Learning OpenStack Networking (Neutron)
Preface 1
Chapter 1: Preparing the Network for OpenStack 7
What is OpenStack Networking? 8
Features of OpenStack Networking 8
Switching 8
Routing 9
Load balancing 9
Firewalling 9
Virtual private networks 9
Preparing the physical infrastructure 10
Types of network traffic 11
Management network 11
API network 12
External network 12
Guest network 12
Physical server connections 12
Single interface 13
Multiple interfaces 14
Bonding 15
Separating services across nodes 15
A single controller with one or more compute nodes 16
A single controller plus network node with one or more compute nodes 18
Summary 19
Chapter 2: Installing OpenStack 21
System requirements 22
Operating system requirements 22
Initial network configuration 23
Interface configuration 25
Table of Contents
[ ii ]
Before you begin 26
Permissions 26
Configuring the OpenStack repository 26
Installing OpenStack utilities 26
Setting the hostnames 27
Disabling SELinux 27
Removing iptables rules 27
Installing and configuring Network Time Protocol 28
Upgrading the system 28
Installation of OpenStack 29
Installing and configuring the MySQL database server 29
Installing the MySQL database client 30
Installing and configuring the messaging server 30
Installing and configuring the Identity service 30
Defining users, tenants, and roles in Keystone 32
Define services and API endpoints in Keystone 33
Verify the Keystone installation 34
Setting environment variables 35
Installing and configuring the image service 36
Define the Glance service and API endpoints in Keystone 38
Verify the Glance image service installation 39
Installing and configuring the Compute service 40
Installing and configuring controller node components 40
Installing and configuring compute node components 43
Verify communication between services 45
Installing the OpenStack dashboard 46
Allowing connections to the dashboard 46
Identifying the Keystone server 47
Changing the listener address 47
Testing connectivity to the dashboard 47
Summary 50
Chapter 3: Installing Neutron 51
Basic Neutron constructs 51
Overlapping networks using network namespaces 52
Extending network functions with plugins 53
Installing and configuring Neutron services 54
Creating the Neutron database 55
Configuring the Neutron user, role, and endpoint in Keystone 55
Enabling packet forwarding 56
Configuring Neutron to use Keystone 57
Configuring Neutron to use a messaging service 59
Configuring a root helper 59
Configuring Nova to utilize Neutron networking 60
Table of Contents
[ iii ]
Configuring Neutron services 61
Configuring neutron-server 61
Starting neutron-server 63
Configuring the Neutron DHCP agent 63
Starting the Neutron DHCP agent 65
Configuring the Neutron metadata agent 66
Configuring the Neutron L3 agent 69
Configuring the Neutron LBaaS agent 69
Using the Neutron command-line interface 69
Summary 70
Chapter 4: Building a Virtual Switching Infrastructure 71
Providing layer 2 connectivity to instances 71
Virtual network interfaces 72
Bridging 72
Configuring the bridge interface 73
Types of networks in Neutron 74
Choosing a networking plugin 76
LinuxBridge 76
Internal network connections when using LinuxBridge 77
Open vSwitch 83
Internal network connections when using Open vSwitch 84
Programming flow rules 89
Configuring a layer 2 networking plugin 93
Configuring the LinuxBridge plugin 94
Configuring Nova to use LinuxBridge 94
Configuring the DHCP agent to use LinuxBridge 94
LinuxBridge plugin configuration options 95
Tenant network type 95
Physical interface mappings 95
Network VLAN ranges 96
Firewall driver 96
Restarting services 97
Configuring the Open vSwitch plugin 98
Configuring Neutron to use Open vSwitch 98
Configuring Nova to use Open vSwitch 99
Configuring the DHCP agent to use Open vSwitch 99
Open vSwitch plugin configuration options 100
Summary 108
Chapter 5: Creating Networks with Neutron 109
Network management 109
Managing networks in the CLI 111
Creating a flat network in the CLI 112
Creating a VLAN in the CLI 113
Table of Contents
[ iv ]
Creating a local network in the CLI 115
Listing networks in the CLI 115
Showing network properties in the CLI 116
Updating networks in the CLI 116
Deleting networks in the CLI 117
Creating networks in the dashboard 118
Using the Admin tab as an administrator 118
Using the Project tab as a user 120
Subnets in Neutron 121
Creating subnets in the CLI 122
Creating a subnet in the CLI 124
Listing subnets in the CLI 125
Showing subnet properties in the CLI 126
Updating a subnet in the CLI 126
Creating subnets in the dashboard 128
Using the Admin tab as an administrator 128
Using the Project tab as a user 130
Neutron ports 134
Attaching instances to networks 135
Attaching instances to networks using Nova boot 135
Attaching and detaching network interfaces 136
Adding secondary addresses to interfaces 137
Exploring how instances get their addresses 138
Exploring how instances retrieve their metadata 140
Router namespace 140
The DHCP namespace 141
Adding a manual route to 169.254.169.254 142
Using DHCP to inject the route 142
Summary 143
Chapter 6: Creating Routers with Neutron 145
Configuring the Neutron L3 agent 145
Defining an interface driver 146
Setting the external network 146
Setting the external bridge 146
Enabling the metadata proxy 147
Starting the Neutron L3 agent 147
Router management in the CLI 148
Creating routers in the CLI 148
Working with router interfaces in the CLI 149
Attaching internal interfaces to routers 149
Attaching a gateway interface to a router 149
Listing interfaces attached to routers 150
Deleting internal interfaces 150
Table of Contents
[ v ]
Clearing the gateway interface 150
Listing routers in the CLI 150
Displaying router attributes in the CLI 151
Updating router attributes in the CLI 151
Deleting routers in the CLI 152
Network Address Translation 152
Floating IP addresses 152
Floating IP Management 153
Creating floating IPs in the CLI 153
Associating floating IPs to ports in the CLI 154
Listing floating IPs in the CLI 154
Displaying floating IP attributes in the CLI 155
Disassociating floating IPs in the CLI 155
Deleting floating IPs in the CLI 155
Demonstrating traffic flow from instance to Internet 155
Setting the foundation 156
Creating an external provider network 157
Creating a Neutron router 158
Attaching the router to the external network 159
Testing gateway connectivity 160
Creating an internal network 161
Attaching the router to the internal network 162
Creating instances 164
Verifying instance connectivity 165
Observing default NAT behavior 168
Assigning floating IPs 169
Reassigning floating IPs 171
Router management in the dashboard 173
Creating a router in the dashboard 174
Attaching a gateway interface in the dashboard 174
Attaching internal interfaces in the dashboard 175
Viewing the network topology in the dashboard 176
Associating floating IPs to instances in the dashboard 178
Disassociating floating IPs in the dashboard 180
Summary 181
Chapter 7: Load Balancing Traffic in Neutron 183
Fundamentals of load balancing 184
Load balancing algorithms 184
Monitoring 185
Session persistence 185
Table of Contents
[ vi ]
Integrating load balancers into the network 187
Network namespaces 189
Installing LBaaS 189
Configuring the Neutron LBaaS agent service 190
Define an interface driver 190
Define a device driver 190
Change the user group 190
Define a service plugin 191
Starting the Neutron LBaaS agent service 191
Enabling LBaaS in Horizon 192
Load balancer management in the CLI 192
Managing pools in the CLI 192
Creating a pool 192
Deleting a pool 193
Listing pools 193
Showing pool details 194
Showing pool statistics 194
Updating a pool 194
Listing pools associated with an agent 195
Managing pool members in the CLI 195
Creating pool members 195
Deleting pool members 196
Listing pool members 196
Showing pool member details 196
Updating a pool member 197
Managing health monitors in the CLI 197
Creating a health monitor 197
Deleting a health monitor 199
Associating a health monitor with a pool 199
Disassociating a health monitor from a pool 199
Listing health monitors 200
Showing health monitor details 200
Updating a health monitor 200
Managing virtual IPs in the CLI 200
Creating a virtual IP 201
Deleting a virtual IP 202
Listing virtual IPs 202
Showing virtual IP details 202
Updating a virtual IP 202
Building a load balancer 203
Creating a pool 203
Creating pool members 204
Creating a health monitor 206
Creating a virtual IP 207
The LBaaS network namespace 208
Table of Contents
[ vii ]
Confirming load balancer functionality 209
Observing health monitors 210
Connecting to the virtual IP externally 211
Load balancer management in the dashboard 212
Creating a pool in the dashboard 213
Creating pool members in the dashboard 214
Creating health monitors in the dashboard 216
Creating a virtual IP in the dashboard 218
Connecting to the virtual IP externally 219
Summary 220
Chapter 8: Protecting Instances on the Network 221
Security groups in OpenStack 221
Firewall-as-a-service 222
Introducing iptables 223
Working with security groups 225
Managing security groups in the CLI 225
Creating security groups in the CLI 225
Deleting security groups in the CLI 225
Listing security groups in the CLI 226
Showing the details of a security group in the CLI 226
Updating security groups in the CLI 226
Creating security group rules in the CLI 227
Deleting security group rules in the CLI 228
Listing security group rules in the CLI 228
Showing the details of a security group rule in the CLI 228
Applying security groups to instances in the CLI 228
Implementing security group rules 229
Stepping through the chains 231
Working with security groups in the dashboard 234
Working with FWaaS 238
Preparing Neutron for FWaaS 238
Configuring the FWaaS driver 238
Defining a service plugin 238
Enabling FWaaS in the dashboard 239
Working with firewalls in the CLI 239
Creating a firewall rule in the CLI 240
Deleting a firewall rule in the CLI 241
Listing firewall rules in the CLI 241
Showing the details of a firewall rule in the CLI 241
Updating a firewall rule in the CLI 241
Creating a firewall policy in the CLI 242
Deleting a firewall policy in the CLI 242
Listing firewall policies in the CLI 243
Showing the details of a firewall policy in the CLI 243
Updating a firewall policy in the CLI 243
Table of Contents
[ viii ]
Inserting rules into firewall policies in the CLI 243
Removing rules from firewall policies in the CLI 244
Creating a firewall in the CLI 244
Deleting a firewall in the CLI 245
Listing firewalls in the CLI 245
Showing the details of a firewall in the CLI 245
Updating a firewall in the CLI 246
Working with firewalls in the dashboard 246
Firewall rules – behind the scenes 250
Stepping through the chains within the firewall 252
Summary 254
Appendix A: Additional Neutron Commands 255
Neutron extensions 255
Listing Neutron API extensions 255
Showing the details of an API extension 256
Virtual private networks 256
Per-tenant quotas 257
Listing the default quotas 259
Updating tenant quotas 259
Listing tenant quotas 260
Deleting tenant quotas 260
Cisco Nexus 1000V command reference 260
VMware/Nicera command reference 261
Appendix B: ML2 Configuration 263
Installing the ML2 plugin 263
Creating a database for ML2 264
Configuring Neutron to use ML2 264
Configuring service plugins 265
Configuring the ML2 plugin 265
Restarting Neutron services 266
Index 267
加好友,备注cda
京公网安备 11010802022788号
论坛法律顾问：王进律师
知识产权保护声明
免责及隐私声明
发帖
雷达卡
提升卡
置顶卡
沉默卡
变色卡
抢沙发
千斤顶
显身卡
