(六)OpenStack---M版---双节点搭建---Neutron安装和配置

╰半橙微兮° 2023-06-16 07:29 11阅读 0赞

# ↓↓↓↓↓↓↓↓视频已上线B站↓↓↓↓↓↓↓↓ #

# 》》》》》》[传送门][Link 1] #

# 1.创建网络服务数据库 #

# 2.获得 admin 凭证来获取只有管理员能执行的命令的访问权限 #

# 3.创建服务证书，neutron用户 #

# 4.创建网络服务API端点： #

# 5.Controller节点安装并配置网络服务组件 #

# 6.网络服务初始化 #

# 7.同步数据库 #

# 8.Controller节点重启计算API服务 #

# 9.启动网络服务并设置开机启动 #

# 10.Compute节点安装并配置neutron服务 #

# 11.compute节点重启服务并设置开机自启 #

# 12.验证（Controller节点） #

## 1.创建网络服务数据库 ##

#mysql -uroot -p000000
    >create database neutron;
    > grant all privileges on neutron.* to 'neutron'@'localhost' identified by '000000';
    > grant all privileges on neutron.* to 'neutron'@'%' identified by '000000';

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2ZseTE1NzQ_size_16_color_FFFFFF_t_70]

## 2.获得 admin 凭证来获取只有管理员能执行的命令的访问权限 ##

#. /root/admin-openrc

## 3.创建服务证书，neutron用户 ##

#openstack user create --domain default --password 000000 neutron
    #openstack role add --project service --user neutron admin
    #openstack service create --name neutron --description "OpenStack Networking" network

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2ZseTE1NzQ_size_16_color_FFFFFF_t_70 1]

## 4.创建网络服务API端点： ##

#openstack endpoint create --region RegionOne network public http://controller:9696
    #openstack endpoint create --region RegionOne network internal http://controller:9696
    #openstack endpoint create --region RegionOne network admin http://controller:9696

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2ZseTE1NzQ_size_16_color_FFFFFF_t_70 2]  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2ZseTE1NzQ_size_16_color_FFFFFF_t_70 3]

## 5.Controller节点安装并配置网络服务组件 ##

#yum -y install openstack-neutron openstack-neutron-ml2 openstack-neutron-linuxbridge ebtables

#### 1.编辑配置文件 /etc/neutron/neutron.conf ####

#vi /etc/neutron/neutron.conf
    
    在 [database] 部分，配置数据库访问：
    connection = mysql+pymysql://neutron:000000@controller/neutron
    
    在``[DEFAULT]``部分，添加如下内容
    core_plugin = ml2
    service_plugins = router
    allow_overlapping_ips = True
    rpc_backend = rabbit
    auth_strategy = keystone
    notify_nova_on_port_status_changes = True
    notify_nova_on_port_data_changes = True
    
    在[oslo_messaging_rabbit]部分，配置 “RabbitMQ” 消息队列的连接：
    rabbit_host = controller
    rabbit_userid = openstack
    rabbit_password = 000000
    
    在[keystone_authtoken]部分，配置认证服务访问
    auth_uri = http://controller:5000
    auth_url = http://controller:35357
    memcached_servers = controller:11211
    auth_type = password
    project_domain_name = default
    user_domain_name = default
    project_name = service
    username = neutron
    password = 000000
    
    在[nova]部分，配置网络服务来通知计算节点的网络拓扑变化：
    auth_url = http://controller:35357
    auth_type = password
    project_domain_name = default
    user_domain_name = default
    region_name = RegionOne
    project_name = service
    username = nova
    password = 000000
    
    在 [oslo_concurrency] 部分，配置锁路径：
    lock_path = /var/lib/neutron/tmp

![在这里插入图片描述][20191124235335800.png]  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2ZseTE1NzQ_size_16_color_FFFFFF_t_70 4]  
![在这里插入图片描述][20191124235352775.png]  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2ZseTE1NzQ_size_16_color_FFFFFF_t_70 5]  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2ZseTE1NzQ_size_16_color_FFFFFF_t_70 6]  
![在这里插入图片描述][20191124235406942.png]

#### 2.编辑`/etc/neutron/plugins/ml2/ml2_conf.ini`文件，配置启用flat，VLAN，GRE,LOCAL以及VXLAN网络： ####

#vi /etc/neutron/plugins/ml2/ml2_conf.ini
    在[ml2]下添加
    type_drivers = flat,vlan,vxlan,gre,local
    tenant_network_types = vxlan
    mechanism_drivers = linuxbridge,l2population
    extension_drivers = port_security
    
    在 [ml2_type_flat] 部分，配置公共虚拟网络为flat网络
    flat_networks = provider
    
    在 [ml2_type_vxlan] 部分，为私有网络配置VXLAN网络识别的网络范围：
    vni_ranges = 1:1000
    
    在 [securitygroup] 部分，启用 ipset 增加安全组规则的高效性：
    enable_ipset = True

![在这里插入图片描述][20191124235856128.png]  
![在这里插入图片描述][20191124235900564.png]  
![在这里插入图片描述][20191124235905875.png]  
![在这里插入图片描述][20191124235906650.png]

#### 3.配置linuxbridge代理，编辑文件/etc/neutron/plugins/ml2/linuxbridge\_agent.ini ####

#vi /etc/neutron/plugins/ml2/linuxbridge_agent.ini
    
    在 [linux_bridge] 部分，将公共虚拟网络和公共物理网络接口对应起来：
    physical_interface_mappings = provider:eth1 
    #注意，此处的eth1为基础环境配置中的200的网段 也就是  192.168.200.0/24
    
    在 [vxlan] 部分，启用VXLAN覆盖网络，配置覆盖网络的物理网络接口的IP地址，启用layer－2 population：
    enable_vxlan = True
    local_ip = 192.168.100.10   #这里的IP地址是controller的管理网络
    l2_population = True
    
    在  [securitygroup] 部分，启用安全组并配置 Linuxbridge iptables firewall driver:
    enable_security_group = True
    firewall_driver = neutron.agent.linux.iptables_firewall.IptablesFirewallDriver

![在这里插入图片描述][20191124235830981.png]  
![在这里插入图片描述][20191124235841185.png]  
![在这里插入图片描述][20191124235841793.png]

#### 4.配置layer－3代理，编辑文件/etc/neutron/l3\_agent.ini ####

#vi /etc/neutron/l3_agent.ini
    
    在[DEFAULT]下添加
    interface_driver = neutron.agent.linux.interface.BridgeInterfaceDriver
    external_network_bridge =

![在这里插入图片描述][20191124235821929.png]

#### 5.配置DHCP代理编辑`/etc/neutron/dhcp_agent.ini`文件 ####

#vi /etc/neutron/dhcp_agent.ini
    
    在[DEFAULT]下添加
    interface_driver = neutron.agent.linux.interface.BridgeInterfaceDriver
    dhcp_driver = neutron.agent.linux.dhcp.Dnsmasq
    enable_isolated_metadata = True

![在这里插入图片描述][20191124235816978.png]

#### 6.编辑`/etc/neutron/metadata_agent.ini`文件 ####

#vi /etc/neutron/metadata_agent.ini
    在``[DEFAULT]`` 部分，配置元数据主机以及共享密码：
    nova_metadata_ip = controller
    metadata_proxy_shared_secret = 000000

![在这里插入图片描述][20191124235804346.png]

#### 7.编辑`/etc/nova/nova.conf`文件 ####

#vi /etc/nova/nova.conf
    在``[neutron]``部分，配置访问参数，启用元数据代理并设置密码：
    url = http://controller:9696
    auth_url = http://controller:35357
    auth_type = password
    project_domain_name = default
    user_domain_name = default
    region_name = RegionOne
    project_name = service
    username = neutron
    password = 000000
    service_metadata_proxy = True
    metadata_proxy_shared_secret = 000000

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2ZseTE1NzQ_size_16_color_FFFFFF_t_70 7]

## 6.网络服务初始化 ##

# ln -s /etc/neutron/plugins/ml2/ml2_conf.ini /etc/neutron/plugin.ini

![在这里插入图片描述][20191125000037260.png]

## 7.同步数据库 ##

# su -s /bin/sh -c "neutron-db-manage --config-file /etc/neutron/neutron.conf --config-file /etc/neutron/plugins/ml2/ml2_conf.ini upgrade head" neutron

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2ZseTE1NzQ_size_16_color_FFFFFF_t_70 8]  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2ZseTE1NzQ_size_16_color_FFFFFF_t_70 9]

## 8.Controller节点重启计算API服务 ##

# systemctl restart openstack-nova-api.service

## 9.启动网络服务并设置开机启动 ##

\#systemctl start neutron-server.service neutron-linuxbridge-agent.service neutron-dhcp-agent.service neutron-metadata-agent.service neutron-l3-agent.service  
\#systemctl enable neutron-server.service neutron-linuxbridge-agent.service neutron-dhcp-agent.service neutron-metadata-agent.service neutron-l3-agent.service

## 10.Compute节点安装并配置neutron服务 ##

# yum -y install openstack-neutron-linuxbridge ebtables ipset

#### 1.编辑`/etc/neutron/neutron.conf` 文件 ####

#vi /etc/neutron/neutron.conf
    
    在 “[DEFAULT]” 下添加
    rpc_backend = rabbit
    auth_strategy = keystone
    
    在[oslo_messaging_rabbit]下添加
    rabbit_host = controller
    rabbit_userid = openstack
    rabbit_password = 000000
    
    在[keystone_authtoken]下添加
    auth_uri = http://controller:5000
    auth_url = http://controller:35357
    memcached_servers = controller:11211
    auth_type = password
    project_domain_name = default
    user_domain_name = default
    project_name = service
    username = neutron
    password = 000000
    
    在 [oslo_concurrency] 部分，配置锁路径：
    lock_path = /var/lib/neutron/tmp

![在这里插入图片描述][20191125000450868.png]  
![在这里插入图片描述][2019112500045783.png]  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2ZseTE1NzQ_size_16_color_FFFFFF_t_70 10]  
![在这里插入图片描述][20191125000505122.png]

#### 2.编辑`/etc/neutron/plugins/ml2/linuxbridge_agent.ini`文件 ####

#vi /etc/neutron/plugins/ml2/linuxbridge_agent.ini
    
    在 [linux_bridge] 部分,将公共虚拟网络和公共物理网络接口对应起来
    physical_interface_mappings = provider:eth1
    
    在 [vxlan] 部分，启用VXLAN覆盖网络，配置覆盖网络的物理网络接口的IP地址，启用layer－2 population：
    enable_vxlan = True
    local_ip = 192.168.100.20
    l2_population = True
    
    在  [securitygroup] 部分，启用安全组并配置 Linuxbridge iptables firewall driver:
    enable_security_group = True
    firewall_driver = neutron.agent.linux.iptables_firewall.IptablesFirewallDriver

![在这里插入图片描述][2019112500065312.png]  
![在这里插入图片描述][20191125000657997.png]  
![在这里插入图片描述][20191125000703129.png]

#### 3.编辑`/etc/nova/nova.conf`文件并完成下面的操作 ####

#vi /etc/nova/nova.conf
    在[neutron]部分添加
    
    url = http://controller:9696
    auth_url = http://controller:35357
    auth_type = password
    project_domain_name = default
    user_domain_name = default
    region_name = RegionOne
    project_name = service
    username = neutron
    password = 000000

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2ZseTE1NzQ_size_16_color_FFFFFF_t_70 11]

## 11.compute节点重启服务并设置开机自启 ##

# systemctl restart openstack-nova-compute.service neutron-linuxbridge-agent.service
    # systemctl enable neutron-linuxbridge-agent.service

## 12.验证（Controller节点） ##

#. /root/admin-openrc
    #neutron ext-list
    #neutron agent-list

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2ZseTE1NzQ_size_16_color_FFFFFF_t_70 12]  
![在这里插入图片描述][20191125000754381.png]

[Link 1]: https://www.bilibili.com/video/av76916516?p=7
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2ZseTE1NzQ_size_16_color_FFFFFF_t_70]: https://img-blog.csdnimg.cn/20191124235112510.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2ZseTE1NzQ=,size_16,color_FFFFFF,t_70
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2ZseTE1NzQ_size_16_color_FFFFFF_t_70 1]: https://img-blog.csdnimg.cn/20191124235131687.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2ZseTE1NzQ=,size_16,color_FFFFFF,t_70
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2ZseTE1NzQ_size_16_color_FFFFFF_t_70 2]: https://img-blog.csdnimg.cn/20191124235154131.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2ZseTE1NzQ=,size_16,color_FFFFFF,t_70
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2ZseTE1NzQ_size_16_color_FFFFFF_t_70 3]: https://img-blog.csdnimg.cn/201911242351588.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2ZseTE1NzQ=,size_16,color_FFFFFF,t_70
[20191124235335800.png]: https://img-blog.csdnimg.cn/20191124235335800.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2ZseTE1NzQ_size_16_color_FFFFFF_t_70 4]: https://img-blog.csdnimg.cn/20191124235344554.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2ZseTE1NzQ=,size_16,color_FFFFFF,t_70
[20191124235352775.png]: https://img-blog.csdnimg.cn/20191124235352775.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2ZseTE1NzQ_size_16_color_FFFFFF_t_70 5]: https://img-blog.csdnimg.cn/20191124235357565.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2ZseTE1NzQ=,size_16,color_FFFFFF,t_70
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2ZseTE1NzQ_size_16_color_FFFFFF_t_70 6]: https://img-blog.csdnimg.cn/20191124235401977.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2ZseTE1NzQ=,size_16,color_FFFFFF,t_70
[20191124235406942.png]: https://img-blog.csdnimg.cn/20191124235406942.png
[20191124235856128.png]: https://img-blog.csdnimg.cn/20191124235856128.png
[20191124235900564.png]: https://img-blog.csdnimg.cn/20191124235900564.png
[20191124235905875.png]: https://img-blog.csdnimg.cn/20191124235905875.png
[20191124235906650.png]: https://img-blog.csdnimg.cn/20191124235906650.png
[20191124235830981.png]: https://img-blog.csdnimg.cn/20191124235830981.png
[20191124235841185.png]: https://img-blog.csdnimg.cn/20191124235841185.png
[20191124235841793.png]: https://img-blog.csdnimg.cn/20191124235841793.png
[20191124235821929.png]: https://img-blog.csdnimg.cn/20191124235821929.png
[20191124235816978.png]: https://img-blog.csdnimg.cn/20191124235816978.png
[20191124235804346.png]: https://img-blog.csdnimg.cn/20191124235804346.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2ZseTE1NzQ_size_16_color_FFFFFF_t_70 7]: https://img-blog.csdnimg.cn/20191124235711997.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2ZseTE1NzQ=,size_16,color_FFFFFF,t_70
[20191125000037260.png]: https://img-blog.csdnimg.cn/20191125000037260.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2ZseTE1NzQ_size_16_color_FFFFFF_t_70 8]: https://img-blog.csdnimg.cn/20191125000049159.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2ZseTE1NzQ=,size_16,color_FFFFFF,t_70
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2ZseTE1NzQ_size_16_color_FFFFFF_t_70 9]: https://img-blog.csdnimg.cn/20191125000053111.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2ZseTE1NzQ=,size_16,color_FFFFFF,t_70
[20191125000450868.png]: https://img-blog.csdnimg.cn/20191125000450868.png
[2019112500045783.png]: https://img-blog.csdnimg.cn/2019112500045783.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2ZseTE1NzQ_size_16_color_FFFFFF_t_70 10]: https://img-blog.csdnimg.cn/20191125000501170.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2ZseTE1NzQ=,size_16,color_FFFFFF,t_70
[20191125000505122.png]: https://img-blog.csdnimg.cn/20191125000505122.png
[2019112500065312.png]: https://img-blog.csdnimg.cn/2019112500065312.png
[20191125000657997.png]: https://img-blog.csdnimg.cn/20191125000657997.png
[20191125000703129.png]: https://img-blog.csdnimg.cn/20191125000703129.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2ZseTE1NzQ_size_16_color_FFFFFF_t_70 11]: https://img-blog.csdnimg.cn/20191125000645230.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2ZseTE1NzQ=,size_16,color_FFFFFF,t_70
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2ZseTE1NzQ_size_16_color_FFFFFF_t_70 12]: https://img-blog.csdnimg.cn/20191125000754131.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2ZseTE1NzQ=,size_16,color_FFFFFF,t_70
[20191125000754381.png]: https://img-blog.csdnimg.cn/20191125000754381.png