API's and implementations to support L2 Gateways in Neutron.
Go to file
Doug Hellmann e357b443ab add lower-constraints job
Create a tox environment for running the unit tests against the lower
bounds of the dependencies.

Create a lower-constraints.txt to be used to enforce the lower bounds
in those tests.

Add openstack-tox-lower-constraints job to the zuul configuration.

See http://lists.openstack.org/pipermail/openstack-dev/2018-March/128352.html
for more details.

Change-Id: I425974aa60496e635517e64ab900ec2fa66c0e12
Depends-On: https://review.openstack.org/555034
Signed-off-by: Doug Hellmann <doug@doughellmann.com>
2018-04-10 12:46:23 +00:00
contrib 'l2gw' entrypoint for Neutron service_plugins 2017-09-11 13:56:42 -06:00
debian networking-l2gw debian packaging and installation 2015-03-26 03:23:55 -07:00
devstack Change neutron service name for devstack 2018-02-27 11:08:23 -05:00
doc/source Replace Chinese quotes to English quotes 2018-02-17 14:51:21 +08:00
etc Introduce socket timeout for a blocking socket 2016-08-26 08:57:17 +00:00
networking_l2gw Update code to deal with mox removal from neutron client 2018-03-31 07:21:08 +03:00
specs New API SPEC for Border Gateway support 2016-07-19 09:40:33 +03:00
tools Avoid tox-install.sh 2018-03-14 22:01:53 +01:00
.coveragerc Remove ovsapp references form .coverage file 2016-02-19 00:10:35 -08:00
.gitignore Initial cookiecutter setup 2014-12-11 23:42:16 -08:00
.gitreview Update .gitreview file for project rename 2015-06-12 23:12:30 +00:00
.testr.conf Revert "Fix for HP 3rd Party CI failure" 2016-01-11 12:01:57 -08:00
.zuul.yaml add lower-constraints job 2018-04-10 12:46:23 +00:00
CONTRIBUTING.rst Update the documentation link for doc migration 2017-07-24 15:10:01 +08:00
HACKING.rst Update the documentation link for doc migration 2017-07-24 15:10:01 +08:00
LICENSE Initial cookiecutter setup 2014-12-11 23:42:16 -08:00
MANIFEST.in Include alembic migrations in module 2016-09-26 12:20:14 +01:00
README.rst Add Getting Started section to the README 2017-09-27 10:36:02 +00:00
babel.cfg Initial cookiecutter setup 2014-12-11 23:42:16 -08:00
lower-constraints.txt add lower-constraints job 2018-04-10 12:46:23 +00:00
openstack-common.conf Initial cookiecutter setup 2014-12-11 23:42:16 -08:00
requirements.txt Updated from global requirements 2018-03-20 14:04:56 +00:00
setup.cfg Remove bundled in-tree Tempest plugin 2017-12-18 17:23:08 +01:00
setup.py Use neutron-lib's context module 2017-03-07 02:07:03 -08:00
test-requirements.txt Testing if Sphinx 1.6.5 can be a lower requirement 2018-04-10 11:26:51 +00:00
tox.ini add lower-constraints job 2018-04-10 12:46:23 +00:00



API's and implementations to support L2 Gateways in Neutron.

L2 Gateways

This project proposes a Neutron API extension that can be used to express and manage L2 Gateway components. In the simplest terms L2 Gateways are meant to bridge two or more networks together to make them look at a single L2 broadcast domain.

Initial implementation

There are a number of use cases that can be addressed by an L2 Gateway API. Most notably in cloud computing environments, a typical use case is bridging the virtual with the physical. Translate this to Neutron and the OpenStack world, and this means relying on L2 Gateway capabilities to extend Neutron logical (overlay) networks into physical (provider) networks that are outside the OpenStack realm. These networks can be, for instance, VLAN's that may or may not be managed by OpenStack.

More information

For help using or hacking on L2GW, you can send an email to the OpenStack Development Mailing List <mailto:openstack-dev@lists.openstack.org>; please use the [L2-Gateway] Tag in the subject. Most folks involved hang out on the IRC channel #openstack-neutron.

Getting started

To get started you have to install the l2gw plugin software on the Controller node where you are already running the Neutron server. Then you need a new node, that we call the l2gw node, where you do the actual bridging between a vxlan tenant network and a physical network. The l2gw node could be a bare metal switch that supports the OVSDB schema, or a server with OVS installed. In this example we are going to use a server.

In this example the l2gw node has a ens5 interface attached to a physical segment, and a management interface with IP

ip link set up dev ens5
apt-get install openvswitch-vtep
ovsdb-tool create /etc/openvswitch/vtep.db /usr/share/openvswitch/vtep.ovsschema
ovsdb-tool create /etc/openvswitch/vswitch.db /usr/share/openvswitch/vswitch.ovsschema
ovsdb-server --pidfile --detach --log-file --remote ptcp:6632: \
             --remote punix:/var/run/openvswitch/db.sock --remote=db:hardware_vtep,Global,managers \
             /etc/openvswitch/vswitch.db /etc/openvswitch/vtep.db
ovs-vswitchd --log-file --detach --pidfile unix:/var/run/openvswitch/db.sock
ovs-vsctl add-br myphyswitch
vtep-ctl add-ps myphyswitch
vtep-ctl set Physical_Switch myphyswitch tunnel_ips=
ovs-vsctl add-port myphyswitch ens5
vtep-ctl add-port myphyswitch ens5
/usr/share/openvswitch/scripts/ovs-vtep \
             --log-file=/var/log/openvswitch/ovs-vtep.log \
             --pidfile=/var/run/openvswitch/ovs-vtep.pid \
             --detach myphyswitch

At this point your l2gw node is running.

For the configuration of the Openstack control plane you have to check three files: neutron.conf, l2gw_plugin.ini, and l2gateway_agent.ini Edit your neutron.conf on the controller node and make sure that in the service_plugins you have the string networking_l2gw.services.l2gateway.plugin.L2GatewayPlugin.

You can add it with: :

sudo sed -ri 's/^(service_plugins.*)/\1,networking_l2gw.services.l2gateway.plugin.L2GatewayPlugin/' \

Make sure the neutron-server runs with --config-file=/etc/neutron/l2gw_plugin.ini. The default for the l2gw_plugin.ini file should be okay.

Now you are ready to create the database tables for the neutron l2gw plugin using the command: neutron-db-manage upgrade heads

The file l2gateway_agent.ini is used to configure the neutron-l2gateway agent. The agent is the piece of software that will configure the l2gw node when you interact with the Openstack API. Here it is important to give the pointer to the switch. ovsdb_hosts = 'ovsdb1:'

The name ovsdb1 is just a name that will be used in the Openstack database to identify this switch.

Now that both the l2gw node and the Openstack control plane are configured, we can use the API service to bridge a VXLAN tenant network to a physical interface of the l2gw node.

First let's create in Openstack a l2-gateway object. We need to give the interface names and the name of the bridge that we used before in the OVS commands.

l2-gateway-create --device name="myphyswitch",interface_names="ens5" openstackname

Use the <GATEWAY-NAME/UUID> just created to feed the second command where you do the actual bridging between the VXLAN tenant network and the Physical L2 network.

l2-gateway-connection-create <GATEWAY-NAME/UUID> <NETWORK-NAME/UUID>

Now let's see what happened. On the l2gw node you can do the commands: :

ovs-vsctl show
vtep-ctl show

You should see some VXLAN tunnels are created. You will see a vxlan tunnel to each compute node that is hosting an instance attached to the tenant network that you bridge. If there is also a router in this tenant network, you will find a VXLAN tunnel also to the network node.