B12-openstack高可用(t版)-Neutron计算节点集群

1. 安装neutron-linuxbridge

[root@compute01 ~]# yum install openstack-neutron-linuxbridge ebtables ipset -y

2. 配置neutron.conf

[root@compute01 ~]# egrep -v "^$|^#" /etc/neutron/neutron.conf
[DEFAULT]

bind_host = 10.100.214.205
transport_url = rabbit://openstack:huayun@10.100.214.200
auth_strategy = keystone
[cors]
[database]
[keystone_authtoken]
www_authenticate_uri = http://10.100.214.200:5000
auth_url = http://10.100.214.200:5000
memcached_servers = 10.100.214.201:11211,10.100.214.203:11211,10.100.214.203:11211
auth_type = password
project_domain_name = default
user_domain_name = default
project_name = service
username = neutron
password = huayun
[oslo_concurrency]
lock_path = /var/lib/neutron/tmp
[oslo_messaging_amqp]
[oslo_messaging_kafka]
[oslo_messaging_notifications]
[oslo_messaging_rabbit]
[oslo_middleware]
[oslo_policy]
[privsep]
[ssl]

 

[root@compute01 ~]# scp /etc/neutron/neutron.conf  10.100.214.207:/etc/neutron/

[root@compute01 ~]# scp /etc/neutron/neutron.conf  10.100.214.206:/etc/neutron/

3. 配置linuxbridge_agent.ini 

1）配置linuxbridgr_agent.ini

[root@compute01 ~]# vim /etc/neutron/plugins/ml2/linuxbridge_agent.ini

[root@compute01 ~]# egrep -v "^#|^$" /etc/neutron/plugins/ml2/linuxbridge_agent.ini
[DEFAULT]
[linux_bridge]
physical_interface_mappings = external:ens224,vlan:ens256
[vxlan]
enable_vxlan = true
local_ip = 115.115.115.205
l2_population = true
[securitygroup]
enable_security_group = true
firewall_driver = neutron.agent.linux.iptables_firewall.IptablesFirewallDriver

 

[root@compute01 ~]# scp /etc/neutron/plugins/ml2/linuxbridge_agent.ini 10.100.214.206:/etc/neutron/plugins/ml2/linuxbridge_agent.ini
[root@compute01 ~]# scp /etc/neutron/plugins/ml2/linuxbridge_agent.ini 10.100.214.207:/etc/neutron/plugins/ml2/linuxbridge_agent.ini 

 

2）配置内核参数

 

[root@compute01 ~]# echo "net.bridge.bridge-nf-call-iptables = 1" >> /etc/sysctl.conf
[root@compute01 ~]# echo "net.bridge.bridge-nf-call-ip6tables = 1" >> /etc/sysctl.conf
[root@compute01 ~]# modprobe br_netfilter

[root@compute01 ~]# sysctl -p
net.bridge.bridge-nf-call-iptables = 1
net.bridge.bridge-nf-call-ip6tables = 1

 

4. 配置nova.conf

# 在全部计算节点操作，以compute01节点为例；
# 配置只涉及nova.conf的”[neutron]”字段

[neutron]
url = http://10.100.214.200:9696
auth_url = http://10.100.214.200:5000
auth_type = password
project_domain_name = default
user_domain_name = default
region_name = RegionOne
project_name = service
username = neutron
password = huayun
service_metadata_proxy = true
metadata_proxy_shared_secret = huayun

5. 启动服务

[root@compute01 ~]# systemctl restart openstack-nova-compute.service
[root@compute01 ~]# systemctl enable neutron-linuxbridge-agent.service

[root@compute01 ~]# systemctl start neutron-linuxbridge-agent.service

6. 验证

[root@controller01 ~]# openstack network agent list