Openstack-Neutron網絡服務

Openstack-Neutron網絡服務

教程大綱

      

1. Neutron的服務組件介紹
2. Neutron的安裝部署

1.neutron 網絡服務部分i

mysql -u root -p -e "create database neutron;"

mysql -u root -p -e "grant all privileges on neutron.* to 'neutron'@'localhost' identified by 'neutron';"

mysql -u root -p -e "grant all privileges on neutron.* to 'neutron'@'%' identified by 'neutron';"

2.安裝neutron網絡組件

yum install openstack-neutron openstack-neutron-ml2 \

  openstack-neutron-linuxbridge ebtables

3.配置neutron 配置文件

【DEFAULT】

auth_strategy = keystone

core_plugin = ml2   核心插件ml2

service_plugins = router 

修改消息通知

notify_nova_on_port_status_changes = true   

notify_nova_on_port_data_changes = true

verbose = True

rpc_backend = rabbit

connection = mysql://neutron:neutron@192.168.100.40:3306/neutron

【neutron】

auth_uri = http://192.168.100.40:5000

auth_url = http://192.168.100.40:35357

auth_type = password

project_domain_name = default

user_domain_name = default

project_name = service

username = neutron

password = neutron

【nova】

auth_url=http://192.168.100.40:35357

auth_type=password

project_domain_name=default

user_domain_name=default

region_name=RegionOne

project_name =service

username =nova

password =nova

lock_path = /var/lib/neutron/tmp

rabbit_host = 192.168.100.40

rabbit_port = 5672

rabbit_userid = openstack

rabbit_password = openstack

4.修改ml2 二層交換的網絡類型的修改

vi    /etc/neutron/plugins/ml2/ml2_conf.ini 

type_drivers = local,flat,vlan,gre,vxlan,geneve  支持的驅動

tenant_network_types = vlan,gre,vxlan,geneve   網絡類型

mechanism_drivers = openvswitch,linuxbridge           網絡底層的驅動

extension_drivers = port_security          端口安全

flat_networks = physnet1     設置單一扁平網絡

enable_ipset = true

5.修改網橋的修改linuxbridge_agent.ini 

prevent_arp_spoofing = true
physical_interface_mappings =physnet1:eth0  網卡映射
firewall_driver = neutron.agent.linux.iptables_firewall.IptablesFirewallDriver 
enable_security_group = true
enable_vxlan = false   關閉vxlan

6.dhcp的配置文件修改 

vi   /etc/neutron/dhcp_agent.ini 

interface_driver = neutron.agent.linux.interface.BridgeInterfaceDriver 網橋

dhcp_driver = neutron.agent.linux.dhcp.Dnsmasq    默認dnsmasq  dhcp

enable_isolated_metadata = True

7.metadata的修改

vi /neutron/metadata_agent.ini 

【keystone認證的】

auth_uri = http://192.168.100.40:5000

auth_url = http://192.168.100.40:35357

auth_type = password

project_domain_name = default

user_domain_name = default

region_name = RegionOne

project_name = service

username = neutron

password = neutron

nova_metadata_ip = 192.168.100.40   

metadata_proxy_shared_secret =neutron 開啓祕鑰憑證

8.修改Nova的中添加neutron的網絡註冊信息

vi  /etc/nova/nova.conf

【neutron】

url = http://192.168.100.40:9696

auth_url = http://192.168.100.40:35357

auth_type = password

project_domain_name = default

user_domain_name = default

region_name = RegionOne

project_name = service

username = neutron

password = neutron

service_metadata_proxy=True  開啓

metadata_proxy_shared_secret =neutron  共享祕鑰

9.建立超鏈ml2 

ln -s /etc/neutron/plugins/ml2/ml2_conf.ini /etc/neutron/plugin.ini

10.建立neutron用戶

. admin-openrc

openstack user create --domain default --password-prompt neutron

neutron添加到admin

openstack role add --project service --user neutron admin

建立一個實例

openstack service create --name neutron \

  --description "OpenStack Networking" network

添加三個節點：

openstack endpoint create --region RegionOne \

network public http://192.168.100.40:9696

           

openstack endpoint create --region RegionOne \

network internal http://192.168.100.40:9696

openstack endpoint create --region RegionOne \

network admin http://192.168.100.40:9696

11.同步數據庫信息

su -s /bin/sh -c "neutron-db-manage --config-file /etc/neutron/neutron.conf \

  --config-file /etc/neutron/plugins/ml2/ml2_conf.ini upgrade head" neutron

13. 重啓服務Nova-api 和neutron

systemctl restart openstack-nova-api.service

  neutron服務

  systemctl enable neutron-server.service \

  neutron-linuxbridge-agent.service neutron-dhcp-agent.service \

  neutron-metadata-agent.service

  systemctl restart neutron-server.service \

  neutron-linuxbridge-agent.service neutron-dhcp-agent.service \

  neutron-metadata-agent.service

14.計算節點的neutron網絡組件

 安裝 linuxbridge 網橋

yum install openstack-neutron-linuxbridge ebtables ipset

15.計算節點只作neutron和linuxbridge  和ml2_conf.ini的配置文件的修改。

 scp /etc/neutron/neutron.conf 192.168.100.50:/etc/neutron/

scp /etc/neutron/plugins/ml2/linuxbridge_agent.ini 192.168.100.40:/etc/neutron/plugins/ml2/

scp /etc/neutron/plugins/ml2/ml2_conf.ini 192.168.100.40:/etc/neutron/plugins/ml2/

16.修改計算節點上Nova配置 

【neutron】

url = http://192.168.100.40:9696

auth_url = http://192.168.100.40:35357

auth_type = password

project_domain_name = default

user_domain_name = default

region_name = RegionOne

project_name = service

username = neutron

password = neutron

17.作一個軟鏈接ml2

ln -s /etc/neutron/plugins/ml2/ml2_conf.ini /etc/neutron/plugin.ini

16.重啓Nova-api和重啓neutron

systemctl restart openstack-nova-compute.service

systemctl enable neutron-linuxbridge-agent.service

systemctl restart neutron-linuxbridge-agent.service

16.測試查看

neutron agent-list

請觀看視屏

視屏會在騰訊課堂和優酷、56視屏網站中上傳。請你們搜索中祥課堂便可觀看