本篇文章是本系列的第五篇文章，將繼續進行OpenStack網路服務的安裝

六、安裝網路服務

6.1 （控制節點）配置資料庫
- 連線資料庫

# mysql -u root -pfuai123

• 建立資料庫並配置許可權

MariaDB [(none)] CREATE DATABASE neutron;

MariaDB [(none)]> GRANT ALL PRIVILEGES ON neutron.* TO 'neutron'@'localhost' \
  IDENTIFIED BY 'fuai123';
MariaDB [(none)]> GRANT ALL PRIVILEGES ON
 
 neutron.* TO 'neutron'@'%' \
  IDENTIFIED BY 'fuai123';

6.2 （控制節點）建立認證資訊
- 設定admin環境變數

# . admin-openrc

• 建立neutron使用者

密碼我設定的fuai123

# openstack user create --domain default --password-prompt neutron

User Password:
Repeat User Password:
+---------------------+----------------------------------+
 

| Field               | Value                            |
+---------------------+----------------------------------+
| domain_id           | default                          |
| enabled             | True                             |
| id                  | 7e9b55f8c652478784749ac8fb616a4c |
| name                | neutron                          |
| options             | {}                               |
| password_
 
expires_at | None                             |
+---------------------+----------------------------------+

• 將admin角色新增給neutron使用者

# openstack role add --project service --user neutron admin

• 建立neutron服務

# openstack service create --name neutron \
  --description "OpenStack Networking" network

+-------------+----------------------------------+
| Field       | Value                            |
+-------------+----------------------------------+
| description | OpenStack Networking             |
| enabled     | True                             |
| id          | 43992283bd8d426a8956751c40a0de49 |
| name        | neutron                          |
| type        | network                          |
+-------------+----------------------------------+

• 將網路服務埠資訊註冊到認證服務

# openstack endpoint create --region RegionOne \
  network public http://controller:9696

+--------------+----------------------------------+
| Field        | Value                            |
+--------------+----------------------------------+
| enabled      | True                             |
| id           | c183875c07a54aea810bbdd9e1104827 |
| interface    | public                           |
| region       | RegionOne                        |
| region_id    | RegionOne                        |
| service_id   | 43992283bd8d426a8956751c40a0de49 |
| service_name | neutron                          |
| service_type | network                          |
| url          | http://controller:9696           |
+--------------+----------------------------------+

# openstack endpoint create --region RegionOne \
  network internal http://controller:9696

+--------------+----------------------------------+
| Field        | Value                            |
+--------------+----------------------------------+
| enabled      | True                             |
| id           | 78b007a132654268a8d822f3f2b64678 |
| interface    | internal                         |
| region       | RegionOne                        |
| region_id    | RegionOne                        |
| service_id   | 43992283bd8d426a8956751c40a0de49 |
| service_name | neutron                          |
| service_type | network                          |
| url          | http://controller:9696           |
+--------------+----------------------------------+

# openstack endpoint create --region RegionOne \
  network admin http://controller:9696

+--------------+----------------------------------+
| Field        | Value                            |
+--------------+----------------------------------+
| enabled      | True                             |
| id           | 5f152d4b081e448b8e9e76ba002800be |
| interface    | admin                            |
| region       | RegionOne                        |
| region_id    | RegionOne                        |
| service_id   | 43992283bd8d426a8956751c40a0de49 |
| service_name | neutron                          |
| service_type | network                          |
| url          | http://controller:9696           |
+--------------+----------------------------------+

注意：我將採用self-service network的方式部署網路

6.3 （控制節點）安裝軟體包並配置配置檔案
- 安裝軟體包

# yum install openstack-neutron openstack-neutron-ml2 \
  openstack-neutron-linuxbridge ebtables -y

• 編輯/etc/neutron/neutron.conf檔案並配置如下項

[database]
connection = mysql+pymysql://neutron:[email protected]/neutron
...

[DEFAULT]
core_plugin = ml2
service_plugins = router
allow_overlapping_ips = true
transport_url = rabbit://openstack:[email protected]
auth_strategy = keystone
notify_nova_on_port_status_changes = true
notify_nova_on_port_data_changes = true
...

[keystone_authtoken]
auth_uri = http://controller:5000
auth_url = http://controller:35357
memcached_servers = controller:11211
auth_type = password
project_domain_name = default
user_domain_name = default
project_name = service
username = neutron
password = fuai123
...

[nova]
auth_url = http://controller:35357
auth_type = password
project_domain_name = default
user_domain_name = default
region_name = RegionOne
project_name = service
username = nova
password = fuai123
...

[oslo_concurrency]
lock_path = /var/lib/neutron/tmp
...

• 編輯/etc/neutron/plugins/ml2/ml2_conf.ini檔案配置二層外掛

[ml2]
type_drivers = flat,vlan,vxlan
tenant_network_types = vxlan
mechanism_drivers = linuxbridge,l2population
extension_drivers = port_security
...

[ml2_type_flat]
flat_networks = provider
...

[ml2_type_vxlan]
vni_ranges = 1:1000
...

[securitygroup]
enable_ipset = true
...

• 編輯/etc/neutron/plugins/ml2/linuxbridge_agent.ini檔案配置linux bridge外掛

[linux_bridge]
physical_interface_mappings = provider:enp0s8   #第二張網絡卡網絡卡名
...

[vxlan]
enable_vxlan = true
local_ip = 192.168.0.77
l2_population = true
...

[securitygroup]
enable_security_group = true
firewall_driver = neutron.agent.linux.iptables_firewall.IptablesFirewallDriver
...

• 確認核心支援網橋filters並作如下設定，編輯/etc/sysctl.conf增加以下內容

net.bridge.bridge-nf-call-iptables=1
net.bridge.bridge-nf-call-ip6tables=1

• 載入br_netfilter模組

# modprobe br_netfilter

• 從配置檔案載入核心引數

# sysctl -p

• 編輯/etc/neutron/l3_agent.ini配置三層外掛

[DEFAULT]
interface_driver = linuxbridge
...

• 編輯/etc/neutron/dhcp_agent.ini配置dhcp外掛

[DEFAULT]
interface_driver = linuxbridge
dhcp_driver = neutron.agent.linux.dhcp.Dnsmasq
enable_isolated_metadata = true
...

• 編輯/etc/neutron/metadata_agent.ini檔案配置metadata外掛

[DEFAULT]
nova_metadata_host = controller
metadata_proxy_shared_secret = fuai123
...

• 編輯檔案/etc/nova/nova.conf配置計算服務使用網路服務

[neutron]
url = http://controller:9696
auth_url = http://controller:35357
auth_type = password
project_domain_name = default
user_domain_name = default
region_name = RegionOne
project_name = service
username = neutron
password = fuai123
service_metadata_proxy = true
metadata_proxy_shared_secret = fuai123
...

6.4 （控制節點）完成安裝，匯入資料庫表，並啟動服務

• 建立連結檔案

# ln -s /etc/neutron/plugins/ml2/ml2_conf.ini /etc/neutron/plugin.ini

• 匯入資料庫結構

# su -s /bin/sh -c "neutron-db-manage --config-file /etc/neutron/neutron.conf \
  --config-file /etc/neutron/plugins/ml2/ml2_conf.ini upgrade head" neutron

• 重啟計算服務

# systemctl restart openstack-nova-api.service

• 設定網路服務的開機自啟動，並啟動網路服務

# systemctl enable neutron-server.service \
  neutron-linuxbridge-agent.service neutron-dhcp-agent.service \
  neutron-metadata-agent.service
# systemctl start neutron-server.service \
  neutron-linuxbridge-agent.service neutron-dhcp-agent.service \
  neutron-metadata-agent.service

# systemctl enable neutron-l3-agent.service
# systemctl start neutron-l3-agent.service

6.5 （計算節點）計算節點安裝網路服務

• 安裝軟體包

# yum install openstack-neutron-linuxbridge ebtables ipset -y

• 編輯/etc/neutron/neutron.conf檔案完成如下項

[DEFAULT]
transport_url = rabbit://openstack:[email protected]
auth_strategy = keystone
...

[keystone_authtoken]
auth_uri = http://controller:5000
auth_url = http://controller:35357
memcached_servers = controller:11211
auth_type = password
project_domain_name = default
user_domain_name = default
project_name = service
username = neutron
password = fuai123
...

[oslo_concurrency]
lock_path = /var/lib/neutron/tmp
...

• 配置linux bridge外掛，編輯/etc/neutron/plugins/ml2/linuxbridge_agent.ini完成如下項

[linux_bridge]
physical_interface_mappings = provider:enp0s8  #第二張網絡卡名
...

[vxlan]
enable_vxlan = true
local_ip = 192.168.0.78
l2_population = true
...

[securitygroup]
enable_security_group = true
firewall_driver = neutron.agent.linux.iptables_firewall.IptablesFirewallDriver
...

• 確認核心支援網橋filters並作如下設定，編輯/etc/sysctl.conf增加以下內容

net.bridge.bridge-nf-call-iptables=1
net.bridge.bridge-nf-call-ip6tables=1

• 載入br_netfilter模組

# modprobe br_netfilter

• 從配置檔案載入核心引數

# sysctl -p

• 配置計算服務使用網路服務/etc/nova/nova.conf

[neutron]
url = http://controller:9696
auth_url = http://controller:35357
auth_type = password
project_domain_name = default
user_domain_name = default
region_name = RegionOne
project_name = service
username = neutron
password = fuai123
...

• 完成安裝，設定服務

# systemctl restart openstack-nova-compute.service

# systemctl enable neutron-linuxbridge-agent.service
# systemctl start neutron-linuxbridge-agent.service

6.6 （控制節點）驗證操作

• 設定admin環境變數

# . admin-openrc

• 執行命令驗證是否成功啟動neutron-server

這個輸出內容太多就沒有粘貼出來

# openstack extension list --network

• 執行命令列出外掛，驗證網路外掛是否成功啟動

# openstack network agent list

+--------------------------------------+--------------------+------------+-------------------+-------+-------+---------------------------+
| ID                                   | Agent Type         | Host       | Availability Zone | Alive | State | Binary                    |
+--------------------------------------+--------------------+------------+-------------------+-------+-------+---------------------------+
| 4859bc89-2ec8-42e3-aa4e-9bd6173aa996 | DHCP agent         | controller | nova              | :-)   | UP    | neutron-dhcp-agent        |
| 53f36185-cd1a-437f-9b48-151c641a0018 | L3 agent           | controller | nova              | :-)   | UP    | neutron-l3-agent          |
| 68145ddd-7af4-4617-9dd4-026650a3b962 | Metadata agent     | controller | None              | :-)   | UP    | neutron-metadata-agent    |
| 8814a062-43e8-41a8-9fb7-0b07e6160dbf | Linux bridge agent | controller | None              | :-)   | UP    | neutron-linuxbridge-agent |
| fbe37150-a54b-40cb-91e6-30552a3dbcf2 | Linux bridge agent | compute    | None              | :-)   | UP    | neutron-linuxbridge-agent |
+--------------------------------------+--------------------+------------+-------------------+-------+-------+---------------------------+

至此，OpenStack網路服務已經安裝驗證完成，下面將進行介面的安裝，具體請參見文章《OpenStack（Queens）詳細安裝部署（六）－介面（horizon）安裝》

更多精彩內容，OpenStack乾貨請掃描下方二維碼，關注我們微信公眾號“扶艾”！