openstack/openstack-manuals
Code Issues Proposed changes
openstack-manuals/doc/install-guide/source/neutron-compute-install-option2.rst
Matthew Kassawara 048ef85d2c [install] Liberty updates for neutron 
More neutron configuration updates for Liberty including
some changes for RDO packages.

1) Remove explicit configuration of kernel parameters
   because neutron handles them.
2) Explicitly add DNS resolver to virtual networks
   because default value prevents name resolution within
   instances.
3) Move some configuration options to better locations.
4) RDO: Remove workaround for init scripts.
5) RDO: Explicitly configure lock_path in neutron.conf file.
6) RDO: Install openstack-neutron package on compute nodes
   because it also installs packages on which the Linux
   bridge agent depends.

Change-Id: I2c70c64e1272ee33eb364c079d8187ade7235ee2
Implements: blueprint installguide-liberty
2015-10-22 17:54:58 -06:00

1.9 KiB
Raw Blame History

Networking Option 2: Self-service networks

Configure the Networking components on a compute node.

Configure the Linux bridge agent

The Linux bridge agent builds layer-2 (bridging and switching) virtual networking infrastructure for instances including VXLAN tunnels for private networks and handles security groups.

  1. Edit the /etc/neutron/plugins/ml2/linuxbridge_agent.ini file and complete the following actions:

    • In the [linux_bridge] section, map the public virtual network to the public physical network interface:

      [linux_bridge]
physical_interface_mappings = public:PUBLIC_INTERFACE_NAME

      Replace PUBLIC_INTERFACE_NAME with the name of the underlying physical public network interface.

    • In the [vxlan] section, enable VXLAN overlay networks, configure the IP address of the physical network interface that handles overlay networks, and enable layer-2 population:

      [vxlan]
enable_vxlan = True
local_ip = OVERLAY_INTERFACE_IP_ADDRESS
l2_population = True

      Replace OVERLAY_INTERFACE_IP_ADDRESS with the IP address of the underlying physical network interface that handles overlay networks. The example architecture uses the management interface.

    • In the [agent] section, enable ARP spoofing protection:

      [agent]
...
prevent_arp_spoofing = True

    • In the [securitygroup] section, enable security groups and configure the Linux bridge iptables firewall driver:

      [securitygroup]
...
enable_security_group = True
firewall_driver = neutron.agent.linux.iptables_firewall.IptablesFirewallDriver

Return to Networking compute node configuration <neutron-compute-compute>.