openstack-manuals/doc/install-guide/source/neutron-compute-install-option2.rst

Networking Option 2: Self-service networks

Configure the Networking components on a compute node.

Configure the Linux bridge agent

The Linux bridge agent builds layer-2 (bridging and switching) virtual networking infrastructure for instances including VXLAN tunnels for private networks and handles security groups.

1. Edit the /etc/neutron/plugins/ml2/linuxbridge_agent.ini file and complete the following actions:

   • In the [linux_bridge] section, map the public virtual network to the public physical network interface:

     [linux_bridge]
     physical_interface_mappings = public:PUBLIC_INTERFACE_NAME

     Replace PUBLIC_INTERFACE_NAME with the name of the underlying physical public network interface.

   • In the [vxlan] section, enable VXLAN overlay networks, configure the IP address of the physical network interface that handles overlay networks, and enable layer-2 population:

     [vxlan]
     enable_vxlan = True
     local_ip = OVERLAY_INTERFACE_IP_ADDRESS
     l2_population = True

     Replace OVERLAY_INTERFACE_IP_ADDRESS with the IP address of the underlying physical network interface that handles overlay networks. The example architecture uses the management interface.

   • In the [agent] section, enable ARP spoofing protection:

     [agent]
     ...
     prevent_arp_spoofing = True

   • In the [securitygroup] section, enable security groups, enable ipset, and configure the Linux bridge iptables firewall driver:

     [securitygroup]
     ...
     enable_security_group = True
     enable_ipset = True
     firewall_driver = neutron.agent.linux.iptables_firewall.IptablesFirewallDriver

Return to Networking compute node configuration <neutron-compute-compute>.