說明

本文介紹了 1控制+1計算、1 控制+1計算+1網絡 中的 Linux bridge 與 Openvswitch 實現 neutron 網絡的配置與驗證過程

1 控制 + 1 計算

Linux bridge

vlan network

配置 ml2 插件

[root@controller41 ~(keystone_admin)]# vim /etc/neutron/plugins/ml2/ml2_conf.ini[ml2] type_driver = local,flat,vlan,vxlan tenant_network_types = vlan,local,vxlan # 這里添加 vlan 類型 mechanism_drivers = linuxbridge,l2population extension_drivers = port_security[ml2_type_vlan] network_vlan_ranges = default:10:20 # default 只是一個 tag，也可以是其他的，10:20 表示 vlan 范圍---------------------# 配置 linuxbridge_agent [root@controller41 ~(keystone_admin)]# vim /etc/neutron/plugins/ml2/linuxbridge_agent.ini[linux_bridge] physical_interface_mappings = default:eth1 # default tag 要和上邊 ml2 的對應，eth1 是 vlan 網絡和物理網卡的對應端口---------------------# 配置完成后，重啟服務 [root@controller41 ~(keystone_admin)]# systemctl restart neutron-server.service neutron-linuxbridge-agent.service

創建子網

檢查狀態

[root@controller41 ~(keystone_admin)]# openstack network show net4_vlan +---------------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | Field | Value | +---------------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | admin_state_up | UP | | availability_zone_hints | | | availability_zones | nova | | created_at | 2020-07-26T09:11:13Z | | description | | | dns_domain | None | | id | 19b0727a-205f-4ccd-8cf7-22daf154d11a | | ipv4_address_scope | None | | ipv6_address_scope | None | | is_default | None | | is_vlan_transparent | None | | location | cloud='', project.domain_id=, project.domain_name='Default', project.id='d6ebe861e11f4ce48e36452369b88edc', project.name='admin', region_name='RegionOne', zone= | | mtu | 1500 | | name | net4_vlan | | port_security_enabled | True | | project_id | d6ebe861e11f4ce48e36452369b88edc | | provider:network_type | vlan | | provider:physical_network | default | | provider:segmentation_id | 11 | | qos_policy_id | None | | revision_number | 2 | | router:external | Internal | | segments | None | | shared | True | | status | ACTIVE | | subnets | 0a7a27f8-29b0-4177-8972-3baefdb46a78 | | tags | | | updated_at | 2020-07-26T09:11:14Z | +---------------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------------+# 查看網橋 # 注意 brq19b0 開頭的是剛才配置的 vlan network，可以和上邊的 show 命令的的 id 對應上 [root@controller41 ~(keystone_admin)]# brctl show bridge name bridge id STP enabled interfaces brq11ff868b-c3 8000.9abc9f508285 no tape7815e70-47 brq19b0727a-20 8000.06892f012ec9 no eth1.11tap10011f4d-97tapc8ef378e-62 brq70db0e5d-a3 8000.0e6477992fd2 no tap6606fa8e-ff brq86a3e679-48 8000.52540032261b no eth2tapd429fba3-9f brqf10f49a2-ad 8000.12f120817482 no tapda04b27a-2fvxlan-1

創建主機測試

Routing

檢查配置

[root@controller41 ~(keystone_admin)]# vim /etc/neutron/l3_agent.ini[DEFAULT] interface_driver = linuxbridge

創建路由器

檢查

[root@controller41 ~(keystone_admin)]# openstack router list +--------------------------------------+------------------+--------+-------+----------------------------------+-------------+-------+ | ID | Name | Status | State | Project | Distributed | HA | +--------------------------------------+------------------+--------+-------+----------------------------------+-------------+-------+ | 90250668-0dde-423d-8b75-00c0e41277ad | net4_vlan_router | ACTIVE | UP | d6ebe861e11f4ce48e36452369b88edc | False | False | +--------------------------------------+------------------+--------+-------+----------------------------------+-------------+-------+# 這里只有一個 qrouter [root@controller41 ~(keystone_admin)]# ip netns qrouter-90250668-0dde-423d-8b75-00c0e41277ad (id: 4) qdhcp-19b0727a-205f-4ccd-8cf7-22daf154d11a (id: 3) qdhcp-11ff868b-c3ea-46a0-ad40-658598df1041 (id: 2) qdhcp-70db0e5d-a3b1-414d-92c9-08119bb8bf23 (id: 1) qdhcp-f10f49a2-adce-44fe-bca0-b1420817100a (id: 0)# 查看 namespace 的 ip 配置 [root@controller41 ~(keystone_admin)]# ip netns exec qrouter-90250668-0dde-423d-8b75-00c0e41277ad ip a 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00inet 127.0.0.1/8 scope host lovalid_lft forever preferred_lft foreverinet6 ::1/128 scope hostvalid_lft forever preferred_lft forever 5: qr-f83d3c74-fa@if29: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000link/ether fa:16:3e:ee:f4:f0 brd ff:ff:ff:ff:ff:ff link-netnsid 0inet 10.1.4.1/24 brd 10.1.4.255 scope global qr-f83d3c74-favalid_lft forever preferred_lft foreverinet6 fe80::f816:3eff:feee:f4f0/64 scope linkvalid_lft forever preferred_lft forever

在主機中驗證

由于 cirros 鏡像比較小，方便測試，所以可以用 cirros 創建一個主機

$ ip route show default via 10.1.4.1 dev eth0 10.1.4.0/24 dev eth0 src 10.1.4.84 169.254.169.254 via 10.1.4.2 dev eth0$ ping 10.1.4.1 PING 10.1.4.1 (10.1.4.1): 56 data bytes 64 bytes from 10.1.4.1: seq=0 ttl=64 time=4.499 ms ^C --- 10.1.4.1 ping statistics --- 1 packets transmitted, 1 packets received, 0% packet loss round-trip min/avg/max = 4.499/4.499/4.499 ms

external network（flat 類型）

配置 ml2

[root@controller41 ~(keystone_admin)]# vim /etc/neutron/plugins/ml2/ml2_conf.ini [ml2_type_flat] flat_networks = external # external 是標簽，也可以是其他的命名[root@controller41 ~(keystone_admin)]# vim /etc/neutron/plugins/ml2/linuxbridge_agent.ini [linux_bridge] physical_interface_mappings = default:eth1,external:eth2 # 增加 external:eth2，eth2 作為連接外網的出口

新增子網

在之前添加的路由器中，指定網關

然后在主機內測試

$ ping 172.19.12.254 PING 172.19.12.254 (172.19.12.254): 56 data bytes 64 bytes from 172.19.12.254: seq=0 ttl=63 time=3.749 ms ^C --- 172.19.12.254 ping statistics --- 1 packets transmitted, 1 packets received, 0% packet loss round-trip min/avg/max = 3.749/3.749/3.749 ms

external network（vlan 類型）

總結

以上是生活随笔為你收集整理的Neutron-常用配置-学习笔记的全部內容，希望文章能夠幫你解決所遇到的問題。

如果覺得生活随笔網站內容還不錯，歡迎將生活随笔推薦給好友。