宝马娱乐bm1395

書名： Production Ready OpenStack：Recipes for Successful Environments
作者名： Arthur Berezin
本章字數： 626字
更新時間： 2021-07-09 21:45:16

Configuring Neutron network node

After we have configured Neutron-server on the controller node, we can proceed and configure the network server that is responsible for routing and connecting the OpenStack environment to the public network.

How to do it...

Neutron network node runs the networking services layer 2 management agent, DHCP service, L3 management agent, and metadata services agent. We will install and configure Neutron network node services to use the ML2 plugin.

Run the following commands on Neutron network node!

Enable IP forwarding and reverse path filtering, edit /etc/sysctl.conf to contain the following:
```
net.ipv4.ip_forward=1
net.ipv4.conf.all.rp_filter=0
net.ipv4.conf.default.rp_filter=0
```
and apply the new settings:
```
[root@nnn ~]# sysctl -p
```

Then install the needed packages:

[root@nnn ~]# yum install openstack-neutron openstack-neutron-ml2 openstack-neutron-openvswitch

Configure message broker

Configure Neutron to use RabbitMQ message broker of the controller:

Note

Remember to change 10.10.0.1 to your controller management IP.

[root@nnn ~]# openstack-config --set /etc/neutron/neutron.conf DEFAULT rpc_backend rabbit
[root@nnn ~]# openstack-config --set /etc/neutron/neutron.conf DEFAULT rabbit_host 10.10.0.1

Configure Neutron service

Configure Neutron to use Keystone as an authentication strategy:

[root@nnn ~]# openstack-config --set /etc/neutron/neutron.conf DEFAULT \ auth_strategy keystone
[root@nnn ~]# openstack-config --set /etc/neutron/neutron.conf keystone_authtoken auth_uri http://controller:5000
[root@nnn ~]# openstack-config --set /etc/neutron/neutron.conf keystone_authtoken auth_host controller
[root@nnn ~]# openstack-config --set /etc/neutron/neutron.conf keystone_authtoken auth_protocol http
[root@nnn ~]# openstack-config --set /etc/neutron/neutron.conf keystone_authtoken auth_port 35357
[root@nnn ~]# openstack-config --set /etc/neutron/neutron.conf keystone_authtoken admin_tenant_name services
[root@nnn ~]# openstack-config --set /etc/neutron/neutron.conf keystone_authtoken admin_user neutron
[root@nnn ~]# openstack-config --set /etc/neutron/neutron.conf keystone_authtoken admin_password password

Configure Neutron to use the ML2 Neutron plugin:

[root@nnn ~]# openstack-config --set /etc/neutron/neutron.conf DEFAULT core_plugin ml2
[root@nnn ~]# openstack-config --set /etc/neutron/neutron.conf DEFAULT service_plugins router

Configure Layer 3 agent that provides routing services for instances:

[root@nnn ~]# openstack-config --set /etc/neutron/l3_agent.ini DEFAULT interface_driver neutron.agent.linux.interface.OVSInterfaceDriver
[root@nnn ~]# openstack-config --set /etc/neutron/l3_agent.ini DEFAULT use_namespaces True

Configure the DHCP agent, which provides DHCP services for instances:

[root@nnn ~]# openstack-config --set /etc/neutron/dhcp_agent.ini DEFAULT interface_driver neutron.agent.linux.interface.OVSInterfaceDriver
[root@nnn ~]# openstack-config --set /etc/neutron/dhcp_agent.ini DEFAULT dhcp_driver neutron.agent.linux.dhcp.Dnsmasq
[root@nnn ~]# openstack-config --set /etc/neutron/dhcp_agent.ini DEFAULT use_namespaces True

Configure instances Metadata service:

[root@nnn ~]# openstack-config --set /etc/neutron/metadata_agent.ini DEFAULT \auth_url http://controller:5000/v2.0
[root@nnn ~]# openstack-config --set /etc/neutron/metadata_agent.ini DEFAULT \auth_region regionOne
[root@nnn ~]# openstack-config --set /etc/neutron/metadata_agent.ini DEFAULT \admin_tenant_name services
[root@nnn ~]# openstack-config --set /etc/neutron/metadata_agent.ini DEFAULT \admin_user neutron
[root@nnn ~]# openstack-config --set /etc/neutron/metadata_agent.ini DEFAULT \admin_password password
[root@nnn ~]# openstack-config --set /etc/neutron/metadata_agent.ini DEFAULT \nova_metadata_ip controller
[root@nnn ~]# openstack-config --set /etc/neutron/metadata_agent.ini DEFAULT \metadata_proxy_shared_secret SHARED_SECRET

Configure the ML2 plugin to use GRE tunneling segregation:

[root@nnn ~]# openstack-config --set /etc/neutron/plugins/ml2/ml2_conf.ini ml2 \type_drivers gre
[root@nnn ~]# openstack-config --set /etc/neutron/plugins/ml2/ml2_conf.ini ml2 \tenant_network_types gre
[root@nnn ~]# openstack-config --set /etc/neutron/plugins/ml2/ml2_conf.ini ml2 \mechanism_drivers openvswitch
[root@nnn ~]# openstack-config --set /etc/neutron/plugins/ml2/ml2_conf.ini ml2_type_gre \tunnel_id_ranges 1:1000
[root@nnn ~]# openstack-config --set /etc/neutron/plugins/ml2/ml2_conf.ini ovs \local_ip 10.20.0.2
[root@nnn ~]# openstack-config --set /etc/neutron/plugins/ml2/ml2_conf.ini ovs \tunnel_type gre
[root@nnn ~]# openstack-config --set /etc/neutron/plugins/ml2/ml2_conf.ini ovs \enable_tunneling True
[root@nnn ~]# openstack-config --set /etc/neutron/plugins/ml2/ml2_conf.ini securitygroup \firewall_driver neutron.agent.linux.iptables_firewall.OVSHybridIptablesFirewallDriver
[root@nnn ~]# openstack-config --set /etc/neutron/plugins/ml2/ml2_conf.ini securitygroup \enable_security_group True

Create bridges for Neutron layer 2 and Neutron layer 3 agents. First, start the Open vSwitch service:
```
[root@nnn ~]# systemctl start openvswitch
[root@nnn ~]# systemctl enable openvswitch
```
Create a bridge for instances' inner-commutation:
```
[root@nnn ~]# ovs-vsctl add-br br-int
```
Create a bridge that the instance will use for communication with public networks:
```
[root@nnn ~]# ovs-vsctl add-br br-ex
```
Bind the external bridge with the NIC used for external communication:
```
[root@nnn ~]# ovs-vsctl add-port br-ex eth2
```

Create symbolic link for ML2 Neutron plugin:

[root@nnn ~]# ln -s plugins/ml2/ml2_conf.ini /etc/neutron/plugin.ini

Start and enable service

At this point, we can start and enable L2 Open vSwitch agent, L3 agent, HDCP agent, and metadata agent services:

[root@nnn ~]# systemctl start neutron-openvswitch-agent
[root@nnn ~]# systemctl start neutron-l3-agent
[root@nnn ~]# systemctl start neutron-dhcp-agent
[root@nnn ~]# systemctl start neutron-metadata-agent
[root@nnn ~]# systemctl enable neutron-openvswitch-agent
[root@nnn ~]# systemctl enable neutron-l3-agent
[root@nnn ~]# systemctl enable neutron-dhcp-agent
[root@nnn ~]# systemctl enable neutron-metadata-agent

This concludes configuring Neutron network node. Now we can configure the Nova-Compute nodes to use Neutron networking.

官术网_书友最值得收藏!