隨筆-unitOpenStack包含兩種網(wǎng)絡(luò)服務(wù)

1、UNIT 5UNIT 5OpenStack包含OpenStack包含兩種網(wǎng)絡(luò)OpenStack Networking (Neutron)基本概OpenStack Networking (Neutron)基本概念。Neutron網(wǎng)絡(luò)Neutron網(wǎng)絡(luò)的一種典型結(jié)安裝并配安裝并配置controller節(jié)配置先決條安裝網(wǎng)絡(luò)服務(wù)組配置網(wǎng)絡(luò)服務(wù)組配置Modular Layer2(ML2)插配置計(jì)算服務(wù)使用完成安驗(yàn)配置先決條配置先決條 -uroot-GRANTALLPRIVILEGESONneutron.*TOneutronlocalhostIDENTIFIEDBY GRANTALLPRIVILEGESO

2、Nneutron.*TOneutron%IDENTIFIEDBY #keystoneuser-create-nameneutron-#keystoneuser-role-add-userneutron-tenantservice-role#sourceadmin-#rvice-create-nameneutron-typenetwork-description#rvice-create-nameneutron-typenetwork-description#keystone-service-id -publicurl HYPERLINK http:/c/ -adminurl HYPERLINK

3、 http:/c/ -creatervice-list|awk/network/:9696:9696:9696$2)ernalurl HYPERLINK http:/c/ -region #yuminstallopenstack-neutron #yuminstallopenstack-neutronopenstack-neutron- nt配置網(wǎng)絡(luò)服務(wù)組配置網(wǎng)絡(luò)服務(wù)組：rpc_backend=rabbit rabbit_host = crabbit_password=connection：core_plugin = ml2 service_plugins=router_ips=auth_st

4、rategy=auth_uri = HYPERLINK http:/c/ http:/cidentity_uri = HYPERLINK http:/c/ http:/cadmin_tenant_name = service admin_user = neutron admin_password=NEUTRON_PASS注：可通過keystone注：可通過keystonetenant-getservice，獲取service租戶IDus_changes=notify_nova_on_port_data_changes=nova_url = HYPERLINK http:/c/ http:/cn

5、ova_admin_auth_url = HYPERLINK http:/c/ http:/cnova_region_name = regionOnenova_admin_username = nova nova_admin_tenant_id=SERVICE_TENANT_ID nova_admin_password = NOVA_PASSee =a.編輯ml2小節(jié)，啟用flat和genericroutingencapsulation(GRE)tunnel_id_ranges=type_drivers = flat,gre tenant_network_types = gre mechani

6、sm_drivers=openvswitchenable_security_group=True enable_ipset = Truefirewall_driver=配置計(jì)算服務(wù)使用配置計(jì)算服務(wù)使用network_api_class=work.neutronv2.api.API security_group_api = neutronerface_driver=firewall_driver=url= HYPERLINK http:/c/ auth_strategy=admin_auth_url= HYPERLINK http:/c/ admin_tenant_name = service

7、admin_username = neutron admin_password=NEUTRON_PASS完成配完成配#systemctlenableneutron-server.service # systemctl start neutron-server.service#su-s/bin/sh-cneutron-db-manage-config-file/etc/neutron/neutron.conf-config- file /etc/neutron/plugins/ml2/ml2_conf.ini upgrade juno neutron#ln-s/etc/neutron/plugi

8、ns/ml2/ml2_conf.ini驗(yàn)驗(yàn)#neutronext-#sourceadmin-安裝并安裝并配置network配置先決條安裝網(wǎng)絡(luò)組配置網(wǎng)絡(luò)通用組配置ModularLayer2(ML2plug-配置Layer-3(L3配置DHCP配置metadata 完成安驗(yàn)配置先覺條配置先覺條#yuminstallopenstack-neutronopenstack-neutron-ml2openstack-neutron-#sysctl-配置網(wǎng)絡(luò)通配置網(wǎng)絡(luò)通用組rpc_backend=rabbit rabbit_host = crabbit_password=：auth_strategy=aut

9、h_uri = HYPERLINK http:/c/ http:/cidentity_uri = HYPERLINK http:/c/ http:/cadmin_tenant_name = service admin_user = neutron admin_password=NEUTRON_PASScore_plugin = ml2 service_plugins=router_ips=e =配置ModularLayer2(ML2)配置ModularLayer2(ML2)plug-ML2插件使用OpenvSwitchOVS)a.編輯ml2小節(jié)，啟用flat和genericroutingenc

10、apsulation(GRE)flat_networks=type_drivers = flat,gre tenant_network_types = gre mechanism_drivers=openvswitchenable_security_group=True enable_ipset = Truefirewall_driver=tunnel_id_ranges=e.編輯ovs小節(jié),配置OpenvSwitche.編輯ovs小節(jié),配置OpenvSwitchlocal_ip=tunnel_type=enable_tunneling =s=external:br-e =erface_dri

11、ver = neutron.agent.linux.= Trueexternal_network_bridge=br-配置DHCPerface_driver配置DHCPerface_driver=dhcp_driver=e = 啟用DHCPMTU選項(xiàng)(26)并配置值為#pkill 配置metadata 配置metadata nova_metadata_ip=auth_url = HYPERLINK http:/c/ http:/cauth_region = regionOneadmin_tenant_name = service admin_user = neutron admin_passw

12、ord=NEUTRON_PASSe = #systemctlrestartopenstack-nova-service_metadata_proxy = True 配置Open vSwitch (OVS)服配置Open vSwitch (OVS)服2、添加外部網(wǎng)橋(external#ovs-vsctladd-portbr-#ovs-vsctladd-brbr-#systemctlenable#systemctlstart完成安完成安#systemctlenableneutron-openvswitch-agent.serviceneutron-l3-agent.serviceneutron-

13、dhcp-agent.service neutron-metadata-agent.service neutron-ovs-cleanup.service#systemctlstartneutron-openvswitch-agent.serviceneutron-l3-agent.serviceneutron- dhcp-agent.service neutron-metadata-agent.service#ln-s/etc/neutron/plugins/ml2/ml2_conf.ini#sed-i驗(yàn)證(在controller節(jié)點(diǎn)驗(yàn)證(在controller節(jié)點(diǎn)執(zhí)行下列命令 #neutr

14、onagent-#sourceadmin-安裝并安裝并配置compute1節(jié)配置先決條安裝網(wǎng)絡(luò)組配置網(wǎng)絡(luò)通用組配置ModularLayer2(ML2plug-配置OpenvSwitchOVS配置計(jì)算服務(wù)使用網(wǎng)完成安驗(yàn)配置先決條配置先決條安裝網(wǎng)絡(luò)組# yuminstallopenstack-neutron-ml2openstack-neutron-#sysctl-配置網(wǎng)絡(luò)通用組配置網(wǎng)絡(luò)通用組：rpc_backend=rabbit rabbit_host = crabbit_password=：auth_strategy：auth_strategy=auth_uri = HYPERLINK htt

15、p:/c/ http:/c identity_uri = HYPERLINK http:/c/ http:/c admin_tenant_name=service admin_user = neutronadmin_password= _ips=e =core_plugin = ml2 service_plugins=routera.編輯ml2小節(jié)，啟用flat和genericroutingencapsulation(GRE)網(wǎng)絡(luò)類型驅(qū)動(dòng)，GRE租type_drivers = flat,gre tenant_network_types = gre mechanism_drivers=openv

16、switchtunnel_id_ranges= d.編輯ovs小節(jié)，配置OpenvSwitchOVSlocal_ip=tunnel_type=enable_tunneling =enable_security_group=True enable_ipset = Truefirewall_driver=配置Open vSwitch配置Open vSwitch (OVS) #systemctlenableopenvswitch.service # systemctl start openvswitch.service配置計(jì)算服務(wù)使用配置計(jì)算服務(wù)使用網(wǎng)erface_driver=firewall_d

17、river=network_api_class=work.neutronv2.api.API security_group_api = neutronurl = HYPERLINK http:/c/ http:/curl = HYPERLINK http:/c/ http:/c auth_strategy = keystone admin_auth_url= HYPERLINK http:/c/ http:/cadmin_tenant_name=service admin_username = neutronadmin_password=完成安完成安#systemctlenableneutro

18、n-openvswitch-agent.service # systemctl start neutron-openvswitch-agent.service#systemctl#ln-s/etc/neutron/plugins/ml2/ml2_conf.ini#sed-i驗(yàn)證(在controller節(jié)點(diǎn)驗(yàn)證(在controller節(jié)點(diǎn)執(zhí)行下列命令，確認(rèn)啟動(dòng)neutronagents#neutronagent-#sourceadmin-Gateway Gateway subnet/24(demo-subnet) GateWay 虛擬機(jī)實(shí)例subnet/24(demo-（不配置配置外部網(wǎng)配置外部網(wǎng)絡(luò)(在controller節(jié)點(diǎn)執(zhí)行后令創(chuàng)建一個(gè)外部網(wǎng)創(chuàng)建一個(gè)外部網(wǎng)絡(luò)的