陈奇网络工作室

OpenStackstein安装(九)网络选项2

系统运输

安装配置文件网络组件组件sonthecontrollernode。

安装组件

# yuminstallopenstack-neutronopenstack-neutron-ml2\\ & amp; quot;

开放式堆栈- neutron-linuxbridgeebtables

配置服务器组件

edit the/etc/neutron/neutron.conffileandcompletethefollowingactions :

是 In the [database] section,configure database access :

[数据库]

# .

connection=mysqlpymysql://neutron:neutron 123 @ stack.flex.net/neutron

注意: [database]区域包含注释和其他连接选项

In the [DEFAULT] section,enablethemodularlayer2(mL2 )插件,router service,and overlapping IP addresses :

[DEFAULT]

……

core_plugin=ml2

service_plugins=router

allow_overlapping_ips=true

In the [DEFAULT] section,configurerabbitmqmessagequeueaccess :

[DEFAULT]

……

transport _ URL=rabbit://open stack:open stack 123 @ DBS.flex.net

in the [ default ] and [ keystone _ authtok en ] sections,configure Identity service access :

[DEFAULT]

……

auth_strategy=keystone

[keystone_authtoken]

# .

www _ authenticate _ uri=http://stack.flex.net:5000

auth _ URL=http://stack.flex.net:5000

memcached _ servers=controller:11211

auth_type=password

project_domain_name=default

user_domain_name=default

项目_ name=服务

username=neutron

password=neutron123

附注:在[keystone_authtoken]区域中注释或删除其他选项。

in the [ default ] and [ nova ] sections,configurenetworkingtonotifycomputeofnetworktopologychanges :

[DEFAULT]

……

notify _ nova _ on _ port _ status _ changes=true

notify _ nova _ on _ port _ data _ changes=true

[nova]

# .

auth _ URL=http://stack.flex.net:5000

auth_type=password

project_domain_name=default

user_domain_name=default

region_name=RegionOne

项目_ name=服务

username=nova

password=nova123

in the [ Oslo _ concurrency ] section,configure the lock path :

[oslo_concurrency]

……

lock_path=/var/lib/neutron/tmp

3 .配置hemodularlayer2( ml2 )插件

them L2 plug-inusesthelinuxbridgemechanismtobuildlayer-2 ( bridgingandswitching )虚拟化图形用户界面

edit the/etc/neutron/plugins/ml2/ml2 _ conf.inifileandcompletethefollowingactions :

In the [ml2] section,enable flat,VLAN,and VXLAN networks :

[ml2]

……

type_drivers=flat,vlan,vxlan

In the [ml2] section,enablevxlanself-service networks :

[ml2]

……

tenant_network_types=vxlan

In the [ml2] section,enablethelinuxbridgeandlayer-2 population mechanisms :

[ml2]

……

mechanism_drivers=linuxbridge,l2population

注意:配置ML2插件后,如果从type_drivers中删除此选项,则会导致数据库不一致,并且Linux bridge仅支持VX局域网。

In the [ml2] section,enabletheportsecurityextensiondriver :

[ml2]

……

extension _ drivers=port _ security

In the [ml2_type_flat] section,configuretheprovidervirtualnetworkasaflatnetwork :

[ml2_type_flat]

……

flat_networks=provider

In the [ml2_type_vxlan] section,configurethevxlannetworkidentifierrangeforself-service networks :

[ml2_type_vxlan]

……

vni_ranges=1:1000

In the [securitygroup] section,enableipsettoincreaseefficiencyofsecuritygrouprules :

[securitygroup]

……

enable_ipset=true

4 .配置Linux bridge代理

thelinuxbridgeagentbuildslayer-2 ( bridgingandswitching ) virtualnetworkinginfrastructureforinstancesandhandlessecuritygrouproupuptygroutygler

edit the/etc/neutron/plugins/ml2/Linux bridge _ agent.inifileandcompletethefollowingactions :

In the [linux_bridge] section,maptheprovidervirtualnetworktotheproviderphysicalnetworkinterface :

[linux_bridge]

physical _ interface _ mappings=provider:external:eth 2

replace provider _ interface _ namewiththenameoftheunderlyingproviderphysicalnetworkinterface。

In the [vxlan] section,enable VXLAN overlay networks,configuretheipaddressofthephysicalnetworkinterfacethandlesoverlayncethation

[vxlan]

enable_vxlan=true

local _ IP=overlay _ interface _ IP _ address

l2_population=true

replace overlay _ interface _ IP _ addresswitheipaddressoftheunderlyingphysicalnetworkinterfacethandlesoverlaynetworks er tunneltraffictotheothernodes.therefore,replace overlay _ IP _ addresswithemanagementipaddresofthecontrollled

In the [securitygroup] section,enablesecuritygroupsandconfigurethelinuxbridgeiptablesfirewalldriver :

[securitygroup]

……

enable_security_group=true

firewall _ driver=neutron.agent.Linux.iptables _ firewall.iptablesfirewalldriver

ensureyourlinuxoperatingsystemkernelsupportsnetworkbridgefiltersbyverifyingallthefollowingsysctlvaluesaresetto1:

net.bridge.bridge-nf-call-iptables

net.bridge.bridge-nf-call-IP6tables

to enable networking bridge support,typicallythebr _ netfilterkernelmoduleneedstobeloaded.checkyouroperatingsystem’sdocument

5 .配置层- 3代理

thelayer-3(L3 )代理资源分配和服务服务。

edit the/etc/neutron/L3 _ agent.inifileandcompletethefollowingactions :

In the [DEFAULT] section,configurethelinuxbridgeinterfacedriverandexternalnetworkbridge :

[DEFAULT]

……

interface_driver=linuxbridge

6 .配置the DHCP agent

thedhcpagentprovidesdhcpservicesforvirtualnetworks。

edit the/etc/neutron/DHCP _ agent.inifileandcompletethefollowingactions :

In the [DEFAULT] section,configurethelinuxbridgeinterfacedriver,dnsmasq DHCP driver,andenableisolatedmetadatatasoinstationstion

[DEFAULT]

……

interface_driver=linuxbridge

hcp _ driver=neutron.agent.Linux.DHCP.dnsmasq

enable_isolated_metadata=true

完成后返回网络配置

详情请访问云服务器、域名注册、虚拟主机的问题,请访问西部数码代理商官方网站: www.chenqinet.cn

相关推荐

后台-系统设置-扩展变量-手机广告位-内容页底部广告位3