OpenStack Ussuri版安装系列—7.2计算节点-Neutron网络服务组件

分手后的思念是犯贱 2022-10-26 03:48 198阅读 0赞

# 计算节点Neutron网络服务组件 #

> **OpenStack部署系列文章**  
> [OpenStack Victoria版 安装部署系列教程][OpenStack Victoria_]  
> [OpenStack Ussuri版 离线安装部署系列教程（全）][OpenStack Ussuri_]  
> [OpenStack Train版 离线安装部署系列教程（全）][OpenStack Train_]  
> 欢迎留言沟通，共同进步。

> **官方参考链接**：
> 
> [OpenStack安装指南：Install OpenStack services][OpenStack_Install OpenStack services]
> 
> [OpenStack Ussuri Installation Guides][]
> 
> [Networking service Installation Guide][]
> 
> [Install and configure compute node][]
> 
> **CSDN链接**：
> 
> [9 Openstack-Ussuri-Neutron控制/计算节点集群部署-centos8][9 Openstack-Ussuri-Neutron_-centos8]
> 
> [7.2计算节点-Neutron网络服务组件][7.2_-Neutron]

--------------------

### 目录 ###

*  计算节点Neutron网络服务组件
 *   *  一、安装的组件
     *  二、配置公共组件
     *  三、配置网络选项
     *   *  1.配置网络选项一：Provider networks
         *   *  （1）配置Linux网桥代理
         *  2.配置网络选项二：Self-service networks
         *   *  （1）配置Linux网桥代理
         *  3.参考步骤\[9.6 部署与配置neutron agent - compute163/164\](https://blog.csdn.net/caiyqn/article/details/106891352\#t5)
     *  四、配置计算节点Compute服务以使用网络服务
     *  五、计算节点网络服务安装的确定
     *   *  1.重新启动计算服务
         *  2.启动Linux网桥代理，并配置开机自启
     *  六、安装完成

--------------------

## 一、安装的组件 ##

计算节点

yum install -y openstack-neutron-linuxbridge ebtables ipset openstack-neutron openstack-neutron-ml2

## 二、配置公共组件 ##

网络公共组件配置包括身份验证机制，消息队列和插件。  
/etc/neutron/neutron.conf

cd 
    cp /etc/neutron/neutron.conf /etc/neutron/neutron.conf.bak
    egrep -v "^$|^#" /etc/neutron/neutron.conf.bak >/etc/neutron/neutron.conf
    
    vim /etc/neutron/neutron.conf

文件内容为：

[DEFAULT]
    # ...
    auth_strategy = keystone
    transport_url = rabbit://openstack:openstack@controller
    
    [database]
    # ...
    connection = mysql+pymysql://neutron:neutron@controller/neutron
    [keystone_authtoken]
    # ...
    www_authenticate_uri = http://controller:5000
    auth_url = http://controller:5000
    memcached_servers = controller:11211
    auth_type = password
    project_domain_name = Default
    user_domain_name = Default
    project_name = service
    username = neutron
    password = neutron
    
    [oslo_concurrency]
    lock_path = /var/lib/neutron/tmp

echo "Result of Configuration"
    egrep -v '(^$|^#)' /etc/neutron/neutron.conf

## 三、配置网络选项 ##

选择与为控制器节点选择的相同网络选项以配置特定于该节点的服务。

### 1.配置网络选项一：Provider networks ###

配置：https://docs.openstack.org/neutron/train/install/compute-install-option1-rdo.html

#### （1）配置Linux网桥代理 ####

/etc/neutron/plugins/ml2/linuxbridge\_agent.ini

Linux网桥代理为实例构建第2层（桥接和交换）虚拟网络基础结构并处理安全组。

cd 
    cp /etc/neutron/plugins/ml2/linuxbridge_agent.ini /etc/neutron/plugins/ml2/linuxbridge_agent.ini.bak
    egrep -v "^$|^#" /etc/neutron/plugins/ml2/linuxbridge_agent.ini.bak >/etc/neutron/plugins/ml2/linuxbridge_agent.ini
    
    vim /etc/neutron/plugins/ml2/linuxbridge_agent.ini

[linux_bridge]
    physical_interface_mappings = provider:ens34
    
    [vxlan]
    enable_vxlan = False
    
    [securitygroup]
    # ...
    enable_security_group = true
    firewall_driver = neutron.agent.linux.iptables_firewall.IptablesFirewallDriver

echo "Result of Configuration"
    egrep -v '(^$|^#)' /etc/neutron/plugins/ml2/linuxbridge_agent.ini

注：第一个选项physical\_interface\_mappings选项要配置计算节点自身的网卡名称provider:ens34

加载br\_netfilter内核模块。要启用网络桥接器支持，通常br\_netfilter内核模块需要加载。配置[参考链接][Link 1]

echo net.bridge.bridge-nf-call-iptables = 1 >> /etc/sysctl.conf
    echo net.bridge.bridge-nf-call-ip6tables = 1 >> /etc/sysctl.conf
    
    cat /etc/sysctl.conf
    sysctl -p
    modprobe br_netfilter
    ls /proc/sys/net/bridge
    sysctl -p
    
    sysctl net.bridge.bridge-nf-call-iptables
    sysctl net.bridge.bridge-nf-call-ip6tables

### 2.配置网络选项二：Self-service networks ###

配置：https://docs.openstack.org/neutron/train/install/compute-install-option2-rdo.html

#### （1）配置Linux网桥代理 ####

/etc/neutron/plugins/ml2/linuxbridge\_agent.ini

Linux网桥代理为实例构建第2层（桥接和交换）虚拟网络基础结构并处理安全组。

cd
    cp /etc/neutron/plugins/ml2/linuxbridge_agent.ini /etc/neutron/plugins/ml2/linuxbridge_agent.ini.bak
    
    egrep -v "^$|^#" /etc/neutron/plugins/ml2/linuxbridge_agent.ini.bak > /etc/neutron/plugins/ml2/linuxbridge_agent.ini
    
    vim /etc/neutron/plugins/ml2/linuxbridge_agent.ini

[linux_bridge]
    physical_interface_mappings = provider:ens34
    
    [vxlan]
    enable_vxlan = True
    local_ip = 192.168.139.111
    l2_population = true
    
    [securitygroup]
    enable_security_group = true
    firewall_driver = neutron.agent.linux.iptables_firewall.IptablesFirewallDriver
    
    echo "Result of Configuration"
    egrep -v '(^$|^#)' /etc/neutron/plugins/ml2/linuxbridge_agent.ini

加载br\_netfilter内核模块。要启用网络桥接器支持，通常br\_netfilter内核模块需要加载。配置[参考链接][Link 1]

--------------------

**Neutron网络配置U版本和T版本在计算计算节点配置有所不同。**

### 3.参考步骤[9.6 部署与配置neutron agent - compute163/164][9.6 _neutron agent - compute163_164] ###

[root@compute2 ~]# netstat -lntp
    Active Internet connections (only servers)
    Proto Recv-Q Send-Q Local Address           Foreign Address         State       PID/Program name
    tcp        0      0 0.0.0.0:22              0.0.0.0:*               LISTEN      1031/sshd
    tcp        0      0 0.0.0.0:111             0.0.0.0:*               LISTEN      1/systemd
    tcp6       0      0 :::22                   :::*                    LISTEN      1031/sshd
    tcp6       0      0 :::111                  :::*                    LISTEN      1/systemd
    [root@compute2 ~]# cp /etc/neutron/l3_agent.ini /etc/neutron/l3_agent.ini.bak
    [root@compute2 ~]# egrep -v "^$|^#" /etc/neutron/l3_agent.ini.bak >/etc/neutron/l3_agent.ini
    [root@compute2 ~]# vim /etc/neutron/l3_agent.ini
    [root@compute2 ~]# vim /etc/neutron/l3_agent.ini
    [root@compute2 ~]# cp /etc/neutron/dhcp_agent.ini /etc/neutron/dhcp_agent.ini.bak
    [root@compute2 ~]# egrep -v "^$|^#" /etc/neutron/dhcp_agent.ini.bak >/etc/neutron/dhcp_agent.ini
    [root@compute2 ~]# vim etc/neutron/dhcp_agent.ini
    [root@compute2 ~]# vim /etc/neutron/dhcp_agent.ini
    [root@compute2 ~]# cp /etc/neutron/metadata_agent.ini /etc/neutron/metadata_agent.ini.bak
    [root@compute2 ~]# egrep -v "^$|^#" /etc/neutron/metadata_agent.ini.bak >/etc/neutron/metadata_agent.ini
    [root@compute2 ~]# vim /etc/neutron/metadata_agent.ini
    [root@compute2 ~]# systemctl status neutron-linuxbridge-agent neutron-dhcp-agent neutron-metadata-agent neutron-l3-agent
    
    
    [root@compute2 ~]# systemctl restart neutron-linuxbridge-agent neutron-dhcp-agent neutron-metadata-agent neutron-l3-agent
    [root@compute2 ~]# systemctl restart neutron-linuxbridge-agent neutron-dhcp-agent neutron-metadata-agent neutron-l3-agent
    [root@compute2 ~]# systemctl enable neutron-linuxbridge-agent neutron-dhcp-agent neutron-metadata-agent neutron-l3-agent
    [root@compute2 ~]# systemctl status neutron-linuxbridge-agent neutron-dhcp-agent neutron-metadata-agent neutron-l3-agent

## 四、配置计算节点Compute服务以使用网络服务 ##

https://docs.openstack.org/neutron/train/install/compute-install-rdo.html\#configure-the-compute-service-to-use-the-networking-service

/etc/nova/nova.conf  
在该\[neutron\]部分中，配置访问参数

cd 
    vim /etc/nova/nova.conf

修改文件内容

----------------
    [neutron]
    url = http://controller:9696
    auth_url = http://controller:5000
    auth_type = password
    project_domain_name = default
    user_domain_name = default
    region_name = RegionOne
    project_name = service
    username = neutron
    password = neutron
    ----------------
    
    echo "Result of Configuration"
    egrep -v '(^$|^#)' /etc/nova/nova.conf

## 五、计算节点网络服务安装的确定 ##

### 1.重新启动计算服务 ###

systemctl restart openstack-nova-compute.service
    systemctl status openstack-nova-compute.service

### 2.启动Linux网桥代理，并配置开机自启 ###

systemctl restart neutron-linuxbridge-agent.service
    systemctl status neutron-linuxbridge-agent.service
    
    systemctl enable neutron-linuxbridge-agent.service
    systemctl list-unit-files |grep neutron* |grep enabled

## 六、安装完成 ##

至此，计算节点的网络配置完成，转回到控制节点进行验证操作,进行整个Neutron网络服务的最终验证。

[OpenStack Victoria_]: https://blog.csdn.net/u013469753/article/details/116122782
[OpenStack Ussuri_]: https://blog.csdn.net/u013469753/article/details/106549085
[OpenStack Train_]: https://blog.csdn.net/u013469753/article/details/106549917
[OpenStack_Install OpenStack services]: https://docs.openstack.org/install-guide/openstack-services.html
[OpenStack Ussuri Installation Guides]: https://docs.openstack.org/ussuri/install/
[Networking service Installation Guide]: https://docs.openstack.org/neutron/ussuri/install/
[Install and configure compute node]: https://docs.openstack.org/neutron/ussuri/install/compute-install-rdo.html
[9 Openstack-Ussuri-Neutron_-centos8]: https://blog.csdn.net/caiyqn/article/details/106891352
[7.2_-Neutron]: https://blog.csdn.net/u013469753/article/details/106274493
[Link 1]: https://www.cnblogs.com/zejin2008/p/7102485.html
[9.6 _neutron agent - compute163_164]: https://blog.csdn.net/caiyqn/article/details/106891352#t5