openstack私有云布署实践【13.1 网络Neutron-compute节点配置（科兴环境）】

所有kxcompute节点

下载安装组件

# yum install openstack-neutron openstack-neutron-linuxbridge ebtables ipset -y

修改新增内核参数：

vi /etc/sysctl.conf

net.ipv4.conf.default.rp_filter=0

net.ipv4.conf.all.rp_filter=0

net.bridge.bridge-nf-call-iptables=1

net.bridge.bridge-nf-call-ip6tables=1

sysctl -p

提示：sysctl: cannot stat /proc/sys/net/bridge/bridge-nf-call-iptables: 没有那个文件或目录

sysctl: cannot stat /proc/sys/net/bridge/bridge-nf-call-ip6tables: 没有那个文件或目录

解决方法如下：

modprobe bridge

lsmod|grep bridge

sysctl -p

1公有网络配置+私有网络配置-----------------这里我以kxcompute1节点为例，其它节点的配置是相同的，只是IP 和网卡对应的名称不同而已

配置neutron服务

vi /etc/neutron/neutron.conf

[DEFAULT]

rpc_backend = rabbit

auth_strategy = keystone

verbose = True

[oslo_messaging_rabbit]

rabbit_host=kxcontroller

rabbit_userid = openstack

rabbit_password = openstack

[keystone_authtoken]

auth_uri = http://kxcontroller:5000

auth_url = http://kxcontroller:35357

auth_plugin = password

project_domain_id = default

user_domain_id = default

project_name = service

username = neutron

password = neutron

[oslo_concurrency]

lock_path = /var/lib/neutron/tmp

配置Linux bridge服务

vi /etc/neutron/plugins/ml2/linuxbridge_agent.ini

[linux_bridge]

physical_interface_mappings = public:bond0

[vxlan]

enable_vxlan = True

local_ip = 10.120.42.11

l2_population = False

[agent]

prevent_arp_spoofing = True

[securitygroup]

enable_security_group = True

firewall_driver = neutron.agent.linux.iptables_firewall.IptablesFirewallDriver

enable_ipset = True

添加neutron服务到nova中-----在11节中我就有提到的那个紫色的提前配置，这里再提一次

vi /etc/nova/nova.conf

[neutron]

url = http://kxcontroller:9696

auth_url = http://kxcontroller:35357

auth_plugin = password

project_domain_id = default

user_domain_id = default

region_name = RegionTwo

project_name = service

username = neutron

password = neutron

重启nova api服务

# systemctl restart openstack-nova-compute.service

开机自启，开启服务

# systemctl enable neutron-linuxbridge-agent.service

# systemctl restart neutron-linuxbridge-agent.service

验证服务：

在controller上

source admin-openrc.sh

# neutron ext-list

+-----------------------+-----------------------------------------------+

| alias | name |

+-----------------------+-----------------------------------------------+

| dns-integration | DNS Integration |

| ext-gw-mode | Neutron L3 Configurable external gateway mode |

| binding | Port Binding |

| agent | agent |

| subnet_allocation | Subnet Allocation |

| l3_agent_scheduler | L3 Agent Scheduler |

| external-net | Neutron external network |

| flavors | Neutron Service Flavors |

| net-mtu | Network MTU |

| quotas | Quota management support |

| l3-ha | HA Router extension |

| provider | Provider Network |

| multi-provider | Multi Provider Network |

| extraroute | Neutron Extra Route |

| router | Neutron L3 Router |

| extra_dhcp_opt | Neutron Extra DHCP opts |

| security-group | security-group |

| dhcp_agent_scheduler | DHCP Agent Scheduler |

| rbac-policies | RBAC Policies |

| port-security | Port Security |

| allowed-address-pairs | Allowed Address Pairs |

| dvr | Distributed Virtual Router |

+-----------------------+-----------------------------------------------+

# neutron agent-list --显示为true则为正常

+--------------------------------------+--------------------+---------------+-------+----------------+---------------------------+

+--------------------------------------+--------------------+---------------+-------+----------------+---------------------------+

+--------------------------------------+--------------------+---------------+-------+----------------+---------------------------+

posted @ 2017-01-14 22:49 veniceslove 阅读(355) 评论(0) 编辑收藏举报

刷新页面返回顶部

肖冲

最近在做的一件事：将本地笔记陆续搬运到博客园中

openstack私有云布署实践【13.1 网络Neutron-compute节点配置（科兴环境）】

公告