openstack/neutron-vpnaas
Code Issues Proposed changes
neutron-vpnaas/doc/source/devref/devstack.rst
Cao Xuan Hoang ba18f8a9f8 [doc] Update for devstack configuration 
Now that VPNaaS is running under L3 agent extension.
There is no need extra steps.

Change-Id: I0f6a6dfe83f81da9d98b7ba1bd1b594eed4152e8
Related-bug: 1692131
2017-12-21 09:01:32 +07:00

1.7 KiB
Raw Blame History

Configuring VPNaaS for DevStack

Multinode vs All-In-One

Devstack typically runs in single or "All-In-One" (AIO) mode. However, it can also be deployed to run on multiple nodes. For VPNaaS, running on an AIO setup is simple, as everything happens on the same node. However, to deploy to a multinode setup requires the following things to happen:

  1. Each controller node requires database migrations in support of running VPNaaS.
  2. Each network node that would run VPNaaS L3 agent extension.

Therefore, the devstack plugin script needs some extra logic.

How to Configure

To configure VPNaaS, it is only necessary to enable the neutron-vpnaas devstack plugin by adding the following line to the local section of devstack's local.conf file:

enable_plugin neutron-vpnaas <GITURL> [BRANCH]

<GITURL> is the URL of a neutron-vpnaas repository
[BRANCH] is an optional git ref (branch/ref/tag).  The default is master.

For example::

    enable_plugin neutron-vpnaas https://git.openstack.org/openstack/neutron-vpnaas stable/kilo

The default implementation for IPSEC package under DevStack is 'strongswan'. However, depending upon the Linux distribution, you may need to override this value. Select 'libreswan' for Fedora/RHEL/CentOS:

For example, install libreswan for CentOS/RHEL 7::

    IPSEC_PACKAGE=libreswan

This VPNaaS devstack plugin code will then

  1. Install the common VPNaaS configuration and code,
  2. Apply database migrations on nodes that are running the controller (as determined by enabling the q-svc service),