OpenStack 是一个开源的云计算管理平台，由几个主要的组件组合起来完成具体工作。OpenStack 支持几乎所有类型的云环境，项目目标是提供实施简单、可大规模扩展、丰富、标准统一的云计算管理平台。OpenStack通过各种互补的服务提供了基础设施即服务（IaaS）的解决方案，每个服务提供API以进行集成。
安装 OpenStack 服务
计算服务 Nova
Nova(OpenStack Compute Service) 是架构中最核心的服务之一，用于生产虚机，对外进行提供云计算核心功能。
Nova 计算服务支持对接多种后端虚拟化技术
- XenAPI for XenServer/XCP
- libvirt for KVM or QEMU
- VMwareAPI for VMware
目前云计算提供商大部分是 KVM 及基于 KVM 开发的云计算服务。计算服务也类似 C/S 架构，因此分为两部分控制节点部分和计算节点部分。
| 类型 | 核心数 | 内存 |
|---|---|---|
| 控制节点 | 2x | 4G |
| 计算节点 | MAX | MAX |
提示：计算节点为对外提供服务的机器，因此配置推荐尽量高。
控制节点
先决条件
登陆数据库
$ mysql -u root -p创建 nova_api nova 和 nova_cell0 数据库
MariaDB [(none)]> CREATE DATABASE nova_api;
MariaDB [(none)]> CREATE DATABASE nova;
MariaDB [(none)]> CREATE DATABASE nova_cell0;创建用户并授权
MariaDB [(none)]> GRANT ALL PRIVILEGES ON nova_api.* TO 'nova'@'localhost' \
IDENTIFIED BY 'NOVA_DBPASS';
MariaDB [(none)]> GRANT ALL PRIVILEGES ON nova_api.* TO 'nova'@'%' \
IDENTIFIED BY 'NOVA_DBPASS';
MariaDB [(none)]> GRANT ALL PRIVILEGES ON nova.* TO 'nova'@'localhost' \
IDENTIFIED BY 'NOVA_DBPASS';
MariaDB [(none)]> GRANT ALL PRIVILEGES ON nova.* TO 'nova'@'%' \
IDENTIFIED BY 'NOVA_DBPASS';
MariaDB [(none)]> GRANT ALL PRIVILEGES ON nova_cell0.* TO 'nova'@'localhost' \
IDENTIFIED BY 'NOVA_DBPASS';
MariaDB [(none)]> GRANT ALL PRIVILEGES ON nova_cell0.* TO 'nova'@'%' \
IDENTIFIED BY 'NOVA_DBPASS';小贴士：替换 NOVA_DBPASS 为合适的密码。
获取 admin 令牌使用管理员专用 CLI 命令
$ . admin-openrc注册 nova 服务，创建 nova 用户
$ openstack user create --domain default --password-prompt nova
User Password:
Repeat User Password:
+---------------------+----------------------------------+
| Field | Value |
+---------------------+----------------------------------+
| domain_id | default |
| enabled | True |
| id | 8a7dbf5279404537b1c7b86c033620fe |
| name | nova |
| options | {} |
| password_expires_at | None |
+---------------------+----------------------------------+将 admin 角色添加至 nova 用户
$ openstack role add --project service --user nova admin小贴士：此命令无输出。
创建 nova 服务实例
$ openstack service create --name nova \
--description "OpenStack Compute" compute
+-------------+----------------------------------+
| Field | Value |
+-------------+----------------------------------+
| description | OpenStack Compute |
| enabled | True |
| id | 060d59eac51b4594815603d75a00aba2 |
| name | nova |
| type | compute |
+-------------+----------------------------------+创建计算 API 服务节点
$ openstack endpoint create --region RegionOne \
compute public http://controller:8774/v2.1
+--------------+-------------------------------------------+
| Field | Value |
+--------------+-------------------------------------------+
| enabled | True |
| id | 3c1caa473bfe4390a11e7177894bcc7b |
| interface | public |
| region | RegionOne |
| region_id | RegionOne |
| service_id | 060d59eac51b4594815603d75a00aba2 |
| service_name | nova |
| service_type | compute |
| url | http://controller:8774/v2.1 |
+--------------+-------------------------------------------+
$ openstack endpoint create --region RegionOne \
compute internal http://controller:8774/v2.1
+--------------+-------------------------------------------+
| Field | Value |
+--------------+-------------------------------------------+
| enabled | True |
| id | e3c918de680746a586eac1f2d9bc10ab |
| interface | internal |
| region | RegionOne |
| region_id | RegionOne |
| service_id | 060d59eac51b4594815603d75a00aba2 |
| service_name | nova |
| service_type | compute |
| url | http://controller:8774/v2.1 |
+--------------+-------------------------------------------+
$ openstack endpoint create --region RegionOne \
compute admin http://controller:8774/v2.1
+--------------+-------------------------------------------+
| Field | Value |
+--------------+-------------------------------------------+
| enabled | True |
| id | 38f7af91666a47cfb97b4dc790b94424 |
| interface | admin |
| region | RegionOne |
| region_id | RegionOne |
| service_id | 060d59eac51b4594815603d75a00aba2 |
| service_name | nova |
| service_type | compute |
| url | http://controller:8774/v2.1 |
+--------------+-------------------------------------------+安装与配置
安装服务包
# yum install openstack-nova-api openstack-nova-conductor \
openstack-nova-novncproxy openstack-nova-scheduler修改配置文件 /etc/nova/nova.conf 完成以下操作。
在 [DEFAULT] 标签下启动计算和引导 API
[DEFAULT]
# ...
enabled_apis = osapi_compute,metadata在 [api_database] 和 [database] 标签下配置数据库访问权限
[api_database]
# ...
connection = mysql+pymysql://nova:NOVA_DBPASS@controller/nova_api
[database]
# ...
connection = mysql+pymysql://nova:NOVA_DBPASS@controller/nova小贴士：替换 NOVA_DBPASS 为选择使用的数据库密码。
在 [DEFAULT] 标签下修改 RabbitMQ 消息队列访问权限
[DEFAULT]
# ...
transport_url = rabbit://openstack:RABBIT_PASS@controller小贴士：替换 RABBIT_PASS 为 RabbitMQ 中 openstack 账户。
在 [api] 和 [keystone_authtoken] 标签下修改验证服务访问权限
[api]
# ...
auth_strategy = keystone
[keystone_authtoken]
# ...
auth_url = http://controller:5000/v3
memcached_servers = controller:11211
auth_type = password
project_domain_name = Default
user_domain_name = Default
project_name = service
username = nova
password = NOVA_PASS小贴士：替换 NOVA_PASS 为 nova 用户在验证服务中的密码。
在 [DEFAULT] 标签下配置自身地址
[DEFAULT]
# ...
my_ip = 10.0.0.11在 [DEFAULT] 标签下开启网络服务支持
[DEFAULT]
# ...
use_neutron = true
firewall_driver = nova.virt.firewall.NoopFirewallDriver在 [vnc] 标签下配置 VNC 代理去使用地址连接
[vnc]
enabled = true
# ...
server_listen = $my_ip
server_proxyclient_address = $my_ip在 [glance] 标签下配置镜像服务 API
[glance]
# ...
api_servers = http://controller:9292在 [oslo_concurrency] 标签下配置锁路径
[oslo_concurrency]
# ...
lock_path = /var/lib/nova/tmp在 [placement] 标签下配置 Placement 服务
[placement]
# ...
region_name = RegionOne
project_domain_name = Default
project_name = service
auth_type = password
user_domain_name = Default
auth_url = http://controller:5000/v3
username = placement
password = PLACEMENT_PASS填充 nova-api 数据库
# su -s /bin/sh -c "nova-manage api_db sync" nova创建 cell0 数据库
# su -s /bin/sh -c "nova-manage cell_v2 map_cell0" nova创建 cell1 细胞
# su -s /bin/sh -c "nova-manage cell_v2 create_cell --name=cell1 --verbose" nova
109e1d4b-536a-40d0-83c6-5f121b82b650填充 nova 数据库
# su -s /bin/sh -c "nova-manage db sync" nova验证 nova cell0 和 cell1 注册是否正确
# su -s /bin/sh -c "nova-manage cell_v2 list_cells" nova
+-------+--------------------------------------+
| Name | UUID |
+-------+--------------------------------------+
| cell1 | 109e1d4b-536a-40d0-83c6-5f121b82b650 |
| cell0 | 00000000-0000-0000-0000-000000000000 |
+-------+--------------------------------------+启动服务并设置自启动
# systemctl enable openstack-nova-api.service \
openstack-nova-consoleauth openstack-nova-scheduler.service \
openstack-nova-conductor.service openstack-nova-novncproxy.service
# systemctl start openstack-nova-api.service \
openstack-nova-consoleauth openstack-nova-scheduler.service \
openstack-nova-conductor.service openstack-nova-novncproxy.service计算节点
安装与配置
安装计算节点包
# yum install openstack-nova-compute修改配置文件 /etc/nova/nova.conf 完成以下操作。
在 [DEFAULT] 标签下启动计算和引导 API
[DEFAULT]
# ...
enabled_apis = osapi_compute,metadata在 [DEFAULT] 标签下配置 RabbitMQ 消息队列访问权限
[DEFAULT]
# ...
transport_url = rabbit://openstack:RABBIT_PASS@controller小贴士：请替换 RABBIT_PASS 为 RabbitMQ 内的 OpenStack 账户选择的密码。
在 [api] 和 [keystone_authtoken] 标签下，配置认证服务访问权限
[api]
# ...
auth_strategy = keystone
[keystone_authtoken]
# ...
auth_url = http://controller:5000/v3
memcached_servers = controller:11211
auth_type = password
project_domain_name = Default
user_domain_name = Default
project_name = service
username = nova
password = NOVA_PASS小贴士：替换 NOVA_PASS 为在认证服务中 nova 用户选择的密码。
在 [DEFAULT] 标签中配置地址选项
[DEFAULT]
# ...
my_ip = MANAGEMENT_INTERFACE_IP_ADDRESS小贴士：替换 MANAGEMENT_INTERFACE_IP_ADDRESS 为此计算节点的地址，例如本文的网络架构下，使用 10.0.0.31 作为第一个计算节点的地址。
在 [DEFAULT] 标签中启动网络服务支持
[DEFAULT]
# ...
use_neutron = true
firewall_driver = nova.virt.firewall.NoopFirewallDriver在 [vnc] 标签下启动和配置远程控制权限
[vnc]
# ...
enabled = true
server_listen = 0.0.0.0
server_proxyclient_address = $my_ip
novncproxy_base_url = http://controller:6080/vnc_auto.html小贴士：在浏览器中访问的时候，需要替换 controller 为控制节点的实际地址，或者在本地进行 hosts 解析。
在 [glance] 标签中修改镜像服务器 API
[glance]
# ...
api_servers = http://controller:9292在 [oslo_concurrency] 标签中修改程序锁路径
[oslo_concurrency]
# ...
lock_path = /var/lib/nova/tmp在 [placement] 标签中修改 Placement API
[placement]
# ...
region_name = RegionOne
project_domain_name = Default
project_name = service
auth_type = password
user_domain_name = Default
auth_url = http://controller:5000/v3
username = placement
password = PLACEMENT_PASS小贴士：替换 PLACEMENT_PASS 为在认证服务中 placement 用户指定的密码。并注释掉此标签中的其他参数。
确定本机支持的虚拟化技术
$ egrep -c '(vmx|svm)' /proc/cpuinfo若此命令无任何返回值，则机器不支持硬件加速，则必须使用 libvirt 去使用 QEMU 代替 KVM 。
修改 [libvirt] 标签（若无返回值则进行此操作，否则忽略即可。）
[libvirt]
# ...
virt_type = qemu启动服务并设置自启动
# systemctl enable libvirtd.service openstack-nova-compute.service
# systemctl start libvirtd.service openstack-nova-compute.service注册计算节点
添加计算节点到 cell 数据库中，才能集群化管理计算节点。
获取 admin 令牌使用管理员专用 CLI 命令
$ . admin-openrc
$ openstack compute service list --service nova-compute
+----+-------+--------------+------+-------+---------+----------------------------+
| ID | Host | Binary | Zone | State | Status | Updated At |
+----+-------+--------------+------+-------+---------+----------------------------+
| 1 | node1 | nova-compute | nova | up | enabled | 2017-04-14T15:30:44.000000 |
+----+-------+--------------+------+-------+---------+----------------------------+发现计算主机
# su -s /bin/sh -c "nova-manage cell_v2 discover_hosts --verbose" nova
Found 2 cell mappings.
Skipping cell0 since it does not contain hosts.
Getting compute nodes from cell 'cell1': ad5a5985-a719-4567-98d8-8d148aaae4bc
Found 1 computes in cell: ad5a5985-a719-4567-98d8-8d148aaae4bc
Checking host mapping for compute host 'compute': fe58ddc1-1d65-4f87-9456-bc040dc106b3
Creating host mapping for compute host 'compute': fe58ddc1-1d65-4f87-9456-bc040dc106b3小贴士：当添加新的计算节点时必须在控制节点上运行
nova-manage cell_v2 discover_hosts去注册这些新的计算节点。另外必须在/etc/nova/nova.conf中设置一个适当的通信间隔参数。[scheduler] discover_hosts_in_cells_interval = 300
验证操作
获取 admin 令牌使用管理员专用 CLI 命令
$ . admin-openrc列出全部的服务组件来验证每个进程的启动和注册是否正常
$ openstack compute service list
+----+--------------------+------------+----------+---------+-------+----------------------------+
| Id | Binary | Host | Zone | Status | State | Updated At |
+----+--------------------+------------+----------+---------+-------+----------------------------+
| 1 | nova-scheduler | controller | internal | enabled | up | 2016-02-09T23:11:15.000000 |
| 2 | nova-conductor | controller | internal | enabled | up | 2016-02-09T23:11:16.000000 |
| 3 | nova-compute | compute1 | nova | enabled | up | 2016-02-09T23:11:20.000000 |
+----+--------------------+------------+----------+---------+-------+----------------------------+小贴士：此命令正常会显示出两个控制节点的服务和计算节点的上的一个服务。
列出验证服务中的 API Endpoints 以验证验证服务是否正常
$ openstack catalog list
+-----------+-----------+-----------------------------------------+
| Name | Type | Endpoints |
+-----------+-----------+-----------------------------------------+
| keystone | identity | RegionOne |
| | | public: http://controller:5000/v3/ |
| | | RegionOne |
| | | internal: http://controller:5000/v3/ |
| | | RegionOne |
| | | admin: http://controller:5000/v3/ |
| | | |
| glance | image | RegionOne |
| | | admin: http://controller:9292 |
| | | RegionOne |
| | | public: http://controller:9292 |
| | | RegionOne |
| | | internal: http://controller:9292 |
| | | |
| nova | compute | RegionOne |
| | | admin: http://controller:8774/v2.1 |
| | | RegionOne |
| | | internal: http://controller:8774/v2.1 |
| | | RegionOne |
| | | public: http://controller:8774/v2.1 |
| | | |
| placement | placement | RegionOne |
| | | public: http://controller:8778 |
| | | RegionOne |
| | | admin: http://controller:8778 |
| | | RegionOne |
| | | internal: http://controller:8778 |
| | | |
+-----------+-----------+-----------------------------------------+小贴士：此 Endpoints 中的项目因 OpenStack 组件的不同可能存在一定差异。
列出镜像服务中的镜像以验证与镜像服务连接是否正常
$ openstack image list
+--------------------------------------+-------------+-------------+
| ID | Name | Status |
+--------------------------------------+-------------+-------------+
| 9a76d9f9-9620-4f2e-8c69-6c5691fae163 | cirros | active |
+--------------------------------------+-------------+-------------+检查 cells 和 placement API 是否正常工作
# nova-status upgrade check
+--------------------------------------------------------------------+
| Upgrade Check Results |
+--------------------------------------------------------------------+
| Check: Cells v2 |
| Result: Success |
| Details: None |
+--------------------------------------------------------------------+
| Check: Placement API |
| Result: Success |
| Details: None |
+--------------------------------------------------------------------+
| Check: Ironic Flavor Migration |
| Result: Success |
| Details: None |
+--------------------------------------------------------------------+
| Check: Request Spec Migration |
| Result: Success |
| Details: None |
+--------------------------------------------------------------------+
| Check: Console Auths |
| Result: Success |
| Details: None |
+--------------------------------------------------------------------+网络服务 Neutron
Neutron(OpenStack Networking Service) 是 OpenStack 中最核心的服务之一，在 OpenStack 中管理虚拟网络基础架构（NVI）的所有网络方面以及物理网络基础架构（PNI）的访问层方面。Neutron 使项目能够创建高级虚拟网络拓扑，比如防火墙、负载均衡器和虚拟专用网络（VPN）等服务。
控制节点
先决条件
连接数据库
$ mysql -u root -p创建 neutron 数据库
MariaDB [(none)] CREATE DATABASE neutron;创建用户为数据库授权
MariaDB [(none)]> GRANT ALL PRIVILEGES ON neutron.* TO 'neutron'@'localhost' \
IDENTIFIED BY 'NEUTRON_DBPASS';
MariaDB [(none)]> GRANT ALL PRIVILEGES ON neutron.* TO 'neutron'@'%' \
IDENTIFIED BY 'NEUTRON_DBPASS';获取 admin 令牌使用管理员专用 CLI 命令
$ . admin-openrc- 创建 neutron 用户
$ openstack user create --domain default --password-prompt neutron
User Password:
Repeat User Password:
+---------------------+----------------------------------+
| Field | Value |
+---------------------+----------------------------------+
| domain_id | default |
| enabled | True |
| id | fdb0f541e28141719b6a43c8944bf1fb |
| name | neutron |
| options | {} |
| password_expires_at | None |
+---------------------+----------------------------------+- 添加 admin 角色到 neutron 用户中
$ openstack role add --project service --user neutron admin- 创建 neutron 服务实例
$ openstack service create --name neutron \
--description "OpenStack Networking" network
+-------------+----------------------------------+
| Field | Value |
+-------------+----------------------------------+
| description | OpenStack Networking |
| enabled | True |
| id | f71529314dab4a4d8eca427e701d209e |
| name | neutron |
| type | network |
+-------------+----------------------------------+创建网络服务 API Endpoints
$ openstack endpoint create --region RegionOne \
network public http://controller:9696
+--------------+----------------------------------+
| Field | Value |
+--------------+----------------------------------+
| enabled | True |
| id | 85d80a6d02fc4b7683f611d7fc1493a3 |
| interface | public |
| region | RegionOne |
| region_id | RegionOne |
| service_id | f71529314dab4a4d8eca427e701d209e |
| service_name | neutron |
| service_type | network |
| url | http://controller:9696 |
+--------------+----------------------------------+
$ openstack endpoint create --region RegionOne \
network internal http://controller:9696
+--------------+----------------------------------+
| Field | Value |
+--------------+----------------------------------+
| enabled | True |
| id | 09753b537ac74422a68d2d791cf3714f |
| interface | internal |
| region | RegionOne |
| region_id | RegionOne |
| service_id | f71529314dab4a4d8eca427e701d209e |
| service_name | neutron |
| service_type | network |
| url | http://controller:9696 |
+--------------+----------------------------------+
$ openstack endpoint create --region RegionOne \
network admin http://controller:9696
+--------------+----------------------------------+
| Field | Value |
+--------------+----------------------------------+
| enabled | True |
| id | 1ee14289c9374dffb5db92a5c112fc4e |
| interface | admin |
| region | RegionOne |
| region_id | RegionOne |
| service_id | f71529314dab4a4d8eca427e701d209e |
| service_name | neutron |
| service_type | network |
| url | http://controller:9696 |
+--------------+----------------------------------+配置网络选项
有两种可选网络体系结构，请在下面的两种方案中选择一个即可。
- Option 1: Provider networks
- Option 2: Self-service networks
配置完成后返回本页，继续下一步操作。
配置元数据代理
元数据代理负责提供配置信息，例如实例的凭证。
编辑
/etc/neutron/metadata_agent.ini文件完成以下操作。- 在 [DEFAULT] 标签中配置 metadata 主机和预分享秘钥
[DEFAULT]
# ...
nova_metadata_host = controller
metadata_proxy_shared_secret = METADATA_SECRET小贴士：替换 METADATA_SECRET 为合适的密码。
配置计算节点使用网络
编辑
/etc/nova/nova.conf完成以下操作- 在 [neutron] 标签中，配置访问权限、开启元数据代理并配置秘钥
[neutron]
# ...
url = http://controller:9696
auth_url = http://controller:5000
auth_type = password
project_domain_name = default
user_domain_name = default
region_name = RegionOne
project_name = service
username = neutron
password = NEUTRON_PASS
service_metadata_proxy = true
metadata_proxy_shared_secret = METADATA_SECRET小贴士：替换 NEUTRON_PASS 为在认证服务中为 neutron 用户配置的密码。替换 METADATA_SECRET 为元数据代理配置的密码。
完成安装
网络服务的初始化脚本需要创建一个指向 ML2 插件的配置文件
# ln -s /etc/neutron/plugins/ml2/ml2_conf.ini /etc/neutron/plugin.ini填充数据库
# su -s /bin/sh -c "neutron-db-manage --config-file /etc/neutron/neutron.conf \
--config-file /etc/neutron/plugins/ml2/ml2_conf.ini upgrade head" neutron重启计算 API 服务
# systemctl restart openstack-nova-api.service开启网络服务并配置自启动
# systemctl enable neutron-server.service \
neutron-linuxbridge-agent.service neutron-dhcp-agent.service \
neutron-metadata-agent.service
# systemctl start neutron-server.service \
neutron-linuxbridge-agent.service neutron-dhcp-agent.service \
neutron-metadata-agent.service若使用了 Option 2 中的方式，还需要启动 layer-3 三层网络服务
# systemctl enable neutron-l3-agent.service
# systemctl start neutron-l3-agent.service计算节点
安装组件
# yum install openstack-neutron-linuxbridge ebtables ipset配置公共组件
编辑
/etc/neutron/neutron.conf文件并完成以下操作。- 在 [database] 标签下注释掉所有 connection 选项，因为计算节点病不直接访问数据库。
- 在 [DEFAULT] 标签下配置 RabbitMQ 消息队列访问权限。
- 在 [DEFAULT] 和 [keystone_authtoken] 配置认证服务访问权限。
- 在 [oslo_concurrency] 标签下配置程序锁路径。
[DEFAULT]
# ...
transport_url = rabbit://openstack:RABBIT_PASS@controller小贴士：替换 RABBIT_PASS 为在 RabbitMQ 内 openstack 账户的密码。
[DEFAULT]
# ...
auth_strategy = keystone
[keystone_authtoken]
# ...
www_authenticate_uri = http://controller:5000
auth_url = http://controller:5000
memcached_servers = controller:11211
auth_type = password
project_domain_name = default
user_domain_name = default
project_name = service
username = neutron
password = NEUTRON_PASS小贴士：替换 NEUTRON_PASS 为在认证服务内 neutron 用户的密码。
[oslo_concurrency]
# ...
lock_path = /var/lib/neutron/tmp配置计算服务使用网络服务
修改
/etc/nova/nova.conf配置文件并完成以下操作- 在 [neutron] 标签下配置访问参数
[neutron]
# ...
url = http://controller:9696
auth_url = http://controller:5000
auth_type = password
project_domain_name = default
user_domain_name = default
region_name = RegionOne
project_name = service
username = neutron
password = NEUTRON_PASS小贴士：替换 NEUTRON_PASS 为在认证服务中 neutron 用户的密码。
完成安装
重启计算服务
# systemctl restart openstack-nova-compute.service启动 Linux 网桥代理服务并配置自启动
# systemctl enable neutron-linuxbridge-agent.service
# systemctl start neutron-linuxbridge-agent.service验证操作
获取 admin 令牌使用管理员专用 CLI 命令
$ . admin-openrc列出 neutron-server 进程所加载的全部扩展以验证是否成功
$ openstack extension list --network
+---------------------------+---------------------------+----------------------------+
| Name | Alias | Description |
+---------------------------+---------------------------+----------------------------+
| Default Subnetpools | default-subnetpools | Provides ability to mark |
| | | and use a subnetpool as |
| | | the default |
| Availability Zone | availability_zone | The availability zone |
| | | extension. |
| Network Availability Zone | network_availability_zone | Availability zone support |
| | | for network. |
| Port Binding | binding | Expose port bindings of a |
| | | virtual port to external |
| | | application |
| agent | agent | The agent management |
| | | extension. |
| Subnet Allocation | subnet_allocation | Enables allocation of |
| | | subnets from a subnet pool |
| DHCP Agent Scheduler | dhcp_agent_scheduler | Schedule networks among |
| | | dhcp agents |
| Neutron external network | external-net | Adds external network |
| | | attribute to network |
| | | resource. |
| Neutron Service Flavors | flavors | Flavor specification for |
| | | Neutron advanced services |
| Network MTU | net-mtu | Provides MTU attribute for |
| | | a network resource. |
| Network IP Availability | network-ip-availability | Provides IP availability |
| | | data for each network and |
| | | subnet. |
| Quota management support | quotas | Expose functions for |
| | | quotas management per |
| | | tenant |
| Provider Network | provider | Expose mapping of virtual |
| | | networks to physical |
| | | networks |
| Multi Provider Network | multi-provider | Expose mapping of virtual |
| | | networks to multiple |
| | | physical networks |
| Address scope | address-scope | Address scopes extension. |
| Subnet service types | subnet-service-types | Provides ability to set |
| | | the subnet service_types |
| | | field |
| Resource timestamps | standard-attr-timestamp | Adds created_at and |
| | | updated_at fields to all |
| | | Neutron resources that |
| | | have Neutron standard |
| | | attributes. |
| Neutron Service Type | service-type | API for retrieving service |
| Management | | providers for Neutron |
| | | advanced services |
| resources: subnet, | | more L2 and L3 resources. |
| subnetpool, port, router | | |
| Neutron Extra DHCP opts | extra_dhcp_opt | Extra options |
| | | configuration for DHCP. |
| | | For example PXE boot |
| | | options to DHCP clients |
| | | can be specified (e.g. |
| | | tftp-server, server-ip- |
| | | address, bootfile-name) |
| Resource revision numbers | standard-attr-revisions | This extension will |
| | | display the revision |
| | | number of neutron |
| | | resources. |
| Pagination support | pagination | Extension that indicates |
| | | that pagination is |
| | | enabled. |
| Sorting support | sorting | Extension that indicates |
| | | that sorting is enabled. |
| security-group | security-group | The security groups |
| | | extension. |
| RBAC Policies | rbac-policies | Allows creation and |
| | | modification of policies |
| | | that control tenant access |
| | | to resources. |
| standard-attr-description | standard-attr-description | Extension to add |
| | | descriptions to standard |
| | | attributes |
| Port Security | port-security | Provides port security |
| Allowed Address Pairs | allowed-address-pairs | Provides allowed address |
| | | pairs |
| project_id field enabled | project-id | Extension that indicates |
| | | that project_id field is |
| | | enabled. |
+---------------------------+---------------------------+----------------------------+可以使用 neutron-sanity-check命令行客户端对网络进行进一步测试。
请按选择的方案对其进行网络测试
- Option 1: Provider networks
$ openstack network agent list
+--------------------------------------+--------------------+------------+-------------------+-------+-------+---------------------------+
| ID | Agent Type | Host | Availability Zone | Alive | State | Binary |
+--------------------------------------+--------------------+------------+-------------------+-------+-------+---------------------------+
| 0400c2f6-4d3b-44bc-89fa-99093432f3bf | Metadata agent | controller | None | True | UP | neutron-metadata-agent |
| 83cf853d-a2f2-450a-99d7-e9c6fc08f4c3 | DHCP agent | controller | nova | True | UP | neutron-dhcp-agent |
| ec302e51-6101-43cf-9f19-88a78613cbee | Linux bridge agent | compute | None | True | UP | neutron-linuxbridge-agent |
| fcb9bc6e-22b1-43bc-9054-272dd517d025 | Linux bridge agent | controller | None | True | UP | neutron-linuxbridge-agent |
+--------------------------------------+--------------------+------------+-------------------+-------+-------+---------------------------+- Option 2: Self-service networks
$ openstack network agent list
+--------------------------------------+--------------------+------------+-------------------+-------+-------+---------------------------+
| ID | Agent Type | Host | Availability Zone | Alive | State | Binary |
+--------------------------------------+--------------------+------------+-------------------+-------+-------+---------------------------+
| f49a4b81-afd6-4b3d-b923-66c8f0517099 | Metadata agent | controller | None | True | UP | neutron-metadata-agent |
| 27eee952-a748-467b-bf71-941e89846a92 | Linux bridge agent | controller | None | True | UP | neutron-linuxbridge-agent |
| 08905043-5010-4b87-bba5-aedb1956e27a | Linux bridge agent | compute1 | None | True | UP | neutron-linuxbridge-agent |
| 830344ff-dc36-4956-84f4-067af667a0dc | L3 agent | controller | nova | True | UP | neutron-l3-agent |
| dd3644c9-1a3a-435a-9282-eb306b4b0391 | DHCP agent | controller | nova | True | UP | neutron-dhcp-agent |
+--------------------------------------+--------------------+------------+-------------------+-------+-------+---------------------------+附录
相关链接
参考链接
本文由 柒 创作，采用 知识共享署名4.0
国际许可协议进行许可。
转载本站文章前请注明出处，文章作者保留所有权限。
最后编辑时间： 2023-10-06 15:26 PM