openstack-6-neutron-控制节点

OpenStack Networking（neutron），允许创建、插入接口设备，这些设备由其他的OpenStack服务管理。插件式的实现可以容纳不同的网络设备和软件，为OpenStack架构与部署提供了灵活性。

一 配置与安装
[root@linux-node3 ~]# mysql -h 10.0.0.17 -uneutron –pneutron
MariaDB [(none)]> show databases;

[root@linux-node3 ~]# openstack user create --domain default --password-prompt neutron

[root@linux-node3 ~]# openstack role add --project service --user neutron admin
[root@linux-node3 ~]# openstack service create --name neutron \

–description “OpenStack Networking” network

[root@linux-node3 ~]# openstack endpoint create --region RegionOne network public http://10.0.0.17:9696
[root@linux-node3 ~]# openstack endpoint create --region RegionOne network internal http://10.0.0.17:9696
[root@linux-node3 ~]# openstack endpoint create --region RegionOne network admin http://10.0.0.17:9696

检查:
[root@linux-node3 ~]# openstack user list

[root@linux-node3 ~]# openstack service list

[root@linux-node3 ~]# openstack endpoint list

[root@linux-node3 ~]# yum install openstack-neutron openstack-neutron-ml2 openstack-neutron-linuxbridge ebtables
[root@linux-node3 ~]# vim /etc/neutron/neutron.conf
connection = mysql+pymysql://neutron:neutron@10.0.0.17/neutron --710行
core_plugin = ml2 -30行，启用ML2插件并禁用其他插件
service_plugins = --33行
transport_url = rabbit://openstack:openstack@10.0.0.17 ----553行
auth_strategy = keystone —27行

[keystone_authtoken] —749行
auth_uri = http://10.0.0.17:5000
auth_url = http://10.0.0.17:35357
memcached_servers = 10.0.0.17:11211
auth_type = password
project_domain_name = default
user_domain_name = default
project_name = service
username = neutron
password = neutron

notify_nova_on_port_status_changes = true --98
notify_nova_on_port_data_changes = true --102

[nova] —1023
auth_url = http://10.0.0.17:35357
auth_type = password
project_domain_name = default
user_domain_name = default
region_name = RegionOne
project_name = service
username = nova
password = nova

lock_path = /var/lib/neutron/tmp —1143

配置 Modular Layer 2 (ML2) 插件
[root@linux-node3 ~]# vim /etc/neutron/plugins/ml2/ml2_conf.ini
type_drivers = local,flat,vlan,gre,vxlan,geneve —132
tenant_network_types = —137
mechanism_drivers = linuxbridge —141
extension_drivers = port_security —146
flat_networks = provider —182
enable_ipset = true --end行

配置Linuxbridge代理
[root@linux-node3 ~]# vim /etc/neutron/plugins/ml2/linuxbridge_agent.ini
physical_interface_mappings = provider:ens33 --142
enable_vxlan = false —175
firewall_driver = neutron.agent.linux.iptables_firewall.IptablesFirewallDriver —155
enable_security_group = true —160

配置dhcp代理
[root@linux-node3 ~]# vim /etc/neutron/dhcp_agent.ini
interface_driver = linuxbridge ----16
dhcp_driver = neutron.agent.linux.dhcp.Dnsmasq —32
enable_isolated_metadata = true —41

配置元数据代理 [root@linux-node3 ~]# vim /etc/neutron/metadata_agent.ini
nova_metadata_host = 10.0.0.17 -23
metadata_proxy_shared_secret = openstack -35

为计算节点配置网络服务
[root@linux-node3 ~]# vim /etc/nova/nova.conf
[neutron] —7096
url = http://10.0.0.17:9696
auth_url = http://10.0.0.17:35357
auth_type = password
project_domain_name = default
user_domain_name = default
region_name = RegionOne
project_name = service
username = neutron
password = neutron
service_metadata_proxy = True
metadata_proxy_shared_secret = openstack

[root@linux-node3 ~]# ln -s /etc/neutron/plugins/ml2/ml2_conf.ini /etc/neutron/plugin.ini
[root@linux-node3 ~]# su -s /bin/sh -c "neutron-db-manage --config-file /etc/neutron/neutron.conf \

–config-file /etc/neutron/plugins/ml2/ml2_conf.ini upgrade head" neutron

[root@linux-node3 ~]# systemctl restart openstack-nova-api.service

[root@linux-node3 ~]# systemctl enable neutron-server.service \

neutron-linuxbridge-agent.service neutron-dhcp-agent.service
neutron-metadata-agent.service

[root@linux-node3 ~]# systemctl start neutron-server.service \

neutron-linuxbridge-agent.service neutron-dhcp-agent.service
neutron-metadata-agent.service

日志位置

[root@linux-node3 neutron]# openstack network agent list 三笑脸成功