Added ML2 network node section to Neutron chapter
As part of the installation guide improvement project, I performed the following operations on the Neutron chapter: 1) Added ML2 plug-in network node section. 2) Added terms to the glossary as necessary. This patch primarily covers content. Future patches may address structure and/or appearance issues. Change-Id: I54d4a009dbc4a4569c7a0b1053720aacefbc4f80 Partial-Bug: #1291071 Implements: blueprint networking-install-guide-improvements
This commit is contained in:
Matt Kassawara
parent
773b77b419
commit
3ebc5a521c
@ -1467,6 +1467,13 @@
|
||||
</para>
|
||||
</glossdef>
|
||||
</glossentry>
|
||||
<glossentry>
|
||||
<glossterm>DHCP agent</glossterm>
|
||||
<glossdef>
|
||||
<para>OpenStack Networking agent that provides DHCP services
|
||||
for virtual networks.</para>
|
||||
</glossdef>
|
||||
</glossentry>
|
||||
<glossentry>
|
||||
<glossterm>Diablo</glossterm>
|
||||
<glossdef>
|
||||
@ -2093,6 +2100,14 @@
|
||||
passes network traffic between different networks.</para>
|
||||
</glossdef>
|
||||
</glossentry>
|
||||
<glossentry>
|
||||
<glossterm>Generic Receive Offload (GRO)</glossterm>
|
||||
<glossdef>
|
||||
<para>Feature of certain network interface drivers that
|
||||
combines many smaller received packets into a large packet
|
||||
before delivery to the kernel IP stack.</para>
|
||||
</glossdef>
|
||||
</glossentry>
|
||||
<glossentry>
|
||||
<glossterm>Generic Routing Encapsulation (GRE)</glossterm>
|
||||
<glossdef>
|
||||
@ -2797,6 +2812,13 @@
|
||||
data link layer.</para>
|
||||
</glossdef>
|
||||
</glossentry>
|
||||
<glossentry>
|
||||
<glossterm>Layer-3 (L3) agent</glossterm>
|
||||
<glossdef>
|
||||
<para>OpenStack Networking agent that provides layer-3
|
||||
(routing) services for virtual networks.</para>
|
||||
</glossdef>
|
||||
</glossentry>
|
||||
<glossentry>
|
||||
<glossterm>libvirt</glossterm>
|
||||
<glossdef>
|
||||
@ -2976,6 +2998,13 @@
|
||||
the job completes.</para>
|
||||
</glossdef>
|
||||
</glossentry>
|
||||
<glossentry>
|
||||
<glossterm>Metadata agent</glossterm>
|
||||
<glossdef>
|
||||
<para>OpenStack Networking agent that provides metadata
|
||||
services for instances.</para>
|
||||
</glossdef>
|
||||
</glossentry>
|
||||
<glossentry>
|
||||
<glossterm>Meta-Data Server (MDS)</glossterm>
|
||||
<glossdef>
|
||||
|
||||
@ -49,6 +49,7 @@
|
||||
we recommend using the Open vSwitch (OVS) plug-in.</para>
|
||||
</warning>
|
||||
<xi:include href="section_neutron-ml2-controller-node.xml"/>
|
||||
<xi:include href="section_neutron-ml2-network-node.xml"/>
|
||||
<xi:include href="section_neutron-ml2-compute-node.xml"/>
|
||||
</section>
|
||||
<xi:include href="section_neutron-initial-networks.xml"/>
|
||||
|
||||
527
doc/install-guide/section_neutron-ml2-network-node.xml
Normal file
527
doc/install-guide/section_neutron-ml2-network-node.xml
Normal file
@ -0,0 +1,527 @@
|
||||
<?xml version="1.0" encoding="UTF-8"?>
|
||||
<section xml:id="neutron-ml2-network-node"
|
||||
xmlns="http://docbook.org/ns/docbook"
|
||||
xmlns:xi="http://www.w3.org/2001/XInclude"
|
||||
xmlns:xlink="http://www.w3.org/1999/xlink"
|
||||
xmlns:svg="http://www.w3.org/2000/svg"
|
||||
xmlns:html="http://www.w3.org/1999/xhtml" version="5.0">
|
||||
<title>Configure network node</title>
|
||||
<procedure>
|
||||
<title>Prerequisites</title>
|
||||
<para>Before you configure Networking, you must enable certain kernel
|
||||
networking functions.</para>
|
||||
<step>
|
||||
<para>Edit <filename>/etc/sysctl.conf</filename> to contain the
|
||||
following:</para>
|
||||
<programlisting>net.ipv4.ip_forward=1
|
||||
net.ipv4.conf.all.rp_filter=0
|
||||
net.ipv4.conf.default.rp_filter=0</programlisting>
|
||||
</step>
|
||||
<step>
|
||||
<para>Implement the changes:</para>
|
||||
<screen><prompt>#</prompt> <userinput>sysctl -p</userinput></screen>
|
||||
</step>
|
||||
</procedure>
|
||||
<procedure>
|
||||
<title>To install the Networking components:</title>
|
||||
<step>
|
||||
<screen os="ubuntu;debian"><prompt>#</prompt> <userinput>apt-get install neutron-plugin-ml2 neutron-plugin-openvswitch-agent openvswitch-datapath-dkms \
|
||||
neutron-l3-agent neutron-dhcp-agent</userinput></screen>
|
||||
<screen os="rhel;centos;fedora"><prompt>#</prompt> <userinput>yum install openstack-neutron openstack-neutron-ml2</userinput></screen>
|
||||
<screen os="sles;opensuse"><prompt>#</prompt> <userinput>zypper install openstack-neutron-openvswitch-agent openstack-neutron-l3-agent \
|
||||
openstack-neutron-dhcp-agent openstack-neutron-metadata-agent</userinput></screen>
|
||||
<note os="ubuntu">
|
||||
<para>Ubuntu installations using Linux kernel version 3.11 or newer
|
||||
do not require the <emphasis>openvswitch-datapath-dkms</emphasis>
|
||||
package.</para>
|
||||
</note>
|
||||
<note os="sles;opensuse">
|
||||
<para>SUSE does not use a separate ML2 plug-in package.</para>
|
||||
</note>
|
||||
</step>
|
||||
</procedure>
|
||||
<procedure>
|
||||
<title>To configure the Networking common components:</title>
|
||||
<para>The Networking common component configuration includes the
|
||||
authentication mechanism, messaging service, and plug-in.</para>
|
||||
<step os="debian">
|
||||
<para>Respond to prompts for
|
||||
<link linkend="debconf-dbconfig-common">database management</link>,
|
||||
<link linkend="debconf-keystone_authtoken">Identity service
|
||||
credentials</link>,
|
||||
<link linkend="debconf-api-endpoints">service endpoint
|
||||
registration</link>, and
|
||||
<link linkend="debconf-rabbitqm">messaging service
|
||||
credentials</link>.</para>
|
||||
</step>
|
||||
<step os="rhel;centos;fedora;sles;opensuse">
|
||||
<para>Configure Networking to use the Identity service for
|
||||
authentication:</para>
|
||||
<para>Replace <replaceable>NEUTRON_PASS</replaceable> with the
|
||||
password you chose for the <literal>neutron</literal> user
|
||||
in the Identity service.</para>
|
||||
<screen><prompt>#</prompt> <userinput>openstack-config --set /etc/neutron/neutron.conf DEFAULT \
|
||||
auth_strategy keystone</userinput>
|
||||
<prompt>#</prompt> <userinput>openstack-config --set /etc/neutron/neutron.conf keystone_authtoken \
|
||||
auth_uri http://<replaceable>controller</replaceable>:5000</userinput>
|
||||
<prompt>#</prompt> <userinput>openstack-config --set /etc/neutron/neutron.conf keystone_authtoken \
|
||||
auth_host <replaceable>controller</replaceable></userinput>
|
||||
<prompt>#</prompt> <userinput>openstack-config --set /etc/neutron/neutron.conf keystone_authtoken \
|
||||
auth_protocol http</userinput>
|
||||
<prompt>#</prompt> <userinput>openstack-config --set /etc/neutron/neutron.conf keystone_authtoken \
|
||||
auth_port 35357</userinput>
|
||||
<prompt>#</prompt> <userinput>openstack-config --set /etc/neutron/neutron.conf keystone_authtoken \
|
||||
admin_tenant_name service</userinput>
|
||||
<prompt>#</prompt> <userinput>openstack-config --set /etc/neutron/neutron.conf keystone_authtoken \
|
||||
admin_user neutron</userinput>
|
||||
<prompt>#</prompt> <userinput>openstack-config --set /etc/neutron/neutron.conf keystone_authtoken \
|
||||
admin_password <replaceable>NEUTRON_PASS</replaceable></userinput></screen>
|
||||
</step>
|
||||
<step os="ubuntu">
|
||||
<para>Configure Networking to use the Identity service for
|
||||
authentication:</para>
|
||||
<substeps>
|
||||
<step>
|
||||
<para>Edit the <filename>/etc/neutron/neutron.conf</filename>
|
||||
file and add the following key to the
|
||||
<literal>[DEFAULT]</literal> section:</para>
|
||||
<programlisting language="ini">[DEFAULT]
|
||||
...
|
||||
auth_strategy = keystone</programlisting>
|
||||
<para>Add the following keys to the
|
||||
<literal>[keystone_authtoken]</literal> section:</para>
|
||||
<para>Replace <replaceable>NEUTRON_PASS</replaceable> with the
|
||||
password you chose for the <literal>neutron</literal> user
|
||||
in the Identity service.</para>
|
||||
<programlisting language="ini">[keystone_authtoken]
|
||||
...
|
||||
auth_uri = http://<replaceable>controller</replaceable>:5000
|
||||
auth_host = <replaceable>controller</replaceable>
|
||||
auth_protocol = http
|
||||
auth_port = 35357
|
||||
admin_tenant_name = service
|
||||
admin_user = neutron
|
||||
admin_password = <replaceable>NEUTRON_PASS</replaceable></programlisting>
|
||||
</step>
|
||||
</substeps>
|
||||
</step>
|
||||
<step os="sles;opensuse">
|
||||
<para>Configure Networking to use the messaging service:</para>
|
||||
<para>Replace <replaceable>RABBIT_PASS</replaceable> with the password
|
||||
you chose for the <literal>guest</literal> account in
|
||||
<application>RabbitMQ</application>.</para>
|
||||
<screen><prompt>#</prompt> <userinput>openstack-config --set /etc/neutron/neutron.conf DEFAULT \
|
||||
rpc_backend neutron.openstack.common.rpc.impl_kombu</userinput>
|
||||
<prompt>#</prompt> <userinput>openstack-config --set /etc/neutron/neutron.conf DEFAULT \
|
||||
rabbit_host <replaceable>controller</replaceable></userinput>
|
||||
<prompt>#</prompt> <userinput>openstack-config --set /etc/neutron/neutron.conf DEFAULT \
|
||||
rabbit_userid guest</userinput>
|
||||
<prompt>#</prompt> <userinput>openstack-config --set /etc/neutron/neutron.conf DEFAULT \
|
||||
rabbit_password <replaceable>RABBIT_PASS</replaceable></userinput></screen>
|
||||
</step>
|
||||
<step os="rhel;centos;fedora">
|
||||
<para>Configure Networking to use the messaging service:</para>
|
||||
<screen><prompt>#</prompt> <userinput>openstack-config --set /etc/neutron/neutron.conf DEFAULT \
|
||||
rpc_backend neutron.openstack.common.rpc.impl_qpid</userinput>
|
||||
<prompt>#</prompt> <userinput>openstack-config --set /etc/neutron/neutron.conf DEFAULT \
|
||||
qpid_hostname <replaceable>controller</replaceable></userinput>
|
||||
<prompt>#</prompt> <userinput>openstack-config --set /etc/neutron/neutron.conf DEFAULT \
|
||||
qpid_port 5672</userinput>
|
||||
<prompt>#</prompt> <userinput>openstack-config --set /etc/neutron/neutron.conf DEFAULT \
|
||||
qpid_username <replaceable>guest</replaceable></userinput>
|
||||
<prompt>#</prompt> <userinput>openstack-config --set /etc/neutron/neutron.conf DEFAULT \
|
||||
qpid_password <replaceable>guest</replaceable></userinput></screen>
|
||||
</step>
|
||||
<step os="ubuntu">
|
||||
<para>Configure Networking to use the messaging service:</para>
|
||||
<substeps>
|
||||
<step>
|
||||
<para>Edit the <filename>/etc/neutron/neutron.conf</filename> file
|
||||
and add the following keys to the <literal>[DEFAULT]</literal>
|
||||
section:</para>
|
||||
<para>Replace <replaceable>RABBIT_PASS</replaceable> with the
|
||||
password you chose for the <literal>guest</literal> account in
|
||||
<application>RabbitMQ</application>.</para>
|
||||
<programlisting language="ini">[DEFAULT]
|
||||
...
|
||||
rpc_backend = neutron.openstack.common.rpc.impl_kombu
|
||||
rabbit_host = <replaceable>controller</replaceable>
|
||||
rabbit_password = <replaceable>RABBIT_PASS</replaceable></programlisting>
|
||||
</step>
|
||||
</substeps>
|
||||
</step>
|
||||
<step os="rhel;centos;fedora;sles;opensuse">
|
||||
<para>Configure Networking to use the Modular Layer 2 (ML2) plug-in
|
||||
and associated services:</para>
|
||||
<screen><prompt>#</prompt> <userinput>openstack-config --set /etc/neutron/neutron.conf DEFAULT \
|
||||
core_plugin neutron.plugins.ml2.plugin.Ml2Plugin</userinput>
|
||||
<prompt>#</prompt> <userinput>openstack-config --set /etc/neutron/neutron.conf DEFAULT \
|
||||
service_plugins neutron.services.l3_router.l3_router_plugin.L3RouterPlugin</userinput></screen>
|
||||
<warning>
|
||||
<para>You must comment any lines in the
|
||||
<literal>[service_providers]</literal> section.</para>
|
||||
</warning>
|
||||
<note>
|
||||
<para>We recommend adding <literal>verbose = True</literal> to
|
||||
the <literal>[DEFAULT]</literal> section in
|
||||
<filename>/etc/neutron/neutron.conf</filename> to assist with
|
||||
troubleshooting.</para>
|
||||
</note>
|
||||
</step>
|
||||
<step os="ubuntu;debian">
|
||||
<para>Configure Networking to use the Modular Layer 2 (ML2) plug-in
|
||||
and associated services:</para>
|
||||
<substeps>
|
||||
<step>
|
||||
<para>Edit the <filename>/etc/neutron/neutron.conf</filename> file
|
||||
and add the following keys to the <literal>[DEFAULT]</literal>
|
||||
section:</para>
|
||||
<programlisting language="ini">[DEFAULT]
|
||||
...
|
||||
core_plugin = ml2
|
||||
service_plugins = router
|
||||
allow_overlapping_ips = True</programlisting>
|
||||
</step>
|
||||
</substeps>
|
||||
<warning>
|
||||
<para>You must comment any lines in the
|
||||
<literal>[service_providers]</literal> section.</para>
|
||||
</warning>
|
||||
<note>
|
||||
<para>We recommend adding <literal>verbose = True</literal> to
|
||||
the <literal>[DEFAULT]</literal> section in
|
||||
<filename>/etc/neutron/neutron.conf</filename> to assist with
|
||||
troubleshooting.</para>
|
||||
</note>
|
||||
</step>
|
||||
</procedure>
|
||||
<procedure>
|
||||
<title>To configure the Layer-3 (L3) agent:</title>
|
||||
<para>The <glossterm>Layer-3 (L3) agent</glossterm> provides routing
|
||||
services for instance virtual networks.</para>
|
||||
<step os="rhel;centos;fedora;sles;opensuse">
|
||||
<para>Run the following commands:</para>
|
||||
<screen><prompt>#</prompt> <userinput>openstack-config --set /etc/neutron/l3_agent.ini DEFAULT \
|
||||
interface_driver neutron.agent.linux.interface.OVSInterfaceDriver</userinput>
|
||||
<prompt>#</prompt> <userinput>openstack-config --set /etc/neutron/l3_agent.ini DEFAULT \
|
||||
use_namespaces True</userinput></screen>
|
||||
<note>
|
||||
<para>We recommend adding <literal>verbose = True</literal> to
|
||||
the <literal>[DEFAULT]</literal> section in
|
||||
<filename>/etc/neutron/l3_agent.ini</filename> to assist with
|
||||
troubleshooting.</para>
|
||||
</note>
|
||||
</step>
|
||||
<step os="ubuntu;debian">
|
||||
<para>Edit the <filename>/etc/neutron/l3_agent.ini</filename> file
|
||||
and add the following keys to the <literal>[DEFAULT]</literal>
|
||||
section:</para>
|
||||
<programlisting language="ini">[DEFAULT]
|
||||
...
|
||||
interface_driver = neutron.agent.linux.interface.OVSInterfaceDriver
|
||||
use_namespaces = True</programlisting>
|
||||
<note>
|
||||
<para>We recommend adding <literal>verbose = True</literal> to
|
||||
the <literal>[DEFAULT]</literal> section in
|
||||
<filename>/etc/neutron/l3_agent.ini</filename> to assist with
|
||||
troubleshooting.</para>
|
||||
</note>
|
||||
</step>
|
||||
</procedure>
|
||||
<procedure>
|
||||
<title>To configure the DHCP agent:</title>
|
||||
<para>The <glossterm>DHCP agent</glossterm> provides
|
||||
<glossterm>DHCP</glossterm> services for instance virtual
|
||||
networks.</para>
|
||||
<step os="rhel;centos;fedora;sles;opensuse">
|
||||
<para>Run the following commands:</para>
|
||||
<screen><prompt>#</prompt> <userinput>openstack-config --set /etc/neutron/dhcp_agent.ini DEFAULT \
|
||||
interface_driver neutron.agent.linux.interface.OVSInterfaceDriver</userinput>
|
||||
<prompt>#</prompt> <userinput>openstack-config --set /etc/neutron/dhcp_agent.ini DEFAULT \
|
||||
dhcp_driver neutron.agent.linux.dhcp.Dnsmasq</userinput>
|
||||
<prompt>#</prompt> <userinput>openstack-config --set /etc/neutron/dhcp_agent.ini DEFAULT \
|
||||
use_namespaces True</userinput></screen>
|
||||
<note>
|
||||
<para>We recommend adding <literal>verbose = True</literal> to
|
||||
the <literal>[DEFAULT]</literal> section in
|
||||
<filename>/etc/neutron/dhcp_agent.ini</filename> to assist with
|
||||
troubleshooting.</para>
|
||||
</note>
|
||||
</step>
|
||||
<step os="ubuntu;debian">
|
||||
<para>Edit the <filename>/etc/neutron/dhcp_agent.ini</filename> file
|
||||
and add the following keys to the <literal>[DEFAULT]</literal>
|
||||
section:</para>
|
||||
<programlisting language="ini">[DEFAULT]
|
||||
...
|
||||
interface_driver = neutron.agent.linux.interface.OVSInterfaceDriver
|
||||
dhcp_driver = neutron.agent.linux.dhcp.Dnsmasq
|
||||
use_namespaces = True</programlisting>
|
||||
<note>
|
||||
<para>We recommend adding <literal>verbose = True</literal> to
|
||||
the <literal>[DEFAULT]</literal> section in
|
||||
<filename>/etc/neutron/dhcp_agent.ini</filename> to assist with
|
||||
troubleshooting.</para>
|
||||
</note>
|
||||
</step>
|
||||
</procedure>
|
||||
<procedure>
|
||||
<title>To configure the metadata agent:</title>
|
||||
<para>The <glossterm>metadata agent</glossterm> provides configuration
|
||||
information such as credentials for remote access to instances.</para>
|
||||
<step os="rhel;centos;fedora;sles;opensuse">
|
||||
<para>Run the following commands:</para>
|
||||
<para>Replace <replaceable>NEUTRON_PASS</replaceable> with the
|
||||
password you chose for the <literal>neutron</literal> user
|
||||
in the Identity service. Replace
|
||||
<replaceable>METADATA_SECRET</replaceable> with a suitable
|
||||
secret for the metadata proxy.</para>
|
||||
<screen><prompt>#</prompt> <userinput>openstack-config --set /etc/neutron/metadata_agent.ini DEFAULT \
|
||||
auth_url http://<replaceable>controller</replaceable>:5000/v2.0</userinput>
|
||||
<prompt>#</prompt> <userinput>openstack-config --set /etc/neutron/metadata_agent.ini DEFAULT \
|
||||
auth_region regionOne</userinput>
|
||||
<prompt>#</prompt> <userinput>openstack-config --set /etc/neutron/metadata_agent.ini DEFAULT \
|
||||
admin_tenant_name service</userinput>
|
||||
<prompt>#</prompt> <userinput>openstack-config --set /etc/neutron/metadata_agent.ini DEFAULT \
|
||||
admin_user neutron</userinput>
|
||||
<prompt>#</prompt> <userinput>openstack-config --set /etc/neutron/metadata_agent.ini DEFAULT \
|
||||
admin_password <replaceable>NEUTRON_PASS</replaceable></userinput>
|
||||
<prompt>#</prompt> <userinput>openstack-config --set /etc/neutron/metadata_agent.ini DEFAULT \
|
||||
nova_metadata_ip <replaceable>controller</replaceable></userinput>
|
||||
<prompt>#</prompt> <userinput>openstack-config --set /etc/neutron/metadata_agent.ini DEFAULT \
|
||||
metadata_proxy_shared_secret <replaceable>METADATA_SECRET</replaceable></userinput></screen>
|
||||
<note>
|
||||
<para>We recommend adding <literal>verbose = True</literal> to
|
||||
the <literal>[DEFAULT]</literal> section in
|
||||
<filename>/etc/neutron/metadata_agent.ini</filename> to assist with
|
||||
troubleshooting.</para>
|
||||
</note>
|
||||
</step>
|
||||
<step os="ubuntu;debian">
|
||||
<para>Edit the <filename>/etc/neutron/metadata_agent.ini</filename> file
|
||||
and add the following keys to the <literal>[DEFAULT]</literal>
|
||||
section:</para>
|
||||
<para>Replace <replaceable>NEUTRON_PASS</replaceable> with the
|
||||
password you chose for the <literal>neutron</literal> user
|
||||
in the Identity service. Replace
|
||||
<replaceable>METADATA_SECRET</replaceable> with a suitable
|
||||
secret for the metadata proxy.</para>
|
||||
<programlisting language="ini">[DEFAULT]
|
||||
...
|
||||
auth_url = http://<replaceable>controller</replaceable>:5000/v2.0
|
||||
auth_region = regionOne
|
||||
admin_tenant_name = service
|
||||
admin_user = neutron
|
||||
admin_password = <replaceable>NEUTRON_PASS</replaceable>
|
||||
nova_metadata_ip = <replaceable>controller</replaceable>
|
||||
metadata_proxy_shared_secret = <replaceable>METADATA_SECRET</replaceable></programlisting>
|
||||
<note>
|
||||
<para>We recommend adding <literal>verbose = True</literal> to
|
||||
the <literal>[DEFAULT]</literal> section in
|
||||
<filename>/etc/neutron/metadata_agent.ini</filename> to assist with
|
||||
troubleshooting.</para>
|
||||
</note>
|
||||
</step>
|
||||
<step os="rhel;centos;fedora;sles;opensuse">
|
||||
<para>On the <emphasis>controller</emphasis> node, configure Compute to
|
||||
use the metadata service:</para>
|
||||
<para>Replace
|
||||
<replaceable>METADATA_SECRET</replaceable> with the secret you chose
|
||||
for the metadata proxy.</para>
|
||||
<screen><prompt>#</prompt> <userinput>openstack-config --set /etc/nova/nova.conf DEFAULT \
|
||||
service_neutron_metadata_proxy true</userinput>
|
||||
<prompt>#</prompt> <userinput>openstack-config --set /etc/nova/nova.conf DEFAULT \
|
||||
neutron_metadata_proxy_shared_secret <replaceable>METADATA_SECRET</replaceable></userinput></screen>
|
||||
</step>
|
||||
<step os="ubuntu;debian">
|
||||
<para>On the <emphasis>controller</emphasis> node, edit the
|
||||
<filename>/etc/nova/nova.conf</filename> file and add the following
|
||||
keys to the <literal>[DEFAULT]</literal> section:</para>
|
||||
<para>Replace
|
||||
<replaceable>METADATA_SECRET</replaceable> with the secret you chose
|
||||
for the metadata proxy.</para>
|
||||
<programlisting language="ini">[DEFAULT]
|
||||
...
|
||||
service_neutron_metadata_proxy = true
|
||||
neutron_metadata_proxy_shared_secret = <replaceable>METADATA_SECRET</replaceable></programlisting>
|
||||
</step>
|
||||
<step>
|
||||
<para>On the <emphasis>controller</emphasis> node, restart the Compute
|
||||
<glossterm>API</glossterm> service:</para>
|
||||
<screen os="rhel;centos;fedora;sles;opensuse"><prompt>#</prompt> <userinput>service openstack-nova-api restart</userinput></screen>
|
||||
<screen os="ubuntu;debian"><prompt>#</prompt> <userinput>service nova-api restart</userinput></screen>
|
||||
</step>
|
||||
</procedure>
|
||||
<procedure>
|
||||
<title>To configure the Modular Layer 2 (ML2) plug-in:</title>
|
||||
<para>The ML2 plug-in uses the Open vSwitch (OVS) mechanism (agent) to
|
||||
build virtual networking framework for instances.</para>
|
||||
<step os="rhel;centos;fedora;sles;opensuse">
|
||||
<para>Run the following commands:</para>
|
||||
<para>Replace
|
||||
<replaceable>INSTANCE_TUNNELS_INTERFACE_IP_ADDRESS</replaceable>
|
||||
with the IP address of the instance tunnels network interface on
|
||||
your network node.</para>
|
||||
<screen><prompt>#</prompt> <userinput>openstack-config --set /etc/neutron/plugins/ml2/ml2_conf.ini ml2 \
|
||||
type_drivers gre</userinput>
|
||||
<prompt>#</prompt> <userinput>openstack-config --set /etc/neutron/plugins/ml2/ml2_conf.ini ml2 \
|
||||
tenant_network_types gre</userinput>
|
||||
<prompt>#</prompt> <userinput>openstack-config --set /etc/neutron/plugins/ml2/ml2_conf.ini ml2 \
|
||||
mechanism_drivers openvswitch</userinput>
|
||||
<prompt>#</prompt> <userinput>openstack-config --set /etc/neutron/plugins/ml2/ml2_conf.ini ml2_type_gre \
|
||||
tunnel_id_ranges 1:1000</userinput>
|
||||
<prompt>#</prompt> <userinput>openstack-config --set /etc/neutron/plugins/ml2/ml2_conf.ini ovs \
|
||||
local_ip <replaceable>INSTANCE_TUNNELS_INTERFACE_IP_ADDRESS</replaceable></userinput>
|
||||
<prompt>#</prompt> <userinput>openstack-config --set /etc/neutron/plugins/ml2/ml2_conf.ini ovs \
|
||||
tunnel_type gre</userinput>
|
||||
<prompt>#</prompt> <userinput>openstack-config --set /etc/neutron/plugins/ml2/ml2_conf.ini ovs \
|
||||
enable_tunneling True</userinput>
|
||||
<prompt>#</prompt> <userinput>openstack-config --set /etc/neutron/plugins/ml2/ml2_conf.ini securitygroup \
|
||||
firewall_driver neutron.agent.linux.iptables_firewall.OVSHybridIptablesFirewallDriver</userinput>
|
||||
<prompt>#</prompt> <userinput>openstack-config --set /etc/neutron/plugins/ml2/ml2_conf.ini security_group \
|
||||
enable_security_group True</userinput></screen>
|
||||
</step>
|
||||
<step os="ubuntu;debian">
|
||||
<para>Edit the
|
||||
<filename>/etc/neutron/plugins/ml2/ml2_conf.ini</filename>
|
||||
file.</para>
|
||||
<para>Add the following keys to the <literal>[ml2]</literal>
|
||||
section:</para>
|
||||
<programlisting language="ini">[ml2]
|
||||
...
|
||||
type_drivers = gre
|
||||
tenant_network_types = gre
|
||||
mechanism_drivers = openvswitch</programlisting>
|
||||
<para>Add the following keys to the
|
||||
<literal>[ml2_type_gre]</literal> section:</para>
|
||||
<programlisting language="ini">[ml2_type_gre]
|
||||
...
|
||||
tunnel_id_ranges = 1:1000</programlisting>
|
||||
<para>Add the <literal>[ovs]</literal> section and the following
|
||||
keys to it:</para>
|
||||
<para>Replace
|
||||
<replaceable>INSTANCE_TUNNELS_INTERFACE_IP_ADDRESS</replaceable>
|
||||
with the IP address of the instance tunnels network interface on
|
||||
your network node.</para>
|
||||
<programlisting language="ini">[ovs]
|
||||
...
|
||||
local_ip = <replaceable>INSTANCE_TUNNELS_INTERFACE_IP_ADDRESS</replaceable>
|
||||
tunnel_type = gre
|
||||
enable_tunneling = True</programlisting>
|
||||
<para>Add the <literal>[securitygroup]</literal> section and the
|
||||
following keys to it:</para>
|
||||
<programlisting language="ini">[securitygroup]
|
||||
...
|
||||
firewall_driver=neutron.agent.linux.iptables_firewall.OVSHybridIptablesFirewallDriver</programlisting>
|
||||
<para>Add the following key to the
|
||||
<literal>[security_group]</literal> section:</para>
|
||||
<programlisting language="ini">[security_group]
|
||||
...
|
||||
enable_security_group = True</programlisting>
|
||||
</step>
|
||||
</procedure>
|
||||
<procedure>
|
||||
<title>To configure the Open vSwitch (OVS) service:</title>
|
||||
<para>The OVS service provides the underlying virtual networking framework
|
||||
for instances. The integration bridge <literal>br-int</literal> handles
|
||||
internal instance network traffic within OVS. The external bridge
|
||||
<literal>br-ext</literal> handles external instance network traffic
|
||||
within OVS. The external bridge requires a port on the physical external
|
||||
network interface to provide instances with external network access.
|
||||
In essence, this port bridges the virtual and physical external
|
||||
networks in your environment.</para>
|
||||
<step os="rhel;centos;fedora">
|
||||
<para>Start the OVS service and configure it to start when the system
|
||||
boots:</para>
|
||||
<screen><prompt>#</prompt> <userinput>service openvswitch start</userinput>
|
||||
<prompt>#</prompt> <userinput>chkconfig openvswitch on</userinput></screen>
|
||||
</step>
|
||||
<step os="sles;opensuse">
|
||||
<para>Start the OVS service and configure it to start when the system
|
||||
boots:</para>
|
||||
<screen><prompt>#</prompt> <userinput>service openvswitch-switch start</userinput>
|
||||
<prompt>#</prompt> <userinput>chkconfig openvswitch-switch on</userinput></screen>
|
||||
</step>
|
||||
<step os="ubuntu">
|
||||
<para>Restart the OVS service:</para>
|
||||
<screen><prompt>#</prompt> <userinput>service openvswitch-switch restart</userinput></screen>
|
||||
</step>
|
||||
<step os="debian">
|
||||
<para>Restart the OVS service:</para>
|
||||
<screen><prompt>#</prompt> <userinput>service openvswitch restart</userinput></screen>
|
||||
</step>
|
||||
<step>
|
||||
<para>Add the integration bridge:</para>
|
||||
<screen><prompt>#</prompt> <userinput>ovs-vsctl add-br br-int</userinput></screen>
|
||||
</step>
|
||||
<step>
|
||||
<para>Add the external bridge:</para>
|
||||
<screen><prompt>#</prompt> <userinput>ovs-vsctl add-br br-ex</userinput></screen>
|
||||
</step>
|
||||
<step>
|
||||
<para>Add a port to the external bridge that connects to the physical
|
||||
external network interface (eth2):</para>
|
||||
<screen><prompt>#</prompt> <userinput>ovs-vsctl add-port br-ex eth2</userinput></screen>
|
||||
<note>
|
||||
<para>Depending on your network interface driver, you may need to
|
||||
disable <glossterm>Generic Receive Offload (GRO)</glossterm> to
|
||||
achieve suitable throughput between your instances and the external
|
||||
network.</para>
|
||||
<para>To temporarily disable GRO on the external network interface
|
||||
while testing your environment:</para>
|
||||
<screen><prompt>#</prompt> <userinput>ethtool -K eth2 gro off</userinput></screen>
|
||||
</note>
|
||||
</step>
|
||||
</procedure>
|
||||
<procedure>
|
||||
<title>To finalize the installation:</title>
|
||||
<step os="rhel;centos;fedora">
|
||||
<para>The Networking service initialization scripts expect a symbolic
|
||||
link <filename>/etc/neutron/plugin.ini</filename> pointing to the
|
||||
configuration file associated with your chosen plug-in. Using
|
||||
ML2, for example, the symbolic link must point to
|
||||
<filename>/etc/neutron/plugins/ml2/ml2_conf.ini</filename>.
|
||||
If this symbolic link does not exist, create it using the
|
||||
following commands:</para>
|
||||
<screen><prompt>#</prompt> <userinput>cd /etc/neutron</userinput>
|
||||
<prompt>#</prompt> <userinput>ln -s plugins/ml2/ml2_conf.ini plugin.ini</userinput></screen>
|
||||
</step>
|
||||
<step os="sles;opensuse">
|
||||
<para>The Networking service initialization scripts expect the variable
|
||||
<literal>NEUTRON_PLUGIN_CONF</literal> in the
|
||||
<filename>/etc/sysconfig/neutron</filename> file to reference the
|
||||
configuration file associated with your chosen plug-in. Using
|
||||
ML2, for example, edit the
|
||||
<filename>/etc/sysconfig/neutron</filename> file and add the
|
||||
following:</para>
|
||||
<programlisting>NEUTRON_PLUGIN_CONF="/etc/neutron/plugins/ml2/ml2_conf.ini"</programlisting>
|
||||
</step>
|
||||
<step os="rhel;centos;fedora;sles;opensuse">
|
||||
<para>Start the Networking services and configure them to start when
|
||||
the system boots:</para>
|
||||
<screen os="rhel;centos;fedora"><prompt>#</prompt> <userinput>service neutron-openvswitch-agent start</userinput>
|
||||
<prompt>#</prompt> <userinput>service neutron-l3-agent start</userinput>
|
||||
<prompt>#</prompt> <userinput>service neutron-dhcp-agent start</userinput>
|
||||
<prompt>#</prompt> <userinput>service neutron-metadata-agent start</userinput>
|
||||
<prompt>#</prompt> <userinput>chkconfig neutron-openvswitch-agent on</userinput>
|
||||
<prompt>#</prompt> <userinput>chkconfig neutron-l3-agent on</userinput>
|
||||
<prompt>#</prompt> <userinput>chkconfig neutron-dhcp-agent on</userinput>
|
||||
<prompt>#</prompt> <userinput>chkconfig neutron-metadata-agent on</userinput></screen>
|
||||
<screen os="sles;opensuse"><prompt>#</prompt> <userinput>service openstack-neutron-openvswitch-agent start</userinput>
|
||||
<prompt>#</prompt> <userinput>service openstack-neutron-l3-agent start</userinput>
|
||||
<prompt>#</prompt> <userinput>service openstack-neutron-dhcp-agent start</userinput>
|
||||
<prompt>#</prompt> <userinput>service openstack-neutron-metadata-agent start</userinput>
|
||||
<prompt>#</prompt> <userinput>chkconfig openstack-neutron-openvswitch-agent on</userinput>
|
||||
<prompt>#</prompt> <userinput>chkconfig openstack-neutron-l3-agent on</userinput>
|
||||
<prompt>#</prompt> <userinput>chkconfig openstack-neutron-dhcp-agent on</userinput>
|
||||
<prompt>#</prompt> <userinput>chkconfig openstack-neutron-metadata-agent on</userinput></screen>
|
||||
</step>
|
||||
<step os="ubuntu;debian">
|
||||
<para>Restart the Networking services:</para>
|
||||
<screen><prompt>#</prompt> <userinput>service neutron-plugin-openvswitch-agent restart</userinput>
|
||||
<prompt>#</prompt> <userinput>service neutron-l3-agent restart</userinput>
|
||||
<prompt>#</prompt> <userinput>service neutron-dhcp-agent restart</userinput>
|
||||
<prompt>#</prompt> <userinput>service neutron-metadata-agent restart</userinput></screen>
|
||||
</step>
|
||||
</procedure>
|
||||
</section>
|
||||
Loading…
Reference in New Issue
Block a user