关键词：
Neutron控制节点安装：
node1：[[email protected] ~]# yum -y install openstack-neutron openstack-neutron-ml2 openstack-neutron-linuxbridge python-neutronclient ebtables ipset
Neturon注册：[[email protected] ~]# source admin-openrc.sh
[[email protected] ~]# openstack service create --name neutron --description "OpenStack Networking" network
+-------------+----------------------------------+
| Field | Value |
+-------------+----------------------------------+
| description | OpenStack Networking |
| enabled | True |
| id | 4859d2728038479a8ba78a08e6b44b10 |
| name | neutron |
| type | network |
+-------------+----------------------------------+公网注册：
[[email protected] ~]# openstack endpoint create --region RegionOne network public http://192.168.56.11:9696
+--------------+----------------------------------+
| Field | Value |
+--------------+----------------------------------+
| enabled | True |
| id | 13c0b31638094328a9a9849ece7def31 |
| interface | public |
| region | RegionOne |
| region_id | RegionOne |
| service_id | 4859d2728038479a8ba78a08e6b44b10 |
| service_name | neutron |
| service_type | network |
| url | http://192.168.56.11:9696 |
+--------------+----------------------------------+私网注册：
[[email protected] ~]# openstack endpoint create --region RegionOne network internal http://192.168.56.11:9696
+--------------+----------------------------------+
| Field | Value |
+--------------+----------------------------------+
| enabled | True |
| id | 08ce5f22c99d4a99b7666dcf6374c653 |
| interface | internal |
| region | RegionOne |
| region_id | RegionOne |
| service_id | 4859d2728038479a8ba78a08e6b44b10 |
| service_name | neutron |
| service_type | network |
| url | http://192.168.56.11:9696 |
+--------------+----------------------------------+admin注册：
[[email protected] ~]# openstack endpoint create --region RegionOne network admin http://192.168.56.11:9696
+--------------+----------------------------------+
| Field | Value |
+--------------+----------------------------------+
| enabled | True |
| id | 40440089eff5417987329898adb51f8d |
| interface | admin |
| region | RegionOne |
| region_id | RegionOne |
| service_id | 4859d2728038479a8ba78a08e6b44b10 |
| service_name | neutron |
| service_type | network |
| url | http://192.168.56.11:9696 |
+--------------+----------------------------------+配置Neutron：
[[email protected] ~]# vim /etc/neutron/neutron.conf
[database]
connection = mysql://neutron:[email protected]:3306/neutron
[keystone_authtoken]
auth_uri = http://192.168.56.11:5000
auth_url = http://192.168.56.11:35357
auth_plugin = password
project_domain_id = default
user_domain_id = default
project_name = service
username = neutron
password = neutron
[oslo_messaging_rabbit]
rabbit_host = 192.168.56.11
rabbit_port = 5672
rabbit_userid = openstack
rabbit_password = openstack
[DEFAULT]
core_plugin = ml2
service_plugins = router
rpc_backend=rabbit
auth_strategy = keystone
notify_nova_on_port_status_changes = True
notify_nova_on_port_data_changes = True
nova_url = http://192.168.56.11:8774/v2
verbose = True
[nova]
auth_url = http://192.168.56.11:35357
auth_plugin = password
project_domain_id = default
user_domain_id = default
region_name = RegionOne
project_name = service
username = nova
password = nova
[oslo_concurrency]
lock_path = $state_path/lock[[email protected] ~]# grep ^[a-z] /etc/neutron/neutron.conf
verbose = True
core_plugin = ml2
service_plugins = router
auth_strategy = keystone
notify_nova_on_port_status_changes = True
notify_nova_on_port_data_changes = True
nova_url = http://192.168.56.11:8774/v2
rpc_backend=rabbit
auth_uri = http://192.168.56.11:5000
auth_url = http://192.168.56.11:35357
auth_plugin = password
project_domain_id = default
user_domain_id = default
project_name = service
username = neutron
password = neutron
connection = mysql://neutron:[email protected]:3306/neutron
auth_url = http://192.168.56.11:35357
auth_plugin = password
project_domain_id = default
user_domain_id = default
region_name = RegionOne
project_name = service
username = nova
password = nova
lock_path = $state_path/lock
rabbit_host = 192.168.56.11
rabbit_port = 5672
rabbit_userid = openstack
rabbit_password = openstack[[email protected] ~]# vim /etc/neutron/plugins/ml2/ml2_conf.ini
[ml2]
type_drivers = flat,vlan,gre,vxlan,geneve
tenant_network_types = vlan,gre,vxlan,geneve
mechanism_drivers = openvswitch,linuxbridge
extension_drivers = port_security
[ml2_type_flat]
flat_networks = physnet1 #单一扁平网络
[securitygroup]
enable_ipset = True[[email protected] ~]# vim /etc/neutron/plugins/ml2/linuxbridge_agent.ini
[linux_bridge]
physical_interface_mappings = physnet1:ens33 #映射端口eth0
[vxlan]
enable_vxlan = False
[agent]
prevent_arp_spoofing = True
[securitygroup]
enable_security_group = True
firewall_driver = neutron.agent.linux.iptables_firewall.IptablesFirewallDriver[[email protected] ~]# vim /etc/neutron/dhcp_agent.ini
[DEFAULT]
interface_driver = neutron.agent.linux.interface.BridgeInterfaceDriver
dhcp_driver = neutron.agent.linux.dhcp.Dnsmasq
enable_isolated_metadata = True[[email protected] ~]# vim /etc/neutron/metadata_agent.ini
[DEFAULT]
auth_uri = http://192.168.56.11:5000
auth_url = http://192.168.56.11:35357
auth_region = RegionOne
auth_plugin = password
project_domain_id = default
user_domain_id = default
project_name = service
username = neutron
password = neutron
nova_metadata_ip = 192.168.56.11
metadata_proxy_shared_secret = neutron[[email protected] ~]# grep "^[a-z]" /etc/neutron/metadata_agent.ini
auth_uri = http://192.168.56.11:5000
auth_url = http://192.168.56.11:35357
auth_region = RegionOne
auth_plugin = password
project_domain_id = default
user_domain_id = default
project_name = service
username = neutron
password = neutron
nova_metadata_ip = 192.168.56.11
metadata_proxy_shared_secret = neutron[[email protected] ~]# vim /etc/nova/nova.conf
[neutron]
url = http://openstack-ser:9696
url = http://192.168.56.11:9696
auth_url = http://192.168.56.11:35357
auth_plugin = password
project_domain_id = default
user_domain_id = default
region_name = RegionOne
project_name = service
username = neutron
password = neutron
service_metadata_proxy=True
metadata_proxy_shared_secret = neutron[[email protected] ~]# ln -s /etc/neutron/plugins/ml2/ml2_conf.ini /etc/neutron/plugin.ini
创建neutron用户：[[email protected] ~]# source admin-openrc.sh
[[email protected] ~]# openstack user create --domain default --password=neutron neutron
+-----------+----------------------------------+
| Field | Value |
+-----------+----------------------------------+
| domain_id | default |
| enabled | True |
| id | 9459df83573341c1b197ac7ae815c38d |
| name | neutron |
+-----------+----------------------------------+[[email protected] ~]# openstack role add --project service --user neutron admin
同步数据库：
[[email protected] ~]# su -s /bin/sh -c "neutron-db-manage --config-file /etc/neutron/neutron.conf > --config-file /etc/neutron/plugins/ml2/ml2_conf.ini upgrade head" neutron
INFO [alembic.runtime.migration] Context impl MySQLImpl.
INFO [alembic.runtime.migration] Will assume non-transactional DDL.
Running upgrade for neutron ...
INFO [alembic.runtime.migration] Context impl MySQLImpl.
INFO [alembic.runtime.migration] Will assume non-transactional DDL.
INFO [alembic.runtime.migration] Running upgrade -> juno, juno_initial
INFO [alembic.runtime.migration] Running upgrade juno -> 44621190bc02, add_uniqueconstraint_ipavailability_ranges
INFO [alembic.runtime.migration] Running upgrade 44621190bc02 -> 1f71e54a85e7, ml2_network_segments models change for multi-segment network.
INFO [alembic.runtime.migration] Running upgrade 1f71e54a85e7 -> 408cfbf6923c, remove ryu plugin
INFO [alembic.runtime.migration] Running upgrade 408cfbf6923c -> 28c0ffb8ebbd, remove mlnx plugin
INFO [alembic.runtime.migration] Running upgrade 28c0ffb8ebbd -> 57086602ca0a, scrap_nsx_adv_svcs_models
INFO [alembic.runtime.migration] Running upgrade 57086602ca0a -> 38495dc99731, ml2_tunnel_endpoints_table
INFO [alembic.runtime.migration] Running upgrade 38495dc99731 -> 4dbe243cd84d, nsxv
INFO [alembic.runtime.migration] Running upgrade 4dbe243cd84d -> 41662e32bce2, L3 DVR SNAT mapping
INFO [alembic.runtime.migration] Running upgrade 41662e32bce2 -> 2a1ee2fb59e0, Add mac_address unique constraint
INFO [alembic.runtime.migration] Running upgrade 2a1ee2fb59e0 -> 26b54cf9024d, Add index on allocated
INFO [alembic.runtime.migration] Running upgrade 26b54cf9024d -> 14be42f3d0a5, Add default security group table
INFO [alembic.runtime.migration] Running upgrade 14be42f3d0a5 -> 16cdf118d31d, extra_dhcp_options IPv6 support
INFO [alembic.runtime.migration] Running upgrade 16cdf118d31d -> 43763a9618fd, add mtu attributes to network
INFO [alembic.runtime.migration] Running upgrade 43763a9618fd -> bebba223288, Add vlan transparent property to network
INFO [alembic.runtime.migration] Running upgrade bebba223288 -> 4119216b7365, Add index on tenant_id column
INFO [alembic.runtime.migration] Running upgrade 4119216b7365 -> 2d2a8a565438, ML2 hierarchical binding
INFO [alembic.runtime.migration] Running upgrade 2d2a8a565438 -> 2b801560a332, Remove Hyper-V Neutron Plugin
INFO [alembic.runtime.migration] Running upgrade 2b801560a332 -> 57dd745253a6, nuage_kilo_migrate
INFO [alembic.runtime.migration] Running upgrade 57dd745253a6 -> f15b1fb526dd, Cascade Floating IP Floating Port deletion
INFO [alembic.runtime.migration] Running upgrade f15b1fb526dd -> 341ee8a4ccb5, sync with cisco repo
INFO [alembic.runtime.migration] Running upgrade 341ee8a4ccb5 -> 35a0f3365720, add port-security in ml2
INFO [alembic.runtime.migration] Running upgrade 35a0f3365720 -> 1955efc66455, weight_scheduler
INFO [alembic.runtime.migration] Running upgrade 1955efc66455 -> 51c54792158e, Initial operations for subnetpools
INFO [alembic.runtime.migration] Running upgrade 51c54792158e -> 589f9237ca0e, Cisco N1kv ML2 driver tables
INFO [alembic.runtime.migration] Running upgrade 589f9237ca0e -> 20b99fd19d4f, Cisco UCS Manager Mechanism Driver
INFO [alembic.runtime.migration] Running upgrade 20b99fd19d4f -> 034883111f, Remove allow_overlap from subnetpools
INFO [alembic.runtime.migration] Running upgrade 034883111f -> 268fb5e99aa2, Initial operations in support of subnet allocation from a pool
INFO [alembic.runtime.migration] Running upgrade 268fb5e99aa2 -> 28a09af858a8, Initial operations to support basic quotas on prefix space in a subnet pool
INFO [alembic.runtime.migration] Running upgrade 28a09af858a8 -> 20c469a5f920, add index for port
INFO [alembic.runtime.migration] Running upgrade 20c469a5f920 -> kilo, kilo
INFO [alembic.runtime.migration] Running upgrade kilo -> 354db87e3225, nsxv_vdr_metadata.py
INFO [alembic.runtime.migration] Running upgrade 354db87e3225 -> 599c6a226151, neutrodb_ipam
INFO [alembic.runtime.migration] Running upgrade 599c6a226151 -> 52c5312f6baf, Initial operations in support of address scopes
INFO [alembic.runtime.migration] Running upgrade 52c5312f6baf -> 313373c0ffee, Flavor framework
INFO [alembic.runtime.migration] Running upgrade 313373c0ffee -> 8675309a5c4f, network_rbac
INFO [alembic.runtime.migration] Running upgrade kilo -> 30018084ec99, Initial no-op Liberty contract rule.
INFO [alembic.runtime.migration] Running upgrade 30018084ec99 -> 4ffceebfada, network_rbac
INFO [alembic.runtime.migration] Running upgrade 4ffceebfada -> 5498d17be016, Drop legacy OVS and LB plugin tables
INFO [alembic.runtime.migration] Running upgrade 5498d17be016 -> 2a16083502f3, Metaplugin removal
INFO [alembic.runtime.migration] Running upgrade 2a16083502f3 -> 2e5352a0ad4d, Add missing foreign keys
INFO [alembic.runtime.migration] Running upgrade 2e5352a0ad4d -> 11926bcfe72d, add geneve ml2 type driver
INFO [alembic.runtime.migration] Running upgrade 11926bcfe72d -> 4af11ca47297, Drop cisco monolithic tables
INFO [alembic.runtime.migration] Running upgrade 8675309a5c4f -> 45f955889773, quota_usage
INFO [alembic.runtime.migration] Running upgrade 45f955889773 -> 26c371498592, subnetpool hash
INFO [alembic.runtime.migration] Running upgrade 26c371498592 -> 1c844d1677f7, add order to dnsnameservers
INFO [alembic.runtime.migration] Running upgrade 1c844d1677f7 -> 1b4c6e320f79, address scope support in subnetpool
INFO [alembic.runtime.migration] Running upgrade 1b4c6e320f79 -> 48153cb5f051, qos db changes
INFO [alembic.runtime.migration] Running upgrade 48153cb5f051 -> 9859ac9c136, quota_reservations
INFO [alembic.runtime.migration] Running upgrade 9859ac9c136 -> 34af2b5c5a59, Add dns_name to Port
OK启动服务：[[email protected] ~]# systemctl restart openstack-nova-api.service
[[email protected] ~]# systemctl enable neutron-server.service neutron-linuxbridge-agent.service neutron-dhcp-agent.service neutron-metadata-agent.service
Created symlink from /etc/systemd/system/multi-user.target.wants/neutron-linuxbridge-agent.service to /usr/lib/systemd/system/neutron-linuxbridge-agent.service.
Created symlink from /etc/systemd/system/multi-user.target.wants/neutron-dhcp-agent.service to /usr/lib/systemd/system/neutron-dhcp-agent.service.
Created symlink from /etc/systemd/system/multi-user.target.wants/neutron-metadata-agent.service to /usr/lib/systemd/system/neutron-metadata-agent.service.[[email protected] ~]# systemctl start neutron-server.service neutron-linuxbridge-agent.service neutron-dhcp-agent.service neutron-metadata-agent.service测试：
[[email protected] ~]# neutron agent-list
+--------------------------------------+--------------------+-------------------------------+-------+----------------+---------------------------+
| id | agent_type | host | alive | admin_state_up | binary |
+--------------------------------------+--------------------+-------------------------------+-------+----------------+---------------------------+
| 45883a49-b76d-453c-8b86-44c100a3d4d9 | Linux bridge agent | hostnamelinux-node1.smoke.com | :-) | True | neutron-linuxbridge-agent |
| a81c8ec5-ffef-4ee2-bfb4-ea4cdcf4f62c | Metadata agent | hostnamelinux-node1.smoke.com | :-) | True | neutron-metadata-agent |
| cb48a527-ff03-4d9c-aeb2-ec90d5644a62 | DHCP agent | hostnamelinux-node1.smoke.com | :-) | True | neutron-dhcp-agent |
+--------------------------------------+--------------------+-------------------------------+-------+----------------+---------------------------+Neutron计算节点安装：[[email protected] linux-node2 ~]# yum -y install openstack-neutron openstack-neutron-linuxbridge ebtables ipset
Neutron配置：
[[email protected] linux-node2 ~]# vim /etc/nova/nova.conf
[neutron]
url = http://192.168.56.11:9696
auth_url = http://192.168.56.11:35357
auth_plugin = password
project_domain_id = default
user_domain_id = default
region_name = RegionOne
project_name = service
username = neutron
password = neutron[[email protected] linux-node2 ~]# scp [email protected]:/etc/neutron/neutron.conf /etc/neutron/
[email protected]‘s password:
neutron.conf 100% 36KB 35.8KB/s 00:00 [[email protected] linux-node2 ~]# scp [email protected]:/etc/neutron/plugins/ml2/linuxbridge_agent.ini /etc/neutron/plugins/ml2/
[email protected]‘s password:
linuxbridge_agent.ini 100% 2777 2.7KB/s 00:00 [[email protected] linux-node2 ~]# scp [email protected]:/etc/neutron/plugins/ml2/ml2_conf.ini /etc/neutron/plugins/ml2/
[email protected]‘s password:
ml2_conf.ini 100% 4870 4.8KB/s 00:00 [[email protected] linux-node2 ~]# ln -s /etc/neutron/plugins/ml2/ml2_conf.ini /etc/neutron/plugin.ini[[email protected] linux-node2 ~]# chown root:neutron /etc/neutron/plugins/ml2/*
启动服务：
[[email protected] linux-node2 ~]# systemctl restart openstack-nova-compute.service
[[email protected] linux-node2 ~]# systemctl enable neutron-linuxbridge-agent.service
Created symlink from /etc/systemd/system/multi-user.target.wants/neutron-linuxbridge-agent.service to /usr/lib/systemd/system/neutron-linuxbridge-agent.service.
[[email protected] linux-node2 ~]# systemctl start neutron-linuxbridge-agent.service验证：
[[email protected] ~]# neutron agent-list
+--------------------------------------+--------------------+--------------------------------+-------+----------------+---------------------------+
| id | agent_type | host | alive | admin_state_up | binary |
+--------------------------------------+--------------------+--------------------------------+-------+----------------+---------------------------+
| 45883a49-b76d-453c-8b86-44c100a3d4d9 | Linux bridge agent | hostnamelinux-node1.smoke.com | :-) | True | neutron-linuxbridge-agent |
| a81c8ec5-ffef-4ee2-bfb4-ea4cdcf4f62c | Metadata agent | hostnamelinux-node1.smoke.com | :-) | True | neutron-metadata-agent |
| cb48a527-ff03-4d9c-aeb2-ec90d5644a62 | DHCP agent | hostnamelinux-node1.smoke.com | :-) | True | neutron-dhcp-agent |
| ecefc6b7-4ce8-44c0-a176-202ad0e65b35 | Linux bridge agent | hostname linux-node2.smoke.com | :-) | True | neutron-linuxbridge-agent |+--------------------------------------+--------------------+--------------------------------+-------+----------------+---------------------------+
openstack-liberty版虚拟机创建流程
虚拟机创建流程：根据官方提供的流程图，我个人将OpenStack云主机的创建步骤分为四个阶段：1、KeyStone验证阶段2、Nova服务组件交换3、OpenStack其它服务交换4、执行创建第一阶段：KeyStone验证用户使用DashboardHorizon或者命令行CLI，... 查看详情
openstack-liberty版glance服务部署(代码片段)
Glance镜像服务：Glance主要由三部分构成：glance-api、glance-registry以及imagestoreGlance-api:接受系统镜像的创建、删除、读取请求。Glance-Registry：云系统的镜像注册服务Glance安装：[[email protected]~]#yum-yinstallopenstack-glancepython-glancepytho 查看详情
openstack-liberty版创建第一台虚拟机(代码片段)
创建网络：[[email protected]~]#sourceadmin-openrc.sh[[email protected]~]#neutronnet-createflat--shared--provider:physical_networkphysnet1--provider:network_typeflatCreatedanewnetwork:+----------- 查看详情
openstack-liberty版nova服务部署(代码片段)
Nova计算服务：API：负责接收和响应外部请求。支持OpenStackAPI，EC2API。Cert：负责身份认证。Scheduler：用于主机调度。Conductor：计算节点访问数据的中间件。Consoleauth：用于控制台的授权验证。Novncproxy：VNC代理。NovaAPI：nova-api组件... 查看详情
openstack-liberty版nova计算节点部署服务部署(代码片段)
NovaCompute：nova-compute一般运行在计算节点上，通过MessageQueue接收并管理VM的生命周期。Nova-compute通过Libvirt管理KVM，通过XenAPI管理Xen等。node2:修改主机名：注意：修改主机名，以后不能更改。[[email protected]~]#hostnamelinux-node2.smoke.... 查看详情
openstack-liberty版ciner部署(代码片段)
存储的分类：块存储：硬盘LVMDAS(DirectAttachStorage)是直接连接于主机服务器的一种存储方式，每一台主机服务器有独立的存储设备，每台主机服务器的存储设备无法互通。通常用单一网络环境下且数据交换量不大，性能要求不高的... 查看详情
openstack运维-部署neutron组件[t版](代码片段)
OpenStack运维-部署Neutron组件一、Neutron概述二、创建数据库neutron，并进行授权三、计算节点C1/C2四、CT验证服务组件一、Neutron概述Neutron是OpenStack项目中负责提供网络服务的组件，它基于软件定义网络的思想，实现了网... 查看详情
openstack的部署t版——neutron组件(代码片段)
OpenStack的部署（六）——Neutron组件一、CT控制节点1、创建数据库neutron，并进行授权2、创建用户、服务并赋权3、注册API到neutron服务，给neutron服务关联端口，即添加endpoint4、安装提供者网络(桥接)5、重启相关... 查看详情
openstackq版部署-----网络服务（neutron）安装部署(代码片段)
一、数据库配置控制节点创建数据库CREATEDATABASEneutron;GRANTALLPRIVILEGESONneutron.*TO‘neutron‘@‘localhost‘IDENTIFIEDBY‘neutron2018‘;GRANTALLPRIVILEGESONneutron.*TO‘neutron‘@‘%‘IDENTIFIEDBY‘neutron2018‘;二、创建认证信息（控制节点）先生效一下... 查看详情
openstack运维-部署neutron组件[t版](代码片段)
OpenStack运维-部署Neutron组件一、Neutron概述二、创建数据库neutron，并进行授权三、计算节点C1/C2四、CT验证服务组件一、Neutron概述Neutron是OpenStack项目中负责提供网络服务的组件，它基于软件定义网络的思想，实现了网... 查看详情
浅谈openstackt版服务组件--neutron计算服务(#^.^#)持续更新中(代码片段)
...2、网络结构3、网络子网与端口4、openstack中的网络模型(neutron)三、OpenStack-Neutron网络服务1、Neutron网络基础架构2、Neutron-server层次结构3、neutron遵 查看详情
浅谈openstackt版服务组件--neutron计算服务(#^.^#)持续更新中(代码片段)
...2、网络结构3、网络子网与端口4、openstack中的网络模型(neutron)三、OpenStack-Neutron网络服务1、Neutron网络基础架构2、Neutron-server层次结构3、neutron遵 查看详情
openstackm版neutron网络组件基础入门
在我们openstack学习当中，网络组件neutron无疑是令很多人很难理解的，可以说要深入理解了neutron组件，你基本完成了openstack60%的学习，存储方面只要不涉及到分布式，剩下的基本都比较简单了650)this.width=650;"src="http:/... 查看详情
openstackm版安装network(neutron)服务篇
安装配置network(neutron)服务Mitaka版本网络有两个选择，Providernetwork和Self-servicenetwork，这里我们选择第二种。controller节点一、创建数据库[[email protected] ~]# mysql -u root -p>>CREATE DATABASE 查看详情
传统公司部署openstack（t版）简易介绍——neutron模块部署(代码片段)
...司部署OpenStack（t版）简易介绍（六）——neutron模块部署一、ct控制节点创建数据库neutron，并进行授权二、c1、c2节点（以c1为例）三、ct节点验证总结一、ct控制节点创建数据库neutron，并进行授权mysq... 查看详情
openstack_i版6.neutron部署
Neutron是不能自己创建网络的，它需要借助插件才能创建虚拟网桥、网卡依赖插件 配置ml2为核心插件 本次网络模型采用扁平化网络，不同的网络类型不同的配置，不同的使用方法 打开安全组功能 Linux... 查看详情
云计算之openstack（n版）neutron网络服务最佳实践
2.6网络服务2.6.1neutron的概况网络服务提供网络，子网以及路由这些对象的抽象概念。每个抽象概念都有自己的功能，可以模拟对应的物理设备：网络包括子网，路由在不同的子网和网络之间进行路由转发。对于任意一个给定的网... 查看详情
neutron实现网络虚拟化
熬了好几宿才整理出来，发表到博客园了，欢迎拍砖，因本人所在公司相关问题，copy及其衍生版必须加上出处http://www.cnblogs.com/linhaifeng/p/6577199.html本文出自“技术交流群:615304968”博客，转载请与作者联系！ 查看详情