Ubuntu 20.04
Sponsored Link

OpenStack Ussuri : Neutron ネットワークを構成 (VXLAN)2020/06/05

 
OpenStack Network Service(Neutron)による仮想ネットワークの構成です。
例として、VXLAN タイプのネットワークを構成します。
事前に以下のように Control ノードNetwork ノードCompute ノードの 各 Neutron サービスノードを構築済みであることが前提です。
また、当例では Network ノードが二つのネットワークインターフェースを持っているものとします。また、下例で eth1 の方は IP なしでインターフェースを UP しています。 IP なしでのインターフェース UP の設定はこちらの [1] を参照ください
------------+---------------------------+---------------------------+------------
            |                           |                           |
        eth0|10.0.0.30              eth0|10.0.0.50              eth0|10.0.0.51
+-----------+-----------+   +-----------+-----------+   +-----------+-----------+
|    [ Control Node ]   |   |    [ Network Node ]   |   |    [ Compute Node ]   |
|                       |   |                       |   |                       |
|  MariaDB    RabbitMQ  |   |        L2 Agent       |   |        Libvirt        |
|  Memcached  httpd     |   |        L3 Agent       |   |     Nova Compute      |
|  Keystone   Glance    |   |     Metadata Agent    |   |        L2 Agent       |
|  Nova API             |   |                       |   |                       |
|  Neutron Server       |   |                       |   |                       |
|  Metadata Agent       |   |                       |   |                       |
+-----------------------+   +-----------+-----------+   +-----------------------+
                                    eth1|(UP with no IP)

[1] Control ノードで以下のように設定変更します。
root@dlp ~(keystone)#
vi /etc/neutron/plugins/ml2/ml2_conf.ini
# 155行目:[tenant_network_types] に値を追記

tenant_network_types =
vxlan
# 206行目:追記

[ml2_type_flat]
flat_networks = physnet1
# 259行目:追記

[ml2_type_vxlan]
vni_ranges = 1:1000
root@dlp ~(keystone)#
systemctl restart neutron-server

[2] Network ノードで以下のように設定変更します。
root@network:~#
vi /etc/neutron/plugins/ml2/ml2_conf.ini
# 155行目:[tenant_network_types] に値を追記

tenant_network_types =
vxlan
# 206行目:追記

[ml2_type_flat]
flat_networks = physnet1
# 259行目:追記

[ml2_type_vxlan]
vni_ranges = 1:1000
root@network:~#
vi /etc/neutron/plugins/ml2/linuxbridge_agent.ini
# 154行目:追記

[agent]
prevent_arp_spoofing = True
# 183行目:追記

[linux_bridge]
physical_interface_mappings = physnet1:eth1
# 243行目:追記

[vxlan]
enable_vxlan = True
root@network:~#
vi /etc/neutron/dhcp_agent.ini
# 85行目:追記

dnsmasq_config_file = /etc/neutron/dnsmasq-neutron.conf
root@network:~#
vi /etc/neutron/dnsmasq-neutron.conf
# 新規作成

dhcp-option-force=26,1450
root@network:~#
for service in l3-agent dhcp-agent metadata-agent linuxbridge-agent; do
systemctl restart neutron-$service
done

[3] Compute ノードで以下のように設定変更します。
root@node01:~#
vi /etc/neutron/plugins/ml2/ml2_conf.ini
# 155行目:[tenant_network_types] に値を追記

tenant_network_types =
vxlan
# 206行目:追記

[ml2_type_flat]
flat_networks = physnet1
# 259行目:追記

[ml2_type_vxlan]
vni_ranges = 1:1000
root@node01:~#
vi /etc/neutron/plugins/ml2/linuxbridge_agent.ini
# 154行目:追記

[agent]
prevent_arp_spoofing = True
# 243行目:追記

[vxlan]
enable_vxlan = True
root@node01:~#
systemctl restart neutron-linuxbridge-agent

[4] 仮想ルーターを作成します。作業場所はどこでもよいですが、当例では Control ノード上で作業します。
# 仮想ルーター作成

root@dlp ~(keystone)#
openstack router create router01

+-------------------------+-------------------------------------------------------------------------+
| Field                   | Value                                                                   |
+-------------------------+-------------------------------------------------------------------------+
| admin_state_up          | UP                                                                      |
| availability_zone_hints |                                                                         |
| availability_zones      |                                                                         |
| created_at              | 2020-06-05T00:32:00Z                                                    |
| description             |                                                                         |
| distributed             | False                                                                   |
| external_gateway_info   | null                                                                    |
| flavor_id               | None                                                                    |
| ha                      | False                                                                   |
| id                      | 350ee0a5-b1e5-4f0f-a0aa-04d9ce2c3535                                    |
| location                | cloud='', project.domain_id=, project.domain_name='default', project... |
| name                    | router01                                                                |
| project_id              | 3227cdd34d5c4d9c97eeb8f0dfdf5d0e                                        |
| revision_number         | 1                                                                       |
| routes                  |                                                                         |
| status                  | ACTIVE                                                                  |
| tags                    |                                                                         |
| updated_at              | 2020-06-05T00:32:00Z                                                    |
+-------------------------+-------------------------------------------------------------------------+

[5] 内部用のネットワークを作成し、仮想ルーターに関連付けます。
# 内部用ネットワーク作成

root@dlp ~(keystone)#
openstack network create int_net --provider-network-type vxlan

+---------------------------+-----------------------------------------------------------------------+
| Field                     | Value                                                                 |
+---------------------------+-----------------------------------------------------------------------+
| admin_state_up            | UP                                                                    |
| availability_zone_hints   |                                                                       |
| availability_zones        |                                                                       |
| created_at                | 2020-06-05T00:32:34Z                                                  |
| description               |                                                                       |
| dns_domain                | None                                                                  |
| id                        | b351e1b9-bd7c-4e3c-b5eb-848d211f4392                                  |
| ipv4_address_scope        | None                                                                  |
| ipv6_address_scope        | None                                                                  |
| is_default                | False                                                                 |
| is_vlan_transparent       | None                                                                  |
| location                  | cloud='', project.domain_id=, project.domain_name='default', proje... |
| mtu                       | 1450                                                                  |
| name                      | int_net                                                               |
| port_security_enabled     | True                                                                  |
| project_id                | 3227cdd34d5c4d9c97eeb8f0dfdf5d0e                                      |
| provider:network_type     | vxlan                                                                 |
| provider:physical_network | None                                                                  |
| provider:segmentation_id  | 1                                                                     |
| qos_policy_id             | None                                                                  |
| revision_number           | 1                                                                     |
| router:external           | Internal                                                              |
| segments                  | None                                                                  |
| shared                    | False                                                                 |
| status                    | ACTIVE                                                                |
| subnets                   |                                                                       |
| tags                      |                                                                       |
| updated_at                | 2020-06-05T00:32:34Z                                                  |
+---------------------------+-----------------------------------------------------------------------+

# 内部用ネットワークにサブネット作成

root@dlp ~(keystone)#
openstack subnet create subnet1 --network int_net \
--subnet-range 192.168.100.0/24 --gateway 192.168.100.1 \
--dns-nameserver 10.0.0.10

+----------------------+----------------------------------------------------------------------------+
| Field                | Value                                                                      |
+----------------------+----------------------------------------------------------------------------+
| allocation_pools     | 192.168.100.2-192.168.100.254                                              |
| cidr                 | 192.168.100.0/24                                                           |
| created_at           | 2020-06-05T00:33:11Z                                                       |
| description          |                                                                            |
| dns_nameservers      | 10.0.0.10                                                                  |
| dns_publish_fixed_ip | None                                                                       |
| enable_dhcp          | True                                                                       |
| gateway_ip           | 192.168.100.1                                                              |
| host_routes          |                                                                            |
| id                   | e2a461fc-9d50-4bab-913f-14067b175ea6                                       |
| ip_version           | 4                                                                          |
| ipv6_address_mode    | None                                                                       |
| ipv6_ra_mode         | None                                                                       |
| location             | cloud='', project.domain_id=, project.domain_name='default', project.id... |
| name                 | subnet1                                                                    |
| network_id           | b351e1b9-bd7c-4e3c-b5eb-848d211f4392                                       |
| prefix_length        | None                                                                       |
| project_id           | 3227cdd34d5c4d9c97eeb8f0dfdf5d0e                                           |
| revision_number      | 0                                                                          |
| segment_id           | None                                                                       |
| service_types        |                                                                            |
| subnetpool_id        | None                                                                       |
| tags                 |                                                                            |
| updated_at           | 2020-06-05T00:33:11Z                                                       |
+----------------------+----------------------------------------------------------------------------+

# 仮想ルーターに内部ネットワークを設定

root@dlp ~(keystone)#
openstack router add subnet router01 subnet1
[6] 外部接続用のネットワークを作成し、仮想ルーターに関連付けます。
# 外部用ネットワーク作成

root@dlp ~(keystone)#
openstack network create \
--provider-physical-network physnet1 \
--provider-network-type flat --external ext_net

+---------------------------+-----------------------------------------------------------------------+
| Field                     | Value                                                                 |
+---------------------------+-----------------------------------------------------------------------+
| admin_state_up            | UP                                                                    |
| availability_zone_hints   |                                                                       |
| availability_zones        |                                                                       |
| created_at                | 2020-06-05T00:34:30Z                                                  |
| description               |                                                                       |
| dns_domain                | None                                                                  |
| id                        | 1f3f1f9b-4822-4312-b5a5-51a529cd6e8a                                  |
| ipv4_address_scope        | None                                                                  |
| ipv6_address_scope        | None                                                                  |
| is_default                | False                                                                 |
| is_vlan_transparent       | None                                                                  |
| location                  | cloud='', project.domain_id=, project.domain_name='default', proje... |
| mtu                       | 1500                                                                  |
| name                      | ext_net                                                               |
| port_security_enabled     | True                                                                  |
| project_id                | 3227cdd34d5c4d9c97eeb8f0dfdf5d0e                                      |
| provider:network_type     | flat                                                                  |
| provider:physical_network | physnet1                                                              |
| provider:segmentation_id  | None                                                                  |
| qos_policy_id             | None                                                                  |
| revision_number           | 1                                                                     |
| router:external           | External                                                              |
| segments                  | None                                                                  |
| shared                    | False                                                                 |
| status                    | ACTIVE                                                                |
| subnets                   |                                                                       |
| tags                      |                                                                       |
| updated_at                | 2020-06-05T00:34:30Z                                                  |
+---------------------------+-----------------------------------------------------------------------+

# 外部用ネットワークにサブネット作成

root@dlp ~(keystone)#
openstack subnet create subnet2 \
--network ext_net --subnet-range 10.0.0.0/24 \
--allocation-pool start=10.0.0.200,end=10.0.0.254 \
--gateway 10.0.0.1 --dns-nameserver 10.0.0.10 --no-dhcp

+----------------------+----------------------------------------------------------------------------+
| Field                | Value                                                                      |
+----------------------+----------------------------------------------------------------------------+
| allocation_pools     | 10.0.0.200-10.0.0.254                                                      |
| cidr                 | 10.0.0.0/24                                                                |
| created_at           | 2020-06-05T00:35:14Z                                                       |
| description          |                                                                            |
| dns_nameservers      | 10.0.0.10                                                                  |
| dns_publish_fixed_ip | None                                                                       |
| enable_dhcp          | False                                                                      |
| gateway_ip           | 10.0.0.1                                                                   |
| host_routes          |                                                                            |
| id                   | ddfcdd10-7ecb-4239-b3d7-46fdd15a006d                                       |
| ip_version           | 4                                                                          |
| ipv6_address_mode    | None                                                                       |
| ipv6_ra_mode         | None                                                                       |
| location             | cloud='', project.domain_id=, project.domain_name='default', project.id... |
| name                 | subnet2                                                                    |
| network_id           | 1f3f1f9b-4822-4312-b5a5-51a529cd6e8a                                       |
| prefix_length        | None                                                                       |
| project_id           | 3227cdd34d5c4d9c97eeb8f0dfdf5d0e                                           |
| revision_number      | 0                                                                          |
| segment_id           | None                                                                       |
| service_types        |                                                                            |
| subnetpool_id        | None                                                                       |
| tags                 |                                                                            |
| updated_at           | 2020-06-05T00:35:14Z                                                       |
+----------------------+----------------------------------------------------------------------------+

# 仮想ルーターにゲートウェイを設定

root@dlp ~(keystone)#
openstack router set router01 --external-gateway ext_net

[7] 作成したネットワークは、外部用はデフォルトで全プロジェクトがアクセス可能ですが、内部用はデフォルトでは admin プロジェクトのみがアクセス可能なため、内部ネットワークを利用させたいプロジェクトにアクセス権限を付与しておきます。
# ネットワーク RBAC リスト表示

root@dlp ~(keystone)#
openstack network rbac list

+--------------------------------------+-------------+--------------------------------------+
| ID                                   | Object Type | Object ID                            |
+--------------------------------------+-------------+--------------------------------------+
| a4f943b9-9f14-43d0-835a-bc2a7314893e | network     | 1f3f1f9b-4822-4312-b5a5-51a529cd6e8a |
+--------------------------------------+-------------+--------------------------------------+

# RBAC の詳細

# [access_as_external] のみ全プロジェクトがアクセス可能な状態

root@dlp ~(keystone)#
openstack network rbac show a4f943b9-9f14-43d0-835a-bc2a7314893e

+-------------------+-------------------------------------------------------------------------------+
| Field             | Value                                                                         |
+-------------------+-------------------------------------------------------------------------------+
| action            | access_as_external                                                            |
| id                | a4f943b9-9f14-43d0-835a-bc2a7314893e                                          |
| location          | cloud='', project.domain_id=, project.domain_name='default', project.id='3... |
| name              | None                                                                          |
| object_id         | 1f3f1f9b-4822-4312-b5a5-51a529cd6e8a                                          |
| object_type       | network                                                                       |
| project_id        | 3227cdd34d5c4d9c97eeb8f0dfdf5d0e                                              |
| target_project_id | *                                                                             |
+-------------------+-------------------------------------------------------------------------------+

# 作成済みネットワーク一覧

root@dlp ~(keystone)#
openstack network list

+--------------------------------------+---------+--------------------------------------+
| ID                                   | Name    | Subnets                              |
+--------------------------------------+---------+--------------------------------------+
| 1f3f1f9b-4822-4312-b5a5-51a529cd6e8a | ext_net | ddfcdd10-7ecb-4239-b3d7-46fdd15a006d |
| b351e1b9-bd7c-4e3c-b5eb-848d211f4392 | int_net | e2a461fc-9d50-4bab-913f-14067b175ea6 |
+--------------------------------------+---------+--------------------------------------+

# 作成済みプロジェクト一覧

root@dlp ~(keystone)#
openstack project list

+----------------------------------+-----------+
| ID                               | Name      |
+----------------------------------+-----------+
| 3227cdd34d5c4d9c97eeb8f0dfdf5d0e | admin     |
| c0e098a54a4640caa9004fb8f500f554 | service   |
| eaa8de359ae0451d944a6401e688f730 | hiroshima |
+----------------------------------+-----------+

# [int_net] への [access_as_shared] アクセス権を [hiroshima] プロジェクトに付与

root@dlp ~(keystone)#
netID=$(openstack network list | grep int_net | awk '{ print $2 }')

root@dlp ~(keystone)#
prjID=$(openstack project list | grep hiroshima | awk '{ print $2 }')

root@dlp ~(keystone)#
openstack network rbac create --target-project $prjID --type network --action access_as_shared $netID

+-------------------+-------------------------------------------------------------------------------+
| Field             | Value                                                                         |
+-------------------+-------------------------------------------------------------------------------+
| action            | access_as_shared                                                              |
| id                | d1500292-a9a7-453d-8bea-5aab64a0dbe7                                          |
| location          | cloud='', project.domain_id=, project.domain_name='default', project.id='3... |
| name              | None                                                                          |
| object_id         | b351e1b9-bd7c-4e3c-b5eb-848d211f4392                                          |
| object_type       | network                                                                       |
| project_id        | 3227cdd34d5c4d9c97eeb8f0dfdf5d0e                                              |
| target_project_id | eaa8de359ae0451d944a6401e688f730                                              |
+-------------------+-------------------------------------------------------------------------------+
[8] 内部ネットワークへのアクセス権を付与したプロジェクトに所属する任意のユーザーでログインし、 作成した内部ネットワークをインスタンスに紐付けてインスタンスを作成・起動します。
# 利用可能な [flavor] 確認

ubuntu@dlp ~(keystone)$
openstack flavor list

+----+----------+------+------+-----------+-------+-----------+
| ID | Name     |  RAM | Disk | Ephemeral | VCPUs | Is Public |
+----+----------+------+------+-----------+-------+-----------+
| 0  | m1.small | 2048 |   10 |         0 |     1 | True      |
+----+----------+------+------+-----------+-------+-----------+

# 利用可能なイメージ確認

ubuntu@dlp ~(keystone)$
openstack image list

+--------------------------------------+------------+--------+
| ID                                   | Name       | Status |
+--------------------------------------+------------+--------+
| de51f2d9-aa58-4a34-87d6-857451599d9a | Ubuntu2004 | active |
+--------------------------------------+------------+--------+

# 利用可能なネットワーク確認

ubuntu@dlp ~(keystone)$
openstack network list

+--------------------------------------+---------+--------------------------------------+
| ID                                   | Name    | Subnets                              |
+--------------------------------------+---------+--------------------------------------+
| 1f3f1f9b-4822-4312-b5a5-51a529cd6e8a | ext_net | ddfcdd10-7ecb-4239-b3d7-46fdd15a006d |
| b351e1b9-bd7c-4e3c-b5eb-848d211f4392 | int_net | e2a461fc-9d50-4bab-913f-14067b175ea6 |
+--------------------------------------+---------+--------------------------------------+

# インスタンス用のセキュリティグループを作成

ubuntu@dlp ~(keystone)$
openstack security group create secgroup01

+-----------------+---------------------------------------------------------------------------------+
| Field           | Value                                                                           |
+-----------------+---------------------------------------------------------------------------------+
| created_at      | 2020-06-05T00:39:00Z                                                            |
| description     | secgroup01                                                                      |
| id              | 58e82471-c4e8-4505-9382-405e065fead4                                            |
| location        | cloud='', project.domain_id=, project.domain_name='default', project.id='eaa... |
| name            | secgroup01                                                                      |
| project_id      | eaa8de359ae0451d944a6401e688f730                                                |
| revision_number | 1                                                                               |
| rules           | created_at='2020-06-05T00:39:00Z', direction='egress', ethertype='IPv4', id=... |
|                 | created_at='2020-06-05T00:39:00Z', direction='egress', ethertype='IPv6', id=... |
| stateful        | True                                                                            |
| tags            | []                                                                              |
| updated_at      | 2020-06-05T00:39:00Z                                                            |
+-----------------+---------------------------------------------------------------------------------+

# インスタンス接続用の SSH キーペア作成

ubuntu@dlp ~(keystone)$
ssh-keygen -q -N ""

Enter file in which to save the key (/home/ubuntu/.ssh/id_rsa):
# 公開鍵登録

ubuntu@dlp ~(keystone)$
openstack keypair create --public-key ~/.ssh/id_rsa.pub mykey

+-------------+-------------------------------------------------+
| Field       | Value                                           |
+-------------+-------------------------------------------------+
| fingerprint | 19:6c:c0:36:01:c0:56:92:c7:1b:44:3e:cd:3b:31:77 |
| name        | mykey                                           |
| user_id     | 2a1e722c971c45d384efe048155d89c7                |
+-------------+-------------------------------------------------+

ubuntu@dlp ~(keystone)$
netID=$(openstack network list | grep int_net | awk '{ print $2 }')

ubuntu@dlp ~(keystone)$
openstack server create --flavor m1.small --image Ubuntu2004 --security-group secgroup01 --nic net-id=$netID --key-name mykey Ubuntu_2004
ubuntu@dlp ~(keystone)$
openstack server list

+--------------------------------------+-------------+--------+-------------------------+------------+----------+
| ID                                   | Name        | Status | Networks                | Image      | Flavor   |
+--------------------------------------+-------------+--------+-------------------------+------------+----------+
| 2dde6728-0e9a-4bd1-b10a-196162ec5e2a | Ubuntu_2004 | ACTIVE | int_net=192.168.100.216 | Ubuntu2004 | m1.small |
+--------------------------------------+-------------+--------+-------------------------+------------+----------+
[9] 作成した仮想マシンインスタンスにフローティングIP を割り当てます。
ubuntu@dlp ~(keystone)$
openstack floating ip create ext_net

+---------------------+-----------------------------------------------------------------------------+
| Field               | Value                                                                       |
+---------------------+-----------------------------------------------------------------------------+
| created_at          | 2020-06-05T00:41:04Z                                                        |
| description         |                                                                             |
| dns_domain          | None                                                                        |
| dns_name            | None                                                                        |
| fixed_ip_address    | None                                                                        |
| floating_ip_address | 10.0.0.210                                                                  |
| floating_network_id | 1f3f1f9b-4822-4312-b5a5-51a529cd6e8a                                        |
| id                  | 6efb1e7f-86f5-49b9-9bfa-6e52f6faab10                                        |
| location            | Munch({'cloud': '', 'region_name': '', 'zone': None, 'project': Munch({'... |
| name                | 10.0.0.210                                                                  |
| port_details        | None                                                                        |
| port_id             | None                                                                        |
| project_id          | eaa8de359ae0451d944a6401e688f730                                            |
| qos_policy_id       | None                                                                        |
| revision_number     | 0                                                                           |
| router_id           | None                                                                        |
| status              | DOWN                                                                        |
| subnet_id           | None                                                                        |
| tags                | []                                                                          |
| updated_at          | 2020-06-05T00:41:04Z                                                        |
+---------------------+-----------------------------------------------------------------------------+

ubuntu@dlp ~(keystone)$
openstack server add floating ip Ubuntu_2004 10.0.0.210

# 設定確認

ubuntu@dlp ~(keystone)$
openstack floating ip show 10.0.0.210

+---------------------+-----------------------------------------------------------------------------+
| Field               | Value                                                                       |
+---------------------+-----------------------------------------------------------------------------+
| created_at          | 2020-06-05T00:41:04Z                                                        |
| description         |                                                                             |
| dns_domain          | None                                                                        |
| dns_name            | None                                                                        |
| fixed_ip_address    | 192.168.100.216                                                             |
| floating_ip_address | 10.0.0.210                                                                  |
| floating_network_id | 1f3f1f9b-4822-4312-b5a5-51a529cd6e8a                                        |
| id                  | 6efb1e7f-86f5-49b9-9bfa-6e52f6faab10                                        |
| location            | cloud='', project.domain_id=, project.domain_name='default', project.id=... |
| name                | 10.0.0.210                                                                  |
| port_details        | admin_state_up='True', device_id='2dde6728-0e9a-4bd1-b10a-196162ec5e2a',... |
| port_id             | fe227716-408d-46e9-be92-b491bd91b73a                                        |
| project_id          | eaa8de359ae0451d944a6401e688f730                                            |
| qos_policy_id       | None                                                                        |
| revision_number     | 2                                                                           |
| router_id           | 350ee0a5-b1e5-4f0f-a0aa-04d9ce2c3535                                        |
| status              | ACTIVE                                                                      |
| subnet_id           | None                                                                        |
| tags                | []                                                                          |
| updated_at          | 2020-06-05T00:41:48Z                                                        |
+---------------------+-----------------------------------------------------------------------------+

ubuntu@dlp ~(keystone)$
openstack server list

+--------------------------------------+-------------+--------+-------------------------------------+------------+----------+
| ID                                   | Name        | Status | Networks                            | Image      | Flavor   |
+--------------------------------------+-------------+--------+-------------------------------------+------------+----------+
| 2dde6728-0e9a-4bd1-b10a-196162ec5e2a | Ubuntu_2004 | ACTIVE | int_net=192.168.100.216, 10.0.0.210 | Ubuntu2004 | m1.small |
+--------------------------------------+-------------+--------+-------------------------------------+------------+----------+
[10] 起動した仮想マシンインスタンスに SSH 接続できるように、先に作成したセキュリティグループにポート許可の設定を追加します。
# ICMP 許可

ubuntu@dlp ~(keystone)$
openstack security group rule create --protocol icmp --ingress secgroup01

+-------------------+-------------------------------------------------------------------------------+
| Field             | Value                                                                         |
+-------------------+-------------------------------------------------------------------------------+
| created_at        | 2020-06-05T00:42:55Z                                                          |
| description       |                                                                               |
| direction         | ingress                                                                       |
| ether_type        | IPv4                                                                          |
| id                | fae58faf-0f16-4259-b59e-d2b3da9dca94                                          |
| location          | cloud='', project.domain_id=, project.domain_name='default', project.id='e... |
| name              | None                                                                          |
| port_range_max    | None                                                                          |
| port_range_min    | None                                                                          |
| project_id        | eaa8de359ae0451d944a6401e688f730                                              |
| protocol          | icmp                                                                          |
| remote_group_id   | None                                                                          |
| remote_ip_prefix  | 0.0.0.0/0                                                                     |
| revision_number   | 0                                                                             |
| security_group_id | 58e82471-c4e8-4505-9382-405e065fead4                                          |
| tags              | []                                                                            |
| updated_at        | 2020-06-05T00:42:55Z                                                          |
+-------------------+-------------------------------------------------------------------------------+

# SSH 許可

ubuntu@dlp ~(keystone)$
openstack security group rule create --protocol tcp --dst-port 22:22 secgroup01

+-------------------+-------------------------------------------------------------------------------+
| Field             | Value                                                                         |
+-------------------+-------------------------------------------------------------------------------+
| created_at        | 2020-06-05T00:43:26Z                                                          |
| description       |                                                                               |
| direction         | ingress                                                                       |
| ether_type        | IPv4                                                                          |
| id                | 63219b3e-1c83-484e-a194-be491da25cd5                                          |
| location          | cloud='', project.domain_id=, project.domain_name='default', project.id='e... |
| name              | None                                                                          |
| port_range_max    | 22                                                                            |
| port_range_min    | 22                                                                            |
| project_id        | eaa8de359ae0451d944a6401e688f730                                              |
| protocol          | tcp                                                                           |
| remote_group_id   | None                                                                          |
| remote_ip_prefix  | 0.0.0.0/0                                                                     |
| revision_number   | 0                                                                             |
| security_group_id | 58e82471-c4e8-4505-9382-405e065fead4                                          |
| tags              | []                                                                            |
| updated_at        | 2020-06-05T00:43:26Z                                                          |
+-------------------+-------------------------------------------------------------------------------+

ubuntu@dlp ~(keystone)$
openstack security group rule list

+--------------------------------------+-------------+-----------+-----------+------------+-----------+
| ID                                   | IP Protocol | Ethertype | IP Range  | Port Range | Remote .. |
+--------------------------------------+-------------+-----------+-----------+------------+-----------+
| 029bb121-9e11-499f-a370-69b18988038a | None        | IPv4      | 0.0.0.0/0 |            | e83038d.. |
| 58a0034e-0989-4ad3-b89b-45976bb33523 | None        | IPv4      | 0.0.0.0/0 |            | None      |
| 5bd7ee50-2ad6-4f80-af27-d5287644dfd6 | None        | IPv6      | ::/0      |            | None      |
| 63219b3e-1c83-484e-a194-be491da25cd5 | tcp         | IPv4      | 0.0.0.0/0 | 22:22      | None      |
| 709a3076-0ee4-4c7a-b395-4a5e50b75c16 | None        | IPv6      | ::/0      |            | e83038d.. |
| a85065f8-ebc7-44ee-8f33-34735591d6c6 | None        | IPv6      | ::/0      |            | None      |
| c19f1cff-06c0-474f-972b-0aa1878fa834 | None        | IPv4      | 0.0.0.0/0 |            | None      |
| fae58faf-0f16-4259-b59e-d2b3da9dca94 | icmp        | IPv4      | 0.0.0.0/0 |            | None      |
+--------------------------------------+-------------+-----------+-----------+------------+-----------+
[11] 仮想マシンインスタンスに割りあてられたフローティング IP 宛てに SSH 接続することで、インスタンスに SSH ログインできます。
ubuntu@dlp ~(keystone)$
openstack server list

+--------------------------------------+-------------+--------+-------------------------------------+------------+----------+
| ID                                   | Name        | Status | Networks                            | Image      | Flavor   |
+--------------------------------------+-------------+--------+-------------------------------------+------------+----------+
| 2dde6728-0e9a-4bd1-b10a-196162ec5e2a | Ubuntu_2004 | ACTIVE | int_net=192.168.100.216, 10.0.0.210 | Ubuntu2004 | m1.small |
+--------------------------------------+-------------+--------+-------------------------------------+------------+----------+

ubuntu@dlp ~(keystone)$
ssh ubuntu@10.0.0.210

The authenticity of host '10.0.0.210 (10.0.0.210)' can't be established.
ECDSA key fingerprint is SHA256:kFwByzrbJUwvM4UK5yiCn/KnqvfD1P+eIr1GIygAxMg.
Are you sure you want to continue connecting (yes/no/[fingerprint])? yes
Warning: Permanently added '10.0.0.210' (ECDSA) to the list of known hosts.
Welcome to Ubuntu 20.04 LTS (GNU/Linux 5.4.0-33-generic x86_64)

 * Documentation:  https://help.ubuntu.com
 * Management:     https://landscape.canonical.com
 * Support:        https://ubuntu.com/advantage

  System information as of Fri 05 Jun 2020 09:45:04 AM JST

  System load:  0.01              Processes:             106
  Usage of /:   24.1% of 8.34GB   Users logged in:       0
  Memory usage: 7%                IPv4 address for ens3: 192.168.100.216
  Swap usage:   0%


0 updates can be installed immediately.
0 of these updates are security updates.

ubuntu@ubuntu-2004:~$     # ログインできた
関連コンテンツ