Neutron安装的linuxbridge安装

admin

一、控制节点配置
& |/ E  w0 N1 f& R8 S在控制节点进行以下操作。
$ R- }5 j" f, _# {& u' q
9 Q2 r% C3 w. K9 _" B8 Z1 p1、配置数据库
进入数据库控制台（密码123456）：
$ A& V2 a. S$ l# X+ k
* ]# [  i- B2 C  \0 s3 Vmysql -u root -p
7 Y0 r& x' M% m3 E" r1 I

bash
" k3 s2 t- h* O. ?6 E( B  N创建数据库并授予权限，退出数据库：
. ]/ x3 @: x/ W0 S
CREATE DATABASE neutron;
( j4 W8 t; ]* S  L4 d- kGRANT ALL PRIVILEGES ON neutron.* TO 'neutron'@'localhost' IDENTIFIED BY '123456';
GRANT ALL PRIVILEGES ON neutron.* TO 'neutron'@'%' IDENTIFIED BY '123456';




: ~/ X" q0 h9 \$ u
" D2 U/ o; u5 V. j
2、创建neutron用户
( V( T5 ^6 k4 Y0 f7 N" F' [登录admin支行好：
& A7 b% a, `- q+ B6 p7 O6 ?
. admin-openrc

bash
- u* z3 E& E4 m9 ^在domain：default创建用户neutron：

6 Q2 }  P' e( |% _0 K6 ?" ~openstack user create --domain default --password-prompt neutron
6 O/ J1 F) U' n4 G1 E
6 _1 W$ k4 g) V, X  e: x+ Nbash
如下图：


, I0 S0 G+ R7 V5 t* ^, J& c7 U$ o
9 J' N8 q- N) H' V3 ~授予neutron服务admin权限：
4 p! G7 K$ y/ s' I# }
openstack role add --project service --user neutron admin

$ j+ ?2 L7 A) t% I- |6 t+ hbash
创建neutron服务入口：

& F4 }! o$ i8 ]1 Y: Z; Q7 z, Y6 dopenstack service create --name neutron --description "OpenStack Networking" network

# ^8 }6 K) ?; C3 E# Q8 p' ~bash
: u% C# X  g9 p如下图：



$ s6 i+ {: ~- a2 N3 @" J1 _创建网络服务API端点：
6 [8 y2 i0 O: S: }: k4 U9 Z3 F
openstack endpoint create --region RegionOne network public http://controller:9696
openstack endpoint create --region RegionOne network internal http://controller:9696
openstack endpoint create --region RegionOne network admin http://controller:9696
; K" x5 e& ]! m2 q# k8 G8 kAI构建项目
bash
如下图：



9 h- `/ z' G7 ^5 p" A3、配置selfservice网络
1 ~% i9 c! `, U  C3 i( r安装neutron：
) Z+ h( n/ C$ u: z4 O, R! ~
9 b+ h0 p; g: P* x! m) K9 n$ ^: Tyum install openstack-neutron openstack-neutron-ml2 openstack-neutron-linuxbridge ebtables -y
AI构建项目
bash
备份/etc/neutron/neutron.conf，删除其注释：
/ j; X: S" ]2 Z3 R: Y! ]6 V) I/ n
% i8 L3 V$ x% P! g! g+ Jmv /etc/neutron/neutron.conf /etc/neutron/neutron.conf.source
cat /etc/neutron/neutron.conf.source | grep -Ev "^#|^$" > /etc/neutron/neutron.conf
AI构建项目
bash
3 i) c% V" Z  n! x编辑/etc/neutron/neutron.conf：

0 l! s8 W2 ^7 ^0 S[DEFAULT]
# ...
" I+ g  j) ]& Zcore_plugin = ml2
service_plugins = router
0 E' Q0 N! Q6 f1 D2 b. gallow_overlapping_ips = true
" p$ H5 C' ~, y; G5 e5 F( x9 Wtransport_url = rabbit://openstack:123456@controller
auth_strategy = keystone
notify_nova_on_port_status_changes = true
8 S. K; \5 e( k+ c/ hnotify_nova_on_port_data_changes = true

3 _3 c6 l4 y" q" Y% b) c[database]
# ...
connection = mysql+pymysql://neutron:123456@controller/neutron
5 F; }8 ^" l. S, P, j- |' `
6 b0 c5 b' c+ |; F7 X) s[keystone_authtoken]
# ...
. m$ F/ f1 a/ d$ }6 p$ Dwww_authenticate_uri = http://controller:5000
auth_url = http://controller:5000
memcached_servers = controller:11211
auth_type = password
: Q  S! l" u3 _0 p+ Jproject_domain_name = default
user_domain_name = default
) w6 \' E. Y: {  M$ b) g" vproject_name = service
username = neutron
& \8 M, r: G7 ?/ Lpassword = 123456
; H8 z6 ^5 K- E+ W" g( }
* s) I# E, x2 O' \[nova]
  {) |5 X- y+ X# ...
auth_url = http://controller:5000
1 Z1 b  q& M' H: p$ R$ [auth_type = password
project_domain_name = default
  V1 b  Q  m$ W* o. U" ?  V" G) O- Iuser_domain_name = default
$ M3 p/ ]/ D$ ?0 I2 y& e2 Jregion_name = RegionOne
# [5 U* I1 }8 C$ S  dproject_name = service
% K% E. q- O6 V. G1 N0 B1 }8 G2 X4 |username = nova
password = 123456

[oslo_concurrency]
/ y# Z$ o! n$ t* P# ...
1 z9 P* m; T# mlock_path = /var/lib/neutron/tmp
( _2 n2 J0 i7 U
AI构建项目
! \, B6 Y7 x$ U1 t% l; ~% J6 Jbash
/ W: P- t1 p9 i* O! n' h/ K4、配置ml2
9 g4 V5 i. R2 C  d1 N$ Q; p- I 备份/etc/neutron/plugins/ml2/ml2_conf.ini，删除其注释：
6 d( j* ]8 ?4 E! ~
mv /etc/neutron/plugins/ml2/ml2_conf.ini /etc/neutron/plugins/ml2/ml2_conf.ini.source
4 x( X  R1 G  d1 Lcat /etc/neutron/plugins/ml2/ml2_conf.ini.source | grep -Ev "^#|^$" > /etc/neutron/plugins/ml2/ml2_conf.ini
$ j' d/ a' x0 a+ b3 lAI构建项目
bash
/ ]& m* v# a! z' d# P对/etc/neutron/plugins/ml2/ml2_conf.ini进行以下配置：

' V8 e. ?& Z2 ]; S) Y1 Q7 U# H[ml2]
# ...
3 `0 L4 D: q4 u; \7 btype_drivers = flat,vlan,vxlan
2 E( h/ Z  Y+ k; ztenant_network_types = vxlan
mechanism_drivers = linuxbridge,l2population
% x3 \# ?% J0 [( `extension_drivers = port_security
& L. y+ R, L" a/ w$ k0 h7 S( U- I
+ ~% f, e3 }4 Y- T9 ?[ml2_type_flat]
# ...
" o4 \8 s& E3 \flat_networks = provider
1 z) ~+ `( W, \
: p) X" S" {- {, a[ml2_type_vxlan]
% B; G, X7 C* b4 L( ^7 i8 C& j# ...
: b; w1 O$ H* N' U: e( i" g7 N) ^  [vni_ranges = 1:1000

% o$ `+ G$ T" z9 {; j7 t[securitygroup]
- c0 m. _. w7 G! H0 C8 h9 J% G# ...
3 F3 y% ~: Q! Tenable_ipset = true
AI构建项目
2 B% Z1 ]$ {( {* M  L) qbash
5、配置linux网桥
备份/etc/neutron/plugins/ml2/linuxbridge_agent.ini，删除其注释：
0 r7 i% [1 G: A- k* D# [* |
mv /etc/neutron/plugins/ml2/linuxbridge_agent.ini /etc/neutron/plugins/ml2/linuxbridge_agent.ini.source
cat /etc/neutron/plugins/ml2/linuxbridge_agent.ini.source | grep -Ev "^#|^$" > /etc/neutron/plugins/ml2/linuxbridge_agent.ini
5 i, s/ f6 H" m9 e* ZAI构建项目
bash
对/etc/neutron/plugins/ml2/linuxbridge_agent.ini进行以下配置(physical_interface_mappings 的ens33是网卡号)：
8 w  Q3 t6 M# P
. w3 a/ U* @5 X% O+ X. F# x[linux_bridge]
% f$ x6 K/ V% g! g4 e# x: mphysical_interface_mappings = provider:ens33

7 p2 F* J6 ^+ _6 v# _- [[vxlan]
4 N+ f/ o& X2 h: c/ v/ n* benable_vxlan = true
" N8 s" I2 @/ Wlocal_ip = 10.0.0.11
9 O+ [- g' o" ^5 v! J2 s& z8 Hl2_population = true

[securitygroup]
& B4 D) p- Z6 U# ...
' s- m! G3 A1 u$ M  c! l6 G% E: l7 Cenable_security_group = true
3 W! ]$ y+ F$ `, ?1 j- cfirewall_driver = neutron.agent.linux.iptables_firewall.IptablesFirewallDriver
& h: Q9 T, [9 DAI构建项目
' ]* [! b/ C  m; Bbash
8 q: [! b; L% z7 v; s$ l" {修改 /etc/sysctl.conf，保证系统支持网桥过滤器，添加以下内容：

net.bridge.bridge-nf-call-iptables = 1
net.bridge.bridge-nf-call-ip6tables = 1
AI构建项目
bash
如下图：
6 m) M1 w2 s& P: _  C8 h


$ M% U# `# l% e1 u4 q添加网桥过滤器，并设置开机加载：

" z/ m8 z$ [7 q/ F+ Zmodprobe br_netfilter
sysctl -p
sed -i '$amodprobe br_netfilter' /etc/rc.local
AI构建项目
bash
如下图：



# D  C/ l# r3 L9 l8 H9 E6、配置L3代理
编辑/etc/neutron/l3_agent.ini，添加以下内容：
# T0 [2 }5 V6 H. _
[DEFAULT]
' R/ x7 C6 N" r; t: l2 O3 s  i# ...
interface_driver = linuxbridge
, }% N- h. s; KAI构建项目
. i  v) H6 D7 u. F4 {6 Ubash
如下图：
( H( S: r: Y; O2 [


7、配置dhcp
编辑/etc/neutron/dhcp_agent.ini，添加以下内容：

[DEFAULT]
# ...
interface_driver = linuxbridge
dhcp_driver = neutron.agent.linux.dhcp.Dnsmasq
enable_isolated_metadata = true
+ y2 C3 d" G" h0 wAI构建项目
8 p' r& n) M) H/ d( \bash
2 W; g3 c, W5 }! b如下图：



" f: g9 n( f+ u, [  K8、配置meta代理
) [! _' x9 ?. f' s/ j  R编辑/etc/neutron/metadata_agent.ini，进行以下配置：

[DEFAULT]
/ K" p' R% @5 j$ t* E$ C# ...
nova_metadata_host = controller
8 Q# E4 g0 q6 N* F( J" `, Y% `metadata_proxy_shared_secret = 123456
# x) y8 z; D9 `/ w8 F& B. ~1 aAI构建项目
bash
如下图：
  W2 p6 E& a  U" b' V( R; c

- B5 ~5 e- l6 R9 ]7 \
9、配置nova使用neutron服务
编辑/etc/nova/nova.conf，进行以下配置：

9 p/ L; a/ u. |( A6 L( g[neutron]
  D9 ?# ?) ^  _1 x3 e3 y# ...
auth_url = http://controller:5000
0 B4 L) I* R! N7 S6 cauth_type = password
project_domain_name = default
$ C; [# C" ]# ]: C7 `6 euser_domain_name = default
region_name = RegionOne
project_name = service
/ ^! y/ E$ C  \username = neutron
, d# F" n$ U4 t% G5 r2 Wpassword = 123456
service_metadata_proxy = true
metadata_proxy_shared_secret = 123456
AI构建项目
3 b- o$ ]/ x$ g7 v- Y; R8 {2 o; cbash
如下图：


/ H$ r; k. A; w5 q" `
% [  h% D7 \0 x+ d4 U/ v8 g10、收尾
创建软连接：

ln -s /etc/neutron/plugins/ml2/ml2_conf.ini /etc/neutron/plugin.ini
AI构建项目
3 b; x4 ]2 s* u6 p7 O& bbash
+ o( Y' g4 k4 L3 _/ Z同步数据库：

8 c6 r8 i& \4 F' c% H, {$ l" t8 [- }su -s /bin/sh -c "neutron-db-manage --config-file /etc/neutron/neutron.conf --config-file /etc/neutron/plugins/ml2/ml2_conf.ini upgrade head" neutron
; {% D: X, H2 F" ~AI构建项目
/ K. R: f9 e8 f5 w, P8 bbash
& A3 R8 B$ N5 \. O, J如下图：
# \7 H  O6 O5 b
$ z# a' e3 E! p. V% ]
/ _9 A6 m* S2 f. o
重启nova-api：

9 F6 M! B1 r2 K' S  k9 Q' b1 k( \4 isystemctl restart openstack-nova-api.service
AI构建项目
2 Y. n& c( Y7 b$ Q$ O+ [6 qbash
设置开机自启，并启动服务：

( f8 A9 n/ U" s  ~9 {, G+ j- _systemctl enable neutron-server.service neutron-linuxbridge-agent.service neutron-dhcp-agent.service neutron-metadata-agent.service
% A9 Y  d2 R* tsystemctl start neutron-server.service neutron-linuxbridge-agent.service neutron-dhcp-agent.service neutron-metadata-agent.service
systemctl enable neutron-l3-agent.service
# ]$ \* j% B: P! hsystemctl start neutron-l3-agent.service
AI构建项目
bash
二、计算节点配置
' r% g* B; z9 K在计算节点完成以下操作。
+ z$ X7 V& s' B6 t0 a1 \. Z
8 c( I1 s9 Y; t3 v6 C# C+ N8 U$ l. g9 Q1、安装包
. D  ?$ V6 p2 o5 h$ P/ v, g# R1 E安装包：

/ ~- y- {7 ?2 s- T# `' O( z" oyum install openstack-neutron-linuxbridge ebtables ipset -y
* ~, y( g. h+ M' k& uAI构建项目
4 ?- x* N# T! N4 F. l6 y; C) pbash
: J5 b) N0 H4 I9 s6 z. X 备份/etc/neutron/neutron.conf，删除其注释：

2 U9 j& M) j. I% O, {mv /etc/neutron/neutron.conf /etc/neutron/neutron.conf.source
$ H/ L+ i4 H. E" e- ucat /etc/neutron/neutron.conf.source | grep -Ev "^#|^$" > /etc/neutron/neutron.conf
  @" E* z0 U1 A8 h4 ?AI构建项目
bash
: x5 j' v$ G7 q- R+ U/ u; d$ c编辑/etc/neutron/neutron.conf，进行如下配置：

[DEFAULT]
# ...
, N/ ?- v" A) x, k" f- k1 stransport_url = rabbit://openstack:123456@controller
# R2 ^( ]6 G6 D/ R; @auth_strategy = keystone
* Z5 d* ?7 D# w' G. _
[keystone_authtoken]
4 P0 u0 \# {6 ?, H0 @6 V# ...
- J- G9 @$ g3 P3 |www_authenticate_uri = http://controller:5000
3 a% p9 Q! e/ G6 @2 vauth_url = http://controller:5000
; j- v; P5 n* m" i- J, Q8 omemcached_servers = controller:11211
auth_type = password
project_domain_name = default
user_domain_name = default
project_name = service
username = neutron
; z$ d" |2 S# m$ `8 spassword = 123456

: }5 Z8 W9 f# j8 l2 |[oslo_concurrency]
; O! E  a! u9 ~# h- C# ...
2 E5 r4 \: i. k& _2 plock_path = /var/lib/neutron/tmp
AI构建项目
4 @; d2 Q( U' R% vbash
+ H4 d3 Y( E2 ]) Q0 [4 L' r2、配置linux网桥
6 ]8 P: t  N8 W& ^& u 备份/etc/neutron/plugins/ml2/linuxbridge_agent.ini，删除其注释：
# @1 q- P. O3 O3 `$ |% J
mv /etc/neutron/plugins/ml2/linuxbridge_agent.ini /etc/neutron/plugins/ml2/linuxbridge_agent.ini.source
, ~  T5 U4 D9 ~. i* C: ?# C6 Y  U' ?cat /etc/neutron/plugins/ml2/linuxbridge_agent.ini.source | grep -Ev "^#|^$" > /etc/neutron/plugins/ml2/linuxbridge_agent.ini
- U8 O: G- P7 m5 F: B) G& n# sAI构建项目
bash
对/etc/neutron/plugins/ml2/linuxbridge_agent.ini进行以下配置(physical_interface_mappings 的ens33是网卡号)：

[linux_bridge]
physical_interface_mappings = provider:ens33
- {& b3 }9 \5 e4 y& i' ?: O0 g3 ?
* \. i1 z" g5 Q4 a% _  i' f[vxlan]
, ^' x( y* b, l2 C  ]enable_vxlan = true
local_ip = 10.0.0.31
' Z: f- F) J- q' N# E' rl2_population = true
6 V9 @: s# F) a9 n$ C7 s- u9 a
[securitygroup]
9 ]: r" _* V9 X% M& _9 e; o# ...
% n: F9 M% Y) d) Q* y4 genable_security_group = true
, F; h2 ?  R- o) `) Vfirewall_driver = neutron.agent.linux.iptables_firewall.IptablesFirewallDriver
AI构建项目
1 Z% q" J* |& `3 v( Wbash
修改 /etc/sysctl.conf，保证系统支持网桥过滤器，添加以下内容：
+ m4 k4 ?# W: `  u
# M5 V, N8 z1 F+ T& Xnet.bridge.bridge-nf-call-iptables = 1
8 w- Z2 O: |' j7 @2 f8 _net.bridge.bridge-nf-call-ip6tables = 1
AI构建项目
: U/ \: H+ d0 ^2 r. S* \" [7 @bash
1 }* @1 o: P1 F如下图：

& Y% e8 v6 Y6 m( s% X9 i

添加网桥过滤器，并设置开机加载：
. e% Y8 V# P* m, S7 G& K: k
5 U/ I4 u: O4 ]* H$ S( hmodprobe br_netfilter
; z1 U+ v) ^0 W+ O% ^! csysctl -p
sed -i '$amodprobe br_netfilter' /etc/rc.local
AI构建项目
2 b7 s1 y, \% ]% H6 ^9 [: i6 dbash
( X" m+ M/ u$ e) M如下图：

* C: {- l  A1 Z+ T. k' ^
4 y) E1 c0 H! A
3、配置nova使用neutron服务
& {4 y1 a, \% G8 { 编辑/etc/nova/nova.conf，进行以下配置：

[neutron]
# ...
auth_url = http://controller:5000
auth_type = password
7 ~5 v7 M) X, A6 o0 `. u& `; Iproject_domain_name = default
7 u# j& V/ b. h2 luser_domain_name = default
. D. c! `7 s7 I& Z1 @+ }# P' k# A; Vregion_name = RegionOne
$ _  _* n. d: B9 z, L; `( wproject_name = service
username = neutron
password = 123456
AI构建项目
4 S- E+ H5 t6 T7 ~/ ?4 i1 C  ?# Dbash
如下图：
2 I. L/ c4 [" a$ r6 c
6 f! n) @2 n( m8 M- D

4、收尾
重启计算服务：
, y" Z2 q( q9 J3 P3 R# F
systemctl restart openstack-nova-compute.service
AI构建项目
8 c! s& i: [) x6 k5 _/ {- `bash
设置网桥开机自启，并启动服务：

systemctl enable neutron-linuxbridge-agent.service
4 P6 K6 F( M  j+ osystemctl start neutron-linuxbridge-agent.service
AI构建项目
bash
三、验证
  k8 o' B. Y4 O% D; R9 q3 W在控制节点使用如下命令验证：
( f$ a# F' X) m' d/ S5 Y  S: a
openstack network agent list