Ubuntu 18.04
Sponsored Link

OpenStack Rocky : Configure Neutron Network (FLAT)2018/09/17

 
Configure virtual networking by OpenStack Network Service (Neutron).
For example, configure FLAT type of provider networking on here.
Before it, Configure basic settings on Control Node, Network Node, Compute Node.
Furthermore, this example is based on the environment that Network Node and Compute Node have 2 network interfaces.
And also eth1 is up without IP Address, refer to here of [1] to up anonymous interface on Netplan.
------------+---------------------------+---------------------------+------------
            |                           |                           |
        eth0|10.0.0.30              eth0|10.0.0.50              eth0|10.0.0.51
+-----------+-----------+   +-----------+-----------+   +-----------+-----------+
|    [ Control Node ]   |   |    [ Network Node ]   |   |    [ Compute Node ]   |
|                       |   |                       |   |                       |
|  MariaDB    RabbitMQ  |   |        L2 Agent       |   |        Libvirt        |
|  Memcached  httpd     |   |        L3 Agent       |   |     Nova Compute      |
|  Keystone   Glance    |   |     Metadata Agent    |   |        L2 Agent       |
|  Nova API             |   |                       |   |                       |
|  Neutron Server       |   |                       |   |                       |
|  Metadata Agent       |   |                       |   |                       |
+-----------------------+   +-----------+-----------+   +-----------+-----------+
                                    eth1|(UP with no IP)        eth1|(UP with no IP)

[1] Change settings like follows on both Network Node and Compute Node.
root@network:~#
vi /etc/neutron/plugins/ml2/ml2_conf.ini
# line 181: add

[ml2_type_flat]
flat_networks = physnet1
root@network:~#
vi /etc/neutron/plugins/ml2/linuxbridge_agent.ini
# line 147: add

[linux_bridge]
physical_interface_mappings = physnet1:eth1
# line 208: uncomment and change

enable_vxlan =
false
root@network:~#
systemctl restart neutron-linuxbridge-agent

[2] Create network. It's OK to work on any node. (This example is on Control Node)
root@dlp ~(keystone)#
projectID=$(openstack project list | grep service | awk '{print $2}')
# create network named [sharednet1]

root@dlp ~(keystone)#
openstack network create --project $projectID \
--share --provider-network-type flat --provider-physical-network physnet1 sharednet1

Created a new network:
+---------------------------+--------------------------------------+
| Field                     | Value                                |
+---------------------------+--------------------------------------+
| admin_state_up            | UP                                   |
| availability_zone_hints   |                                      |
| availability_zones        |                                      |
| created_at                | 2018-09-13T05:29:35Z                 |
| description               |                                      |
| dns_domain                | None                                 |
| id                        | 8b581a42-d71d-432e-9131-ff8acd3155ab |
| ipv4_address_scope        | None                                 |
| ipv6_address_scope        | None                                 |
| is_default                | False                                |
| is_vlan_transparent       | None                                 |
| mtu                       | 1500                                 |
| name                      | sharednet1                           |
| port_security_enabled     | True                                 |
| project_id                | aaeee626080841a491235fb06e77f10c     |
| provider:network_type     | flat                                 |
| provider:physical_network | physnet1                             |
| provider:segmentation_id  | None                                 |
| qos_policy_id             | None                                 |
| revision_number           | 0                                    |
| router:external           | Internal                             |
| segments                  | None                                 |
| shared                    | True                                 |
| status                    | ACTIVE                               |
| subnets                   |                                      |
| tags                      |                                      |
| updated_at                | 2018-09-13T05:29:35Z                 |
+---------------------------+--------------------------------------+

# create subnet [10.0.0.0/24] in [sharednet1]

root@dlp ~(keystone)#
openstack subnet create subnet1 --network sharednet1 \
--project $projectID --subnet-range 10.0.0.0/24 \
--allocation-pool start=10.0.0.200,end=10.0.0.254 \
--gateway 10.0.0.1 --dns-nameserver 10.0.0.10

Created a new subnet:
+-------------------+--------------------------------------+
| Field             | Value                                |
+-------------------+--------------------------------------+
| allocation_pools  | 10.0.0.200-10.0.0.254                |
| cidr              | 10.0.0.0/24                          |
| created_at        | 2018-09-13T05:30:04Z                 |
| description       |                                      |
| dns_nameservers   | 10.0.0.10                            |
| enable_dhcp       | True                                 |
| gateway_ip        | 10.0.0.1                             |
| host_routes       |                                      |
| id                | 24d7c49d-a320-4737-8235-4ff6de6c1f16 |
| ip_version        | 4                                    |
| ipv6_address_mode | None                                 |
| ipv6_ra_mode      | None                                 |
| name              | subnet1                              |
| network_id        | 8b581a42-d71d-432e-9131-ff8acd3155ab |
| project_id        | aaeee626080841a491235fb06e77f10c     |
| revision_number   | 0                                    |
| segment_id        | None                                 |
| service_types     |                                      |
| subnetpool_id     | None                                 |
| tags              |                                      |
| updated_at        | 2018-09-13T05:30:04Z                 |
+-------------------+--------------------------------------+

# confirm settings

root@dlp ~(keystone)#
openstack network list

+--------------------------------------+------------+--------------------------------------+
| ID                                   | Name       | Subnets                              |
+--------------------------------------+------------+--------------------------------------+
| 8b581a42-d71d-432e-9131-ff8acd3155ab | sharednet1 | 24d7c49d-a320-4737-8235-4ff6de6c1f16 |
+--------------------------------------+------------+--------------------------------------+
[3] Create and start a Virtual machine Instance with the network just created above.
# show flavor list

ubuntu@dlp ~(keystone)$
openstack flavor list

+----+----------+------+------+-----------+-------+-----------+
| ID | Name     |  RAM | Disk | Ephemeral | VCPUs | Is Public |
+----+----------+------+------+-----------+-------+-----------+
| 0  | m1.small | 2048 |   10 |         0 |     1 | True      |
+----+----------+------+------+-----------+-------+-----------+

# show image list

ubuntu@dlp ~(keystone)$
openstack image list

+--------------------------------------+------------+--------+
| ID                                   | Name       | Status |
+--------------------------------------+------------+--------+
| 7df9e97e-96aa-45f9-8ffb-fa8685283a70 | Ubuntu1804 | active |
+--------------------------------------+------------+--------+

# show network list

ubuntu@dlp ~(keystone)$
openstack network list

+--------------------------------------+------------+--------------------------------------+
| ID                                   | Name       | Subnets                              |
+--------------------------------------+------------+--------------------------------------+
| 8b581a42-d71d-432e-9131-ff8acd3155ab | sharednet1 | 24d7c49d-a320-4737-8235-4ff6de6c1f16 |
+--------------------------------------+------------+--------------------------------------+

# create a security group for instances

ubuntu@dlp ~(keystone)$
openstack security group create secgroup01

+-----------------+-------------------------------------------------------------------------------------------------------------------------------------------------------+
| Field           | Value                                                                                                                                                 |
+-----------------+-------------------------------------------------------------------------------------------------------------------------------------------------------+
| created_at      | 2018-09-13T06:21:27Z                                                                                                                                  |
| description     | secgroup01                                                                                                                                            |
| id              | 548287ef-c443-4779-9e9a-f9d44dc0a416                                                                                                                  |
| name            | secgroup01                                                                                                                                            |
| project_id      | 5f54b0ad76274f06b13f29458cc1c036                                                                                                                      |
| revision_number | 1                                                                                                                                                     |
| rules           | created_at='2018-09-13T06:21:27Z', direction='egress', ethertype='IPv6', id='dcff779c-63c8-4135-8d69-5ecf64ab56a0', updated_at='2018-09-13T06:21:27Z' |
|                 | created_at='2018-09-13T06:21:27Z', direction='egress', ethertype='IPv4', id='de808b07-8e0b-4cc4-8cad-40447b20ee10', updated_at='2018-09-13T06:21:27Z' |
| tags            | []                                                                                                                                                    |
| updated_at      | 2018-09-13T06:21:27Z                                                                                                                                  |
+-----------------+-------------------------------------------------------------------------------------------------------------------------------------------------------+

# create a SSH keypair for connecting to instances

ubuntu@dlp ~(keystone)$
ssh-keygen -q -N ""

Enter file in which to save the key (/home/ubuntu/.ssh/id_rsa):
# add public-key

ubuntu@dlp ~(keystone)$
openstack keypair create --public-key ~/.ssh/id_rsa.pub mykey

+-------------+-------------------------------------------------+
| Field       | Value                                           |
+-------------+-------------------------------------------------+
| fingerprint | 04:d4:f6:b2:2d:6c:b4:f2:f4:63:3f:4e:8a:2a:2d:22 |
| name        | mykey                                           |
| user_id     | 54951d6863024516a19ed9bda53be12f                |
+-------------+-------------------------------------------------+

ubuntu@dlp ~(keystone)$
netID=$(openstack network list | grep sharednet1 | awk '{ print $2 }')

ubuntu@dlp ~(keystone)$
openstack server create --flavor m1.small --image Ubuntu1804 --security-group secgroup01 --nic net-id=$netID --key-name mykey Ubuntu_1804
ubuntu@dlp ~(keystone)$
openstack server list

+--------------------------------------+-------------+--------+-----------------------+------------+----------+
| ID                                   | Name        | Status | Networks              | Image      | Flavor   |
+--------------------------------------+-------------+--------+-----------------------+------------+----------+
| df5eb7cb-8d45-4bbc-ae6f-2af1e404a705 | Ubuntu_1804 | ACTIVE | sharednet1=10.0.0.210 | Ubuntu1804 | m1.small |
+--------------------------------------+-------------+--------+-----------------------+------------+----------+
[4] Configure security settings for the security group you created above to access with SSH and ICMP.
# permit ICMP

ubuntu@dlp ~(keystone)$
openstack security group rule create --protocol icmp --ingress secgroup01

+-------------------+--------------------------------------+
| Field             | Value                                |
+-------------------+--------------------------------------+
| created_at        | 2018-10-19T05:41:25Z                 |
| description       |                                      |
| direction         | ingress                              |
| ether_type        | IPv4                                 |
| id                | 1cb3d467-78af-412d-ba7b-d6328ae503fe |
| name              | None                                 |
| port_range_max    | None                                 |
| port_range_min    | None                                 |
| project_id        | 42530f21bf47470ea9283b3ff9f26b5b     |
| protocol          | icmp                                 |
| remote_group_id   | None                                 |
| remote_ip_prefix  | 0.0.0.0/0                            |
| revision_number   | 0                                    |
| security_group_id | 310c16a0-6062-46a8-b056-0326d9299aea |
| updated_at        | 2018-10-19T05:41:25Z                 |
+-------------------+--------------------------------------+

# permit SSH

ubuntu@dlp ~(keystone)$
openstack security group rule create --protocol tcp --dst-port 22:22 secgroup01

+-------------------+--------------------------------------+
| Field             | Value                                |
+-------------------+--------------------------------------+
| created_at        | 2018-10-19T05:42:10Z                 |
| description       |                                      |
| direction         | ingress                              |
| ether_type        | IPv4                                 |
| id                | 2a8aab5b-7aea-446b-bfb4-3a1622717c13 |
| name              | None                                 |
| port_range_max    | 22                                   |
| port_range_min    | 22                                   |
| project_id        | 42530f21bf47470ea9283b3ff9f26b5b     |
| protocol          | tcp                                  |
| remote_group_id   | None                                 |
| remote_ip_prefix  | 0.0.0.0/0                            |
| revision_number   | 0                                    |
| security_group_id | 310c16a0-6062-46a8-b056-0326d9299aea |
| updated_at        | 2018-10-19T05:42:10Z                 |
+-------------------+--------------------------------------+

ubuntu@dlp ~(keystone)$
openstack security group rule list

+--------------------------------------+-------------+-----------+------------+--------------------------------------+--------------------------------------+
| ID                                   | IP Protocol | IP Range  | Port Range | Remote Security Group                | Security Group                       |
+--------------------------------------+-------------+-----------+------------+--------------------------------------+--------------------------------------+
| 096c82c4-3d27-4cdf-8080-fe91890a9395 | None        | None      |            | None                                 | 4e3708dc-0b32-479c-aa16-d3ea209784ce |
| 1cb3d467-78af-412d-ba7b-d6328ae503fe | icmp        | 0.0.0.0/0 |            | None                                 | 310c16a0-6062-46a8-b056-0326d9299aea |
| 22714aa1-c856-49da-a427-ff6ff6d78036 | icmp        | 0.0.0.0/0 |            | None                                 | 4e3708dc-0b32-479c-aa16-d3ea209784ce |
| 2a8aab5b-7aea-446b-bfb4-3a1622717c13 | tcp         | 0.0.0.0/0 | 22:22      | None                                 | 310c16a0-6062-46a8-b056-0326d9299aea |
| 426cd691-af75-4c9f-9eaf-8726a5376695 | None        | None      |            | 4e3708dc-0b32-479c-aa16-d3ea209784ce | 4e3708dc-0b32-479c-aa16-d3ea209784ce |
| 55ddfd48-2bcf-4ebe-90e6-9aca55a2aff3 | None        | None      |            | None                                 | 310c16a0-6062-46a8-b056-0326d9299aea |
| 5688a833-5b5b-49a8-a02a-12ea32c7db27 | None        | None      |            | None                                 | 4e3708dc-0b32-479c-aa16-d3ea209784ce |
| 5e81e02e-1218-4545-8bb5-16f4844e63e7 | None        | None      |            | 4e3708dc-0b32-479c-aa16-d3ea209784ce | 4e3708dc-0b32-479c-aa16-d3ea209784ce |
| 7509defd-1da8-458f-a60b-701100de5c24 | None        | None      |            | None                                 | 310c16a0-6062-46a8-b056-0326d9299aea |
| b189adbe-3d00-4566-aab6-418339f2f028 | tcp         | 0.0.0.0/0 | 22:22      | None                                 | 4e3708dc-0b32-479c-aa16-d3ea209784ce |
+--------------------------------------+-------------+-----------+------------+--------------------------------------+--------------------------------------+
[5] Login to Instance.
ubuntu@dlp ~(keystone)$
ssh ubuntu@10.0.0.210

The authenticity of host '10.0.0.210 (10.0.0.210)' can't be established.
ECDSA key fingerprint is SHA256:9+uRjCfd1wMMhnl055bzIFcHYGgVx7/8zwWBmXJgfdA.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added '10.0.0.210' (ECDSA) to the list of known hosts.
Welcome to Ubuntu 18.04.1 LTS (GNU/Linux 4.15.0-34-generic x86_64)

 * Documentation:  https://help.ubuntu.com
 * Management:     https://landscape.canonical.com
 * Support:        https://ubuntu.com/advantage

  System information as of Thu Sep 13 15:24:46 JST 2018

  System load:  0.45              Processes:           89
  Usage of /:   19.7% of 8.80GB   Users logged in:     0
  Memory usage: 6%                IP address for ens3: 10.0.0.210
  Swap usage:   0%

 * Read about Ubuntu updates for L1 Terminal Fault Vulnerabilities
   (L1TF).

   - https://ubu.one/L1TF

 * Want to make a highly secure kiosk, smart display or touchscreen?
   Here's a step-by-step tutorial for a rainy weekend, or a startup.

   - https://bit.ly/secure-kiosk


3 packages can be updated.
0 updates are security updates.

ubuntu@ubuntu-1804:~$    
# just logined
Matched Content