照着官网来安装openstack pike之neutron安装

neutron组件安装分为控制节点和计算节点，还是先从控制节点安装

1、前提条件，数据库为nova创建库和账户密码来连接数据库

# mysql -u root -p
MariaDB [(none)]> CREATE DATABASE neutron;
MariaDB [(none)]> GRANT ALL PRIVILEGES ON neutron.* TO 'neutron'@'localhost' IDENTIFIED BY 'neutron';
MariaDB [(none)]> GRANT ALL PRIVILEGES ON neutron.* TO 'neutron'@'%' IDENTIFIED BY 'neutron';

2、向keystone验明身份

# source admin-openrc

3、创建neutron用户：

# openstack user create --domain default --password-prompt neutron
    设定密码：neutron

将admin角色添加到neutron用户上：

# openstack role add --project service --user neutron admin

创建neutron服务实体：

# openstack service create --name neutron --description "OpenStack Networking" network

创建网络服务API endpoints：

# openstack endpoint create --region RegionOne network public http://192.168.101.10:9696
# openstack endpoint create --region RegionOne network internal http://192.168.101.10:9696
# openstack endpoint create --region RegionOne network admin http://192.168.101.10:9696

配置网络选项：

　　有两种网络选项：

　　1、provider (external) networks（供应商网络）

　　2、self-service networks（私有自助网络）

这里以provider networks作为示例演示，以后会推出第二种网络模式

开始进行安装网络组件：

# yum install openstack-neutron openstack-neutron-ml2 openstack-neutron-linuxbridge ebtables

然后进行配置数据库、认证、消息队列等信息：编辑配置文件/etc/neutron/neutron.conf

[database]
connection = mysql+pymysql://neutron:neutron@192.168.101.10/neutron

[DEFAULT]
core_plugin = ml2
service_plugins =
transport_url = rabbit://openstack:openstack@192.168.101.10
auth_strategy = keystone
notify_nova_on_port_status_changes = true
notify_nova_on_port_data_changes = true
    启用ml2插件并disable additional plug-ins

[keystone_authtoken]
auth_uri = http://192.168.101.10:5000
auth_url = http://192.168.101.10:35357
memcached_servers = 192.168.101.10:
auth_type = password
project_domain_name = default
user_domain_name = default
project_name = service
username = neutron
password = neutron

[nova]
auth_url = http://192.168.101.10:35357
auth_type = password
project_domain_name = default
user_domain_name = default
region_name = RegionOne
project_name = service
username = nova
password = nova

[oslo_concurrency]
lock_path = /var/lib/neutron/tmp

配置模块layer2 插件信息：修改配置文件/etc/neutron/plugins/ml2/ml2_conf.ini

[ml2]
type_drivers = flat,vlan
tenant_network_types =            取消self-service networks
mechanism_drivers = linuxbridge      启用Linux bridge mechanism
extension_drivers = port_security     启用the port security extension driver

[ml2_type_flat]
flat_networks = provider

[securitygroup]
enable_ipset = true

配置Linux桥接agent：修改/etc/neutron/plugins/ml2/linuxbridge_agent.ini

[linux_bridge]
physical_interface_mappings = provider:PROVIDER_INTERFACE_NAME
    Replace PROVIDER_INTERFACE_NAME with the name of the underlying provider physical network interface（底层提供商物理网络接口的名称也就是ens33）
node1的底层物理网卡设备为ens33，所以这里设置为这个

[vxlan]
enable_vxlan = false

[securitygroup]
enable_security_group = true
firewall_driver = neutron.agent.linux.iptables_firewall.IptablesFirewallDriver

配置dhcp agent：修改/etc/neutron/dhcp_agent.ini

[DEFAULT]
interface_driver = linuxbridge
dhcp_driver = neutron.agent.linux.dhcp.Dnsmasq
enable_isolated_metadata = true

上面总共修改了下面四种配置文件：

# vim /etc/neutron/neutron.conf
# vim /etc/neutron/plugins/ml2/ml2_conf.ini
# vim /etc/neutron/plugins/ml2/linuxbridge_agent.ini
# vim /etc/neutron/dhcp_agent.ini

配置完了网络服务后，然后开启配置metadata agent：

修改配置文件：/etc/neutron/metadata_agent.ini

[DEFAULT]
nova_metadata_ip = 192.168.101.10
metadata_proxy_shared_secret = METADATA_SECRET
    （使用neutron或者matadata或者其他都可以，保持和下面一直，这是自定义的密钥），这里采用neutron，Replace METADATA_SECRET with a suitable secret for the metadata proxy.

配置计算服务能够使用网络服务：修改/etc/nova/nova.conf

[neutron]
url = http://192.168.101.10:9696
auth_url = http://192.168.101.10:35357
auth_type = password
project_domain_name = default
user_domain_name = default
region_name = RegionOne
project_name = service
username = neutron
password = neutron
service_metadata_proxy = true
metadata_proxy_shared_secret = METADATA_SECRET（使用neutron或者matadata都可以，保持和上面一直），由于上面设置的neutron，这里也是neutron

进行链接：

# ln -s /etc/neutron/plugins/ml2/ml2_conf.ini /etc/neutron/plugin.ini

向数据库填充数据：

# su -s /bin/sh -c "neutron-db-manage --config-file /etc/neutron/neutron.conf --config-file /etc/neutron/plugins/ml2/ml2_conf.ini upgrade head" neutron

Restart the Compute API service:

# systemctl restart openstack-nova-api.service

开启网络服务：

# systemctl enable neutron-server.service  neutron-linuxbridge-agent.service neutron-dhcp-agent.service neutron-metadata-agent.service
# systemctl start neutron-server.service neutron-linuxbridge-agent.service neutron-dhcp-agent.service neutron-metadata-agent.service

 

2、在计算节点上安装网络服务：

1、安装组件：

# yum install openstack-neutron-linuxbridge ebtables ipset

2、配置通用组件：修改/etc/neutron/neutron.conf

[DEFAULT]
transport_url = rabbit://openstack:openstack@192.168.101.10
auth_strategy = keystone

[keystone_authtoken]
auth_uri = http://192.168.101.10:5000
auth_url = http://192.168.101.10:35357
memcached_servers = 192.168.101.10:
auth_type = password
project_domain_name = default
user_domain_name = default
project_name = service
username = neutron
password = neutron

[oslo_concurrency]
lock_path = /var/lib/neutron/tmp

和控制节点一样，配置网络服务（两种网络服务选择其中一个，以provider networks为例）

3、配置provider networks

配置桥接agent：修改文件/etc/neutron/plugins/ml2/linuxbridge_agent.ini

[linux_bridge]
physical_interface_mappings = provider:PROVIDER_INTERFACE_NAME
    Replace PROVIDER_INTERFACE_NAME with the name of the underlying provider physical network interface.（底层提供商物理网络接口的名称也就是ens33）node2的底层物理网卡设备为ens33，所以这里设置为这个

在[vxlan]配置如下：

[vxlan]
enable_vxlan = false

[securitygroup]
enable_security_group = true
firewall_driver = neutron.agent.linux.iptables_firewall.IptablesFirewallDriver

4、配置计算服务去使用网络服务：/etc/nova/nova.conf

[neutron]
url = http://192.168.101.10:9696
auth_url = http://192.168.101.10:35357
auth_type = password
project_domain_name = default
user_domain_name = default
region_name = RegionOne
project_name = service
username = neutron
password = neutron

然后重启计算服务：

# systemctl restart openstack-nova-compute.service

开启bridge agent：

# systemctl enable neutron-linuxbridge-agent.service
# systemctl start neutron-linuxbridge-agent.service

以上操作完成后，网络服务neutron就安装完成了

 

校验neutron的安装：在控制节点上执行

# source admin-openrc
    List loaded extensions to verify successful launch of the neutron-server process:

# openstack extension list --network

针对网络：provider networks的校验：

　　List agents to verify successful launch of the neutron agents:

# openstack network agent list

至此neutron基于provider networks这样的网络服务就搭建成功了

 

安装neutron修改了哪些配置文件：

控制节点：

/etc/neutron/neutron.conf
/etc/neutron/plugins/ml2/ml2_conf.ini
/etc/neutron/plugins/ml2/linuxbridge_agent.ini
/etc/neutron/dhcp_agent.ini
/etc/neutron/metadata_agent.ini
/etc/nova/nova.conf

计算节点：

/etc/neutron/neutron.conf
/etc/neutron/plugins/ml2/linuxbridge_agent.ini
/etc/nova/nova.conf