Ubuntu16.10安装Ocata之4：Neutron-低调大师

Ubuntu16.10安装Ocata之4：Neutron

2017-11-14 500

1、创建neutorn数据库

root@controller:~/ocata# mysql -uroot -p -e "CREATE DATABASE neutron"

Enter password:

root@controller:~/ocata# mysql -uroot -p -e "GRANT ALL PRIVILEGES ON neutron.* TO 'neutron'@'localhost' IDENTIFIED BY 'zoomtech'"

Enter password:

root@controller:~/ocata# mysql -uroot -p -e "GRANT ALL PRIVILEGES ON neutron.* TO 'neutron'@'%' IDENTIFIED BY 'zoomtech'"

Enter password:

root@controller:~/ocata# mysql -uroot -p -e "show databases"

Enter password:

+--------------------+

| Database |

+--------------------+

| glance |

| information_schema |

| keystone |

| mysql |

| neutron |

| performance_schema |

+--------------------+

2、创建neutron用户

root@controller:~/ocata# openstack user create --domain default --password-prompt neutron

User Password:

Repeat User Password:

+---------------------+----------------------------------+

| Field | Value |

+---------------------+----------------------------------+

| domain_id | default |

| enabled | True |

| id | 9b061a9a70b44f789f708204a05b1ca7 |

| name | neutron |

| options | {} |

| password_expires_at | None |

+---------------------+----------------------------------+

root@controller:~/ocata# openstack role add --project service --user neutron admin

3、创建neutron服务和API端点

root@controller:~/ocata# openstack service create --name neutron \

> --description "OpenStack Networking" network

+-------------+----------------------------------+

| Field | Value |

+-------------+----------------------------------+

| description | OpenStack Networking |

| enabled | True |

| id | e93ed45e076040cf8f4270f27a774520 |

| name | neutron |

| type | network |

+-------------+----------------------------------+

root@controller:~/ocata# openstack endpoint create --region RegionOne \

> network public http://controller:9696

+--------------+----------------------------------+

| Field | Value |

+--------------+----------------------------------+

| enabled | True |

| id | adb27efba0e14dafb307f061621590e9 |

| interface | public |

| region | RegionOne |

| region_id | RegionOne |

| service_id | e93ed45e076040cf8f4270f27a774520 |

| service_name | neutron |

| service_type | network |

| url | http://controller:9696 |

+--------------+----------------------------------+

root@controller:~/ocata# openstack endpoint create --region RegionOne \

> network internal http://controller:9696

+--------------+----------------------------------+

| Field | Value |

+--------------+----------------------------------+

| enabled | True |

| id | a86afe9e4c84438489e63273384999a5 |

| interface | internal |

| region | RegionOne |

| region_id | RegionOne |

| service_id | e93ed45e076040cf8f4270f27a774520 |

| service_name | neutron |

| service_type | network |

| url | http://controller:9696 |

+--------------+----------------------------------+

root@controller:~/ocata# openstack endpoint create --region RegionOne \

> network admin http://controller:9696

+--------------+----------------------------------+

| Field | Value |

+--------------+----------------------------------+

| enabled | True |

| id | ac23ceb889ef45e4ad4e66e5caeda97f |

| interface | admin |

| region | RegionOne |

| region_id | RegionOne |

| service_id | e93ed45e076040cf8f4270f27a774520 |

| service_name | neutron |

| service_type | network |

| url | http://controller:9696 |

+--------------+----------------------------------+

4、安装neutron

root@controller:~/ocata# apt install neutron-server neutron-plugin-ml2 \

neutron-linuxbridge-agent neutron-l3-agent neutron-dhcp-agent \

neutron-metadata-agent -y

5、配置元数据

root@controller:~/ocata# vim /etc/neutron/metadata_agent.ini

nova_metadata_ip = controller

metadata_proxy_shared_secret = zoomtech

6、配置计算节点使用neutron服务

root@controller:~/ocata# vim /etc/nova/nova.conf

[neutron]

url = http://controller:9696

auth_url = http://controller:35357

auth_type = password

project_domain_name = default

user_domain_name = default

region_name = RegionOne

project_name = service

username = neutron

password = zoomtech

service_metadata_proxy = true

metadata_proxy_shared_secret = zoomtech

7、配置neutron服务

root@controller:~/ocata# vim /etc/neutron/neutron.conf

[DEFAULT]

core_plugin = ml2

service_plugins = router

allow_overlapping_ips = True

transport_url = rabbit://openstack:zoomtech@controller

auth_strategy = keystone

notify_nova_on_port_status_changes = true

notify_nova_on_port_data_changes = true

[database]

#connection = sqlite:////var/lib/neutron/neutron.sqlite

connection = mysql+pymysql://neutron:zoomtech@controller/neutron

[keystone_authtoken]

auth_uri = http://controller:5000

auth_url = http://controller:35357

memcached_servers = controller:11211

auth_type = password

project_domain_name = default

user_domain_name = default

project_name = service

username = neutron

password = zoomtech

[nova]

auth_url = http://controller:35357

auth_type = password

project_domain_name = default

user_domain_name = default

region_name = RegionOne

project_name = service

username = nova

password = zoomtech

8、配置ML2 Plug-in

root@controller:~/ocata# vim /etc/neutron/plugins/ml2/ml2_conf.ini

[ml2]

type_drivers = local,flat,vlan,gre,vxlan,geneve

tenant_network_types = vxlan

mechanism_drivers = linuxbridge,l2population

extension_drivers = port_security

[ml2_type_flat]

#flat_networks = *

flat_networks = provider

[ml2_type_vxlan]

vni_ranges = 1:1000

[securitygroup]

enable_ipset = true

9、配置Linux bridge

root@controller:~/ocata# vim /etc/neutron/plugins/ml2/linuxbridge_agent.ini

[linux_bridge]

physical_interface_mappings = provider:enp0s1

[vxlan]

enable_vxlan = true

local_ip = 10.1.1.3

l2_population = True

[securitygroup]

enable_security_group = true

firewall_driver = neutron.agent.linux.iptables_firewall.IptablesFirewallDriver

10、配置L3代理

root@controller:~/ocata# vim /etc/neutron/l3_agent.ini

[DEFAULT]

interface_driver = linuxbridge

11、配置DHCP代理

root@controller:~/ocata# vim /etc/neutron/dhcp_agent.ini

[DEFAULT]

interface_driver = linuxbridge

dhcp_driver = neutron.agent.linux.dhcp.Dnsmasq

enable_isolated_metadata = True

12、同步数据库

root@controller:~/ocata# su -s /bin/sh -c "neutron-db-manage --config-file /etc/neutron/neutron.conf \

--config-file /etc/neutron/plugins/ml2/ml2_conf.ini upgrade head" neutron

13、启动neutron相关服务

root@controller:~/ocata# service nova-api restart

root@controller:~/ocata# service neutron-server restart

root@controller:~/ocata# service neutron-linuxbridge-agent restart

root@controller:~/ocata# service neutron-dhcp-agent restart

root@controller:~/ocata# service neutron-metadata-agent restart

root@controller:~/ocata# service neutron-l3-agent restart

14、验证安装

root@controller:~/ocata# openstack service list

+----------------------------------+----------+----------+

| ID | Name | Type |

+----------------------------------+----------+----------+

| 50bab5f4ef81410eb9af71bba516c270 | keystone | identity |

| 86a9f0234e4846bdac32c10b553a41f5 | glance | image |

| e93ed45e076040cf8f4270f27a774520 | neutron | network |

+----------------------------------+----------+----------+

root@controller:~/ocata# openstack extension list --network

+---------------------------------------------------+---------------------------+---------------------------------------------------+

| Name | Alias | Description |

+---------------------------------------------------+---------------------------+---------------------------------------------------+

| Default Subnetpools | default-subnetpools | Provides ability to mark and use a subnetpool as |

| | | the default |

| Network IP Availability | network-ip-availability | Provides IP availability data for each network |

| | | and subnet. |

| Network Availability Zone | network_availability_zone | Availability zone support for network. |

| Auto Allocated Topology Services | auto-allocated-topology | Auto Allocated Topology Services. |

| Neutron L3 Configurable external gateway mode | ext-gw-mode | Extension of the router abstraction for |

| | | specifying whether SNAT should occur on the |

| | | external gateway |

| Port Binding | binding | Expose port bindings of a virtual port to |

| | | external application |

| agent | agent | The agent management extension. |

| Subnet Allocation | subnet_allocation | Enables allocation of subnets from a subnet pool |

| L3 Agent Scheduler | l3_agent_scheduler | Schedule routers among l3 agents |

| Tag support | tag | Enables to set tag on resources. |

| Neutron external network | external-net | Adds external network attribute to network |

| | | resource. |

| Neutron Service Flavors | flavors | Flavor specification for Neutron advanced |

| | | services |

| Network MTU | net-mtu | Provides MTU attribute for a network resource. |

| Availability Zone | availability_zone | The availability zone extension. |

| Quota management support | quotas | Expose functions for quotas management per tenant |

| HA Router extension | l3-ha | Add HA capability to routers. |

| Provider Network | provider | Expose mapping of virtual networks to physical |

| | | networks |

| Multi Provider Network | multi-provider | Expose mapping of virtual networks to multiple |

| | | physical networks |

| Address scope | address-scope | Address scopes extension. |

| Neutron Extra Route | extraroute | Extra routes configuration for L3 router |

| Subnet service types | subnet-service-types | Provides ability to set the subnet service_types |

| | | field |

| Resource timestamps | standard-attr-timestamp | Adds created_at and updated_at fields to all |

| | | Neutron resources that have Neutron standard |

| | | attributes. |

| Neutron Service Type Management | service-type | API for retrieving service providers for Neutron |

| | | advanced services |

| Router Flavor Extension | l3-flavors | Flavor support for routers. |

| Port Security | port-security | Provides port security |

| Neutron Extra DHCP opts | extra_dhcp_opt | Extra options configuration for DHCP. For example |

| | | PXE boot options to DHCP clients can be specified |

| | | (e.g. tftp-server, server-ip-address, bootfile- |

| | | name) |

| Resource revision numbers | standard-attr-revisions | This extension will display the revision number |

| | | of neutron resources. |

| Pagination support | pagination | Extension that indicates that pagination is |

| | | enabled. |

| Sorting support | sorting | Extension that indicates that sorting is enabled. |

| security-group | security-group | The security groups extension. |

| DHCP Agent Scheduler | dhcp_agent_scheduler | Schedule networks among dhcp agents |

| Router Availability Zone | router_availability_zone | Availability zone support for router. |

| RBAC Policies | rbac-policies | Allows creation and modification of policies that |

| | | control tenant access to resources. |

| Tag support for resources: subnet, subnetpool, | tag-ext | Extends tag support to more L2 and L3 resources. |

| port, router | | |

| standard-attr-description | standard-attr-description | Extension to add descriptions to standard |

| | | attributes |

| Neutron L3 Router | router | Router abstraction for basic L3 forwarding |

| | | between L2 Neutron networks and access to |

| | | external networks via a NAT gateway. |

| Allowed Address Pairs | allowed-address-pairs | Provides allowed address pairs |

| project_id field enabled | project-id | Extension that indicates that project_id field is |

| | | enabled. |

| Distributed Virtual Router | dvr | Enables configuration of Distributed Virtual |

| | | Routers. |

+---------------------------------------------------+---------------------------+---------------------------------------------------+

root@controller:~/ocata#

root@controller:~/ocata# openstack network agent list

+--------------------------------------+--------------------+------------+-------------------+-------+-------+---------------------------+

+--------------------------------------+--------------------+------------+-------------------+-------+-------+---------------------------+

+--------------------------------------+--------------------+------------+-------------------+-------+-------+---------------------------+

创建public网络

root@controller:~# openstack network create --share --provider-physical-network provider --provider-network-type flat --external public

+---------------------------+--------------------------------------+

| Field | Value |

+---------------------------+--------------------------------------+

| admin_state_up | UP |

| availability_zone_hints | |

| availability_zones | |

| created_at | 2017-02-28T07:47:36Z |

| description | |

| dns_domain | None |

| id | bca3dd5e-1ab7-4c83-94e8-40e3a3622984 |

| ipv4_address_scope | None |

| ipv6_address_scope | None |

| is_default | False |

| mtu | 1500 |

| name | public |

| port_security_enabled | True |

| project_id | 56d3f276e94d48ffb014a6fe5776d0e5 |

| provider:network_type | flat |

| provider:physical_network | provider |

| provider:segmentation_id | None |

| qos_policy_id | None |

| revision_number | 4 |

| router:external | External |

| segments | None |

| shared | True |

| status | ACTIVE |

| subnets | |

| updated_at | 2017-02-28T07:47:36Z |

+---------------------------+--------------------------------------+

创建public 子网

root@controller:~# openstack subnet create --network public --subnet-range 192.168.13.0/24 --gateway 192.168.13.1 --allocation-pool start=192.168.13.105,end=192.168.13.116 public-subnet

+-------------------+--------------------------------------+

| Field | Value |

+-------------------+--------------------------------------+

| allocation_pools | 192.168.13.105-192.168.13.116 |

| cidr | 192.168.13.0/24 |

| created_at | 2017-02-28T07:48:56Z |

| description | |

| dns_nameservers | |

| enable_dhcp | True |

| gateway_ip | 192.168.13.1 |

| host_routes | |

| id | e1841a5a-5261-4f0b-a733-0baac021bcd4 |

| ip_version | 4 |

| ipv6_address_mode | None |

| ipv6_ra_mode | None |

| name | public-subnet |

| network_id | bca3dd5e-1ab7-4c83-94e8-40e3a3622984 |

| project_id | 56d3f276e94d48ffb014a6fe5776d0e5 |

| revision_number | 2 |

| segment_id | None |

| service_types | |

| subnetpool_id | None |

| updated_at | 2017-02-28T07:48:56Z |

+-------------------+--------------------------------------+

创建Private内部网络和子网

root@controller:~/ocata# openstack network create private

+---------------------------+--------------------------------------+

| Field | Value |

+---------------------------+--------------------------------------+

| admin_state_up | UP |

| availability_zone_hints | |

| availability_zones | |

| created_at | 2017-02-28T09:08:46Z |

| description | |

| dns_domain | None |

| id | 01c2ac0a-a87c-4cfc-a5d9-7a82a4aadc5a |

| ipv4_address_scope | None |

| ipv6_address_scope | None |

| is_default | None |

| mtu | 1450 |

| name | private |

| port_security_enabled | True |

| project_id | 56d3f276e94d48ffb014a6fe5776d0e5 |

| provider:network_type | vxlan |

| provider:physical_network | None |

| provider:segmentation_id | 70 |

| qos_policy_id | None |

| revision_number | 3 |

| router:external | Internal |

| segments | None |

| shared | False |

| status | ACTIVE |

| subnets | |

| updated_at | 2017-02-28T09:08:46Z |

+---------------------------+--------------------------------------+

root@controller:~/ocata# openstack subnet create --network private --dns-nameserver 202.96.134.133 --gateway 10.1.1.1 --subnet-range 10.1.1.0/24 private-subnet

+-------------------+--------------------------------------+

| Field | Value |

+-------------------+--------------------------------------+

| allocation_pools | 10.1.1.2-10.1.1.254 |

| cidr | 10.1.1.0/24 |

| created_at | 2017-02-28T09:09:00Z |

| description | |

| dns_nameservers | 202.96.134.133 |

| enable_dhcp | True |

| gateway_ip | 10.1.1.1 |

| host_routes | |

| id | af296076-a12f-4d65-a5ce-2d47ba520cff |

| ip_version | 4 |

| ipv6_address_mode | None |

| ipv6_ra_mode | None |

| name | private-subnet |

| network_id | 01c2ac0a-a87c-4cfc-a5d9-7a82a4aadc5a |

| project_id | 56d3f276e94d48ffb014a6fe5776d0e5 |

| revision_number | 2 |

| segment_id | None |

| service_types | |

| subnetpool_id | None |

| updated_at | 2017-02-28T09:09:00Z |

+-------------------+--------------------------------------+

root@controller:~/ocata# openstack network list

+--------------------------------------+---------+--------------------------------------+

| ID | Name | Subnets |

+--------------------------------------+---------+--------------------------------------+

| 01c2ac0a-a87c-4cfc-a5d9-7a82a4aadc5a | private | af296076-a12f-4d65-a5ce-2d47ba520cff |

| bca3dd5e-1ab7-4c83-94e8-40e3a3622984 | public | e1841a5a-5261-4f0b-a733-0baac021bcd4 |

+--------------------------------------+---------+--------------------------------------+

本文转自 OpenStack2015 博客，原文链接： http://blog.51cto.com/andyliu/1902060 如需转载请自行联系原作者

微信关注我们

原文链接：https://yq.aliyun.com/articles/518311

转载内容版权归作者及来源网站所有！

低调大师中文资讯倾力打造互联网数据资讯、行业资源、电子商务、移动互联网、网络营销平台。持续更新报道IT业界、互联网、市场资讯、驱动更新,是最及时权威的产业资讯及硬件资讯报道平台。

使用Tempest Docker测试OpenStack

一．为什么要用Tempest Docker 笔者，从事基于OpenStack产品的QA测试工作半年多来，一直对相关测试环境的构建记忆深刻，尤其是测试环境的安装和部署。举个很简单的例子，当测试A环境的OpenStack时，需要构建好一个诸如Tempest在内的测试平台；当测试B环境的OpenStack时，又需要构建好一个同样的测试平台；亦或者要运行诸如社区那样的分布式大规模异步测试任务等。通常，为了构建这样的一个测试平台，即便是熟练者往往也需要花费30多分钟时间。通过使用Docker容器化，将Tempest独立于宿主机OS，而单独运行在容器中，可以做到系统隔离，平台复用和简单分化等高效作用。社区对OpenStack的集成测试工具采用Tempest，性能测试采用Rally。Tempest的实现基于Python的unittest2测试框架和nose测试框架。Tempest对Openstack终端发起一系列API请求，并且对终端的响应进行验证。Tempest通过config文件来描述整个测试环境，包括compute 、Keystone、Glance、Neutron等OpenStack相关服...

2017-11-15

562

最近公司的几个关键业务跑在openstack中的虚拟机中，想把几个虚拟机做成负载均衡和高可用集群。对于负载均衡，G版本已经集成了haproxy插件，对haproxy的配置做了一层封装，可以很方便的通过quantum去创建一个负载均衡池，为相同或者不同宿主机上的虚拟机提供负载均衡的能力。在这个模式下，haproxy是运行在宿主机上的。遗憾的是，目前还不能通过openstack做到haproxy的高可用。想要做高可用，只能在虚拟机中去飘VIP了但是创建了虚拟机之后，在这个虚拟机实例中只能使用指定的IP。这就导致想在虚拟机中部署高可用去飘VIP是不可行的。可以理解，在公有云环境下，是不可能让用户在虚拟机中随意去配置额外地址的。但我们是私有云环境，这个规则对私有云环境下很是麻烦。在openstack中创建虚拟机，通过nova boot的--nic选项指定网卡和IP地址： --nic net-id=${NETWORK_ID},v4-fixed-ip=${Host_IP} 之前一直以为是iptables规则导致的。于是去看了一遍宿主机中的iptables规则 root@node1...

2017-11-15

542

资源下载

更多资源

Mario

马里奥是站在游戏界顶峰的超人气多面角色。马里奥靠吃蘑菇成长，特征是大鼻子、头戴帽子、身穿背带裤，还留着胡子。与他的双胞胎兄弟路易基一起，长年担任任天堂的招牌角色。

腾讯云软件源

为解决软件依赖安装时官方源访问速度慢的问题，腾讯云为一些软件搭建了缓存服务。您可以通过使用腾讯云软件源站来提升依赖包的安装速度。为了方便用户自由搭建服务架构，目前腾讯云软件源站支持公网访问和内网访问。

Spring

Spring框架（Spring Framework）是由Rod Johnson于2002年提出的开源Java企业级应用框架，旨在通过使用JavaBean替代传统EJB实现方式降低企业级编程开发的复杂性。该框架基于简单性、可测试性和松耦合性设计理念，提供核心容器、应用上下文、数据访问集成等模块，支持整合Hibernate、Struts等第三方框架，其适用范围不仅限于服务器端开发，绝大多数Java应用均可从中受益。

Sublime Text

Sublime Text具有漂亮的用户界面和强大的功能，例如代码缩略图，Python的插件，代码段等。还可自定义键绑定，菜单和工具栏。Sublime Text 的主要功能包括：拼写检查，书签，完整的 Python API ， Goto 功能，即时项目切换，多选择，多窗口等等。Sublime Text 是一个跨平台的编辑器，同时支持Windows、Linux、Mac OS X等操作系统。