OpenStack架構----neutron組件（四）

前言：

整個OpenStack是由控制節點，計算節點，網絡節點，存儲節點四大部分組成。本篇博文將詳細講解網絡節點neutron組件部署過程，整體分為兩部分：控制節點和計算節點都需要設置。

網絡節點架構

網絡節點僅包含Neutron服務

Neutron：負責管理私有網段與公有網段的通信，以及管理虛擬機網絡之間的通信/拓撲，管理虛擬機之上的防火等等

網絡節點包含三個網絡端口

eth0：用于與控制節點進行通信

eth2：用于與除了控制節點之外的計算/存儲節點之間的通信

eth3：用于外部的虛擬機與相應網絡之間的通信

實驗環境：

++controller節點neutron網絡配置++

1、創建nuetron數據庫和授權

mysql -u root -p

create database neutron;

grant all privileges on neutron.* to 'neutron'@'localhost' identified by '123456';

grant all privileges on neutron.* TO 'neutron'@'%'identified by '123456';

2、創建用戶neutron

source ~/admin-openrc

openstack user create --domain default --password-prompt neutron

3、把neutron用戶添加到glance用戶和項目中

openstack role add --project service --user neutron admin

4、創建neutron服務

openstack service create --name neutron   --description "OpenStack Networking" network

5、創建網絡服務API端點

openstack endpoint create --region RegionOne network public http://controller:9696

openstack endpoint create --region RegionOne network internal http://controller:9696

openstack endpoint create --region RegionOne network admin http://controller:9696

6、yum安裝neutron軟件包

yum install -y openstack-neutron openstack-neutron-ml2 openstack-neutron-linuxbridge ebtables

7、修改配置文件

vim  /etc/neutron/neutron.conf

[database]

//729

connection = mysql+pymysql://neutron:123456@controller/neutron

[DEFAULT]

//27

auth_strategy = keystone

//30

core_plugin = ml2             #插件ml2

//33 不寫代表禁用其他插件

service_plugins =

//570

transport_url = rabbit://openstack:123456@controller

//98

notify_nova_on_port_status_changes = true     #nova端口狀態通告

//102

notify_nova_on_port_data_changes = true      #端口數據通告

[keystone_authtoken]     #令牌注冊信息

//847

auth_uri = http://controller:5000

auth_url = http://controller:35357

//898

memcached_servers = controller:11211

//1005

auth_type = password

project_domain_name = default

user_domain_name = default

project_name = service

username = neutron

password = 123456

[nova]

//1085

auth_url = http://controller:35357

//1089

auth_type = password

//1127

project_domain_name = default

//1156

user_domain_name = default

//1069

region_name = RegionOne

//1135

project_name = service

//1163

username = nova

//1121

password = 123456

[oslo_concurrency]

//1179

lock_path = /var/lib/neutron/tmp

8、配置網絡二層插件

vim /etc/neutron/plugins/ml2/ml2_conf.ini

[ml2]

//136

type_drivers = flat,vlan          #flat-橋接  vlan-局域網

//141   設置空是禁用本地網絡

tenant_network_types =

//145

mechanism_drivers = linuxbridge

//150

extension_drivers = port_security

[ml2_type_flat]

//186

flat_networks = provider         #橋接網絡類型

[securitygroup]

//263

enable_ipset = true            #安全組

9、配置Linux網橋

vim  /etc/neutron/plugins/ml2/linuxbridge_agent.ini

[linux_bridge]

//157

physical_interface_mappings = provider:ens33

[vxlan]

//208

enable_vxlan = false

[securitygroup]

//193

enable_security_group = true             #開啟安全組

//188

firewall_driver = neutron.agent.linux.iptables_firewall.IptablesFirewallDriver

10、配置DHCP

vim /etc/neutron/dhcp_agent.ini

//16

interface_driver = linuxbridge           #接口類型

//28

dhcp_driver = neutron.agent.linux.dhcp.Dnsmasq

//37

enable_isolated_metadata = true

11、配置metadata

vim  /etc/neutron/metadata_agent.ini

[DEFAULT]

//22

nova_metadata_host = controller

//34

metadata_proxy_shared_secret = 123456

12、配置計算服務使用網絡服務

vim /etc/nova/nova.conf        #在``[neutron]`` 部分，配置訪問參數

[neutron]

//7613

url = http://controller:9696

//7689

auth_url = http://controller:35357

//7683

auth_type = password

//7710

project_domain_name = default

//7763

user_domain_name = default

//7757

region_name = RegionOne

//7704

project_name = service

//7730

username = neutron

//7739

password = 123456

//7652

service_metadata_proxy = true          #metadata代理開啟

//7584

metadata_proxy_shared_secret = 123456     #代理的認證密鑰

13、建立服務軟連接

ln -s /etc/neutron/plugins/ml2/ml2_conf.ini /etc/neutron/plugin.ini

14、同步數據庫

su -s /bin/sh -c "neutron-db-manage --config-file /etc/neutron/neutron.conf   --config-file /etc/neutron/plugins/ml2/ml2_conf.ini upgrade head" neutron

15、重啟compute API服務，并開啟相關服務

systemctl restart openstack-nova-api.service

systemctl enable neutron-server.service   

systemctl enable neutron-linuxbridge-agent.service 

systemctl enable neutron-dhcp-agent.service   

systemctl enable neutron-metadata-agent.service

systemctl restart neutron-server.service   

systemctl restart neutron-linuxbridge-agent.service 

systemctl restart neutron-dhcp-agent.service   

systemctl restart neutron-metadata-agent.service

++compute節點neutron網絡配置++

1、yum安裝neutron包

yum install -y openstack-neutron-linuxbridge ebtables ipset

2、配置公共組件

vim /etc/neutron/neutron.conf

[DEFAULT]

//27

auth_strategy = keystone

//570

transport_url = rabbit://openstack:123456@controller

[keystone_authtoken]

//847

auth_uri = http://controller:5000

auth_url = http://controller:35357

//898

memcached_servers = controller:11211

//1005

auth_type = password

project_domain_name = default

user_domain_name = default

project_name = service

username = neutron

password = 123456

[oslo_concurrency]

//1180

lock_path = /var/lib/neutron/tmp

3、配置Linux網橋

vim /etc/neutron/plugins/ml2/linuxbridge_agent.ini

[linux_bridge]

//157

physical_interface_mappings = provider:ens33

[vxlan]

//208

enable_vxlan = false

[securitygroup]

//193

enable_security_group = true

//188

firewall_driver = neutron.agent.linux.iptables_firewall.IptablesFirewallDriver

4、配置計算節點網絡服務

vim /etc/nova/nova.conf

[neutron]

//7534

url = http://controller:9696

//7610

auth_url = http://controller:35357

//7604

auth_type = password

//7631

project_domain_name = default

//7657

user_domain_name = default

//7678

region_name = RegionOne

//7625

project_name = service

//7651

username = neutron

//7660

password = 123456

5、開啟相關服務

systemctl restart openstack-nova-compute.service

systemctl enable neutron-linuxbridge-agent.service

systemctl start neutron-linuxbridge-agent.service

到此為止，neutron組件已經安裝完成，謝謝閱讀！