Ubuntu 24.04
Sponsored Link

OpenStack Caracal : Neutron Network (FLAT)2024/05/21

 

Configure virtual networking by OpenStack Network Service (Neutron).

For example, configure FLAT type of networking on here.
Before it, Configure basic settings on Control Node, Network Node, Compute Node.

Furthermore, this example is based on the environment that Network Node and Compute Node have 2 network interfaces.
And also [eth1] is up without IP Address, refer to here of [1] to up anonymous interface on Netplan.

------------+--------------------------+--------------------------+------------
            |                          |                          |
        eth0|10.0.0.30             eth0|10.0.0.50             eth0|10.0.0.51
+-----------+-----------+  +-----------+-----------+  +-----------+-----------+
|   [ dlp.srv.world ]   |  | [ network.srv.world ] |  |  [ node01.srv.world ] |
|     (Control Node)    |  |     (Network Node)    |  |     (Compute Node)    |
|                       |  |                       |  |                       |
|  MariaDB    RabbitMQ  |  |  Neutron L2/L3 Agent  |  |        Libvirt        |
|  Memcached  Nginx     |  |   Neutron Metadata    |  |      Nova Compute     |
|  Keystone   httpd     |  |     Open vSwitch      |  |    Neutron L2 Agent   |
|  Glance     Nova API  |  |                       |  |      Open vSwitch     |
|  Neutron Server       |  |                       |  |                       |
|  Neutron Metadata     |  |                       |  |                       |
+-----------------------+  +-----------+-----------+  +-----------+-----------+
                                   eth1|(UP with no IP)       eth1|(UP with no IP)

[1] Change settings like follows on both Network Node and Compute Node.
# add bridge

root@network:~#
ovs-vsctl add-br br-eth1
# add [eth1] to the port of the bridge above
# replace the interface name [eth1] to your own environment

root@network:~#
ovs-vsctl add-port br-eth1 eth1
root@network:~#
vi /etc/neutron/plugins/ml2/ml2_conf.ini
# line 219 : add

[ml2_type_flat]
flat_networks = physnet1
root@network:~#
vi /etc/neutron/plugins/ml2/openvswitch_agent.ini
# line 302 : add

[ovs]
bridge_mappings = physnet1:br-eth1
root@network:~#
systemctl restart neutron-openvswitch-agent

[2] Create network. It's OK to work on any node. (example below is on Control Node)
root@dlp ~(keystone)#
projectID=$(openstack project list | grep service | awk '{print $2}')
# create network named [sharednet1]

root@dlp ~(keystone)#
openstack network create --project $projectID \
--share --provider-network-type flat --provider-physical-network physnet1 sharednet1

+---------------------------+--------------------------------------+
| Field                     | Value                                |
+---------------------------+--------------------------------------+
| admin_state_up            | UP                                   |
| availability_zone_hints   |                                      |
| availability_zones        |                                      |
| created_at                | 2024-05-21T06:48:16Z                 |
| description               |                                      |
| dns_domain                | None                                 |
| id                        | 9b1bde5c-6671-455e-bd14-ab662ee56f89 |
| ipv4_address_scope        | None                                 |
| ipv6_address_scope        | None                                 |
| is_default                | False                                |
| is_vlan_transparent       | None                                 |
| mtu                       | 1500                                 |
| name                      | sharednet1                           |
| port_security_enabled     | True                                 |
| project_id                | ab9749e59bdb48e4807a18abb83c9f99     |
| provider:network_type     | flat                                 |
| provider:physical_network | physnet1                             |
| provider:segmentation_id  | None                                 |
| qos_policy_id             | None                                 |
| revision_number           | 1                                    |
| router:external           | Internal                             |
| segments                  | None                                 |
| shared                    | True                                 |
| status                    | ACTIVE                               |
| subnets                   |                                      |
| tags                      |                                      |
| tenant_id                 | ab9749e59bdb48e4807a18abb83c9f99     |
| updated_at                | 2024-05-21T06:48:16Z                 |
+---------------------------+--------------------------------------+

# create subnet [10.0.0.0/24] in [sharednet1]

root@dlp ~(keystone)#
openstack subnet create subnet1 --network sharednet1 \
--project $projectID --subnet-range 10.0.0.0/24 \
--allocation-pool start=10.0.0.200,end=10.0.0.254 \
--gateway 10.0.0.1 --dns-nameserver 10.0.0.10

+----------------------+--------------------------------------+
| Field                | Value                                |
+----------------------+--------------------------------------+
| allocation_pools     | 10.0.0.200-10.0.0.254                |
| cidr                 | 10.0.0.0/24                          |
| created_at           | 2024-05-21T06:48:46Z                 |
| description          |                                      |
| dns_nameservers      | 10.0.0.10                            |
| dns_publish_fixed_ip | None                                 |
| enable_dhcp          | True                                 |
| gateway_ip           | 10.0.0.1                             |
| host_routes          |                                      |
| id                   | bcfd4b7f-baf7-472f-baaa-b30805f21459 |
| ip_version           | 4                                    |
| ipv6_address_mode    | None                                 |
| ipv6_ra_mode         | None                                 |
| name                 | subnet1                              |
| network_id           | 9b1bde5c-6671-455e-bd14-ab662ee56f89 |
| project_id           | ab9749e59bdb48e4807a18abb83c9f99     |
| revision_number      | 0                                    |
| segment_id           | None                                 |
| service_types        |                                      |
| subnetpool_id        | None                                 |
| tags                 |                                      |
| updated_at           | 2024-05-21T06:48:46Z                 |
+----------------------+--------------------------------------+

# confirm settings

root@dlp ~(keystone)#
openstack network list

+--------------------------------+------------+--------------------------------+
| ID                             | Name       | Subnets                        |
+--------------------------------+------------+--------------------------------+
| 9b1bde5c-6671-455e-bd14-       | sharednet1 | bcfd4b7f-baf7-472f-baaa-       |
| ab662ee56f89                   |            | b30805f21459                   |
+--------------------------------+------------+--------------------------------+
[3] Create and start a Virtual machine Instance with the network just created above.
# confirm available [flavor] list

ubuntu@dlp ~(keystone)$
openstack flavor list

+----+-----------+------+------+-----------+-------+-----------+
| ID | Name      |  RAM | Disk | Ephemeral | VCPUs | Is Public |
+----+-----------+------+------+-----------+-------+-----------+
| 1  | m1.tiny   | 2048 |   10 |         0 |     1 | True      |
| 2  | m1.small  | 4096 |   10 |         0 |     2 | True      |
| 3  | m1.medium | 8192 |   10 |         0 |     4 | True      |
| 4  | m2.medium | 8192 |   10 |        10 |     4 | True      |
+----+-----------+------+------+-----------+-------+-----------+

# confirm available image list

ubuntu@dlp ~(keystone)$
openstack image list

+--------------------------------------+------------+--------+
| ID                                   | Name       | Status |
+--------------------------------------+------------+--------+
| 7620a182-99f2-4132-9c6e-4b2da962b241 | Ubuntu2404 | active |
+--------------------------------------+------------+--------+

# confirm available network list

ubuntu@dlp ~(keystone)$
openstack network list

+--------------------------------+------------+--------------------------------+
| ID                             | Name       | Subnets                        |
+--------------------------------+------------+--------------------------------+
| 9b1bde5c-6671-455e-bd14-       | sharednet1 | bcfd4b7f-baf7-472f-baaa-       |
| ab662ee56f89                   |            | b30805f21459                   |
+--------------------------------+------------+--------------------------------+

# create a security group for instances

ubuntu@dlp ~(keystone)$
openstack security group create secgroup01

+-----------------+------------------------------------------------------------+
| Field           | Value                                                      |
+-----------------+------------------------------------------------------------+
| created_at      | 2024-05-21T06:51:23Z                                       |
| description     | secgroup01                                                 |
| id              | a7489a36-5a3c-47a6-9d97-7e09d2707004                       |
| name            | secgroup01                                                 |
| project_id      | 18ede7365bdc430093e8fd4a90f77369                           |
| revision_number | 1                                                          |
| rules           | created_at='2024-05-21T06:51:23Z', direction='egress',     |
|                 | ethertype='IPv6',                                          |
|                 | id='43129404-8e03-4b29-a19e-d438cc9bca67',                 |
|                 | standard_attr_id='20', updated_at='2024-05-21T06:51:23Z'   |
|                 | created_at='2024-05-21T06:51:23Z', direction='egress',     |
|                 | ethertype='IPv4',                                          |
|                 | id='8088bea8-9608-4264-971e-d8398ffe0863',                 |
|                 | standard_attr_id='21', updated_at='2024-05-21T06:51:23Z'   |
| shared          | False                                                      |
| stateful        | True                                                       |
| tags            | []                                                         |
| updated_at      | 2024-05-21T06:51:23Z                                       |
+-----------------+------------------------------------------------------------+

# create an SSH keypair for connecting to instances

ubuntu@dlp ~(keystone)$
ssh-keygen -q -N ""

Enter file in which to save the key (/home/ubuntu/.ssh/id_ed25519):
# add public-key

ubuntu@dlp ~(keystone)$
openstack keypair create --public-key ~/.ssh/id_ed25519.pub mykey

+-------------+-------------------------------------------------+
| Field       | Value                                           |
+-------------+-------------------------------------------------+
| created_at  | None                                            |
| fingerprint | 09:d5:f0:34:e3:d0:90:c2:28:74:98:01:1f:ea:76:cc |
| id          | mykey                                           |
| is_deleted  | None                                            |
| name        | mykey                                           |
| type        | ssh                                             |
| user_id     | b9371d015e0d43dca74f29161448ffd2                |
+-------------+-------------------------------------------------+

ubuntu@dlp ~(keystone)$
netID=$(openstack network list | grep sharednet1 | awk '{ print $2 }')

ubuntu@dlp ~(keystone)$
openstack server create --flavor m1.small --image Ubuntu2404 --security-group secgroup01 --nic net-id=$netID --key-name mykey Ubuntu-2404
ubuntu@dlp ~(keystone)$
openstack server list

+--------------+-------------+--------+---------------+------------+----------+
| ID           | Name        | Status | Networks      | Image      | Flavor   |
+--------------+-------------+--------+---------------+------------+----------+
| 314d9a1b-    | Ubuntu-2404 | ACTIVE | sharednet1=10 | Ubuntu2404 | m1.small |
| f50e-40b3-   |             |        | .0.0.212      |            |          |
| 8e94-        |             |        |               |            |          |
| 91eba3ba5d70 |             |        |               |            |          |
+--------------+-------------+--------+---------------+------------+----------+
[4] Configure security settings for the security group you created above to access with SSH and ICMP.
# permit ICMP

ubuntu@dlp ~(keystone)$
openstack security group rule create --protocol icmp --ingress secgroup01

+-------------------------+--------------------------------------+
| Field                   | Value                                |
+-------------------------+--------------------------------------+
| belongs_to_default_sg   | False                                |
| created_at              | 2024-05-21T06:55:08Z                 |
| description             |                                      |
| direction               | ingress                              |
| ether_type              | IPv4                                 |
| id                      | c2495ff4-cae1-4390-b555-6ba79e1ba778 |
| name                    | None                                 |
| normalized_cidr         | 0.0.0.0/0                            |
| port_range_max          | None                                 |
| port_range_min          | None                                 |
| project_id              | 18ede7365bdc430093e8fd4a90f77369     |
| protocol                | icmp                                 |
| remote_address_group_id | None                                 |
| remote_group_id         | None                                 |
| remote_ip_prefix        | 0.0.0.0/0                            |
| revision_number         | 0                                    |
| security_group_id       | a7489a36-5a3c-47a6-9d97-7e09d2707004 |
| tags                    | []                                   |
| updated_at              | 2024-05-21T06:55:08Z                 |
+-------------------------+--------------------------------------+

# permit SSH

ubuntu@dlp ~(keystone)$
openstack security group rule create --protocol tcp --dst-port 22:22 secgroup01

+-------------------------+--------------------------------------+
| Field                   | Value                                |
+-------------------------+--------------------------------------+
| belongs_to_default_sg   | False                                |
| created_at              | 2024-05-21T06:55:35Z                 |
| description             |                                      |
| direction               | ingress                              |
| ether_type              | IPv4                                 |
| id                      | 2a54b381-dd4e-4f53-a843-1ae6699e653c |
| name                    | None                                 |
| normalized_cidr         | 0.0.0.0/0                            |
| port_range_max          | 22                                   |
| port_range_min          | 22                                   |
| project_id              | 18ede7365bdc430093e8fd4a90f77369     |
| protocol                | tcp                                  |
| remote_address_group_id | None                                 |
| remote_group_id         | None                                 |
| remote_ip_prefix        | 0.0.0.0/0                            |
| revision_number         | 0                                    |
| security_group_id       | a7489a36-5a3c-47a6-9d97-7e09d2707004 |
| tags                    | []                                   |
| updated_at              | 2024-05-21T06:55:35Z                 |
+-------------------------+--------------------------------------+

ubuntu@dlp ~(keystone)$
openstack security group rule list secgroup01

+----------+-------------+-----------+----------+------------+-----------+-----------------------+----------------------+
| ID       | IP Protocol | Ethertype | IP Range | Port Range | Direction | Remote Security Group | Remote Address Group |
+----------+-------------+-----------+----------+------------+-----------+-----------------------+----------------------+
| 2a54b381 | tcp         | IPv4      | 0.0.0.0/ | 22:22      | ingress   | None                  | None                 |
| -dd4e-   |             |           | 0        |            |           |                       |                      |
| 4f53-    |             |           |          |            |           |                       |                      |
| a843-    |             |           |          |            |           |                       |                      |
| 1ae6699e |             |           |          |            |           |                       |                      |
| 653c     |             |           |          |            |           |                       |                      |
| 43129404 | None        | IPv6      | ::/0     |            | egress    | None                  | None                 |
| -8e03-   |             |           |          |            |           |                       |                      |
| 4b29-    |             |           |          |            |           |                       |                      |
| a19e-    |             |           |          |            |           |                       |                      |
| d438cc9b |             |           |          |            |           |                       |                      |
| ca67     |             |           |          |            |           |                       |                      |
| 8088bea8 | None        | IPv4      | 0.0.0.0/ |            | egress    | None                  | None                 |
| -9608-   |             |           | 0        |            |           |                       |                      |
| 4264-    |             |           |          |            |           |                       |                      |
| 971e-    |             |           |          |            |           |                       |                      |
| d8398ffe |             |           |          |            |           |                       |                      |
| 0863     |             |           |          |            |           |                       |                      |
| c2495ff4 | icmp        | IPv4      | 0.0.0.0/ |            | ingress   | None                  | None                 |
| -cae1-   |             |           | 0        |            |           |                       |                      |
| 4390-    |             |           |          |            |           |                       |                      |
| b555-    |             |           |          |            |           |                       |                      |
| 6ba79e1b |             |           |          |            |           |                       |                      |
| a778     |             |           |          |            |           |                       |                      |
+----------+-------------+-----------+----------+------------+-----------+-----------------------+----------------------+
[5] Login to Instance.
ubuntu@dlp ~(keystone)$
ssh ubuntu@10.0.0.212

The authenticity of host '10.0.0.212 (10.0.0.212)' can't be established.
ED25519 key fingerprint is SHA256:jqdqp/JwCSgi78lgCw8XMYVd7d1p3VApbZQpT1mX1iw.
This key is not known by any other names.
Are you sure you want to continue connecting (yes/no/[fingerprint])? yes
Warning: Permanently added '10.0.0.212' (ED25519) to the list of known hosts.
Welcome to Ubuntu 24.04 LTS (GNU/Linux 6.8.0-31-generic x86_64)

.....
.....

To run a command as administrator (user "root"), use "sudo <command>".
See "man sudo_root" for details.

ubuntu@ubuntu-2404:~$     # logined
Matched Content