OpenStack Yoga : Neutron Network (FLAT)2022/05/31 |
|
Configure virtual networking by OpenStack Network Service (Neutron).
For example, configure FLAT type of provider networking on here.
Before it, Configure basic settings on Control Node, Network Node, Compute Node.
Furthermore, this example is based on the environment that Network Node and Compute Node have 2 network interfaces.
------------+-----------------------------+-----------------------------+------------
| | |
eth0|10.0.0.30 eth0|10.0.0.50 eth0|10.0.0.51
+-----------+-----------+ +-----------+-----------+ +-----------+-----------+
| [ dlp.srv.world ] | | [ network.srv.world ] | | [ node01.srv.world ] |
| (Control Node) | | (Network Node) | | (Compute Node) |
| | | | | |
| MariaDB RabbitMQ | | Neutron L2/L3 Agent | | Libvirt |
| Memcached httpd | | Neutron Metadata | | Nova Compute |
| Keystone Glance | | Open vSwitch | | Neutron L2 Agent |
| Nova API | | | | Open vSwitch |
| Neutron Server | | | | |
| Neutron Metadata | | | | |
+-----------------------+ +-----------+-----------+ +-----------+-----------+
eth1|(UP with no IP) eth1|(UP with no IP)
|
| [1] | Change settings like follows on both Network Node and Compute Node. |
|
# add bridge [root@network ~]# ovs-vsctl add-br br-eth1
# add [eth1] to the port of the bridge above # replace the interface name [eth1] to your own environment [root@network ~]# ovs-vsctl add-port br-eth1 eth1
[root@network ~]#
vi /etc/neutron/plugins/ml2/ml2_conf.ini # add to the end
[ml2_type_flat]
flat_networks = physnet1
[root@network ~]#
vi /etc/neutron/plugins/ml2/openvswitch_agent.ini # add to the end
[ovs]
bridge_mappings = physnet1:br-eth1 systemctl restart neutron-openvswitch-agent |
| [2] | Create network. It's OK to work on any node. (This example is on Control Node) |
|
[root@dlp ~(keystone)]#
projectID=$(openstack project list | grep service | awk '{print $2}') # create network named [sharednet1] [root@dlp ~(keystone)]# openstack network create --project $projectID \ --share --provider-network-type flat --provider-physical-network physnet1 sharednet1 +---------------------------+--------------------------------------+ | Field | Value | +---------------------------+--------------------------------------+ | admin_state_up | UP | | availability_zone_hints | | | availability_zones | | | created_at | 2022-05-31T09:39:27Z | | description | | | dns_domain | None | | id | 9b05bd89-ff99-4ed5-83ca-afe3675e55b0 | | ipv4_address_scope | None | | ipv6_address_scope | None | | is_default | False | | is_vlan_transparent | None | | mtu | 1500 | | name | sharednet1 | | port_security_enabled | True | | project_id | 8787527217494c6a87dd5a3b68dce1ef | | provider:network_type | flat | | provider:physical_network | physnet1 | | provider:segmentation_id | None | | qos_policy_id | None | | revision_number | 1 | | router:external | Internal | | segments | None | | shared | True | | status | ACTIVE | | subnets | | | tags | | | updated_at | 2022-05-31T09:39:27Z | +---------------------------+--------------------------------------+ # create subnet [10.0.0.0/24] in [sharednet1] [root@dlp ~(keystone)]# openstack subnet create subnet1 --network sharednet1 \ --project $projectID --subnet-range 10.0.0.0/24 \ --allocation-pool start=10.0.0.200,end=10.0.0.254 \ --gateway 10.0.0.1 --dns-nameserver 10.0.0.10 +----------------------+--------------------------------------+ | Field | Value | +----------------------+--------------------------------------+ | allocation_pools | 10.0.0.200-10.0.0.254 | | cidr | 10.0.0.0/24 | | created_at | 2022-05-31T09:39:53Z | | description | | | dns_nameservers | 10.0.0.10 | | dns_publish_fixed_ip | None | | enable_dhcp | True | | gateway_ip | 10.0.0.1 | | host_routes | | | id | db9a0553-0776-4f24-8e7d-aa454697dd62 | | ip_version | 4 | | ipv6_address_mode | None | | ipv6_ra_mode | None | | name | subnet1 | | network_id | 9b05bd89-ff99-4ed5-83ca-afe3675e55b0 | | project_id | 8787527217494c6a87dd5a3b68dce1ef | | revision_number | 0 | | segment_id | None | | service_types | | | subnetpool_id | None | | tags | | | updated_at | 2022-05-31T09:39:53Z | +----------------------+--------------------------------------+ # confirm settings [root@dlp ~(keystone)]# openstack network list +--------------------------------------+------------+--------------------------------------+ | ID | Name | Subnets | +--------------------------------------+------------+--------------------------------------+ | 9b05bd89-ff99-4ed5-83ca-afe3675e55b0 | sharednet1 | db9a0553-0776-4f24-8e7d-aa454697dd62 | +--------------------------------------+------------+--------------------------------------+ |
| [3] | Login with a user and Create and start a Virtual machine Instance with the network just created above. |
|
# show available [flavor] list [cent@dlp ~(keystone)]$ openstack flavor list +----+----------+------+------+-----------+-------+-----------+ | ID | Name | RAM | Disk | Ephemeral | VCPUs | Is Public | +----+----------+------+------+-----------+-------+-----------+ | 0 | m1.small | 2048 | 10 | 0 | 1 | True | +----+----------+------+------+-----------+-------+-----------+ # show available image list [cent@dlp ~(keystone)]$ openstack image list +--------------------------------------+-----------------+--------+ | ID | Name | Status | +--------------------------------------+-----------------+--------+ | 7be5b7ab-36e8-43c7-95dd-34b4139a0e44 | CentOS-Stream-8 | active | +--------------------------------------+-----------------+--------+ # show available network list [cent@dlp ~(keystone)]$ openstack network list +--------------------------------------+------------+--------------------------------------+ | ID | Name | Subnets | +--------------------------------------+------------+--------------------------------------+ | 9b05bd89-ff99-4ed5-83ca-afe3675e55b0 | sharednet1 | db9a0553-0776-4f24-8e7d-aa454697dd62 | +--------------------------------------+------------+--------------------------------------+ # create a security group for instances [cent@dlp ~(keystone)]$ openstack security group create secgroup01 +-----------------+----------------------------------------------------------------------------+ | Field | Value | +-----------------+----------------------------------------------------------------------------+ | created_at | 2022-05-31T08:14:56Z | | description | secgroup01 | | id | 001bf895-7218-4153-b64b-5c5741697009 | | name | secgroup01 | | project_id | 3d85d1e79d654b3dade01eb5bfbf0679 | | revision_number | 1 | | rules | created_at='2022-05-31T08:14:56Z', direction='egress', ethertype='IPv4'... | | | created_at='2022-05-31T08:14:56Z', direction='egress', ethertype='IPv6'... | | stateful | True | | tags | [] | | updated_at | 2022-05-31T08:14:56Z | +-----------------+----------------------------------------------------------------------------+ # create a SSH keypair for connecting to instances [cent@dlp ~(keystone)]$ ssh-keygen -q -N "" Enter file in which to save the key (/home/cent/.ssh/id_rsa): # add public-key [cent@dlp ~(keystone)]$ openstack keypair create --public-key ~/.ssh/id_rsa.pub mykey +-------------+-------------------------------------------------+ | Field | Value | +-------------+-------------------------------------------------+ | created_at | None | | fingerprint | 64:c1:46:5f:d4:dc:07:76:1c:5e:ee:b8:82:1e:9d:c3 | | id | mykey | | is_deleted | None | | name | mykey | | type | ssh | | user_id | ed0bc393ae81411fa1db0828e1d5e160 | +-------------+-------------------------------------------------+[cent@dlp ~(keystone)]$ netID=$(openstack network list | grep sharednet1 | awk '{ print $2 }')
[cent@dlp ~(keystone)]$
[cent@dlp ~(keystone)]$ openstack server create --flavor m1.small --image CentOS-Stream-8 --security-group secgroup01 --nic net-id=$netID --key-name mykey CentOS-St8
openstack server list +--------------------------------------+------------+--------+-----------------------+-----------------+----------+ | ID | Name | Status | Networks | Image | Flavor | +--------------------------------------+------------+--------+-----------------------+-----------------+----------+ | 2d5ecdf0-02c4-4f6f-979c-f8126f881425 | CentOS-St8 | ACTIVE | sharednet1=10.0.0.248 | CentOS-Stream-8 | m1.small | +--------------------------------------+------------+--------+-----------------------+-----------------+----------+ |
| [4] | Configure security settings for the security group you created above to access with SSH and ICMP. |
|
# permit ICMP [cent@dlp ~(keystone)]$ openstack security group rule create --protocol icmp --ingress secgroup01 +-------------------------+--------------------------------------+ | Field | Value | +-------------------------+--------------------------------------+ | created_at | 2022-05-31T09:42:39Z | | description | | | direction | ingress | | ether_type | IPv4 | | id | 96122e6a-c9eb-4cb6-b304-2fe0dc0b3219 | | name | None | | port_range_max | None | | port_range_min | None | | project_id | 3d85d1e79d654b3dade01eb5bfbf0679 | | protocol | icmp | | remote_address_group_id | None | | remote_group_id | None | | remote_ip_prefix | 0.0.0.0/0 | | revision_number | 0 | | security_group_id | 001bf895-7218-4153-b64b-5c5741697009 | | tags | [] | | tenant_id | 3d85d1e79d654b3dade01eb5bfbf0679 | | updated_at | 2022-05-31T09:42:39Z | +-------------------------+--------------------------------------+ # permit SSH [cent@dlp ~(keystone)]$ openstack security group rule create --protocol tcp --dst-port 22:22 secgroup01 +-------------------------+--------------------------------------+ | Field | Value | +-------------------------+--------------------------------------+ | created_at | 2022-05-31T09:42:58Z | | description | | | direction | ingress | | ether_type | IPv4 | | id | 28191a33-6e5a-487d-a7b7-cdef6f4f9dd9 | | name | None | | port_range_max | 22 | | port_range_min | 22 | | project_id | 3d85d1e79d654b3dade01eb5bfbf0679 | | protocol | tcp | | remote_address_group_id | None | | remote_group_id | None | | remote_ip_prefix | 0.0.0.0/0 | | revision_number | 0 | | security_group_id | 001bf895-7218-4153-b64b-5c5741697009 | | tags | [] | | tenant_id | 3d85d1e79d654b3dade01eb5bfbf0679 | | updated_at | 2022-05-31T09:42:58Z | +-------------------------+--------------------------------------+[cent@dlp ~(keystone)]$ openstack security group rule list secgroup01 +--------------------------------------+-------------+-----------+-----------+------------+-----------+-----------------------+----------------------+ | ID | IP Protocol | Ethertype | IP Range | Port Range | Direction | Remote Security Group | Remote Address Group | +--------------------------------------+-------------+-----------+-----------+------------+-----------+-----------------------+----------------------+ | 28191a33-6e5a-487d-a7b7-cdef6f4f9dd9 | tcp | IPv4 | 0.0.0.0/0 | 22:22 | ingress | None | None | | 7a5ce790-613c-433b-b817-75aa20a10fc1 | None | IPv4 | 0.0.0.0/0 | | egress | None | None | | 96122e6a-c9eb-4cb6-b304-2fe0dc0b3219 | icmp | IPv4 | 0.0.0.0/0 | | ingress | None | None | | cf9e12bd-90d0-4c9c-b852-12d2cd53eb91 | None | IPv6 | ::/0 | | egress | None | None | +--------------------------------------+-------------+-----------+-----------+------------+-----------+-----------------------+----------------------+ |
| [5] | Login to Instance. |
|
[cent@dlp ~(keystone)]$ ssh centos@10.0.0.248 The authenticity of host '10.0.0.248 (10.0.0.248)' can't be established. ECDSA key fingerprint is SHA256:zvqSsqh5gl9wGQ0Fj5E8KSCluDGBbz7Zwy7z9h42y3c. Are you sure you want to continue connecting (yes/no/[fingerprint])? yes Warning: Permanently added '10.0.0.248' (ECDSA) to the list of known hosts. Activate the web console with: systemctl enable --now cockpit.socket [centos@centos-st8 ~]$ # logined |
| Sponsored Link |
|
|