Neutron网络配置指南

1. 数据库创建与用户权限设置

mysql -u root -p CREATE DATABASE neutron;GRANT ALL PRIVILEGES ON neutron.* TO 'neutron'@'localhost' IDENTIFIED BY 'NEUTRON_DBPASS';GRANT ALL PRIVILEGES ON neutron.* TO 'neutron'@'%' IDENTIFIED BY 'NEUTRON_DBPASS';

2. 用户创建与权限管理

openstack user create --domain default --password NEUTRON_PASS neutronopenstack role add --project service --user neutron adminopenstack service create --name neutron --description "OpenStack Networking" network

3. 服务与API端点配置

openstack endpoint create --region RegionOne network public http://controller:9696openstack endpoint create --region RegionOne network internal http://controller:9696openstack endpoint create --region RegionOne network admin http://controller:9696

4. 网络服务选项

选项1：公共网络（二层网络）

使用Linuxbridge作为L2网络后端

选项2：私有网络（三层网络）

使用VXLAN实现三层网络

5. 配置文件修改

/etc/neutron/neutron.conf

[database]connection = mysql+pymysql://neutron:NEUTRON_DBPASS@controller/neutron[DEFAULT]core_plugin = ml2service_plugins = enable_ml2 = True[oslo_messaging_rabbit]rpc_backend = rabbitrabbit_host = controllerrabbit_userid = openstackrabbitrabbit_password = xxxxxxxx[keystone_authtoken]auth_strategy = keystoneauth_uri = http://controller:5000auth_url = http://controller:35357memcached_servers = controller:11211auth_type = passwordproject_domain_name = defaultuser_domain_name = defaultproject_name = serviceusername = neutronpassword = NEUTRON_PASS[DEFAULT]notify_nova_on_port_status_changes = Truenotify_nova_on_port_data_changes = True

6. ML2插件配置

/etc/neutron/plugins/ml2/ml2_conf.ini

[ml2]type_drivers = flat,vlantenant_network_types = mechanism_drivers = linuxbridgeextension_drivers = port_security[ml2_type_flat]flat_networks = provider[securitygroup]enable_ipset = True

7. Linuxbridge代理配置

/etc/neutron/plugins/ml2/linuxbridge_agent.ini

[linux_bridge]physical_interface_mappings = provider:PROVIDER_INTERFACE_NAME[vxlan]enable_vxlan = False[securitygroup]enable_security_group = Truefirewall_driver = neutron.agent.linux.iptables_firewall.IptablesFirewallDriver

8. DHCP代理配置

/etc/neutron/dhcp_agent.ini

[DEFAULT]interface_driver = neutron.agent.linux.interface.BridgeInterfaceDriverdhcp_driver = neutron.agent.linux.dhcp.Dnsmasqenable_isolated_metadata = True

9. 元数据代理配置

/etc/neutron/metadata_agent.ini

[DEFAULT]nova_metadata_ip = controllermetadata_proxy_shared_secret = METADATA_SECRET

10. 控制节点网络服务配置

/etc/nova/nova.conf

[neutron]url = http://controller:9696auth_url = http://controller:35357auth_type = passwordproject_domain_name = defaultuser_domain_name = defaultregion_name = RegionOneproject_name = serviceusername = neutronpassword = NEUTRON_PASSservice_metadata_proxy = Truemetadata_proxy_shared_secret = METADATA_SECRET