安装和配置控制节点（Controller node）
在配置Openstack网络（项目代号为neutron）服务前，需要创建相关数据库、服务认证service credentials、API入口endpoints
- 创建数据库
$ mysql -uroot -p
mysql> create database neutron;
mysql> grant all privileges on neutron.* to 'neutron'@'localhost' \
identified by '123456' with grant option;
mysql> grant all privileges on neutron.* to 'neutron'@'%' \
identified by '123456' with grant option;
mysql> exit;
- 切换到
admin用户环境，以获得admin-onlyCLI权限
$ . admin-openrc
- 创建
neutron服务认证
创建neutron用户
$ openstack user create --domain default --password-prompt neutron
User Password:
Repeat User Password:
+---------------------+----------------------------------+
| Field | Value |
+---------------------+----------------------------------+
| domain_id | 5d9c95b32eaa4d80934f5d5d765bd3f5 |
| enabled | True |
| id | c5be46da15fb42fc9b96a1b1c884fb6b |
| name | neutron |
| password_expires_at | None |
+---------------------+----------------------------------+
neutron用户添加admin角色
$ openstack role add --project service --user neutron admin
此命令无输出
创建neutron服务入口
$ openstack service create --name neutron \
--description "OpenStack Networking" network
+-------------+----------------------------------+
| Field | Value |
+-------------+----------------------------------+
| description | OpenStack Networking |
| enabled | True |
| id | 1ce836e494024e4ea9e2e7899cf01e09 |
| name | neutron |
| type | network |
+-------------+----------------------------------+
- 创建Networking服务的
API endpoints
$ openstack endpoint create --region RegionOne \
network public http://controller:9696
+--------------+----------------------------------+
| Field | Value |
+--------------+----------------------------------+
| enabled | True |
| id | 7184c9fcc8d544d7a3957c9810ce4142 |
| interface | public |
| region | RegionOne |
| region_id | RegionOne |
| service_id | 1ce836e494024e4ea9e2e7899cf01e09 |
| service_name | neutron |
| service_type | network |
| url | http://controller:9696 |
+--------------+----------------------------------+
$ openstack endpoint create --region RegionOne \
network internal http://controller:9696
+--------------+----------------------------------+
| Field | Value |
+--------------+----------------------------------+
| enabled | True |
| id | 7228694155f440eda571df686b6c49be |
| interface | internal |
| region | RegionOne |
| region_id | RegionOne |
| service_id | 1ce836e494024e4ea9e2e7899cf01e09 |
| service_name | neutron |
| service_type | network |
| url | http://controller:9696 |
+--------------+----------------------------------+
$ openstack endpoint create --region RegionOne \
network admin http://controller:9696
+--------------+----------------------------------+
| Field | Value |
+--------------+----------------------------------+
| enabled | True |
| id | 224bcf7ffa934baba1f75e029f64abab |
| interface | admin |
| region | RegionOne |
| region_id | RegionOne |
| service_id | 1ce836e494024e4ea9e2e7899cf01e09 |
| service_name | neutron |
| service_type | network |
| url | http://controller:9696 |
+--------------+----------------------------------+
配置 networking 选项
可以选择option 1或option 2架构以部署Networking服务。
-
Option 1架构是最简单的，只支持将虚拟机实例接入provider(external)网络，没有self-service(private)网络、routers以及floating IP(浮动IP)。仅有admin用户或其他同级用户可管理provider网络 -
Option 2架构则使用layer-3服务扩展了option 1，支持虚拟机实例使用self-service网络。demo用户或其他用户可以自行管理self-service网络，包括routers以及floating IP。floating IP可以让虚拟机实例通过self-service网络访问external网络，例如外网。self-service网络的数据包会使用 1500 的MTU值
Option 2同样支持将虚拟机实例接入provider网络
配置完成下述任一网络架构后，再回到这里继续配置 metadata 代理
- Option 1: Provider 网络 部署
-Option 2: Self-service 网络
配置metadata agent
metadata agent用于提供配置信息，例如虚拟机实例的凭据
- 编辑
/etc/neutron/metadata_agent.ini
[DEFAULT]
...
nova_metadata_ip = controller
metadata_proxy_shared_secret = METADATA_SECRET #可以设置为其他合适的密码
配置Compute service使用网络服务
- 编辑
/etc/nova/nova.conf
[neutron]
...
url = http://controller:9696
auth_url = http://controller:35357
auth_type = password
project_domain_name = Default
user_domain_name = Default
region_name = RegionOne
project_name = service
username = neutron
password = 123456
service_metadata_proxy = true
metadata_proxy_shared_secret = METADATA_SECRET
安装收尾
# ln -s /etc/neutron/plugins/ml2/ml2_conf.ini \
/etc/neutron/plugin.ini
# su -s /bin/sh -c "neutron-db-manage --config-file /etc/neutron/neutron.conf \
--config-file /etc/neutron/plugins/ml2/ml2_conf.ini upgrade head" neutron
# systemctl restart openstack-nova-api.service
- 对于
option 1和option 2，都需要如下操作
# systemctl enable neutron-server.service \
neutron-linuxbridge-agent.service neutron-dhcp-agent.service \
neutron-metadata-agent.service
# systemctl start neutron-server.service \
neutron-linuxbridge-agent.service neutron-dhcp-agent.service \
neutron-metadata-agent.service
- 对于
option 2，还需要启用layer-3服务
# systemctl enable neutron-l3-agent.service
# systemctl start neutron-l3-agent.service
