Matika版OpenStack伪生产环境部署-创建网络

      本文是Neutron部署的补充说明，主要描述创建必要的虚拟网络支持启动实例。在创建网络之前我们需要理解两个基本的概念：Provider Network和Self-service Network。

Provider network

      在启动实例之前，你必须创建一些必须的虚拟网络基础设施。网络选项1，一个实例使用provider(external)网络连接到物理网络基础设施通过L2(桥接/交换机)。这个网络包括DHCP服务即给实例提供IP地址。admin或其他特权用户必须创建这个网络因为它直接连接到物理网络基础设施上。下面的说明和图表使用示例IP地址范围。你需要根据你自己特定的环境进行设置。

创建Provider网络

创建网络

. admin-openrcneutron net-create --shared --provider:physical_network provider \  --provider:network_type flat provider

创建子网

neutron subnet-create --name provider --allocation-pool start=172.23.253.13,end=172.23.253.49 \ --disable-dhcp --gateway 172.23.253.1 provider 172.23.253.0/24

+-------------------+----------------------------------------------------+| Field             | Value                                              |+-------------------+----------------------------------------------------+| allocation_pools  | {"start": "172.23.253.13", "end": "172.23.253.49"} || cidr              | 172.23.253.0/24                                    || created_at        | 2016-05-17T08:35:42                                || description       |                                                    || dns_nameservers   |                                                    || enable_dhcp       | False                                              || gateway_ip        | 172.23.253.1                                       || host_routes       |                                                    || id                | 51da7eb5-b00d-4e39-b1a0-c5d25a773abb               || ip_version        | 4                                                  || ipv6_address_mode |                                                    || ipv6_ra_mode      |                                                    || name              | provider                                           || network_id        | 75ad4eea-8f3a-4110-9e5a-07f653bb4a90               || subnetpool_id     |                                                    || tenant_id         | 6636db93659e43189b5428151b63f5e8                   || updated_at        | 2016-05-17T08:35:42                                |+-------------------+----------------------------------------------------+ 

Self-service network

      创建self-service network之前必须创建Provider network。下面的说明和图表使用示例IP地址范围。根据你需要的特定环境进行修改。

创建Self-service 网络

创建网络

neutron net-create selfserviceneutron subnet-create --name selfservice --dns-nameserver 114.114.114.114 --gateway 192.168.2.1 selfservice 192.168.2.0/24

+-------------------+--------------------------------------------------+| Field             | Value                                            |+-------------------+--------------------------------------------------+| allocation_pools  | {"start": "192.168.2.2", "end": "192.168.2.254"} || cidr              | 192.168.2.0/24                                   || created_at        | 2016-05-17T08:38:11                              || description       |                                                  || dns_nameservers   | 114.114.114.144                                  || enable_dhcp       | True                                             || gateway_ip        | 192.168.2.1                                      || host_routes       |                                                  || id                | 5a2215b1-1960-4619-a4ff-9a3586eaae70             || ip_version        | 4                                                || ipv6_address_mode |                                                  || ipv6_ra_mode      |                                                  || name              | selfservice                                      || network_id        | ec4dc406-5ed3-478f-b164-d3352ef34e23             || subnetpool_id     |                                                  || tenant_id         | 6636db93659e43189b5428151b63f5e8                 || updated_at        | 2016-05-17T08:38:11                              |+-------------------+--------------------------------------------------+

创建路由

      Self-service 网络连接到Provider网络使用一个虚拟路由器通常是双向NAT。每个路由器包含一个或多个self-service网络的接口和一个provider网络的网关。这个provider 网络必须包含 router:external选项才能是self-service路由器使用它连接到外部网络如Internet。admin或其他特定权限用户在网络创建或添加过程中必须包含这个选项。

neutron net-update provider --router:externalneutron router-create routerneutron router-interface-add router selfserviceneutron router-gateway-set router provider

验证操作

ip netnsqrouter-1dffdcf9-2b2f-40f5-9894-2f8f5056945d (id: 2)qdhcp-c5559949-1962-4335-a623-8d28bd8ffc92 (id: 1)qdhcp-ec4dc406-5ed3-478f-b164-d3352ef34e23 (id: 0)

neutron router-port-list router

+-----------------------------+------+-------------------+-----------------------------+| id                          | name | mac_address       | fixed_ips                   |+-----------------------------+------+-------------------+-----------------------------+| 22205ec2-b6bc-              |      | fa:16:3e:16:89:00 | {"subnet_id": "51da7eb5     || 4d85-b312-8dffbe620b60      |      |                   | -b00d-                      ||                             |      |                   | 4e39-b1a0-c5d25a773abb",    ||                             |      |                   | "ip_address":               ||                             |      |                   | "172.23.253.13"}            || 99bae22b-d490-4307-ae1e-    |      | fa:16:3e:bd:59:4a | {"subnet_id": "a9b50fb8-51b || 09de151e3117                |      |                   | 9-4e98-b718-1fd8793854a1",  ||                             |      |                   | "ip_address": "172.16.1.1"} || b95441a2-e01a-              |      | fa:16:3e:3f:d0:0f | {"subnet_id":               || 415e-9457-41d5b769843d      |      |                   | "5a2215b1-1960-4619-a4ff-   ||                             |      |                   | 9a3586eaae70",              ||                             |      |                   | "ip_address":               ||                             |      |                   | "192.168.2.1"}              |+-----------------------------+------+-------------------+-----------------------------+

# ping -c 4 172.23.253.15PING 172.23.253.15 (172.23.253.15) 56(84) bytes of data.64 bytes from 172.23.253.15: icmp_seq=1 ttl=127 time=1.26 ms64 bytes from 172.23.253.15: icmp_seq=2 ttl=127 time=1.46 ms64 bytes from 172.23.253.15: icmp_seq=3 ttl=127 time=1.49 ms64 bytes from 172.23.253.15: icmp_seq=4 ttl=127 time=1.02 ms--- 172.23.253.15 ping statistics ---4 packets transmitted, 4 received, 0% packet loss, time 3004msrtt min/avg/max/mdev = 1.026/1.312/1.497/0.192 ms

文章参考：
http://docs.openstack.org/mitaka/install-guide-rdo/launch-instance-networks-provider.html
http://docs.openstack.org/mitaka/install-guide-rdo/launch-instance-networks-selfservice.html