OpenStack kilo版 Neutron部署

Posted 2022-07-18 wshenjin

在 controller节点、network节点、compute节点部署

安装neutron-server

root@controller:~# apt-get install neutron-server neutron-plugin-ml2 python-neutronclient

配置neutron-server

/etc/neutron/neutron.conf：

[DEFAULT]
router_distributed = False
rpc_backend = rabbit
auth_strategy = keystone
core_plugin = ml2
service_plugins = router
allow_overlapping_ips = True
notify_nova_on_port_status_changes = True
notify_nova_on_port_data_changes = True
nova_url = http://controller:8774/v2

[keystone_authtoken]
auth_uri = http://controller:5000
auth_url = http://controller:35357
auth_plugin = password
project_domain_id = default
user_domain_id = default
project_name = service
username = neutron
password = neutron

[database]
connection = mysql://neutron:neutron@controller/neutron

[nova]
auth_url = http://controller:35357
auth_plugin = password
project_domain_id = default
user_domain_id = default
region_name = RegionOne
project_name = service
username = nova
password = nova

[oslo_messaging_rabbit]
rabbit_host = controller
rabbit_userid = openstack
rabbit_password = openstack

/etc/neutron/plugins/ml2/ml2_conf.ini：

[ml2]
type_drivers = flat,vlan,gre,vxlan
tenant_network_types = flat
mechanism_drivers = linuxbridge
[ml2_type_flat]
flat_networks = external
[securitygroup]
enable_security_group = True
enable_ipset = True
[linux_bridge]
physical_interface_mappings = external:eth1

nova需要添加配置，/etc/nova/nova.conf：

#添加配置
[DEFAULT]
security_group_api = neutron
linuxnet_interface_driver = nova.network.linux_net.NeutronLinuxBridgeInterfaceDriver
firewall_driver = nova.virt.firewall.NoopFirewallDriver
[neutron]?
url = http://controller:9696
auth_strategy = keystone
admin_auth_url = http://controller:35357/v2.0
admin_tenant_name = service
admin_username = neutron
admin_password = neutron

初始化数据库：

root@controller:~# su -s /bin/sh -c "neutron-db-manage --config-file /etc/neutron/neutron.conf --config-file /etc/neutron/plugins/ml2/ml2_conf.ini upgrade head" neutron

重启服务：

root@controller:~# service nova-api restart

root@controller:~#? service neutron-server restart

安装neutron-network

network节点环境配置：

root@network:~# vi /etc/sysctl.conf
net.ipv4.ip_forward=1?
net.ipv4.conf.all.rp_filter=0?
net.ipv4.conf.default.rp_filter=0

#如果有报错
root@network:~# vi /etc/modules
br_netfilter #添加

root@network:~# modprobe br_netfilter

root@network:~# sysctl -p

安装neutron

root@controller:~# apt-get install neutron-plugin-ml2 neutron-plugin-linuxbridge-agent neutron-dhcp-agent neutron-metadata-agent -y

配置neutron-network

/etc/neutron/neutron.conf：

#在 [database] 部分，注释掉connection选项，网络不直接访问数据库
[DEFAULT]
router_distributed = False
rpc_backend = rabbit
auth_strategy = keystone
core_plugin = ml2
service_plugins = router
allow_overlapping_ips = True
[keystone_authtoken]
auth_uri = http://controller:5000
auth_url = http://controller:35357
auth_plugin = password
project_domain_id = default
user_domain_id = default
project_name = service
username = neutron
password = neutron
[oslo_messaging_rabbit]
rabbit_host = controller
rabbit_password = openstack
rabbit_userid = openstack

/etc/neutron/plugins/ml2/ml2_conf.ini：

[ml2]
type_drivers = flat,vlan,gre,vxlan
tenant_network_types = flat
mechanism_drivers = linuxbridge
[ml2_type_flat]
flat_networks = external
[securitygroup]
enable_security_group = True
enable_ipset = True
[linux_bridge]
physical_interface_mappings = external:eth1

/etc/neutron/dhcp_agent.ini：

[DEFAULT]
interface_driver = neutron.agent.linux.interface.BridgeInterfaceDriver
dhcp_driver = neutron.agent.linux.dhcp.Dnsmasq
use_namespaces = True
dhcp_delete_namespaces = True
debug = True
dnsmasq_config_file = /etc/neutron/dnsmasq-neutron.conf
enable_isolated_metadata = True
enable_metadata_network = True

/etc/neutron/metadata_agent.ini：

[DEFAULT]
auth_uri = http://controller:5000
auth_url = http://controller:35357
auth_region = RegionOne
auth_plugin = password
project_domain_id = default
user_domain_id = default
project_name = service
username = neutron
password = neutron?
nova_metadata_ip = controller
metadata_proxy_shared_secret = METADATA_SECRET

controller节点的/etc/nova/nova.conf追加配置，并重启nova-api服务：

[neutron]?
service_metadata_proxy = True
metadata_proxy_shared_secret = METADATA_SECRET

重启network节点相关服务：

root@network:~# /etc/init.d/neutron-neutron-dhcp-agent restart

root@network:~# /etc/init.d/neutron-metadata-agent restart

root@network:~# /etc/init.d/neutron-plugin-linuxbridge-agent restart

安装neutron-compute

compute节点环境配置：

root@compute1:~# vi /etc/sysctl.conf
net.ipv4.conf.all.rp_filter=0
net.ipv4.conf.default.rp_filter=0
net.bridge.bridge-nf-call-iptables=1
net.bridge.bridge-nf-call-ip6tables=1

#如果有报错
root@compute1:~# vi /etc/modules
br_netfilter #添加

root@compute1:~# modprobe br_netfilter

root@compute1:~# sysctl -p

安装neutron：

root@compute1:~# apt-get install neutron-plugin-ml2 neutron-plugin-linuxbridge-agent

配置neutron-compute

/etc/neutron/neutron.conf：

[DEFAULT]
rpc_backend = rabbit
auth_strategy = keystone
core_plugin = ml2
service_plugins = router
allow_overlapping_ips = True
core_plugin = ml2
[keystone_authtoken]
auth_uri = http://controller:5000
auth_url = http://controller:35357
auth_plugin = password
project_domain_id = default
user_domain_id = default
project_name = service
username = neutron
password = neutron
[oslo_messaging_rabbit]
rabbit_host = controller
rabbit_userid = openstack
rabbit_password = openstack

?/etc/neutron/plugins/ml2/ml2_conf.ini：

[ml2]
type_drivers = flat,vlan,gre,vxlan
tenant_network_types = flat
mechanism_drivers = linuxbridge
[ml2_type_flat]
flat_networks = external
[securitygroup]
enable_security_group = True
enable_ipset = True
[linux_bridge]
physical_interface_mappings = external:eth1

重启服务：

root@compute1:~# service nova-compute restart

root@compute1:~# /etc/init.d/neutron-plugin-linuxbridge-agent restart??

验证

在controller节点验证：

root@controller:~# neutron agent-list?
+--------------------------------------+--------------------+----------+-------+----------------+---------------------------+
| id? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ?| agent_type? ? ? ? ?| host? ? ?| alive | admin_state_up | binary? ? ? ? ? ? ? ? ? ? |
+--------------------------------------+--------------------+----------+-------+----------------+---------------------------+
| 2127166d-8618-42ee-9735-0e62a9f43b21 | Linux bridge agent | network? | :-)? ?| True? ? ? ? ? ?| neutron-linuxbridge-agent |
| 28fd5729-3c7b-4674-9f99-9c679ad94a83 | Linux bridge agent | compute1 | :-)? ?| True? ? ? ? ? ?| neutron-linuxbridge-agent |
| a38e7e96-787c-49b5-a4e2-28c84051d084 | Metadata agent? ? ?| network? | :-)? ?| True? ? ? ? ? ?| neutron-metadata-agent? ? |
| b24fbd40-66d4-4266-af26-5a969ec40068 | DHCP agent? ? ? ? ?| network? | :-)? ?| True? ? ? ? ? ?| neutron-dhcp-agent? ? ? ? |
+--------------------------------------+--------------------+----------+-------+----------------+---------------------------+