一、控制节点部署
1、数据库配置
connection = mysql+pymysql://neutron:[email protected]/neutron
2、配置keystone
auth_strategy = keystone [keystone_authtoken] auth_uri = http://192.168.90.254:5000 auth_url = http://192.168.90.254:35357 memcached_servers = 192.168.90.254:11211 auth_type = password project_domain_name = default user_domain_name = default project_name = service username = neutron password = neutron
3、配置rabbitmq
[DEFAULT] transport_url = rabbit://openstack:[email protected]
4、启用ML2
core_plugin = ml2
service_plugins =
5、配置nova
notify_nova_on_port_status_changes = true notify_nova_on_port_data_changes = true [nova] auth_url = http://192.168.90.254:35357 auth_type = password project_domain_name = default user_domain_name = default region_name = RegionOne project_name = service username = nova password = nova
6、配置锁路径
lock_path = /var/lib/neutron/tmp
7、配置ML2插件
type_drivers = flat,vlan 启用flat和VLAN网络 tenant_network_types = 禁用私有网络 mechanism_drivers = linuxbridge 启用Linuxbridge机制 extension_drivers = port_security 启用端口安全扩展驱动 flat_networks = provider 配置公共虚拟网络为flat网络 enable_ipset = true 启用 ipset 增加安全组的方便性
8、配置Linuxbridge代理
physical_interface_mappings = provider:eth0 将公共虚拟网络和公共物理网络接口对应起来 firewall_driver = neutron.agent.linux.iptables_firewall.IptablesFirewallDriver 配置 Linux 桥接 iptables 防火墙驱动 enable_security_group = true 启用安全组 enable_vxlan = false 禁止VXLAN覆盖网络
9、配置DHCP代理
interface_driver = linuxbridge 配置Linuxbridge驱动接口 dhcp_driver = neutron.agent.linux.dhcp.Dnsmasq enable_isolated_metadata = true DHCP驱动并启用隔离元数据
10、配置元数据代理
vim /etc/neutron/metadata_agent.ini nova_metadata_ip = 192.168.90.254 配置元数据主机 metadata_proxy_shared_secret = cbc 配置元数据共享密码
11、配置nova使用neutron
vim /etc/nova/nova.conf url = http://192.168.90.254:9696 auth_url = http://192.168.90.254:35357 auth_type = password project_domain_name = default user_domain_name = default region_name = RegionOne project_name = service username = neutron password = neutron service_metadata_proxy = true metadata_proxy_shared_secret = cbc
12、软链接并同步数据库
ln -s /etc/neutron/plugins/ml2/ml2_conf.ini /etc/neutron/plugin.ini su -s /bin/sh -c "neutron-db-manage --config-file /etc/neutron/neutron.conf \ --config-file /etc/neutron/plugins/ml2/ml2_conf.ini upgrade head" neutron
13、重启计算节点nova-api服务
systemctl restart openstack-nova-api.service
14、开启neutron服务
systemctl enable neutron-server.service \ neutron-linuxbridge-agent.service neutron-dhcp-agent.service \ neutron-metadata-agent.service systemctl start neutron-server.service \ neutron-linuxbridge-agent.service neutron-dhcp-agent.service \ neutron-metadata-agent.service
15、创建neutron服务与端点
openstack service create --name neutron \ --description "OpenStack Networking" network openstack endpoint create --region RegionOne \ network public http://192.168.90.254:9696 openstack endpoint create --region RegionOne \ network internal http://192.168.90.254:9696 openstack endpoint create --region RegionOne \ network admin http://192.168.90.254:9696
二、配置计算节点
1、配置neutron.conf
vim /etc/neutron/neutron.conf transport_url = rabbit://openstack:[email protected] auth_strategy = keystone auth_uri = http://192.168.90.254:5000 auth_url = http://192.168.90.254:35357 memcached_servers = 192.168.90.254:11211 auth_type = password project_domain_name = default user_domain_name = default project_name = service username = neutron password = neutron lock_path = /var/lib/neutron/tmp
2、配置自提供网络
scp /etc/neutron/plugins/ml2/linuxbridge_agent.ini 192.168.90.250:/etc/neutron/plugins/ml2/
复制控制节点linuxbrige到计算节点
3、配置nova来使用neutron服务
vim /etc/nova/nova.conf [neutron] url = http://192.168.90.254:9696 auth_url = http://192.168.90.254:35357 auth_type = password project_domain_name = default user_domain_name = default region_name = RegionOne project_name = service username = neutron password = neutron
4、重启nova服务
systemctl restart openstack-nova-compute.service
5、自启动neutron服务
systemctl enable neutron-linuxbridge-agent.service
systemctl start neutron-linuxbridge-agent.service