执行范围
仅计算节点(compute / 11.0.1.40)
1. 安装软件包
yum install -y openstack-neutron-linuxbridge ebtables ipset2. 拉起 Provider 网卡
写入 /etc/sysconfig/network-scripts/ifcfg-ens34:
DEVICE=ens34TYPE=EthernetBOOTPROTO=noneONBOOT=yessystemctl restart network3. 配置 /etc/neutron/neutron.conf
crudini --set /etc/neutron/neutron.conf DEFAULT transport_url rabbit://openstack:000000@controllercrudini --set /etc/neutron/neutron.conf DEFAULT auth_strategy keystone
crudini --set /etc/neutron/neutron.conf keystone_authtoken www_authenticate_uri http://controller:5000crudini --set /etc/neutron/neutron.conf keystone_authtoken auth_url http://controller:5000crudini --set /etc/neutron/neutron.conf keystone_authtoken memcached_servers controller:11211crudini --set /etc/neutron/neutron.conf keystone_authtoken auth_type passwordcrudini --set /etc/neutron/neutron.conf keystone_authtoken project_domain_name defaultcrudini --set /etc/neutron/neutron.conf keystone_authtoken user_domain_name defaultcrudini --set /etc/neutron/neutron.conf keystone_authtoken project_name servicecrudini --set /etc/neutron/neutron.conf keystone_authtoken username neutroncrudini --set /etc/neutron/neutron.conf keystone_authtoken password 000000
crudini --set /etc/neutron/neutron.conf oslo_concurrency lock_path /var/lib/neutron/tmp4. 配置 Linux Bridge Agent
/etc/neutron/plugins/ml2/linuxbridge_agent.ini:
crudini --set /etc/neutron/plugins/ml2/linuxbridge_agent.ini linux_bridge physical_interface_mappings provider:ens34crudini --set /etc/neutron/plugins/ml2/linuxbridge_agent.ini vxlan enable_vxlan Truecrudini --set /etc/neutron/plugins/ml2/linuxbridge_agent.ini vxlan local_ip 11.0.1.40crudini --set /etc/neutron/plugins/ml2/linuxbridge_agent.ini vxlan l2_population truecrudini --set /etc/neutron/plugins/ml2/linuxbridge_agent.ini securitygroup enable_security_group Truecrudini --set /etc/neutron/plugins/ml2/linuxbridge_agent.ini securitygroup firewall_driver neutron.agent.linux.iptables_firewall.IptablesFirewallDriver5. 内核桥接过滤
modprobe br_netfilterecho 'net.bridge.bridge-nf-call-iptables = 1' >> /etc/sysctl.confecho 'net.bridge.bridge-nf-call-ip6tables = 1' >> /etc/sysctl.confsysctl -p6. 更新 Nova neutron 段
crudini --set /etc/nova/nova.conf neutron url http://controller:9696crudini --set /etc/nova/nova.conf neutron auth_url http://controller:5000crudini --set /etc/nova/nova.conf neutron auth_type passwordcrudini --set /etc/nova/nova.conf neutron project_domain_name defaultcrudini --set /etc/nova/nova.conf neutron user_domain_name defaultcrudini --set /etc/nova/nova.conf neutron region_name RegionOnecrudini --set /etc/nova/nova.conf neutron project_name servicecrudini --set /etc/nova/nova.conf neutron username neutroncrudini --set /etc/nova/nova.conf neutron password 0000007. 启动服务
systemctl restart openstack-nova-compute.servicesystemctl enable neutron-linuxbridge-agent.servicesystemctl restart neutron-linuxbridge-agent.service8. 验收
计算节点:
systemctl is-active neutron-linuxbridge-agentip link show ens34控制节点:
source /etc/keystone/admin-openrc.shopenstack network agent list# compute 节点 Linux bridge agent 为 alive / UP下一步:Dashboard 安装