openstack私有云布署实践【13.2 网络Neutron-compute节点配置（办公网环境）】
所有compute节点下载安装组件
# yum install openstack-neutron openstack-neutron-linuxbridge ebtables ipset -y
修改新增内核参数：
vi /etc/sysctl.conf
net.ipv4.conf.default.rp_filter=0
net.ipv4.conf.all.rp_filter=0
net.bridge.bridge-nf-call-iptables=1
net.bridge.bridge-nf-call-ip6tables=1
sysctl -p
提示：sysctl: cannot stat /proc/sys/net/bridge/bridge-nf-call-iptables: 没有那个文件或目录
sysctl: cannot stat /proc/sys/net/bridge/bridge-nf-call-ip6tables: 没有那个文件或目录
解决方法如下：
modprobe bridge
lsmod|grep bridge
sysctl -p
1公有网络配置+私有网络配置-----------------这里我以compute1节点为例，其它节点的配置是相同的，只是IP 和 网卡对应的名称不同而已
配置neutron服务
vi/etc/neutron/neutron.conf
rpc_backend = rabbit
auth_strategy = keystone
verbose = True
rabbit_host=controller
rabbit_userid = openstack
rabbit_password = openstack
rabbit_retry_interval=1
rabbit_retry_backoff=2
rabbit_max_retries=0
rabbit_durable_queues=true
rabbit_ha_queues=true
auth_uri = http://controller:5000
auth_url = http://controller:35357
auth_plugin = password
project_domain_id = default
user_domain_id = default
project_name = service
username = neutron
password = neutron
lock_path = /var/lib/neutron/tmp
配置Linux bridge服务
vi /etc/neutron/plugins/ml2/linuxbridge_agent.ini
physical_interface_mappings = public:bond0
enable_vxlan = True
local_ip = 10.40.42.11
l2_population = False
prevent_arp_spoofing = True
enable_security_group = True
firewall_driver = neutron.agent.linux.iptables_firewall.IptablesFirewallDriver
enable_ipset = True
添加neutron服务到nova中-----在11节中我就有提到的那个紫色的提前配置，这里再提一次
vi /etc/nova/nova.conf
url = http://controller:9696
auth_url = http://controller:35357
auth_plugin = password
project_domain_id = default
user_domain_id = default
region_name = RegionOne
project_name = service
username = neutron
password = neutron
重启nova api服务
# systemctl restart openstack-nova-compute.service
开机自启，开启服务
# systemctl enable neutron-linuxbridge-agent.service
# systemctl restart neutron-linuxbridge-agent.service
验证：
在controller上
source admin-openrc.sh
# neutron ext-list
+-----------------------+-----------------------------------------------+
| alias | name |
+-----------------------+-----------------------------------------------+
| dns-integration | DNS Integration |
| ext-gw-mode | Neutron L3 Configurable external gateway mode |
| binding | Port Binding |
| agent | agent |
| subnet_allocation | Subnet Allocation |
| l3_agent_scheduler | L3 Agent Scheduler |
| external-net | Neutron external network |
| flavors | Neutron Service Flavors |
| net-mtu | Network MTU |
| quotas | Quota management support |
| l3-ha | HA Router extension |
| provider | Provider Network |
| multi-provider | Multi Provider Network |
| extraroute | Neutron Extra Route |
| router | Neutron L3 Router |
| extra_dhcp_opt | Neutron Extra DHCP opts |
| security-group | security-group |
| dhcp_agent_scheduler| DHCP Agent Scheduler |
| rbac-policies | RBAC Policies |
| port-security | Port Security |
| allowed-address-pairs | Allowed Address Pairs |
| dvr | Distributed Virtual Router |
+-----------------------+-----------------------------------------------+
# neutron agent-list --显示为true代表正常
+--------------------------------------+--------------------+---------------+-------+----------------+---------------------------+
| id | agent_type | host | alive | admin_state_up | binary |
+--------------------------------------+--------------------+---------------+-------+----------------+---------------------------+
| 1811b84c-6cbc-4d7e-bd48-42d994dab725 | Metadata agent | kxcontroller1 | :-) | True | neutron-metadata-agent |
| 1c8cb6af-3d55-4f43-8667-bea1478c47e7 | Linux bridge agent | kxcompute6 | :-) | True | neutron-linuxbridge-agent |
| 24f4c9c9-07d8-4b5b-acec-52a9e667e78d | Linux bridge agent | kxcompute7 | :-) | True | neutron-linuxbridge-agent |
| 392dc2f7-f1a9-4503-b233-a0c3e158414f | Linux bridge agent | kxcompute9 | :-) | True | neutron-linuxbridge-agent |
| 3db2a560-1854-4415-a193-fea5e8810a74 | L3 agent | kxcontroller2 | :-) | True | neutron-l3-agent |
| 42c75bc2-467c-43a1-8e72-40fb7885e518 | DHCP agent | kxcontroller2 | :-) | True | neutron-dhcp-agent |
| 67f29b57-2337-4b5c-aabd-8e4e539900c5 | L3 agent | kxcontroller1 | :-) | True | neutron-l3-agent |
| 6fb77933-ae56-4114-b984-676ebe338928 | Linux bridge agent | kxcontroller1 | :-) | True | neutron-linuxbridge-agent |
| 77e84a0d-0a37-4187-8514-740742aa7e83 | Linux bridge agent | kxcontroller2 | :-) | True | neutron-linuxbridge-agent |
| 78e8d51b-83f5-497c-b958-a341d24ab1f9 | Linux bridge agent | kxcompute5 | :-) | True | neutron-linuxbridge-agent |
| 8a2d383b-5169-4fbb-8c38-e4f9f3691148 | Linux bridge agent | kxcompute4 | :-) | True | neutron-linuxbridge-agent |
| a0d8191c-383d-4a19-93da-be34ca28cf41 | Linux bridge agent | kxcompute3 | :-) | True | neutron-linuxbridge-agent |
| aca314fa-ffc5-4ced-8a20-311a2c20f272 | DHCP agent | kxcontroller1 | :-) | True | neutron-dhcp-agent |
| c72af482-8a87-4777-ad81-ddcf583a4ad6 | Metadata agent | kxcontroller2 | :-) | True | neutron-metadata-agent |
| c7c80a0b-6011-4d80-a7ab-a47e2c510be2 | Linux bridge agent | kxcompute8 | :-) | True | neutron-linuxbridge-agent |
| dd72cb0c-e6dd-4493-afa4-acbd54d13a45 | Linux bridge agent | kxcompute1 | :-) | True | neutron-linuxbridge-agent |
| f7edb96e-46bf-430c-8de0-7c197574e6a6 | Linux bridge agent | kxcompute2 | :-) | True | neutron-linuxbridge-agent |
+--------------------------------------+--------------------+---------------+-------+----------------+---------------------------+
页:
[1]