Neutron安装的linuxbridge安装

admin

一、控制节点配置
在控制节点进行以下操作。
. h3 S. H$ q, O+ ~/ ?
( k% Q( ^  V, C2 N7 i1、配置数据库
: a7 o- E8 D& V5 C进入数据库控制台（密码123456）：
. c( I# Q8 q9 K5 l. r
9 T* X2 Y( i( ~7 pmysql -u root -p


8 z4 Y" k: A  B" u8 J3 y7 E2 S1 ~bash
, R" y8 ~3 B# h3 ?' B5 l创建数据库并授予权限，退出数据库：

CREATE DATABASE neutron;
' w- `& I4 o* S0 d6 z$ wGRANT ALL PRIVILEGES ON neutron.* TO 'neutron'@'localhost' IDENTIFIED BY '123456';
GRANT ALL PRIVILEGES ON neutron.* TO 'neutron'@'%' IDENTIFIED BY '123456';
" Z% Q4 x( A' e
1 _; f6 U7 k  _+ N2 F2 u$ q' Y
1 Z# x7 s6 N! h3 M, o4 k



2、创建neutron用户
登录admin支行好：
! d. }5 J2 v4 D
. admin-openrc

bash
在domain：default创建用户neutron：

openstack user create --domain default --password-prompt neutron
! e5 G& @+ Z9 g7 ~
2 @5 w. c# C" U9 ]bash
如下图：
6 ?$ k0 O0 f; u! {' S8 j& g

5 d$ U2 L( }, {
授予neutron服务admin权限：
; W: J0 j2 v. ~8 U7 E, f
openstack role add --project service --user neutron admin

bash
' f0 |0 g# t- \3 x" }9 I) u# H创建neutron服务入口：

openstack service create --name neutron --description "OpenStack Networking" network
' s# V4 m( m" H  V
bash
如下图：


, Q- p4 `/ v; @5 }
' r7 m' b4 j* Q8 C创建网络服务API端点：
7 f) \9 Z+ |; U$ I% o5 q
2 V; \3 j' C$ d- B( p5 _3 O- hopenstack endpoint create --region RegionOne network public http://controller:9696
* j! T! ^5 L# b0 sopenstack endpoint create --region RegionOne network internal http://controller:9696
0 M7 H% H' O5 _% B, {) G, T! |) popenstack endpoint create --region RegionOne network admin http://controller:9696
AI构建项目
bash
' v9 `; A+ W6 \2 v4 i0 q! N) d如下图：
1 [2 _  o; V  Y
: d" R* R) y% f9 F% U' W
1 l6 D  |* H8 B, b' f
) y' p# h+ D3 l0 ]8 x- M' ^; i7 c3、配置selfservice网络
安装neutron：
" N. N8 j' z, o# q+ u
yum install openstack-neutron openstack-neutron-ml2 openstack-neutron-linuxbridge ebtables -y
AI构建项目
bash
备份/etc/neutron/neutron.conf，删除其注释：
  P; @2 o/ i9 R3 ^4 ]* R$ C- ]
# |6 V& `' ^$ A# ^* _mv /etc/neutron/neutron.conf /etc/neutron/neutron.conf.source
0 t  @7 B4 [6 n: w6 T0 f* a6 @cat /etc/neutron/neutron.conf.source | grep -Ev "^#|^$" > /etc/neutron/neutron.conf
AI构建项目
1 x" t' x4 i/ dbash
编辑/etc/neutron/neutron.conf：

[DEFAULT]
# ...
core_plugin = ml2
service_plugins = router
4 ~1 _# Y! ^) {  [) }allow_overlapping_ips = true
transport_url = rabbit://openstack:123456@controller
auth_strategy = keystone
3 v; t( Y* ?7 P4 x2 vnotify_nova_on_port_status_changes = true
notify_nova_on_port_data_changes = true

8 y# S- C- ~' U+ \& m2 u; E[database]
1 V6 x. c& z% ~! L# ...
3 w$ P- _; w. V8 R/ X( Tconnection = mysql+pymysql://neutron:123456@controller/neutron
$ \% N' i* b7 J) o7 u4 \
[keystone_authtoken]
$ i2 j& V- o) _( E. h% R" l# ...
: O- c* S! x: K( Twww_authenticate_uri = http://controller:5000
3 X$ |- ?; F; f+ ~auth_url = http://controller:5000
! R; j! t% w; |  }: hmemcached_servers = controller:11211
7 A% B1 B' f% g# Dauth_type = password
- H$ d$ \' G( xproject_domain_name = default
user_domain_name = default
project_name = service
username = neutron
password = 123456
0 g: `- v+ b* A2 [
[nova]
# ...
auth_url = http://controller:5000
/ n2 j: r, y  p9 B: C. R- |0 uauth_type = password
project_domain_name = default
user_domain_name = default
% Y6 X1 l; f! g/ m! x* R$ nregion_name = RegionOne
5 H# K: }8 N; I5 u8 wproject_name = service
username = nova
password = 123456

$ N7 c. g  G/ B0 @) v# y. c, x% g- G[oslo_concurrency]
( S' k6 O7 K% s0 Z* O. u# ...
, ~' r& b7 H" [8 w5 B3 O+ Block_path = /var/lib/neutron/tmp
6 N% C" B0 V! J& n; m
) F# b5 ^, m" H3 T# aAI构建项目
: [' S$ E' a: \9 C: k8 Sbash
* l8 j' ~3 Q2 E- W3 }' D/ q2 o$ v4、配置ml2
备份/etc/neutron/plugins/ml2/ml2_conf.ini，删除其注释：
1 Z" j0 v8 R4 Z2 ]" n
" p- U# W1 c: H2 p7 f: vmv /etc/neutron/plugins/ml2/ml2_conf.ini /etc/neutron/plugins/ml2/ml2_conf.ini.source
/ @, h# w. Z! Y) c4 N) e4 [cat /etc/neutron/plugins/ml2/ml2_conf.ini.source | grep -Ev "^#|^$" > /etc/neutron/plugins/ml2/ml2_conf.ini
AI构建项目
bash
6 w& i& M1 A6 L: g" @对/etc/neutron/plugins/ml2/ml2_conf.ini进行以下配置：

( V, d  ]9 N6 Q  F+ ^9 G[ml2]
1 F! I7 o" H! g7 Y# ...
type_drivers = flat,vlan,vxlan
tenant_network_types = vxlan
mechanism_drivers = linuxbridge,l2population
3 o+ Q( P: C& }. V. g& W2 k- Xextension_drivers = port_security

% l4 f- \2 ?) K" c, o4 q9 P& P[ml2_type_flat]
# ...
flat_networks = provider

, M, ^# O4 H: i2 P[ml2_type_vxlan]
# ...
  C8 [9 h% E* Y! `2 [vni_ranges = 1:1000

[securitygroup]
# ...
" V1 K2 b  _- y: c& Q1 M% tenable_ipset = true
4 p' J3 S  P6 F. s3 i4 K& c4 C8 z$ eAI构建项目
bash
5、配置linux网桥
' |7 D9 g2 {+ S* a9 { 备份/etc/neutron/plugins/ml2/linuxbridge_agent.ini，删除其注释：
5 S/ p7 q. d0 h- n; H* i2 a
mv /etc/neutron/plugins/ml2/linuxbridge_agent.ini /etc/neutron/plugins/ml2/linuxbridge_agent.ini.source
cat /etc/neutron/plugins/ml2/linuxbridge_agent.ini.source | grep -Ev "^#|^$" > /etc/neutron/plugins/ml2/linuxbridge_agent.ini
AI构建项目
bash
对/etc/neutron/plugins/ml2/linuxbridge_agent.ini进行以下配置(physical_interface_mappings 的ens33是网卡号)：
( f  ~, I' u- k$ k
! w, v  L$ C  \! w[linux_bridge]
physical_interface_mappings = provider:ens33

1 w; M- n' U# d& p' o5 R) W[vxlan]
enable_vxlan = true
% _9 H# `' X5 O. y4 c9 Flocal_ip = 10.0.0.11
l2_population = true
  u. m4 _* |8 C3 w
[securitygroup]
# ...
5 Z4 ^) U: y8 Oenable_security_group = true
firewall_driver = neutron.agent.linux.iptables_firewall.IptablesFirewallDriver
' y6 h, g! v( d3 k$ J4 P2 wAI构建项目
4 b6 N  S: _! n/ V4 }5 k, ?bash
6 ~" R7 d+ V/ R9 D/ t+ q, [6 H6 \4 t修改 /etc/sysctl.conf，保证系统支持网桥过滤器，添加以下内容：

net.bridge.bridge-nf-call-iptables = 1
net.bridge.bridge-nf-call-ip6tables = 1
+ a- u3 G. |' k: U, cAI构建项目
bash
如下图：



添加网桥过滤器，并设置开机加载：
: A: q' y) H) C# ?+ Y- }; t% v. q) W, W
modprobe br_netfilter
sysctl -p
sed -i '$amodprobe br_netfilter' /etc/rc.local
AI构建项目
bash
% g6 e8 D6 h  F. T& \( E如下图：

& l( \8 U4 m, Q  ~7 ?( s. e
. s$ i7 p9 w/ F8 o: f$ b  {
6、配置L3代理
编辑/etc/neutron/l3_agent.ini，添加以下内容：

[DEFAULT]
, m, M3 @0 ]6 p+ Q# {- V# ...
9 v: c5 t% J! f5 ^  Yinterface_driver = linuxbridge
; S0 O; N7 t& S% y3 y9 oAI构建项目
' w5 e) O/ L+ i& @2 C; k# kbash
如下图：


" j0 [: s, |. t5 o8 i9 r
! o6 R# ?% [# y  M9 [7、配置dhcp
! W; G' H/ |% Q8 y, V编辑/etc/neutron/dhcp_agent.ini，添加以下内容：

( N5 D" g1 G8 P" d9 X[DEFAULT]
! f  Z0 q) c& S2 O0 M0 {# ...
interface_driver = linuxbridge
: O& |0 l4 b& X3 L1 Fdhcp_driver = neutron.agent.linux.dhcp.Dnsmasq
9 u; T. L1 B" J; b9 B/ `$ C4 renable_isolated_metadata = true
AI构建项目
bash
如下图：

3 x! n+ }( N7 i" m1 C6 W/ g$ q2 F
7 p% d, D/ g. I' J& d' O
; b+ w* r' a! Q8、配置meta代理
编辑/etc/neutron/metadata_agent.ini，进行以下配置：

/ u8 O% Z  v0 p* [; Y[DEFAULT]
# ...
nova_metadata_host = controller
metadata_proxy_shared_secret = 123456
AI构建项目
. S) `8 A3 {* M, Xbash
如下图：
3 Y" Z# L2 E- e( z7 c4 t+ {

6 [8 n* H+ m7 u( a8 f
9、配置nova使用neutron服务
; T) u2 X- s7 m9 c6 p" _1 x: `编辑/etc/nova/nova.conf，进行以下配置：

# O$ G2 {7 p6 s0 d7 d1 I[neutron]
( c3 |& q9 \6 T1 ^$ o4 `  U# ...
auth_url = http://controller:5000
auth_type = password
5 F/ b$ X0 ]7 S: z3 |& z8 |! Rproject_domain_name = default
. p: x. V" O7 l2 b! |! M! ruser_domain_name = default
: S, U% {# x4 T" H5 K' `region_name = RegionOne
  i0 w& B. S$ ~9 E# oproject_name = service
username = neutron
password = 123456
service_metadata_proxy = true
5 Q5 G; Z6 X2 M0 l- ^- g7 e# N/ `9 z) rmetadata_proxy_shared_secret = 123456
5 m8 E/ [: q; z, M( X' @$ jAI构建项目
* A6 N7 j$ U  ~" O# ~bash
如下图：
& a* }% ~# X8 G; m6 {( I/ y( S7 b
, C$ V0 G. e* s1 X( W

10、收尾
" ~/ ]: x5 k3 h5 u6 A$ H. B创建软连接：

8 T* T* e  i/ D4 @9 ~0 J, }ln -s /etc/neutron/plugins/ml2/ml2_conf.ini /etc/neutron/plugin.ini
+ r2 q7 [0 r- _5 f$ BAI构建项目
7 h+ v2 Q0 e' B8 o4 S9 k8 s6 ubash
3 E: b$ a, j7 Z0 ], \同步数据库：
1 m0 |4 n0 ~( O& r; E, o
su -s /bin/sh -c "neutron-db-manage --config-file /etc/neutron/neutron.conf --config-file /etc/neutron/plugins/ml2/ml2_conf.ini upgrade head" neutron
! }$ a) L- K) Z3 k3 IAI构建项目
bash
如下图：
& M" {9 G  k4 e


6 H( A7 g# e# ]重启nova-api：
7 |$ ], l; m% z9 m8 F; S7 D4 [
" e8 N& Q" p/ W0 |6 x+ Csystemctl restart openstack-nova-api.service
AI构建项目
8 B9 x( F2 m4 y# ^1 p, Y# obash
设置开机自启，并启动服务：

8 g$ _! Y9 c2 x  w; q  @systemctl enable neutron-server.service neutron-linuxbridge-agent.service neutron-dhcp-agent.service neutron-metadata-agent.service
% F& t+ z2 e3 O  o- g) t6 _" Osystemctl start neutron-server.service neutron-linuxbridge-agent.service neutron-dhcp-agent.service neutron-metadata-agent.service
systemctl enable neutron-l3-agent.service
systemctl start neutron-l3-agent.service
AI构建项目
bash
- u% U# R! m  o二、计算节点配置
" r/ H6 G+ z) H8 P3 ~) M在计算节点完成以下操作。
. v: y" K' ^  z+ S
& S2 G: ~& j7 v9 `) C) E* y1、安装包
$ w& ]7 O9 c6 ^( g4 \安装包：

yum install openstack-neutron-linuxbridge ebtables ipset -y
AI构建项目
; U1 @  {9 k$ ubash
( y; E0 T4 b" r( ~1 K3 i, l. Z6 } 备份/etc/neutron/neutron.conf，删除其注释：
' ]! g: v9 ^% J4 i
mv /etc/neutron/neutron.conf /etc/neutron/neutron.conf.source
cat /etc/neutron/neutron.conf.source | grep -Ev "^#|^$" > /etc/neutron/neutron.conf
5 g% ^% M' l4 c$ T1 q, ?AI构建项目
% M6 p6 J+ |2 K9 V$ Vbash
编辑/etc/neutron/neutron.conf，进行如下配置：
% `/ U0 ~" S+ |7 [* e$ Y
[DEFAULT]
$ \8 s; K2 s; A0 b. k! L# ...
; L) n9 d% x4 u5 G0 p: k: t+ [transport_url = rabbit://openstack:123456@controller
auth_strategy = keystone
  O$ x+ ~* c4 P$ g/ n5 `
[keystone_authtoken]
" ]) h8 g8 C( f" F* m9 s7 S# ...
www_authenticate_uri = http://controller:5000
! b& M9 J6 c3 Fauth_url = http://controller:5000
  Q8 G% \4 D1 Z( M" U, mmemcached_servers = controller:11211
auth_type = password
! a9 H6 Y' f; B1 @/ E& J  m5 Kproject_domain_name = default
- {% o& s! g+ [7 puser_domain_name = default
project_name = service
username = neutron
password = 123456
8 s- D0 L; F; i* l( n
  U" w$ }# v5 X- Y& S8 |, @6 `[oslo_concurrency]
# ...
lock_path = /var/lib/neutron/tmp
( R/ N# u4 v' G9 ~AI构建项目
) y0 I8 i1 ?; w2 b5 ~+ Pbash
' o# Q( O+ Y' j3 K* M9 z2、配置linux网桥
4 [, b6 b  J6 w7 o* s% Y 备份/etc/neutron/plugins/ml2/linuxbridge_agent.ini，删除其注释：

mv /etc/neutron/plugins/ml2/linuxbridge_agent.ini /etc/neutron/plugins/ml2/linuxbridge_agent.ini.source
0 |% p" l, y1 u  l1 b2 [& z2 d) [cat /etc/neutron/plugins/ml2/linuxbridge_agent.ini.source | grep -Ev "^#|^$" > /etc/neutron/plugins/ml2/linuxbridge_agent.ini
" O2 @2 d3 \1 j, ~2 KAI构建项目
bash
, v& k/ Y/ s' _% D对/etc/neutron/plugins/ml2/linuxbridge_agent.ini进行以下配置(physical_interface_mappings 的ens33是网卡号)：

& U! V2 ?# ]$ q5 [; C[linux_bridge]
4 S1 i5 r. l' @. J+ }3 Xphysical_interface_mappings = provider:ens33

- y( U, A9 j3 g6 E[vxlan]
( _& r; C3 s  ~; a# B- i/ E" ?enable_vxlan = true
$ c# V$ w( A, ?7 l/ c+ Zlocal_ip = 10.0.0.31
l2_population = true
$ v( C# {  y# V5 M1 r9 ]1 p
3 X: i( B8 ^3 ^/ ^4 o[securitygroup]
) l0 h% T6 B8 r1 q% X! `# ...
3 E8 x- v7 \* s" cenable_security_group = true
* s8 G& a6 J7 y# x" xfirewall_driver = neutron.agent.linux.iptables_firewall.IptablesFirewallDriver
9 N% ^  Z/ Q7 Z+ u! `AI构建项目
bash
修改 /etc/sysctl.conf，保证系统支持网桥过滤器，添加以下内容：

9 |# A. Y/ ]6 ]net.bridge.bridge-nf-call-iptables = 1
6 v6 N6 M5 U- e# @net.bridge.bridge-nf-call-ip6tables = 1
AI构建项目
0 I* H& N9 `" a1 t7 M7 ^8 ~( u; ybash
如下图：
; W3 A+ r- m  J3 I: g
4 M  f& Y# k6 J2 q

添加网桥过滤器，并设置开机加载：
+ }9 c$ s9 n* ?+ K
modprobe br_netfilter
sysctl -p
sed -i '$amodprobe br_netfilter' /etc/rc.local
. b  Q  @2 s1 t, |. aAI构建项目
& E" f: Z/ u4 l$ K1 y0 obash
5 I! O7 _0 y) J3 G  N1 N2 y如下图：
* S, M. g. a& w( j" N5 M( l

5 k7 ^7 j9 j$ M2 J
3、配置nova使用neutron服务
3 C9 F8 H: z. y2 q& Y 编辑/etc/nova/nova.conf，进行以下配置：

! X4 e+ L7 b7 @8 ^: n4 s  ][neutron]
, r9 V2 Q2 N9 Z' q# ...
4 i+ C2 Y' {& z$ Q* kauth_url = http://controller:5000
auth_type = password
) f5 l' L- S# j  [8 r9 Rproject_domain_name = default
user_domain_name = default
, x, B9 D4 i: Y! G' x, @! j% d! B' x6 }region_name = RegionOne
project_name = service
username = neutron
; ]; e% \1 T3 Q3 ?: C3 mpassword = 123456
AI构建项目
bash
如下图：


8 F& q! ^, _& v, F- o
4、收尾
重启计算服务：
2 p9 s2 @1 P, _  d# J! U
1 u1 L7 _5 i/ V  |/ p2 n3 @- \# Z* Dsystemctl restart openstack-nova-compute.service
AI构建项目
" m+ {: P! z1 ]bash
6 K/ _' R, H& q7 R设置网桥开机自启，并启动服务：
% J5 ~  t' q# H2 {; c
systemctl enable neutron-linuxbridge-agent.service
systemctl start neutron-linuxbridge-agent.service
$ t  A* F1 S2 A+ U+ b. I! _9 dAI构建项目
& ~7 h- J; _+ t, Lbash
& z4 K; C- K; p6 O$ f, C( g% I* u三、验证
  g* o7 Q; H1 O" T在控制节点使用如下命令验证：

openstack network agent list