neutron的dvr

Author: [Wu Yeliang]

Blog: http://blog.csdn.net/wylfengyujiancheng

OpenStack users may find that, by the original design of Neutron, all network services are performed on network nodes, which means a lot of traffic and processing, which puts a lot of pressure on network nodes. At the heart of these processing is the router service. Any access that needs to cross subnets requires routers for routing. Naturally, can the router service also run on the compute node? This design idea is undoubtedly more reasonable, but the specific implementation requires technical considerations in many details.

In order to reduce the load of network nodes and improve scalability, OpenStack has officially introduced the Distributed Virtual Router (DVR) feature (users can choose to use it or not) since the Juno version, allowing computing nodes to handle the original Lots of east-west traffic and non-SNAT north-south traffic (vms with floating IPs communicating with the outside world).

In this way, the network node only needs to process a portion of the SNAT (communication between the vm without floating IP and the outside world) traffic, which greatly reduces the load and the dependence of the entire system on the network node. Naturally, FWaaS can also be placed on computing nodes.
DHCP services and VPN services still need to be centralized on network nodes.

control node:

openstack-config --set  /etc/neutron/neutron.conf DEFAULT router_distributed  True

network node:

openstack-config --set  /etc/neutron/plugins/ml2/openvswitch_agent.ini DEFAULT  enable_distributed_routing  True
openstack-config --set  /etc/neutron/l3_agent.ini DEFAULT agent_mode  dvr_snat

Compute node:
modify the configuration file /etc/neutron/l3_agent.ini

# cp -a  /etc/neutron/l3_agent.ini /etc/neutron/l3_agent.ini_bak
[DEFAULT]
interface_driver = neutron.agent.linux.interface.OVSInterfaceDriver
openstack-config --set  /etc/neutron/l3_agent.ini DEFAULT agent_mode  dvr 
openstack-config --set  /etc/neutron/plugins/ml2/openvswitch_agent.ini DEFAULT enable_distributed_routing  True
openstack-config --set  /etc/neutron/plugins/ml2/openvswitch_agent.ini  ovs bridge_mappings

physnet1:br-eth1
ovs-vsctl add-br br-eth1 
ovs-vsctl add-port br-eth1 ens33(业务网)

Restart the neutron-l3-agent service on the computing node (not enabled by default)