc/neutron/plugins/ml2/ml2_conf.ini
type_drivers = flat,vlan,vxlan
tenant_network_types = vxlan
mechanism_drivers = linuxbridge,l2population
extension_drivers = port_security
flat_networks = provider
vni_ranges = 1:1000
enable_ipset = True
编辑linuxbridge agent 配置文件
1
2
3
4
5
6
7
8
9
10
11
12
13
#mv /etc/neutron/plugins/ml2/linuxbridge_agent.ini /etc/neutron/plugins/ml2/linuxbridge_agent.ini_bak
#vim /etc/neutron/plugins/ml2/linuxbridge_agent.ini
physical_interface_mappings = provider:PROVIDER_INTERFACE_NAME #这里设置为provider网络的网卡名称，我这里eth1
enable_vxlan = True
local_ip = OVERLAY_INTERFACE_IP_ADDRESS#这个ip地址我们使用的是管理网段的ip (10.0.0.11)
l2_population = True
enable_security_group = True
firewall_driver = neutron.agent.linux.iptables_firewall.IptablesFirewallDriver
编辑L3 agent 配置文件
1
2
3
4
5
#mv /etc/neutron/l3_agent.ini /etc/neutron/l3_agent.ini_bak
#vim /etc/neutron/l3_agent.ini
interface_driver = neutron.agent.linux.interface.BridgeInterfaceDriver
external_network_bridge = #留空
编辑dhcp agent配置
1
2
3
4
5
6
#mv /etc/neutron/dhcp_agent.ini /etc/neutron/dhcp_agent.ini_bak
#vim /etc/neutron/dhcp_agent.ini
interface_driver = neutron.agent.linux.interface.BridgeInterfaceDriver
dhcp_driver = neutron.agent.linux.dhcp.Dnsmasq
enable_isolated_metadata = True
配置metadata agent
1
2
3
4
5
#mv /etc/neutron/metadata_agent.ini /etc/neutron/metadata_agent.ini_bak
#vim /etc/neutron/metadata_agent.ini
nova_metadata_ip = controller
metadata_proxy_shared_secret = METADATA_SECRET #修改为自己的METADATA_SECRET,也可以不修改，要和nova服务配置一样
配置nova服务使用network
1
2
3
4
5
6
7
8
9
10
11
12
13
14
#vim /etc/nova/nova.conf #增加以下内容
url = http://controller:9696
auth_url = http://controller:35357
auth_type = password
project_domain_name = default
user_domain_name = default
region_name = RegionOne
project_name = service
username = neutron
password = NEUTRON_PASS #改为自己neutron服务密码
service_metadata_proxy = True
metadata_proxy_shared_secret = METADATA_SECRET #和上面的METADATA对应
给ML2插件做个软连接
1
# ln -s /etc/neutron/plugins/ml2/ml2_conf.ini /etc/neutron/plugin.ini
同步数据库
1
# su -s /bin/sh -c "neutron-db-manage --config-file /etc/neutron/neutron.conf--config-file /etc/neutron/plugins/ml2/ml2_conf.ini upgrade head" neutron
重启nova-api
1
# systemctl restart openstack-nova-api.service
启动neutron相关服务，并设置开机启动
1
2
# systemctl enable neutron-server.service neutron-linuxbridge-agent.service neutron-dhcp-agent.service neutron-metadata-agent.service
# systemctl start neutron-server.service neutron-linuxbridge-agent.service neutron-dhcp-agent.service neutron-metadata-agent.service
启动L3 agent
1
2
# systemctl enable neutron-l3-agent.service
# systemctl start neutron-l3-agent.service
compute 节点配置
一、安装neutron服务
1
# yum install openstack-neutron-linuxbridge ebtables ipset
编辑neutron服务配置
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
#mv /etc/neutron/neutron.conf /etc/neutron/neutron.conf_bak
#vim /etc/neutron/neutron.conf
rpc_backend = rabbit
auth_strategy = keystone
rabbit_host = controller
rabbit_userid = openstack
rabbit_password = RABBIT_PASS #改为rabbit密码
auth_uri = http://controller:5000
auth_url = http://controller:35357
memcached_servers = controller:11211
auth_type = password
project_domain_name = default
user_domain_name = default
project_name = service
username = neutron
password = NEUTRON_PASS #改为自己neutron服务密码
lock_path = /var/lib/neutron/tmp
编辑linuxbridge agent 配置
1
2
3
4
5
6
7
8
9
10
11
12
13
#mv /etc/neutron/plugins/ml2/linuxbridge_agent.ini /etc/neutron/plugins/ml2/linuxbridge_agent.ini_bak
#vim /etc/neutron/plugins/ml2/linuxbridge_agent.ini
physical_interface_mappings = provider:PROVIDER_INTERFACE_NAME#改为provider网络的网卡，这里是eth1
enable_vxlan = True
local_ip = OVERLAY_INTERFACE_IP_ADDRESS #改为本机managent网络的ip地址 10.0.0.31
l2_population = True
enable_security_group = True
firewall_driver = neutron.agent.linux.iptables_firewall.IptablesFirewallDriver
配置nova服务使用network
1
2
3
4
5
6
7
8
9
10
11
#vim/etc/nova/nova.conf#增加以下内容
url = http://controller:9696
auth_url = http://controller:35357
auth_type = password
project_domain_name = default
user_domain_name = default
region_name = RegionOne
project_name = service
username = neutron
password = NEUTRON_PASS #改为自己的neutron服务密码
重启nova服务
1
# systemctl restart openstack-nova-compute.service
启动neutron服务，并加入开机启动
1
2
# systemctl enable neutron-linuxbridge-agent.service
# systemctl start neutron-linuxbridge-agent.service
验证
在controller节点执行
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
#source /root/admin-openrc.sh
# neutron ext-list
+---------------------------+-----------------------------------------------+
| alias | name |
+---------------------------+-----------------------------------------------+
| default-subnetpools | Default Subnetpools |
| network-ip-availability | Network IP Availability |
| network_availability_zone | Network Availability Zone |
| auto-allocated-topology | Auto Allocated Topology Services |
| ext-gw-mode | Neutron L3 Configurable external gateway mode |
| binding | Port Binding |
| agent | agent |
| subnet_allocation | Subnet Allocation |
| l3_agent_scheduler | L3 Agent Scheduler |
| tag | Tag support |
| external-net | Neutron external network |
| net-mtu | Network MTU |
| availability_zone | Availability Zone |
| quotas | Quota management support |
| l3-ha | HA Router extension |
| provider | Provider Network |
| multi-provider | Multi Provider Network |
| address-scope | Address scope |
| extraroute | Neutron Extra Route |
| timestamp_core | Time Stamp Fields addition for core resources |
| router | Neutron L3 Router |
| extra_dhcp_opt | Neutron Extra DHCP opts |
| dns-integration | DNS Integration |
| security-group | security-group |
| dhcp_agent_scheduler | DHCP Agent Scheduler |
| router_availability_zone| Router Availability Zone |
| rbac-policies | RBAC Policies |
| standard-attr-description | standard-attr-description |
| port-security | Port Security |
| allowed-address-pairs | Allowed Address Pairs |
| dvr | Distributed Virtual Router |
+---------------------------+-----------------------------------------------+
# neutron agent-list
+--------------------------------------+--------------------+------------+-------------------+-------+----------------+---------------------------+
| id | agent_type | host | availability_zone | alive | admin_state_up | binary |
+--------------------------------------+--------------------+------------+-------------------+-------+----------------+---------------------------+
| 45320f3f-bea4-44aa-a79a-f7cf582146d1 | L3 agent | controller | nova | :-) | True | neutron-l3-agent |
| 780c205c-867f-4997-90b4-a2f2b2c739bf | Metadata agent | controller | | :-) | True | neutron-metadata-agent |
| 7ba54a28-2a26-41b3-a02b-b69c9e5f83d7 | DHCP agent | controller | nova | :-) | True | neutron-dhcp-agent |
| 9b37f144-f697-4ee9-b761-6ae6ae1d2782 | Linux bridge agent | compute2 | | xxx | True | neutron-linuxbridge-agent |
| c4f84424-9e37-417f-b587-d474d7b8c6fd | Linux bridge agent | compute1 | | :-) | True | neutron-linuxbridge-agent |
| ca7f5ce5-ef15-4777-8c53-70bb32939d9e | Linux bridge agent | controller | | :-) | True | neutron-linuxbridge-agent |
+--------------------------------------+--------------------+------------+-------------------+-------+----------------+---------------------------+
我这里compute2没有启动所以 alive状态是xxx
出现以上信息，表示安装成功。
页:
[1]