Openstack explanation (22) -- neutron plug-in configuration

Today I will continue to introduce Linux Operation and maintenance related knowledge , The main content of this paper is Neutron The plug-in configuration .

One 、ML2 The plug-in configuration

Above openstack Detailed explanation （ The 21st ）——Neutron Component installation and configuration in , We did Neutron Configuration of . today , Let's do Neutron Plug in configuration .
First , Let's configure it Neutron Of ml2 plug-in unit , open Neutron ml2 Configuration file for /etc/neutron/plugins/ml2/ml2_conf.ini, Find the file Zhang Hong's [ml2] modular , Add the following configuration under this module ：

[ml2]
type_drivers=flat,vlan,gre,vxlan,geneve
mechanism_drivers=linuxbridge,openvswitch
tenant_network_types=
extension_drivers=port_security

The above configurations respectively indicate the use of flat、vlan、gre
、vxlan and geneve this 5 Drives , Use linuxbridge and openvswich Plug in to create a network , Disable private networks （tenant_network_types The argument follows the equals sign with nothing , This means that the private network is disabled ）, And boot port security extension driver .
The completed configuration file is as follows ：

after , We find [ml2_type_flat] modular , Add the following under this module ：

[ml2_type_flat]
flat_networks=public

The above configuration indicates that the public virtual network is configured as flat The Internet .
The completed configuration is as follows ：

after , We found... In the configuration file [securitygroup] part , Add the following under this module ：

[securitygroup]
enable_ipset=true

Above configuration contents , Means to enable ipset To enhance the efficiency of security group rules , The completed configuration file is as follows ：

Last , We carry out orders ：

grep "^[a-Z]" /etc/neutron/plugins/ml2/ml2_conf.ini

You can view the effective configurations in the current configuration file , The results are shown below ：

such , our ml2 The plug-in is configured .

Two 、LinuxBridge The plug-in configuration

Next , We need to configure LinuxBridge plug-in unit . The configuration file of the plug-in is /etc/neutron/plugins/ml2/linuxbridge_agent.ini, We open the configuration file , stay [linux_bridge] Under module , Add the following ：

physical_interface_mapping=public:ens32

The above configuration ,public hinder ens32 Is the actual network card name of the current device , Please correspond to your network card , The above configuration indicates that the public virtual network and the public physical network interface are corresponding .
after , We find [vxlan] modular , Add the following under this module ：

enable_vxlan=false

Disable VXLAN Overlay network .
Last , We find [security_group] modular , Add the following under this module ：

enable_security_group=true
firewall_driver=neutron.agent.linux.iptables_firewalld.IptablesFirewalldDriver

Indicates that the security group settings are enabled , And configure relevant drivers .
such ,linuxbridge The configuration is complete , We carry out orders ：

grep "^[a-Z]" /etc/neutron/plugins/ml2/linuxbridge_agent.ini

It can display the effective part in the current configuration file , The execution result of this command is as follows ：

such , our linxubridge Part of the configuration is completed .

3、 ... and 、DHCP Agent configuration

Last , Let's configure DHCP Agent configuration . open /etc/neutron/dhcp_agent.ini, stay [DEFAULT] Module , Find the following parameters , It is revised as follows ：

interface_driver=neutron.agent.linux.interface.BridgeInterfaceDriver
dhcp_driver=neutron.agent.linux.dhcp.Dnsmasq
enable_isolated_metadata=false

The above configuration , Respectively means setting the virtual interface driver , Set up DHCP Drive and refresh routes .
The completed configuration file is as follows ：

such , our Neutron The plug-in of the node is configured .
Originality is not easy. , Reprint please explain the source ：https://blog.csdn.net/weixin_40228200