7. Neutron(Rocky) - 网络服务(Provide

作者: 找呀找提莫 | 来源:发表于2020-07-19 21:32 被阅读0次

7.1 Neutorn说明(略)

不废话了

7.2 部署Neutorn(Crontroller节点)

在 controller节点部署；

7.2.1 创建Neutron数据库

CREATE DATABASE neutron;

GRANT ALL PRIVILEGES ON neutron.* TO 'neutron'@'localhost' IDENTIFIED BY 'neutron';
GRANT ALL PRIVILEGES ON neutron.* TO 'neutron'@'%' IDENTIFIED BY 'neutron';

FLUSH PRIVILEGES;

7.2.2 创建Neutron用户

source admin-openrc

创建 neutron用户

openstack user create --domain default --password-prompt neutron
User Password:neutron
Repeat User Password:neutron
+---------------------+----------------------------------+
| Field               | Value                            |
+---------------------+----------------------------------+
| domain_id           | default                          |
| enabled             | True                             |
| id                  | b5fb09e2e84a43308a860fb732d72c84 |
| name                | neutron                          |
| options             | {}                               |
| password_expires_at | None                             |
+---------------------+----------------------------------+

给 neutron用户分配 admin 角色，并加入到 service 项目

openstack role add --project service --user neutron admin

创建 neutron服务

openstack service create --name neutron --description "OpenStack Networking" network
+-------------+----------------------------------+
| Field       | Value                            |
+-------------+----------------------------------+
| description | OpenStack Networking             |
| enabled     | True                             |
| id          | 0f45506dab5c4917a7678bd57d997483 |
| name        | neutron                          |
| type        | network                          |
+-------------+----------------------------------+

创建 neutronAPI 端点

openstack endpoint create --region RegionOne network public http://controller:9696
+--------------+----------------------------------+
| Field        | Value                            |
+--------------+----------------------------------+
| enabled      | True                             |
| id           | 5c3908dc3b1a40008b5f395e6542699d |
| interface    | public                           |
| region       | RegionOne                        |
| region_id    | RegionOne                        |
| service_id   | 0f45506dab5c4917a7678bd57d997483 |
| service_name | neutron                          |
| service_type | network                          |
| url          | http://controller:9696           |
+--------------+----------------------------------+

openstack endpoint create --region RegionOne network internal http://controller:9696
+--------------+----------------------------------+
| Field        | Value                            |
+--------------+----------------------------------+
| enabled      | True                             |
| id           | e432464cd5614537a98223b2b369746e |
| interface    | internal                         |
| region       | RegionOne                        |
| region_id    | RegionOne                        |
| service_id   | 0f45506dab5c4917a7678bd57d997483 |
| service_name | neutron                          |
| service_type | network                          |
| url          | http://controller:9696           |
+--------------+----------------------------------+

openstack endpoint create --region RegionOne network admin http://controller:9696
+--------------+----------------------------------+
| Field        | Value                            |
+--------------+----------------------------------+
| enabled      | True                             |
| id           | a3ed7b3e88ad41f8b75b2bcb43c31ae7 |
| interface    | admin                            |
| region       | RegionOne                        |
| region_id    | RegionOne                        |
| service_id   | 0f45506dab5c4917a7678bd57d997483 |
| service_name | neutron                          |
| service_type | network                          |
| url          | http://controller:9696           |
+--------------+----------------------------------+

7.2.3 安装配置Neutron

Neutron 有两种网络选项：

公共网络：简单，但是只支持实例连接到公有网络(外部网络)；没有私有网络（个人网络），路由器以及浮动IP地址；只有admin或者其他特权用户才可以管理公有网络；
私有网络：在 公共网络 的基础上多了layer－3服务，支持实例连接到私有网络。demo或者其他没有特权的用户可以管理自己的私有网络，包含连接公网和私网的路由器；另外，浮动IP地址可以让实例使用私有网络连接到外部网络；

这里使用 共有网络；

私有网络配置失败，起来后DashBoard各种报错；先弄公有的跑通再说；

# 安装 Neutron
yum install openstack-neutron openstack-neutron-ml2 openstack-neutron-linuxbridge ebtables

# 配置Neutron
vim /etc/neutron/neutron.conf

数据库配置

[database]
connection = mysql+pymysql://neutron:neutron@controller.alec.com/neutron

配置 the Modular Layer 2 (ML2) plug-in router service 缺省

[DEFAULT]
core_plugin = ml2
service_plugins =

配置RabbitMQ消息队列

[DEFAULT]
transport_url = rabbit://alec:alec@controller
#                        用户  密码

配置认证服务访问

[DEFAULT]
auth_strategy = keystone

[keystone_authtoken]
www_authenticate_uri = http://controller:5000
auth_url = http://controller:5000
memcached_servers = controller:11211
auth_type = password
project_domain_name = default
user_domain_name = default
project_name = service
username = neutron
password = neutron

配置网络服务通知计算节点的网络拓扑变化

[DEFAULT]
notify_nova_on_port_status_changes = true
notify_nova_on_port_data_changes = true

[nova]
auth_url = http://controller:5000
auth_type = password
project_domain_name = default
user_domain_name = default
region_name = RegionOne
project_name = service
username = nova
password = nova

配置锁路径

[oslo_concurrency]
lock_path = /var/lib/neutron/tmp

7.2.4 配置 Modular Layer 2 (ML2) 插件

vim /etc/neutron/plugins/ml2/ml2_conf.ini

启用flat，VLAN

配置完ML2插件后，移除type_drivers项，否则会导致数据库不一致

[ml2]
type_drivers = flat,vlan

禁用私有网络

[ml2]
tenant_network_types =

启用Linuxbridge

[ml2]
mechanism_drivers = linuxbridge

启用端口安全扩展驱动

[ml2]
extension_drivers = port_security

配置公共虚拟网络为flat网络

[ml2_type_flat]
flat_networks = provider

启用 ipset 增加安全组规则的高效性

[securitygroup]
enable_ipset = true

7.2.5 配置Linuxbridge代理

vim /etc/neutron/plugins/ml2/linuxbridge_agent.ini

将公共虚拟网络和公共物理网络接口对应起来

# 只有一块网卡，直接用就好；
[linux_bridge]
physical_interface_mappings = provider:ens33

禁用VXLAN覆盖网络

[vxlan]
enable_vxlan = false

启用安全组并配置 Linuxbridge iptables firewall driver

[securitygroup]
enable_security_group = true
firewall_driver = neutron.agent.linux.iptables_firewall.IptablesFirewallDriver

配置网络参数

# 加载br_netfilter模块
depmod 
modprobe br_netfilter
lsmod | grep br_netfilter
    br_netfilter           22256  0 
    bridge                151336  1 br_netfilter

sysctl -w net.bridge.bridge-nf-call-iptables=1
sysctl -w net.bridge.bridge-nf-call-ip6tables=1

7.2.6 配置DHCP代理

vim /etc/neutron/dhcp_agent.ini

配置Linuxbridge驱动接口，DHCP驱动并启用隔离元数据，这样在公共网络上的实例就可以通过网络来访问元数据

[DEFAULT]
interface_driver = linuxbridge
dhcp_driver = neutron.agent.linux.dhcp.Dnsmasq
enable_isolated_metadata = true

7.2.7 配置元数据代理

vim /etc/neutron/metadata_agent.ini

配置元数据主机以及共享密码

# 共享密码使用默认的就行，和nova里的配置保持一致就好；
[DEFAULT]
nova_metadata_host = controller
metadata_proxy_shared_secret = METADATA_SECRET

7.2.9 配置Nova使用Neutron

vim /etc/nova/nova.conf
auth_url = http://controller:5000
auth_type = password
project_domain_name = default
user_domain_name = default
region_name = RegionOne
project_name = service
username = neutron
password = neutron
service_metadata_proxy = true
metadata_proxy_shared_secret = METADATA_SECRET

7.2.10 启动服务

网络服务初始化脚本需要一个超链接 /etc/neutron/plugin.ini指向ML2插件配置文件/etc/neutron/plugins/ml2/ml2_conf.ini。如果超链接不存在，使用下面的命令创建它

ln -sv /etc/neutron/plugins/ml2/ml2_conf.ini /etc/neutron/plugin.ini

同步数据库

su -s /bin/sh -c "neutron-db-manage --config-file /etc/neutron/neutron.conf \
  --config-file /etc/neutron/plugins/ml2/ml2_conf.ini upgrade head" neutron

重启nova服务

systemctl restart openstack-nova-api.service

启动服务

systemctl start neutron-server neutron-linuxbridge-agent neutron-dhcp-agent neutron-metadata-agent
systemctl enable neutron-server neutron-linuxbridge-agent neutron-dhcp-agent neutron-metadata-agent

7.3 部署Neutorn(Compute节点)

7.3.1 安装配置neutron

# 安装配置 Neutron
yum install openstack-neutron-linuxbridge ebtables ipset

# 配置 Neutron
vim /etc/neutron/neutron.conf

配置rabbitmq

[DEFAULT]
transport_url = rabbit://alec:alec@controller

配置认证服务访问

[DEFAULT]
auth_strategy = keystone

[keystone_authtoken]
www_authenticate_uri = http://controller:5000
auth_url = http://controller:5000
memcached_servers = controller:11211
auth_type = password
project_domain_name = default
user_domain_name = default
project_name = service
username = neutron
password = neutron

配置锁路径

[oslo_concurrency]
lock_path = /var/lib/neutron/tmp

7.3.2 配置Linuxbridge代理

vim /etc/neutron/plugins/ml2/linuxbridge_agent.ini

将公共虚拟网络和公共物理网络接口对应起来

# 只有一块网卡，直接用就好
[linux_bridge]
physical_interface_mappings = provider:ens33

禁用VXLAN覆盖网络

[vxlan]
enable_vxlan = False

启用安全组并配置 Linuxbridge iptables firewall driver

[securitygroup]
enable_security_group = True
firewall_driver = neutron.agent.linux.iptables_firewall.IptablesFirewallDriver

配置网络参数

# 加载br_netfilter模块
depmod 
modprobe br_netfilter
lsmod | grep br_netfilter
    br_netfilter           22256  0 
    bridge                151336  1 br_netfilter

sysctl -w net.bridge.bridge-nf-call-iptables=1
sysctl -w net.bridge.bridge-nf-call-ip6tables=1

3.7.3 配置Nova使用Neutron

vim /etc/nova/nova.conf
auth_url = http://controller:5000
auth_type = password
project_domain_name = default
user_domain_name = default
region_name = RegionOne
project_name = service
username = neutron
password = neutron

3.7.5 启动服务

重启nova服务

systemctl restart openstack-nova-compute.service

启动Linux bridge agent

systemctl enable neutron-linuxbridge-agent.service
systemctl start neutron-linuxbridge-agent.service

7.4 检查服务状态

openstack network agent list
+--------------------------------------+--------------------+------------+-------------------+-------+-------+---------------------------+
| ID                                   | Agent Type         | Host       | Availability Zone | Alive | State | Binary                    |
+--------------------------------------+--------------------+------------+-------------------+-------+-------+---------------------------+
| 0947fd08-bc7d-4735-bd84-40a058e4fb3a | Linux bridge agent | controller | None              | :-)   | UP    | neutron-linuxbridge-agent |
| b21a5f68-f293-4562-a3d3-920043da63c1 | Metadata agent     | controller | None              | :-)   | UP    | neutron-metadata-agent    |
| e0cb00ff-df6d-44aa-8136-36b9afaf2c8f | DHCP agent         | controller | nova              | :-)   | UP    | neutron-dhcp-agent        |
| f29dfff9-fed0-406f-b287-c74932f0fc8e | Linux bridge agent | compute    | None              | :-)   | UP    | neutron-linuxbridge-agent |
+--------------------------------------+--------------------+------------+-------------------+-------+-------+---------------------------+

7. Neutron(Rocky) - 网络服务(Provide

7.1 Neutorn说明(略)

7.2 部署Neutorn(Crontroller节点)

7.2.1 创建Neutron数据库

7.2.2 创建Neutron用户

7.2.3 安装配置Neutron

7.2.4 配置 Modular Layer 2 (ML2) 插件

7.2.5 配置Linuxbridge代理

7.2.6 配置DHCP代理

7.2.7 配置元数据代理

7.2.9 配置Nova使用Neutron

7.2.10 启动服务

7.3 部署Neutorn(Compute节点)

7.3.1 安装配置neutron

7.3.2 配置Linuxbridge代理

3.7.3 配置Nova使用Neutron

3.7.5 启动服务

7.4 检查服务状态

相关文章

网友评论

延伸阅读

深度阅读

栏目导航

热点阅读