Networking 安装和配置compute node

安装组件

# yum install openstack-neutron-linuxbridge ebtables ipset

配置一般组件

网络一般组件的配置包括认证机制、消息队列以及插件

• 编辑`/etc/neutron/neutron.conf
• [database]条目中注释所有connection选项，因为计算节点不需要连接数据库
• 添加下列内容：

[DEFAULT]
  ...
  transport_url = rabbit://openstack:123456@controller
  auth_strategy = keystone
  [keystone_authtoken]
  ...
  auth_uri = http://controller:5000
  auth_url = http://controller:35357
  memcached_servers = controller:11211
  auth_type = password
  project_domain_name = Default
  user_domain_name = Default
  project_name = service
  username = neutron
  password = 123456
  [oslo_concurrency]
  ...
  lock_path = /var/lib/neutron/tmp

注释或删除[keystone_authtoken]条目中其他选项

配置网络选项

• 选择与控制节点相同的网络架构(下以option 1为例)进行下面的配置
  编辑`/etc/neutron/plugins/ml2/linuxbridge_agent.ini

[linux_bridge]
physical_interface_mappings = provider:enp0s8
[vxlan]
enable_vxlan = False
[securitygroup]
...
enable_security_group = True
firewall_driver = neutron.agent.linux.iptables_firewall.IptablesFirewallDriver

• 编辑`/etc/nova/nova.conf

[neutron]
url = http://controller:9696
auth_url = http://controller:35357
auth_type = password
project_domain_name = Default
user_domain_name = Default
region_name = RegionOne
project_name = service
username = neutron
password = 123456

安装收尾

# systemctl restart openstack-nova-compute.service
# systemctl enable neutron-linuxbridge-agent.service
# systemctl start neutron-linuxbridge-agent.service

验证操作

在控制节点进行验证操作

1. 切换到admin用户环境

$ . admin-openrc

2. 列出已加载的扩展来验证neutron-server进程

$ neutron ext-list
+---------------------------+---------------------------------+
| alias                     | name                            |
+---------------------------+---------------------------------+
| default-subnetpools       | Default Subnetpools             |
| availability_zone         | Availability Zone               |
| network_availability_zone | Network Availability Zone       |
| binding                   | Port Binding                    |
| agent                     | agent                           |
| subnet_allocation         | Subnet Allocation               |
| dhcp_agent_scheduler      | DHCP Agent Scheduler            |
| tag                       | Tag support                     |
| external-net              | Neutron external network        |
| flavors                   | Neutron Service Flavors         |
| net-mtu                   | Network MTU                     |
| network-ip-availability   | Network IP Availability         |
| quotas                    | Quota management support        |
| provider                  | Provider Network                |
| multi-provider            | Multi Provider Network          |
| address-scope             | Address scope                   |
| subnet-service-types      | Subnet service types            |
| standard-attr-timestamp   | Resource timestamps             |
| service-type              | Neutron Service Type Management |
| extra_dhcp_opt            | Neutron Extra DHCP opts         |
| standard-attr-revisions   | Resource revision numbers       |
| pagination                | Pagination support              |
| sorting                   | Sorting support                 |
| security-group            | security-group                  |
| rbac-policies             | RBAC Policies                   |
| standard-attr-description | standard-attr-description       |
| port-security             | Port Security                   |
| allowed-address-pairs     | Allowed Address Pairs           |
| project-id                | project_id field enabled        |
+---------------------------+---------------------------------+

验证Networking Option 1:Provider networks

• 列出neutron agent

$ openstack network agent list
+----------+------------+----------+-------------------+-------+-------+---
----------+
| ID       | Agent Type | Host     | Availability Zone | Alive | State | Bi
nary      |
+----------+------------+----------+-------------------+-------+-------+---
----------+
| 16bc86fb | Linux      | localhos | None              | True  | UP    | ne
utron-lin |
| -c16f-   | bridge     | t.locald |                   |       |       | ux
bridge-   |
| 40e9     | agent      | omain    |                   |       |       | ag
ent       |
| -86ec-c6 |            |          |                   |       |       |
       |
| ccc7c9e6 |            |          |                   |       |       |
       |
| 7b       |            |          |                   |       |       |
       |
| 513513ca | Linux      | controll | None              | True  | UP    | ne
utron-lin |
| -5601-47 | bridge     | er       |                   |       |       | ux
bridge-   |
| 77-a2d1- | agent      |          |                   |       |       | ag
ent       |
| a398017a |            |          |                   |       |       |
       |
| d804     |            |          |                   |       |       |
       |
| 67633117 | Metadata   | controll | None              | True  | UP    | ne
utron-    |
| -6a68-46 | agent      | er       |                   |       |       | me
tadata-   |
| 52-b15d- |            |          |                   |       |       | ag
ent       |
| 4a32b8fe |            |          |                   |       |       |
       |
| 1f22     |            |          |                   |       |       |
       |
| 8383fbdb | DHCP agent | controll | nova              | True  | UP    | ne
utron-    |
| -bd37    |            | er       |                   |       |       | dh
cp-agent  |
| -485d-ad |            |          |                   |       |       |
       |
| 57-91f1f |            |          |                   |       |       |
       |
| cf719a0  |            |          |                   |       |       |
       |
+----------+------------+----------+-------------------+-------+-------+---
----------+

输出信息应包括controller node上的3个agent以及每个compute node上的一个agent