私有云落地解决方案之openstack高可用（pike版本）-neutron【ovs】

admin

创建用户
9 l8 v9 N) V7 h& ^! a" P2 h* U


# openstack user create --domain default --project service --password Changeme_123 neutron

1 a6 s7 {# v( f& w: h9 O" t赋予neutron用户admin权限
3 D- Q- U8 B6 S- e" H
1 P2 a) N# T" x
2 F0 W0 z& t7 L) H8 g; w/ {
# openstack role add --project service --user neutron admin
0 z8 C" D9 F. \: m9 G6 M: A2 D
创建服务

' M% q7 ]$ A; e& P* w- b
+ `7 e9 ?6 j& B, {9 |5 ^6 g  O- h
6 B- f% c" |" F# openstack service create --name neutron --description "OpenStack Networking service" network
0 @6 Z! K# E1 ~6 p) r8 j7 D
定义controller的管理网IP


, `8 f8 E" T, L% T: U1 K/ i3 U' }
) ]* J8 ~% Z: P! ]" u1 M) P# export controller=172.16.8.501
) |8 \& w  F+ L+ D" h8 H
创建endpoint

- J& J+ u/ s4 f4 U
  ^# Y& ?7 ]. b5 i
) X/ m4 o9 [5 n: L# openstack endpoint create --region RegionOne network public http://$controller:9696
3 x% o2 X" }* ]8 B7 s1 \! Y


# openstack endpoint create --region RegionOne network internal http://$controller:9696
( g+ F. e/ v0 ~7 c

7 N4 ]0 l7 G; }; d0 T
6 T0 E+ x  G* j' _( m+ u# openstack endpoint create --region RegionOne network admin http://$controller:9696
. u/ r1 z' Y; z" K% L
创建数据库和用户


- N7 T, j1 }; V5 X
+ ~' {- O4 F( B& G( f; l, [# mysql -u root  -pChangeme_123
MariaDB [(none)]> create database neutron;
4 p, s# z( F+ x2 H1 I0 kQuery OK, 1 row affected (0.00 sec)
MariaDB [(none)]> grant all privileges on neutron.* to neutron@'localhost' identified by 'Changeme_123';
) j0 Y8 I  N( @! m* SQuery OK, 0 rows affected (0.00 sec)
( B& H# b. t) I2 cMariaDB [(none)]> grant all privileges on neutron.* to neutron@'%' identified by 'Changeme_123';
Query OK, 0 rows affected (0.00 sec)
" E5 s7 n% U$ Q1 K6 O9 GMariaDB [(none)]> flush privileges;
Query OK, 0 rows affected (0.00 sec)
7 o( c% ?7 L1 q' [MariaDB [(none)]> exit
Bye

/ N3 _- _6 M/ C安装rpm包

6 a1 G4 l& V9 r
0 {4 V, ~1 B+ G% L
: V# p7 h9 U. `! {6 H2 ^# yum -y install openstack-neutron openstack-neutron-ml2 openstack-neutron-openvswitch

, y1 V1 f: b! R! w; x5 E* z( A修改配置文件
  |/ [5 R/ h' I( l/ K

8 K1 @% f9 [; G0 S: J" V8 \
! V! j# m5 F6 ~3 f2 d# mv /etc/neutron/neutron.conf /etc/neutron/neutron.conf.org
( s9 l+ [& f" I2 P4 w9 p- H# vi /etc/neutron/neutron.conf
[DEFAULT]
5 g# M+ M- H/ Z! |bind_host = 172.16.8.60
bind_port = 9696
0 L% T3 {4 y  y: K% Hl3_ha = True
max_l3_agents_per_router = 0
min_l3_agents_per_router = 2
6 ]* b' I3 d# l) m! g8 Lcore_plugin = ml2
service_plugins = router
. f# j$ F+ L* g& K# @# Mauth_strategy = keystone
state_path = /var/lib/neutron
4 N5 f5 ~9 [- _dhcp_agent_notification = True
7 R8 k1 Y# N: c. Callow_overlapping_ips = True
notify_nova_on_port_status_changes = True
notify_nova_on_port_data_changes = True
# RabbitMQ connection info
; T$ N4 n( Z2 q3 {, L+ @" h) }transport_url = rabbit://openstack:Changeme_123@172.16.8.50
# D' k$ ~4 {) I
8 n7 S! O3 g, x% o* d8 }# Keystone auth info
4 J. n" i3 b6 i; s% o0 e; d[keystone_authtoken]
auth_uri = http://172.16.8.50:5000
2 L/ _% }5 P# U. X( Iauth_url = http://172.16.8.50:35357
memcached_servers = node1:11211,node2:11211,node3:11211
5 Y9 [  R; s1 M0 s( m+ u9 aauth_type = password
project_domain_name = default
( _* D$ [% F6 h: L3 b! K8 @user_domain_name = default
project_name = service
username = neutron
7 g$ f/ w" _) _  o8 R3 G, ypassword = Changeme_123

# MariaDB connection info
5 ~2 @) Z  G- Z[database]
) {; r1 y1 H0 @5 Tconnection = mysql+pymysql://neutron:Changeme_123@172.16.8.50/neutron

# Nova connection info
, {! s. m  R1 {8 M  U2 j1 ][nova]
, |  M4 U& s3 \- Qauth_url = http://172.16.8.50:35357
auth_type = password
$ H$ a9 L+ t4 u1 U! H' F3 P( Gproject_domain_name = default
user_domain_name = default
8 R. W- r3 O& p8 ^; Lregion_name = RegionOne
7 }7 ?# E# T4 s' j8 @4 A5 |  Q7 uproject_name = service
! [, V; Y; y0 h, Jusername = nova
# {' ~  h; w1 X! ?0 i  fpassword = Changeme_123
& k7 P3 j2 d7 }! d
[oslo_concurrency]
lock_path = $state_path/tmp
: u# v$ `# o1 R( n4 y
赋予权限
* b, k- p7 b- b+ ^# p* T/ c7 N

( b/ |7 k+ \- w3 [% r6 \
# chmod 640 /etc/neutron/neutron.conf
# chgrp neutron /etc/neutron/neutron.conf

# v+ q2 h  p* ]' R& g2 y修改配置文件

/ ]- a* j6 i$ O  i
4 }7 b* p8 V! O* J0 F0 M1 G
# cp -a /etc/neutron/metadata_agent.ini /etc/neutron/metadata_agent.ini_bak
openstack-config --set   /etc/neutron/metadata_agent.ini DEFAULT nova_metadata_host  172.16.8.60
6 m# k1 H, B3 _' Vopenstack-config --set   /etc/neutron/metadata_agent.ini DEFAULT metadata_proxy_shared_secret  Changeme_123
openstack-config --set   /etc/neutron/metadata_agent.ini cache memcache_servers node1:11211,node2:11211,node3:11211

$ `, F" Y- N  c9 n8 O注意：修改节点的IP
  D3 ?# ]2 ~& X$ h; ^/ [7 X
修改配置文件
/ W. S1 B' j/ c7 e) R* x
# cp -a  /etc/neutron/plugins/ml2/ml2_conf.ini /etc/neutron/plugins/ml2/ml2_conf.ini_bak
& V. F: b6 |4 I  L+ Fopenstack-config --set   /etc/neutron/plugins/ml2/ml2_conf.ini ml2 type_drivers  flat,vlan,gre,vxlan
% H& ?% A; g* o* iopenstack-config --set   /etc/neutron/plugins/ml2/ml2_conf.ini ml2 tenant_network_types
openstack-config --set   /etc/neutron/plugins/ml2/ml2_conf.ini ml2 mechanism_drivers  openvswitch,l2population
; d5 V3 ], C8 h: }9 O3 h* Xopenstack-config --set   /etc/neutron/plugins/ml2/ml2_conf.ini ml2 extension_drivers  port_security
openstack-config --set   /etc/neutron/plugins/ml2/ml2_conf.ini securitygroup firewall_driver  neutron.agent.linux.iptables_firewall.OVSHybridIptablesFirewallDriver
openstack-config --set   /etc/neutron/plugins/ml2/ml2_conf.ini securitygroup enable_security_group  True
openstack-config --set   /etc/neutron/plugins/ml2/ml2_conf.ini securitygroup enable_ipset  True

修改配置文件/etc/nova/nova.conf
  q2 ]$ a, K6 i% A
7 D4 d' U- F% n2 S* `. i2 x/ A

openstack-config --set   /etc/nova/nova.conf  DEFAULT  use_neutron  True
openstack-config --set   /etc/nova/nova.conf  DEFAULT  linuxnet_interface_driver  nova.network.linux_net.LinuxOVSInterfaceDriver
+ W# C2 j' o# W* ]. Copenstack-config --set   /etc/nova/nova.conf  DEFAULT  firewall_driver  nova.virt.firewall.NoopFirewallDriver
1 f! u2 u/ m5 d7 @7 Nopenstack-config --set   /etc/nova/nova.conf  neutron url  http://172.16.8.50:9696
openstack-config --set   /etc/nova/nova.conf  neutron auth_url  http://172.16.8.50:35357
openstack-config --set   /etc/nova/nova.conf  neutron auth_type  password
openstack-config --set   /etc/nova/nova.conf  neutron project_domain_name  default
1 T' O; T: n9 \; Xopenstack-config --set   /etc/nova/nova.conf  neutron user_domain_name  default
; N/ L+ }: K$ Wopenstack-config --set   /etc/nova/nova.conf  neutron region_name  RegionOne
openstack-config --set   /etc/nova/nova.conf  neutron project_name  service
openstack-config --set   /etc/nova/nova.conf  neutron username  neutron
openstack-config --set   /etc/nova/nova.conf  neutron password  Changeme_123
) q6 _" d) n; d" Xopenstack-config --set   /etc/nova/nova.conf  neutron service_metadata_proxy  True
openstack-config --set   /etc/nova/nova.conf  neutron metadata_proxy_shared_secret  Changeme_123

' R( x% `6 |+ F, \1 }  B4 E创建软连接
6 N! U, ?# a" l- ~( E


0 u1 w6 f  D0 N' n# c. R+ n0 f# ln -s /etc/neutron/plugins/ml2/ml2_conf.ini /etc/neutron/plugin.ini

同步数据库
* C; v4 v' l2 J: ?
$ @' N  Q- ?0 l4 X3 N& a5 B! z

# su -s /bin/bash neutron -c "neutron-db-manage --config-file /etc/neutron/neutron.conf --config-file /etc/neutron/plugin.ini upgrade head"

4 K6 R- t8 e9 I9 C1 g( F# t启动neutron服务


9 _. B& D7 r5 {7 e3 x  ~( k6 O
# systemctl start neutron-server neutron-metadata-agent



# systemctl enable neutron-server neutron-metadata-agent

重启openstack-nova-api


7 a$ B; E$ r) L$ Q$ Y. {
8 }# @' U; j* v, r! J# systemctl restart openstack-nova-api

修改配置文件/etc/neutron/l3_agent.ini


6 l$ u) T5 D4 \& }2 r% E# x
5 ]$ Q* m9 i  Q& _% c' y# cp -a  /etc/neutron/l3_agent.ini /etc/neutron/l3_agent.ini_bak
/ K. ^1 V; l3 V: D- k) s+ I
& l* g. s6 a# T1 H6 f
* U. }0 k0 Q) k
* f3 u( B$ h! [0 F: e5 Q# openstack-config --set   /etc/neutron/l3_agent.ini DEFAULT interface_driver  neutron.agent.linux.interface.OVSInterfaceDriver

修改配置文件/etc/neutron/dhcp_agent.ini
# q0 h# j1 D4 e9 h4 ^, V

' m- y' m- |& U7 P5 H" z& n
# cp -a  /etc/neutron/dhcp_agent.ini /etc/neutron/dhcp_agent.ini_bak
7 B7 T7 T3 k  V7 ]' c* C: Popenstack-config --set    /etc/neutron/dhcp_agent.ini DEFAULT interface_driver  neutron.agent.linux.interface.OVSInterfaceDriver
openstack-config --set    /etc/neutron/dhcp_agent.ini DEFAULT dhcp_driver  neutron.agent.linux.dhcp.Dnsmasq
openstack-config --set    /etc/neutron/dhcp_agent.ini DEFAULT enable_isolated_metadata  True

启动服务

" m6 ~$ R0 S8 Z7 b; `9 t% h% r
4 [1 T3 x8 m$ q! R( r8 [, H3 N, L
2 b' ~- K8 x4 Y2 z, k/ X# systemctl start openvswitch
# systemctl enable openvswitch
! D. `8 |  a9 O, O
创建网桥
8 f2 Y$ u5 F  `; Q. b
: R1 g. r1 W1 ^) C! q

# ovs-vsctl add-br br-int

- r( ^9 Y1 X- \( N3 g4 y7 k3 l启动服务并设置开机启动


) C, Z9 ]' `/ }" x8 J9 L1 i
# for service in dhcp-agent l3-agent metadata-agent openvswitch-agent; do
systemctl restart neutron-$service
systemctl enable neutron-$service
done

# J5 j; t$ S4 ^  j0 Z. v2 o