在控制节点上执行
controllerHost='controller'
MYSQL_PASSWD='m4r!adbOP'
RABBIT_PASSWD='0penstackRMQ'
NOVA_PASSWD='nova1234!'
NEUTRON_PASSWD='neutron1234!'
controllerTunnelIP='172.31.240.49'
controllerProviderInterface='ens224'
1.创建数据库
mysql -uroot -p${MYSQL_PASSWD} << EOF
DROP DATABASE IF EXISTS neutron;
CREATE DATABASE neutron;
GRANT ALL PRIVILEGES ON neutron.* TO 'neutron'@'localhost' IDENTIFIED BY '${NEUTRON_PASSWD}';
GRANT ALL PRIVILEGES ON neutron.* TO 'neutron'@'%' IDENTIFIED BY '${NEUTRON_PASSWD}';
EOF
2.创建认证用户并授权
source ~/admin-openrc
openstack user create --domain default --password ${NEUTRON_PASSWD} neutron
openstack role add --project service --user neutron admin
3.创建服务实体和端点
openstack service create --name neutron --description "OpenStack Networking" network
openstack endpoint create --region RegionOne network public http://${controllerHost}:9696
openstack endpoint create --region RegionOne network admin http://${controllerHost}:9696
openstack endpoint create --region RegionOne network internal http://${controllerHost}:9696
4.安装neutron服务
yum -y install openstack-neutron openstack-neutron-ml2 ebtables ipset
5.配置neutron服务访问数据库
openstack-config --set /etc/neutron/neutron.conf database connection mysql+pymysql://neutron:${NEUTRON_PASSWD}@${controllerHost}/neutron
6.配置neutron服务访问memcached
openstack-config --set /etc/neutron/neutron.conf cache backend oslo_cache.memcache_pool
openstack-config --set /etc/neutron/neutron.conf cache enabled true
openstack-config --set /etc/neutron/neutron.conf cache memcache_servers ${controllerHost}:11211
7.配置neutron服务访问rabbitmq
openstack-config --set /etc/neutron/neutron.conf DEFAULT transport_url rabbit://openstack:${RABBIT_PASSWD}@${controllerHost}:5672
8.配置neutron服务访问认证服务
openstack-config --set /etc/neutron/neutron.conf DEFAULT auth_strategy keystone
openstack-config --set /etc/neutron/neutron.conf keystone_authtoken auth_uri http://${controllerHost}:5000
openstack-config --set /etc/neutron/neutron.conf keystone_authtoken auth_url http://${controllerHost}:5000
openstack-config --set /etc/neutron/neutron.conf keystone_authtoken auth_type password
openstack-config --set /etc/neutron/neutron.conf keystone_authtoken project_domain_name default
openstack-config --set /etc/neutron/neutron.conf keystone_authtoken user_domain_name default
openstack-config --set /etc/neutron/neutron.conf keystone_authtoken project_name service
openstack-config --set /etc/neutron/neutron.conf keystone_authtoken username neutron
openstack-config --set /etc/neutron/neutron.conf keystone_authtoken password ${NEUTRON_PASSWD}
9.配置neutron服务启用ML2插件，路由器服务和浮动IP功能
openstack-config --set /etc/neutron/neutron.conf DEFAULT core_plugin ml2
openstack-config --set /etc/neutron/neutron.conf DEFAULT service_plugins router
openstack-config --set /etc/neutron/neutron.conf DEFAULT allow_overlapping_ips true
10.配置neutron服务将网络拓扑变化的消息通知给计算节点
openstack-config --set /etc/neutron/neutron.conf DEFAULT notify_nova_on_port_status_changes true
openstack-config --set /etc/neutron/neutron.conf DEFAULT notify_nova_on_port_data_changes true
11.配置neutron服务使用nova身份访问认证服务
openstack-config --set /etc/neutron/neutron.conf nova auth_url http://${controllerHost}:5000
openstack-config --set /etc/neutron/neutron.conf nova project_domain_name default
openstack-config --set /etc/neutron/neutron.conf nova user_domain_name default
openstack-config --set /etc/neutron/neutron.conf nova region_name RegionOne
openstack-config --set /etc/neutron/neutron.conf nova project_name service
openstack-config --set /etc/neutron/neutron.conf nova auth_type password
openstack-config --set /etc/neutron/neutron.conf nova username nova
openstack-config --set /etc/neutron/neutron.conf nova password ${NOVA_PASSWD}
12.配置neutron中oslo库的锁定路径
openstack-config --set /etc/neutron/neutron.conf oslo_concurrency lock_path /var/lib/neutron/tmp
13.配置DHCP代理服务加载驱动程序并取消元数据隔离
openstack-config --set /etc/neutron/dhcp_agent.ini DEFAULT dhcp_driver neutron.agent.linux.dhcp.Dnsmasq
openstack-config --set /etc/neutron/dhcp_agent.ini DEFAULT enable_isolated_metadata true
14.配置元数据代理服务的共享密钥和位置
openstack-config --set /etc/neutron/metadata_agent.ini DEFAULT nova_metadata_host ${controllerHost}
openstack-config --set /etc/neutron/metadata_agent.ini DEFAULT metadata_proxy_shared_secret 123456
15.创建neutron-server服务启动时需要的软连接
ln -sv /etc/neutron/plugins/ml2/ml2_conf.ini /etc/neutron/plugin.ini
16.使能网桥调用内核过滤器netfilter功能
sed -i "/net.bridge.bridge-nf-call-ip6tables/c et.bridge.bridge-nf-call-ip6tables = 1" /usr/lib/sysctl.d/00-system.conf
sed -i "/net.bridge.bridge-nf-call-iptables/c et.bridge.bridge-nf-call-iptables = 1" /usr/lib/sysctl.d/00-system.conf
sysctl -p
17.配置nova服务使能对neutron服务的支持
openstack-config --set /etc/nova/nova.conf DEFAULT use_neutron true
openstack-config --set /etc/nova/nova.conf neutron url http://${controllerHost}:9696
openstack-config --set /etc/nova/nova.conf neutron auth_url http://${controllerHost}:5000
openstack-config --set /etc/nova/nova.conf neutron project_domain_name default
openstack-config --set /etc/nova/nova.conf neutron user_domain_name default
openstack-config --set /etc/nova/nova.conf neutron region_name RegionOne
openstack-config --set /etc/nova/nova.conf neutron project_name service
openstack-config --set /etc/nova/nova.conf neutron auth_type password
openstack-config --set /etc/nova/nova.conf neutron username neutron
openstack-config --set /etc/nova/nova.conf neutron password ${NEUTRON_PASSWD}
18.配置nova服务使能对元数据代理的支持
openstack-config --set /etc/nova/nova.conf neutron service_metadata_proxy true
openstack-config --set /etc/nova/nova.conf neutron metadata_proxy_shared_secret 123456
19.重启nova服务
systemctl restart openstack-nova-api.service && systemctl status openstack-nova-api.service
在控制节点上使用linuxbridge作为虚拟交换机
20.安装linuxbridge组件
yum -y install openstack-neutron-linuxbridge
21.配置L3代理服务的接口驱动为Linux网桥驱动
openstack-config --set /etc/neutron/l3_agent.ini DEFAULT interface_driver linuxbridge
22.配置DHCP代理服务的接口驱动为Linux网桥驱动
openstack-config --set /etc/neutron/dhcp_agent.ini DEFAULT interface_driver linuxbridge
23.启用flat和vxlan网络
openstack-config --set /etc/neutron/plugins/ml2/ml2_conf.ini ml2 type_drivers flat,vxlan
24.启用Linux网桥和L2集群机制
openstack-config --set /etc/neutron/plugins/ml2/ml2_conf.ini ml2 mechanism_drivers linuxbridge,l2population
25.在端口上使能安全扩展驱动
openstack-config --set /etc/neutron/plugins/ml2/ml2_conf.ini ml2 extension_drivers port_security
26.开启安全组功能，并加载防火墙驱动程序
openstack-config --set /etc/neutron/plugins/ml2/linuxbridge_agent.ini securitygroup enable_security_group true
openstack-config --set /etc/neutron/plugins/ml2/linuxbridge_agent.ini securitygroup firewall_driver neutron.agent.linux.iptables_firewall.IptablesFirewallDriver
27.将提供商网络设置为flat并关联通向提供商网络的物理接口
openstack-config --set /etc/neutron/plugins/ml2/ml2_conf.ini ml2_type_flat flat_networks provider
openstack-config --set /etc/neutron/plugins/ml2/linuxbridge_agent.ini linux_bridge physical_interface_mappings provider:${controllerProviderInterface}
28.将租户网络设置成VXLAN并设置VXLAN的VNI范围
openstack-config --set /etc/neutron/plugins/ml2/ml2_conf.ini ml2 tenant_network_types vxlan
openstack-config --set /etc/neutron/plugins/ml2/ml2_conf.ini ml2_type_vxlan vni_ranges 1:1000
29.创建vxlan隧道并设置隧道的物理接口IP
openstack-config --set /etc/neutron/plugins/ml2/linuxbridge_agent.ini vxlan l2_population true
openstack-config --set /etc/neutron/plugins/ml2/linuxbridge_agent.ini vxlan enable_vxlan true
openstack-config --set /etc/neutron/plugins/ml2/linuxbridge_agent.ini vxlan local_ip ${controllerTunnelIP}
30.同步数据库
su -s /bin/sh -c "neutron-db-manage --config-file /etc/neutron/neutron.conf --config-file /etc/neutron/plugins/ml2/ml2_conf.ini upgrade head" neutron
31.启动neutron服务
systemctl enable neutron-server.service neutron-dhcp-agent.service neutron-metadata-agent.service neutron-l3-agent.service neutron-linuxbridge-agent.service
systemctl start neutron-server.service neutron-dhcp-agent.service neutron-metadata-agent.service neutron-l3-agent.service neutron-linuxbridge-agent.service
systemctl status neutron-server.service neutron-dhcp-agent.service neutron-metadata-agent.service neutron-l3-agent.service neutron-linuxbridge-agent.service
在控制节点上使用OVS作为虚拟交换机
20.安装openvswitch组件
yum -y install openstack-neutron-openvswitch
21.配置L3代理服务的接口驱动为OVS网桥驱动并关联外部网桥
openstack-config --set /etc/neutron/l3_agent.ini DEFAULT interface_driver neutron.agent.linux.interface.OVSInterfaceDriver
openstack-config --set /etc/neutron/l3_agent.ini DEFAULT external_network_bridge br-ex
22.配置DHCP代理服务的接口驱动为OVS网桥驱动
openstack-config --set /etc/neutron/dhcp_agent.ini DEFAULT interface_driver neutron.agent.linux.interface.OVSInterfaceDriver
23.启用flat和vxlan网络
openstack-config --set /etc/neutron/plugins/ml2/ml2_conf.ini ml2 type_drivers flat,vxlan
24.启用OVS网桥和L2集群机制
openstack-config --set /etc/neutron/plugins/ml2/ml2_conf.ini ml2 mechanism_drivers openvswitch,l2population
openstack-config --set /etc/neutron/plugins/ml2/openvswitch_agent.ini agent l2_population True
25.在端口上使能安全扩展驱动
openstack-config --set /etc/neutron/plugins/ml2/ml2_conf.ini ml2 extension_drivers port_security
26.开启安全组功能，并加载防火墙驱动程序
openstack-config --set /etc/neutron/plugins/ml2/openvswitch_agent.ini securitygroup firewall_driver neutron.agent.linux.iptables_firewall.OVSHybridIptablesFirewallDriver
openstack-config --set /etc/neutron/plugins/ml2/openvswitch_agent.ini securitygroup enable_security_group True
27.将提供商网络设置为flat并关联通向提供商网络的外部网桥
openstack-config --set /etc/neutron/plugins/ml2/ml2_conf.ini ml2_type_flat flat_networks provider
openstack-config --set /etc/neutron/plugins/ml2/openvswitch_agent.ini ovs bridge_mappings provider:br-ex
28.将租户网络设置成VXLAN并设置VXLAN的VNI范围
openstack-config --set /etc/neutron/plugins/ml2/ml2_conf.ini ml2 tenant_network_types vxlan
openstack-config --set /etc/neutron/plugins/ml2/ml2_conf.ini ml2_type_vxlan vni_ranges 1:1000
29.创建vxlan隧道并设置隧道的物理接口IP
openstack-config --set /etc/neutron/plugins/ml2/openvswitch_agent.ini agent tunnel_types vxlan
openstack-config --set /etc/neutron/plugins/ml2/openvswitch_agent.ini ovs integration_bridge br-int
openstack-config --set /etc/neutron/plugins/ml2/openvswitch_agent.ini ovs tunnel_bridge br-tun
openstack-config --set /etc/neutron/plugins/ml2/openvswitch_agent.ini ovs enable_tunneling True
openstack-config --set /etc/neutron/plugins/ml2/openvswitch_agent.ini ovs local_ip ${controllerTunnelIP}
30.同步数据库
su -s /bin/sh -c "neutron-db-manage --config-file /etc/neutron/neutron.conf --config-file /etc/neutron/plugins/ml2/ml2_conf.ini upgrade head" neutron
31.创建br-ex网桥并添加通向提供商网络的物理接口
ovs-vsctl add-br br-ex
ovs-vsctl add-port br-ex ${controllerProviderInterface}
32.启动neutron服务
systemctl enable neutron-server.service neutron-dhcp-agent.service neutron-metadata-agent.service neutron-l3-agent.service neutron-openvswitch-agent.service
systemctl start neutron-server.service neutron-dhcp-agent.service neutron-metadata-agent.service neutron-l3-agent.service neutron-openvswitch-agent.service
systemctl status neutron-server.service neutron-dhcp-agent.service neutron-metadata-agent.service neutron-l3-agent.service neutron-openvswitch-agent.service
在计算节点上执行
controllerHost='controller'
RABBIT_PASSWD='0penstackRMQ'
NEUTRON_PASSWD='neutron1234!'
computeTunnelIP='172.31.240.45'
1.安装neutron组件
yum -y install openstack-neutron-ml2 ebtables ipset
2.配置neutron服务访问memcached服务
openstack-config --set /etc/neutron/neutron.conf cache backend oslo_cache.memcache_pool
openstack-config --set /etc/neutron/neutron.conf cache enabled true
openstack-config --set /etc/neutron/neutron.conf cache memcache_servers ${controllerHost}:11211
3.配置neutron服务访问rabbitmq服务
openstack-config --set /etc/neutron/neutron.conf DEFAULT transport_url rabbit://openstack:${RABBIT_PASSWD}@${controllerHost}:5672
4.配置neutron服务访问认证服务
openstack-config --set /etc/neutron/neutron.conf DEFAULT auth_strategy keystone
openstack-config --set /etc/neutron/neutron.conf keystone_authtoken auth_uri http://${controllerHost}:5000
openstack-config --set /etc/neutron/neutron.conf keystone_authtoken auth_url http://${controllerHost}:5000
openstack-config --set /etc/neutron/neutron.conf keystone_authtoken auth_type password
openstack-config --set /etc/neutron/neutron.conf keystone_authtoken project_domain_name default
openstack-config --set /etc/neutron/neutron.conf keystone_authtoken user_domain_name default
openstack-config --set /etc/neutron/neutron.conf keystone_authtoken project_name service
openstack-config --set /etc/neutron/neutron.conf keystone_authtoken username neutron
openstack-config --set /etc/neutron/neutron.conf keystone_authtoken password ${NEUTRON_PASSWD}
5.配置neutron中oslo库的锁定路径
openstack-config --set /etc/neutron/neutron.conf oslo_concurrency lock_path /var/lib/neutron/tmp
6.使能网桥调用内核过滤器netfilter功能
sed -i "/net.bridge.bridge-nf-call-ip6tables/c et.bridge.bridge-nf-call-ip6tables = 1" /usr/lib/sysctl.d/00-system.conf
sed -i "/net.bridge.bridge-nf-call-iptables/c et.bridge.bridge-nf-call-iptables = 1" /usr/lib/sysctl.d/00-system.conf
sysctl -p
7.配置nova服务使能对neutron服务的支持
openstack-config --set /etc/nova/nova.conf DEFAULT use_neutron true
openstack-config --set /etc/nova/nova.conf neutron url http://${controllerHost}:9696
openstack-config --set /etc/nova/nova.conf neutron auth_url http://${controllerHost}:5000
openstack-config --set /etc/nova/nova.conf neutron project_domain_name default
openstack-config --set /etc/nova/nova.conf neutron user_domain_name default
openstack-config --set /etc/nova/nova.conf neutron region_name RegionOne
openstack-config --set /etc/nova/nova.conf neutron project_name service
openstack-config --set /etc/nova/nova.conf neutron auth_type password
openstack-config --set /etc/nova/nova.conf neutron username neutron
openstack-config --set /etc/nova/nova.conf neutron password ${NEUTRON_PASSWD}
8.重启nova服务
systemctl restart openstack-nova-api.service && systemctl status openstack-nova-api.service
在计算节点上使用linuxbridge作为虚拟交换机
9.安装linuxbridge组件
yum -y install openstack-neutron-linuxbridge
10.开启安全组功能，并加载防火墙驱动程序
openstack-config --set /etc/neutron/plugins/ml2/linuxbridge_agent.ini securitygroup enable_security_group true
openstack-config --set /etc/neutron/plugins/ml2/linuxbridge_agent.ini securitygroup firewall_driver neutron.agent.linux.iptables_firewall.IptablesFirewallDriver
11.启动L2集群机制
openstack-config --set /etc/neutron/plugins/ml2/linuxbridge_agent.ini vxlan l2_population true
12.创建vxlan隧道并设置隧道的物理接口IP
openstack-config --set /etc/neutron/plugins/ml2/linuxbridge_agent.ini vxlan enable_vxlan true
openstack-config --set /etc/neutron/plugins/ml2/linuxbridge_agent.ini vxlan local_ip ${computeTunnelIP}
13.启动neutron服务
systemctl enable neutron-linuxbridge-agent.service
systemctl restart neutron-linuxbridge-agent.service
systemctl status neutron-linuxbridge-agent.service
在计算节点上使用OVS作为虚拟交换机
9.安装openvswitch组件
yum -y install openstack-neutron-openvswitch
10.开启安全组功能，并加载防火墙驱动程序
openstack-config --set /etc/neutron/plugins/ml2/openvswitch_agent.ini securitygroup firewall_driver neutron.agent.linux.iptables_firewall.OVSHybridIptablesFirewallDriver
openstack-config --set /etc/neutron/plugins/ml2/openvswitch_agent.ini securitygroup enable_security_group True
11.启用L2集群机制
openstack-config --set /etc/neutron/plugins/ml2/openvswitch_agent.ini agent l2_population True
12.创建vxlan隧道并设置隧道的物理接口IP
openstack-config --set /etc/neutron/plugins/ml2/openvswitch_agent.ini agent tunnel_types vxlan
openstack-config --set /etc/neutron/plugins/ml2/openvswitch_agent.ini ovs integration_bridge br-int
openstack-config --set /etc/neutron/plugins/ml2/openvswitch_agent.ini ovs tunnel_bridge br-tun
openstack-config --set /etc/neutron/plugins/ml2/openvswitch_agent.ini ovs enable_tunneling True
openstack-config --set /etc/neutron/plugins/ml2/openvswitch_agent.ini ovs local_ip ${computeTunnelIP}
13.启动neutron服务
systemctl enable neutron-openvswitch-agent.service
systemctl restart neutron-openvswitch-agent.service
systemctl status neutron-openvswitch-agent.service