Neutron 控制节点安装

执行范围#

仅控制节点（controller / 11.0.1.30）

1
source /etc/keystone/admin-openrc.sh

1. 创建数据库#

1
mysql -uroot -p000000 -e "CREATE DATABASE IF NOT EXISTS neutron;"
2
mysql -uroot -p000000 -e "GRANT ALL PRIVILEGES ON neutron.* TO 'neutron'@'localhost' IDENTIFIED BY '000000';"
3
mysql -uroot -p000000 -e "GRANT ALL PRIVILEGES ON neutron.* TO 'neutron'@'%' IDENTIFIED BY '000000';"

2. 注册 Keystone 用户与服务#

1
openstack user create --domain default --password 000000 neutron
2
openstack role add --project service --user neutron admin
3
openstack service create --name neutron --description "OpenStack Networking" network
4
openstack endpoint create --region RegionOne network public http://controller:9696
5
openstack endpoint create --region RegionOne network internal http://controller:9696
6
openstack endpoint create --region RegionOne network admin http://controller:9696

3. 安装软件包#

1
yum install -y openstack-neutron openstack-neutron-ml2 openstack-neutron-linuxbridge ebtables

4. 拉起 Provider 网卡#

写入 /etc/sysconfig/network-scripts/ifcfg-ens34：

1
DEVICE=ens34
2
TYPE=Ethernet
3
BOOTPROTO=none
4
ONBOOT=yes

1
systemctl restart network

5. 配置 `/etc/neutron/neutron.conf`#

1
crudini --set /etc/neutron/neutron.conf database connection mysql+pymysql://neutron:000000@controller/neutron
2
crudini --set /etc/neutron/neutron.conf DEFAULT core_plugin ml2
3
crudini --set /etc/neutron/neutron.conf DEFAULT service_plugins router
4
crudini --set /etc/neutron/neutron.conf DEFAULT allow_overlapping_ips true
5
crudini --set /etc/neutron/neutron.conf DEFAULT transport_url rabbit://openstack:000000@controller
6
crudini --set /etc/neutron/neutron.conf DEFAULT auth_strategy keystone
7

8
crudini --set /etc/neutron/neutron.conf keystone_authtoken www_authenticate_uri http://controller:5000
9
crudini --set /etc/neutron/neutron.conf keystone_authtoken auth_url http://controller:5000
10
crudini --set /etc/neutron/neutron.conf keystone_authtoken memcached_servers controller:11211
11
crudini --set /etc/neutron/neutron.conf keystone_authtoken auth_type password
12
crudini --set /etc/neutron/neutron.conf keystone_authtoken project_domain_name default
13
crudini --set /etc/neutron/neutron.conf keystone_authtoken user_domain_name default
14
crudini --set /etc/neutron/neutron.conf keystone_authtoken project_name service
15
crudini --set /etc/neutron/neutron.conf keystone_authtoken username neutron
16
crudini --set /etc/neutron/neutron.conf keystone_authtoken password 000000
17

18
crudini --set /etc/neutron/neutron.conf DEFAULT notify_nova_on_port_status_changes true
19
crudini --set /etc/neutron/neutron.conf DEFAULT notify_nova_on_port_data_changes true
20

21
crudini --set /etc/neutron/neutron.conf nova auth_url http://controller:5000
22
crudini --set /etc/neutron/neutron.conf nova auth_type password
23
crudini --set /etc/neutron/neutron.conf nova project_domain_name default
24
crudini --set /etc/neutron/neutron.conf nova user_domain_name default
25
crudini --set /etc/neutron/neutron.conf nova region_name RegionOne
26
crudini --set /etc/neutron/neutron.conf nova project_name service
27
crudini --set /etc/neutron/neutron.conf nova username nova
28
crudini --set /etc/neutron/neutron.conf nova password 000000
29

30
crudini --set /etc/neutron/neutron.conf oslo_concurrency lock_path /var/lib/neutron/tmp

6. 配置 ML2 `/etc/neutron/plugins/ml2/ml2_conf.ini`#

1
crudini --set /etc/neutron/plugins/ml2/ml2_conf.ini ml2 type_drivers flat,vlan,vxlan,gre,local
2
crudini --set /etc/neutron/plugins/ml2/ml2_conf.ini ml2 tenant_network_types vxlan
3
crudini --set /etc/neutron/plugins/ml2/ml2_conf.ini ml2 mechanism_drivers linuxbridge,l2population
4
crudini --set /etc/neutron/plugins/ml2/ml2_conf.ini ml2 extension_drivers port_security
5
crudini --set /etc/neutron/plugins/ml2/ml2_conf.ini ml2_type_flat flat_networks provider
6
crudini --set /etc/neutron/plugins/ml2/ml2_conf.ini ml2_type_vlan network_vlan_ranges provider:1000:2000
7
crudini --set /etc/neutron/plugins/ml2/ml2_conf.ini ml2_type_vxlan vni_ranges 1000:2000
8
crudini --set /etc/neutron/plugins/ml2/ml2_conf.ini securitygroup enable_ipset true

7. 配置 Linux Bridge Agent#

/etc/neutron/plugins/ml2/linuxbridge_agent.ini：

1
crudini --set /etc/neutron/plugins/ml2/linuxbridge_agent.ini linux_bridge physical_interface_mappings provider:ens34
2
crudini --set /etc/neutron/plugins/ml2/linuxbridge_agent.ini vxlan enable_vxlan true
3
crudini --set /etc/neutron/plugins/ml2/linuxbridge_agent.ini vxlan local_ip 11.0.1.30
4
crudini --set /etc/neutron/plugins/ml2/linuxbridge_agent.ini vxlan l2_population true
5
crudini --set /etc/neutron/plugins/ml2/linuxbridge_agent.ini securitygroup enable_security_group true
6
crudini --set /etc/neutron/plugins/ml2/linuxbridge_agent.ini securitygroup firewall_driver neutron.agent.linux.iptables_firewall.IptablesFirewallDriver

8. 内核桥接过滤#

1
modprobe br_netfilter
2
echo 'net.bridge.bridge-nf-call-iptables = 1' >> /etc/sysctl.conf
3
echo 'net.bridge.bridge-nf-call-ip6tables = 1' >> /etc/sysctl.conf
4
sysctl -p

9. 配置 L3 / DHCP / Metadata Agent#

1
crudini --set /etc/neutron/l3_agent.ini DEFAULT interface_driver linuxbridge
2
crudini --set /etc/neutron/dhcp_agent.ini DEFAULT interface_driver linuxbridge
3
crudini --set /etc/neutron/dhcp_agent.ini DEFAULT dhcp_driver neutron.agent.linux.dhcp.Dnsmasq
4
crudini --set /etc/neutron/dhcp_agent.ini DEFAULT enable_isolated_metadata true
5
crudini --set /etc/neutron/metadata_agent.ini DEFAULT nova_metadata_host controller
6
crudini --set /etc/neutron/metadata_agent.ini DEFAULT metadata_proxy_shared_secret 000000

10. 更新 Nova 配置（neutron 段）#

1
crudini --set /etc/nova/nova.conf neutron auth_url http://controller:5000
2
crudini --set /etc/nova/nova.conf neutron auth_type password
3
crudini --set /etc/nova/nova.conf neutron project_domain_name default
4
crudini --set /etc/nova/nova.conf neutron user_domain_name default
5
crudini --set /etc/nova/nova.conf neutron region_name RegionOne
6
crudini --set /etc/nova/nova.conf neutron project_name service
7
crudini --set /etc/nova/nova.conf neutron username neutron
8
crudini --set /etc/nova/nova.conf neutron password 000000
9
crudini --set /etc/nova/nova.conf neutron service_metadata_proxy true
10
crudini --set /etc/nova/nova.conf neutron metadata_proxy_shared_secret 000000

11. 同步数据库并启动#

1
ln -s /etc/neutron/plugins/ml2/ml2_conf.ini /etc/neutron/plugin.ini
2
su -s /bin/sh -c "neutron-db-manage --config-file /etc/neutron/neutron.conf --config-file /etc/neutron/plugins/ml2/ml2_conf.ini upgrade head" neutron
3

4
systemctl restart openstack-nova-api.service
5
systemctl enable neutron-server neutron-linuxbridge-agent neutron-dhcp-agent neutron-metadata-agent neutron-l3-agent
6
systemctl start neutron-server neutron-linuxbridge-agent neutron-dhcp-agent neutron-metadata-agent neutron-l3-agent

12. 验收#

1
source /etc/keystone/admin-openrc.sh
2
systemctl is-active neutron-server neutron-linuxbridge-agent neutron-dhcp-agent neutron-l3-agent neutron-metadata-agent
3
ip link show ens34
4
openstack network agent list

下一步：Neutron 计算节点安装

音乐

执行范围#

1. 创建数据库#

2. 注册 Keystone 用户与服务#

3. 安装软件包#

4. 拉起 Provider 网卡#

5. 配置 `/etc/neutron/neutron.conf`#

6. 配置 ML2 `/etc/neutron/plugins/ml2/ml2_conf.ini`#

7. 配置 Linux Bridge Agent#

8. 内核桥接过滤#

9. 配置 L3 / DHCP / Metadata Agent#

10. 更新 Nova 配置（neutron 段）#

11. 同步数据库并启动#

12. 验收#

文章目录

音乐

Neutron 控制节点安装

执行范围#

1. 创建数据库#

2. 注册 Keystone 用户与服务#

3. 安装软件包#

4. 拉起 Provider 网卡#

5. 配置 /etc/neutron/neutron.conf#

6. 配置 ML2 /etc/neutron/plugins/ml2/ml2_conf.ini#

7. 配置 Linux Bridge Agent#

8. 内核桥接过滤#

9. 配置 L3 / DHCP / Metadata Agent#

10. 更新 Nova 配置（neutron 段）#

11. 同步数据库并启动#

12. 验收#

文章目录

5. 配置 `/etc/neutron/neutron.conf`#

6. 配置 ML2 `/etc/neutron/plugins/ml2/ml2_conf.ini`#