Neutron安装的linuxbridge安装

admin

一、控制节点配置
5 Z& q) C. O, x( p% M& z在控制节点进行以下操作。

. O/ p4 D7 G( ?) @, l0 I/ q1、配置数据库
进入数据库控制台（密码123456）：

, {* r8 ^9 [) Rmysql -u root -p
' |3 K2 g! i5 w" K

bash
2 w" W. m+ h1 J8 k/ c: H创建数据库并授予权限，退出数据库：

+ O; T+ Y! x" Q/ i$ Z5 g: w+ K$ S) _" }$ qCREATE DATABASE neutron;
GRANT ALL PRIVILEGES ON neutron.* TO 'neutron'@'localhost' IDENTIFIED BY '123456';
; N% I: f* t$ X: }GRANT ALL PRIVILEGES ON neutron.* TO 'neutron'@'%' IDENTIFIED BY '123456';






% q5 z5 I0 _8 [$ {7 f9 h5 @& D2、创建neutron用户
登录admin支行好：
( R7 F$ R; H8 v; Z7 F6 y/ V4 _: i
. N0 O  I* W! x/ L0 h" R  _" ?+ b. admin-openrc
) t1 T# x/ r7 A; @) _2 u  P
bash
在domain：default创建用户neutron：

7 @1 Y. |1 ]; ~+ B; ^) J; iopenstack user create --domain default --password-prompt neutron
9 Q' Q0 V- n9 T
/ [! j' |/ x/ e' Q( Z0 wbash
1 ?2 F/ b. z" T, |4 }$ H9 h; e如下图：



授予neutron服务admin权限：
% \( u7 K# `" I" v2 A+ v% o
  i& r# K5 `4 Topenstack role add --project service --user neutron admin
  T$ T/ ?( D, n& z5 ]
bash
创建neutron服务入口：
8 |" |" V( O/ W* W: `
5 @- ]6 s3 ]9 p9 J1 k8 b; Iopenstack service create --name neutron --description "OpenStack Networking" network

bash
如下图：

5 R- d# b7 w" n* `* E/ _6 b
' \$ [+ s# \4 }/ ?/ ~8 n0 c* @  C
. M9 r; Z7 q! i创建网络服务API端点：
2 ~8 o& \# J; @1 a: V: z5 \
# V5 {# ?5 ^# p& v. h: B) dopenstack endpoint create --region RegionOne network public http://controller:9696
openstack endpoint create --region RegionOne network internal http://controller:9696
/ K3 I# \7 {  y* x. K/ Yopenstack endpoint create --region RegionOne network admin http://controller:9696
AI构建项目
7 ^7 {  v- b* `; s8 u5 U( B1 u( kbash
如下图：
" |, K1 b+ W8 @- [7 P" j
/ r5 G; ]* @: }) N

* H/ S) _9 m$ _8 j4 C0 r+ U3、配置selfservice网络
安装neutron：
, P. L/ ?$ U' Q" ]
yum install openstack-neutron openstack-neutron-ml2 openstack-neutron-linuxbridge ebtables -y
AI构建项目
; b% ?6 I' `- h% ~8 s- Q- Lbash
备份/etc/neutron/neutron.conf，删除其注释：

; ?' u$ f. v5 u$ Omv /etc/neutron/neutron.conf /etc/neutron/neutron.conf.source
cat /etc/neutron/neutron.conf.source | grep -Ev "^#|^$" > /etc/neutron/neutron.conf
+ [4 ]; f/ t" ^+ J# ^AI构建项目
, K; w& @* i8 N  ?/ Z. R( Qbash
编辑/etc/neutron/neutron.conf：

( l0 x' s( ^& Y( H[DEFAULT]
0 c" s! }* Q% g/ F+ \' o5 ?; f0 q# ...
core_plugin = ml2
service_plugins = router
allow_overlapping_ips = true
transport_url = rabbit://openstack:123456@controller
; |0 w- V3 T( \! l+ Y+ Aauth_strategy = keystone
notify_nova_on_port_status_changes = true
notify_nova_on_port_data_changes = true
, h! D, A: H0 c! R
8 q( s) g  T! Z: {: H[database]
1 g3 m7 j0 |4 x! V3 [: w# ...
connection = mysql+pymysql://neutron:123456@controller/neutron

1 V# {3 }; Z/ B4 F. @8 {6 w! e% _[keystone_authtoken]
( o0 a' f+ o) B% j+ J# ...
' Y. l& Y+ S$ T& {$ m4 Bwww_authenticate_uri = http://controller:5000
auth_url = http://controller:5000
( Y* @4 z* E* h8 @memcached_servers = controller:11211
auth_type = password
& z* `) W% V5 J+ d9 A% ], q% vproject_domain_name = default
user_domain_name = default
# d2 G% c/ v8 k. [/ r7 Dproject_name = service
username = neutron
' U1 `  a' E9 P0 Bpassword = 123456
# q5 }: q3 s# x* @" }& b
[nova]
3 `& ~+ Q4 J6 g) X8 r4 ?# ...
auth_url = http://controller:5000
auth_type = password
/ N- ]6 d9 X) ~" }. N" x/ fproject_domain_name = default
user_domain_name = default
region_name = RegionOne
! t; O# b8 \' ^$ ?project_name = service
0 S/ Y* y# c: F% ]3 jusername = nova
' F2 U6 N7 `# j, [password = 123456

- }( p, H, n7 h, R[oslo_concurrency]
# ...
lock_path = /var/lib/neutron/tmp
% Z2 n# D; T8 U+ {
AI构建项目
bash
1 I0 U6 P8 V' s5 P; g) @4、配置ml2
$ y5 X; W; o# {2 [, a7 k 备份/etc/neutron/plugins/ml2/ml2_conf.ini，删除其注释：

mv /etc/neutron/plugins/ml2/ml2_conf.ini /etc/neutron/plugins/ml2/ml2_conf.ini.source
& ]/ h/ L! G7 p7 icat /etc/neutron/plugins/ml2/ml2_conf.ini.source | grep -Ev "^#|^$" > /etc/neutron/plugins/ml2/ml2_conf.ini
AI构建项目
" G8 m2 Z/ p; j, e3 F( O8 Obash
$ ?" o5 J' M# W9 z' Y: \3 F对/etc/neutron/plugins/ml2/ml2_conf.ini进行以下配置：
1 Y" I0 Y1 F7 x( O0 e2 b( X
[ml2]
2 q. P0 p3 C4 `+ W& p4 w# ...
, q8 j8 H$ E  W+ Y4 jtype_drivers = flat,vlan,vxlan
) d' F4 L0 W% e5 ^! v+ ~% ltenant_network_types = vxlan
mechanism_drivers = linuxbridge,l2population
extension_drivers = port_security

[ml2_type_flat]
/ I& l0 s1 y+ N+ h- Q# ...
flat_networks = provider

; D  K9 t1 w/ X* `+ j[ml2_type_vxlan]
# ...
vni_ranges = 1:1000
; {1 \! L* S, B5 C9 \
[securitygroup]
# ...
enable_ipset = true
AI构建项目
" Q+ X$ T2 R  v! }bash
5、配置linux网桥
5 h/ `$ H$ _- F0 P' ?9 \- r# f. d 备份/etc/neutron/plugins/ml2/linuxbridge_agent.ini，删除其注释：

/ q/ a: s8 w& g5 J/ S6 A6 Y# Vmv /etc/neutron/plugins/ml2/linuxbridge_agent.ini /etc/neutron/plugins/ml2/linuxbridge_agent.ini.source
6 P0 W- l9 v* d# b2 Acat /etc/neutron/plugins/ml2/linuxbridge_agent.ini.source | grep -Ev "^#|^$" > /etc/neutron/plugins/ml2/linuxbridge_agent.ini
AI构建项目
! y" O+ V! l  B+ {bash
: U" u  @: n$ _" i对/etc/neutron/plugins/ml2/linuxbridge_agent.ini进行以下配置(physical_interface_mappings 的ens33是网卡号)：

[linux_bridge]
physical_interface_mappings = provider:ens33

6 z3 _7 T6 K* k' g* v& Y. O, @3 m! C[vxlan]
2 q& H- x0 b' m" V' E. Q; ?5 henable_vxlan = true
! s) X2 W3 Z6 f0 ?- j* Plocal_ip = 10.0.0.11
l2_population = true
& z. X* C! }& r8 n7 x8 R( U
# X+ C) n# D) S: l[securitygroup]
# ...
enable_security_group = true
firewall_driver = neutron.agent.linux.iptables_firewall.IptablesFirewallDriver
AI构建项目
bash
修改 /etc/sysctl.conf，保证系统支持网桥过滤器，添加以下内容：
: t! i; a  F7 z+ u3 }+ T
( l4 ^: |) Z( X8 U! Fnet.bridge.bridge-nf-call-iptables = 1
" l* {" H) U7 v( J4 L% J/ `net.bridge.bridge-nf-call-ip6tables = 1
. o" d7 s1 j" k8 u, gAI构建项目
bash
% Q# T6 W$ o- F3 ?; f+ b/ X如下图：



8 ]# Y5 J: C( q' v  @添加网桥过滤器，并设置开机加载：

modprobe br_netfilter
9 X$ |$ X! ]( s8 Q( A4 ^9 csysctl -p
# O8 p' @" A3 |sed -i '$amodprobe br_netfilter' /etc/rc.local
AI构建项目
: y! C5 I9 U% R: l. l5 Ubash
如下图：

# d9 R9 E8 t, e- E6 O: l, f

4 {2 w$ F+ P7 D. g/ K6、配置L3代理
4 Q" L2 E2 w. T8 H编辑/etc/neutron/l3_agent.ini，添加以下内容：

2 P  ?! X) S) c! E[DEFAULT]
* O8 Z0 A. K4 d2 f# b& |# ...
interface_driver = linuxbridge
AI构建项目
' [* m+ B0 K& Cbash
2 [2 r! Z- A; N. g/ u0 g  n如下图：
$ X6 K) @+ p8 G7 j; H


7、配置dhcp
编辑/etc/neutron/dhcp_agent.ini，添加以下内容：

[DEFAULT]
* t9 l; s9 ^0 Y# ...
3 t1 y) I1 _4 F; w: P7 z8 G' W# ~interface_driver = linuxbridge
dhcp_driver = neutron.agent.linux.dhcp.Dnsmasq
enable_isolated_metadata = true
$ Q! h* ~" J; z  Q7 Q/ QAI构建项目
9 n4 ]$ E4 b, k6 U$ Bbash
如下图：
7 m9 q2 O' |1 W+ W9 Q+ l3 m
0 z) I0 ]% \6 V; v
& S5 Z8 b1 j3 X# @% U* d$ b8 `
8、配置meta代理
5 X7 n/ t- c! C编辑/etc/neutron/metadata_agent.ini，进行以下配置：

[DEFAULT]
7 e% P- i' {& c4 Z( ^, d, ?% W# ...
( W$ a* D, Y, R9 A. i0 U/ x* nnova_metadata_host = controller
metadata_proxy_shared_secret = 123456
AI构建项目
bash
如下图：



9、配置nova使用neutron服务
; L7 a: n: ?5 J- b/ h8 L4 c编辑/etc/nova/nova.conf，进行以下配置：

' ]6 o! g; v/ {0 b4 {[neutron]
. n9 g: T; K, d# ...
auth_url = http://controller:5000
auth_type = password
$ |' W3 l) \7 l, oproject_domain_name = default
user_domain_name = default
region_name = RegionOne
project_name = service
username = neutron
4 }: M, r: q( f; h/ ]password = 123456
service_metadata_proxy = true
metadata_proxy_shared_secret = 123456
AI构建项目
bash
4 Q$ C6 n- ], e% C7 p. A! m9 {如下图：


2 c! X: y) k  b" E% Q- u
10、收尾
创建软连接：

ln -s /etc/neutron/plugins/ml2/ml2_conf.ini /etc/neutron/plugin.ini
AI构建项目
bash
同步数据库：

% c% s' K4 n4 X" osu -s /bin/sh -c "neutron-db-manage --config-file /etc/neutron/neutron.conf --config-file /etc/neutron/plugins/ml2/ml2_conf.ini upgrade head" neutron
AI构建项目
, V6 ]( u. x' Z6 K& H+ qbash
如下图：


* ]+ l3 p1 ~8 [
重启nova-api：
: {+ a4 [; Y5 W6 Q
) i$ p1 i: t. `1 g4 o. ~6 C& {systemctl restart openstack-nova-api.service
' k$ V3 j& T! dAI构建项目
* Y& g/ F- T& t% J% d1 Abash
设置开机自启，并启动服务：

9 I! V' J/ [) A# Dsystemctl enable neutron-server.service neutron-linuxbridge-agent.service neutron-dhcp-agent.service neutron-metadata-agent.service
systemctl start neutron-server.service neutron-linuxbridge-agent.service neutron-dhcp-agent.service neutron-metadata-agent.service
systemctl enable neutron-l3-agent.service
systemctl start neutron-l3-agent.service
AI构建项目
/ v2 r* t- _7 x4 D- b6 |bash
二、计算节点配置
" E3 M  Z3 H7 B2 y" t; k, b2 H. M* T在计算节点完成以下操作。

1、安装包
- c) E8 }6 {8 Z: q; o安装包：

+ s4 f6 b; p- b* ]% N0 ryum install openstack-neutron-linuxbridge ebtables ipset -y
AI构建项目
bash
备份/etc/neutron/neutron.conf，删除其注释：
. f% c& u. w, h
6 ^8 k0 V' O5 [' [- a; Xmv /etc/neutron/neutron.conf /etc/neutron/neutron.conf.source
cat /etc/neutron/neutron.conf.source | grep -Ev "^#|^$" > /etc/neutron/neutron.conf
AI构建项目
bash
编辑/etc/neutron/neutron.conf，进行如下配置：
8 ~8 N" O  r% P& F
[DEFAULT]
  Z* d* i: \) A1 q# ...
transport_url = rabbit://openstack:123456@controller
/ n9 x7 D# x3 Y& w; M# L  L/ iauth_strategy = keystone
9 {7 Y. D) N4 |6 d% s) H! S7 q' y, g$ M
[keystone_authtoken]
& P+ g+ I+ g3 O& ~: G4 r6 n# ...
www_authenticate_uri = http://controller:5000
auth_url = http://controller:5000
memcached_servers = controller:11211
auth_type = password
' q+ s) ?1 j7 ]project_domain_name = default
user_domain_name = default
% s) `! U& Y- m3 W  V9 iproject_name = service
. g$ R  H6 F+ o; y& M) g& Susername = neutron
password = 123456

[oslo_concurrency]
+ z/ {' g7 s: n8 R7 {' U0 x: [# ...
! A5 \" q; ~; S# B8 R7 K6 `lock_path = /var/lib/neutron/tmp
# n4 r/ n- M9 {( M1 Y# o; }- F8 BAI构建项目
4 k# Z( M, S8 l  Cbash
& K& I) @( N% ?3 {& W2、配置linux网桥
1 J/ d; |0 b% `, z. ]& B2 w; O 备份/etc/neutron/plugins/ml2/linuxbridge_agent.ini，删除其注释：
+ Z% t7 \$ A! [  f  c
* E" N2 i  M% q/ o( F1 Fmv /etc/neutron/plugins/ml2/linuxbridge_agent.ini /etc/neutron/plugins/ml2/linuxbridge_agent.ini.source
: [1 e: ?$ W6 F7 H9 `8 p# ~cat /etc/neutron/plugins/ml2/linuxbridge_agent.ini.source | grep -Ev "^#|^$" > /etc/neutron/plugins/ml2/linuxbridge_agent.ini
AI构建项目
bash
对/etc/neutron/plugins/ml2/linuxbridge_agent.ini进行以下配置(physical_interface_mappings 的ens33是网卡号)：
6 E1 _2 \. {- n3 c8 d" t
[linux_bridge]
physical_interface_mappings = provider:ens33

  e' O" R5 Y+ F. x[vxlan]
enable_vxlan = true
local_ip = 10.0.0.31
l2_population = true
, ^2 r+ _: @& T. }' x& `. w7 h
[securitygroup]
4 `1 B0 V) m- r3 f# D2 Y" g# ...
enable_security_group = true
5 [  c8 V$ ?6 k1 U: I: Z: dfirewall_driver = neutron.agent.linux.iptables_firewall.IptablesFirewallDriver
  p  N+ E- s9 ?AI构建项目
" i7 ^6 t& a2 K, E5 o4 a7 [$ E+ Rbash
& H0 ^3 w0 t( }4 n修改 /etc/sysctl.conf，保证系统支持网桥过滤器，添加以下内容：
6 X$ N: x; J0 a3 y, r9 m7 m
net.bridge.bridge-nf-call-iptables = 1
net.bridge.bridge-nf-call-ip6tables = 1
AI构建项目
2 M2 V# ~. k. E# c9 K. |5 G( nbash
如下图：
; f. T3 W! d! x, t# p) a4 i% l) X
5 A1 ?6 j4 x! Y, {2 f% g% w2 k6 |: \

添加网桥过滤器，并设置开机加载：
4 V& t1 `  o2 W9 n
+ |/ F6 F3 z# m, Bmodprobe br_netfilter
6 r8 X; a! b+ P" w8 s- W7 k9 Msysctl -p
sed -i '$amodprobe br_netfilter' /etc/rc.local
& R2 F: M1 x# u( s1 I0 Q1 f# oAI构建项目
2 b8 K6 d3 x: d, X& f6 L3 Bbash
" \/ U' F2 f0 w$ b) e如下图：

8 `) v4 s% ^' Y# H( o

+ P9 ]1 Y" F4 k! q: M3、配置nova使用neutron服务
编辑/etc/nova/nova.conf，进行以下配置：

[neutron]
# ...
auth_url = http://controller:5000
auth_type = password
7 V- s7 y3 W2 S- z8 @- U0 @3 Dproject_domain_name = default
5 B  a5 u. l4 @& H1 ^user_domain_name = default
0 c( k1 h3 d. nregion_name = RegionOne
project_name = service
username = neutron
! t5 o* F6 J. a2 [" Q8 h! M6 rpassword = 123456
AI构建项目
bash
0 |) I$ c: Q0 I( y0 e如下图：
  l, e3 U( h5 J7 g( g. i" P6 d. p


4、收尾
重启计算服务：

7 \8 L1 I$ B% B0 I; N+ Qsystemctl restart openstack-nova-compute.service
AI构建项目
- B3 f2 U, @1 z1 ?8 L, xbash
. G3 e- @: c! o7 `/ I9 ~设置网桥开机自启，并启动服务：

systemctl enable neutron-linuxbridge-agent.service
" S) O  J. J. f. Wsystemctl start neutron-linuxbridge-agent.service
AI构建项目
bash
三、验证
8 p* }( X9 _' }. n, l在控制节点使用如下命令验证：

openstack network agent list