5.2 OpenStack

（草稿）
先起1再起2

source admin
查看状态，status
keystone是用apache启动

web界面
default
dmeo
demo

一、网络服务
私有网络

vim
打开iarouter
allow（重叠代地址）
（2处）

[root@controller ~]# yum install openstack-neutron openstack-neutron-ml2 \
>   openstack-neutron-linuxbridge ebtables

[root@controller ~]# vim /etc/neutron/neutron.conf 

[DEFAULT]
core_plugin = ml2
service_plugins = router
allow_overlapping_ips = True
rpc_backend = rabbit
auth_strategy = keystone
notify_nova_on_port_status_changes = True
notify_nova_on_port_data_changes = True

vim
加入vxlan
vxlan
l2
1：1000
（4处）

[root@controller ~]# vim /etc/neutron/plugins/ml2/ml2_conf.ini

[ml2]
type_drivers = flat,vlan,vxlan
tenant_network_types = vxlan
mechanism_drivers = linuxbridge,l2population
extension_drivers = port_security

[ml2_type_vxlan]
vni_ranges = 1:1000

[securitygroup]
enable_ipset = True

vim
True
localip 31

[root@controller ~]# vim /etc/neutron/plugins/ml2/linuxbridge_agent.ini

[vxlan]
enable_vxlan = True
local_ip = 172.25.21.31
l2_population = True

vim
2行

[root@controller ~]# vim /etc/neutron/l3_agent.ini

[DEFAULT]
interface_driver = neutron.agent.linux.interface.BridgeInterfaceDriver
external_network_bridge =

返回网络服务

restraer 2个服务

[root@controller ~]# systemctl restart neutron-server.service neutron-linuxbridge-agent.service

enable l3

[root@controller ~]# systemctl enable --now neutron-l3-agent.service

neurton list

[root@controller ~]# neutron agent-list
+--------------+--------------+------------+-------------------+-------+----------------+-----------------+
| id           | agent_type   | host       | availability_zone | alive | admin_state_up | binary          |
+--------------+--------------+------------+-------------------+-------+----------------+-----------------+
| 472d998b-    | L3 agent     | controller | nova              | :-)   | True           | neutron-l3-agen |
| 0d1c-416c-91 |              |            |                   |       |                | t               |
| 58-77c3c289b |              |            |                   |       |                |                 |
| 343          |              |            |                   |       |                |                 |
| 6986dc5b-f88 | DHCP agent   | controller | nova              | :-)   | True           | neutron-dhcp-   |
| 7-4ed0-9c4b- |              |            |                   |       |                | agent           |
| fb02316f61bb |              |            |                   |       |                |                 |
| 99832d4c-    | Linux bridge | controller |                   | :-)   | True           | neutron-        |
| 1e78-4d05    | agent        |            |                   |       |                | linuxbridge-    |
| -a6ba-       |              |            |                   |       |                | agent           |
| 5526dbef1548 |              |            |                   |       |                |                 |
| ac99e504-b44 | Metadata     | controller |                   | :-)   | True           | neutron-        |
| 9-4c7d-b681- | agent        |            |                   |       |                | metadata-agent  |
| 7f570662bf4b |              |            |                   |       |                |                 |
| edef715c-502 | Linux bridge | compute1   |                   | :-)   | True           | neutron-        |
| 4-4ecf-9887- | agent        |            |                   |       |                | linuxbridge-    |
| 37e5d08ed806 |              |            |                   |       |                | agent           |
+--------------+--------------+------------+-------------------+-------+----------------+-----------------+

2、安装配置计算节点

2：
vim
vxlan True
localip 32
l2

[root@compute1 ~]# vim /etc/neutron/plugins/ml2/linuxbridge_agent.ini

[vxlan]
enable_vxlan = True
local_ip = 172.25.21.32
l2_population = True

restar bridge桥接

[root@compute1 ~]# systemctl restart neutron-linuxbridge-agent.service

3、dasbron

1：
vim
所有Flase改成True
（3层服务打开）
rsatr httpd memcached

[root@controller ~]# vim /etc/openstack-dashboard/local_settings 

OPENSTACK_NEUTRON_NETWORK = {
   
    'enable_router': True,
    'enable_quotas': True,
    'enable_ipv6': True,
    'enable_distributed_router': True,
    'enable_ha_router': True,
    'enable_lb': True,
    'enable_firewall': True,
    'enable_vpn': True,
    'enable_fip_topology_check': True,

[root@controller ~]# systemctl restart httpd memcached.service 

4、 图形化
重新登陆demo

进入admini用户
选择外部网络

demo

创建虚拟机

（截图）

21：
2：安装
virsh list

[root@compute1 ~]# yum install -y libvirt-client

（SDN：软件定义网络）

2个网路互联
route

免密
1：
ssh 172。 。103

[root@compute1 ~]# virsh list
 Id    Name                           State
----------------------------------------------------
 1     instance-00000003              running
 2     instance-00000002              running

ssh连接外网，外网ping不到内网，但是可以ping到内网的浮动IP