OpenStack Stein : Neutron ネットワークを構成 (FLAT)2019/04/12 |
|
OpenStack Network Service（Neutron）による仮想ネットワークの構成です。
例として、FLAT タイプのプロバイダーネットワークを構成します。
事前に以下のように Control ノード、 Network ノード、 Compute ノードの 各 Neutron サービスノードを構築済みであることが前提です。
また、当例では Network ノードと Compute ノードが二つのネットワークインターフェースを持っているものとします。また、下例で
eth1 の方は IP なしでインターフェースを UP しています。
IP なしでのインターフェース UP の設定はこちらの [1] を参照ください。
------------+---------------------------+---------------------------+------------
| | |
eth0|10.0.0.30 eth0|10.0.0.50 eth0|10.0.0.51
+-----------+-----------+ +-----------+-----------+ +-----------+-----------+
| [ Control Node ] | | [ Network Node ] | | [ Compute Node ] |
| | | | | |
| MariaDB RabbitMQ | | L2 Agent | | Libvirt |
| Memcached httpd | | L3 Agent | | Nova Compute |
| Keystone Glance | | Metadata Agent | | L2 Agent |
| Nova API | | | | |
| Neutron Server | | | | |
| Metadata Agent | | | | |
+-----------------------+ +-----------+-----------+ +-----------+-----------+
eth1|(UP with no IP) eth1|(UP with no IP)
|
| [1] | Network ノード および Compute ノードの両方で以下のように設定します。 |
|
root@network:~#
vi /etc/neutron/plugins/ml2/ml2_conf.ini # 220行目：追記 [ml2_type_flat]
flat_networks = physnet1
root@network:~#
vi /etc/neutron/plugins/ml2/linuxbridge_agent.ini # 183行目：追記 [linux_bridge]
physical_interface_mappings = physnet1:eth1
# 246行目：コメント解除して変更 enable_vxlan = false
systemctl restart neutron-linuxbridge-agent |
| [2] | ネットワークを作成します。作業場所はどこでもよいですが、当例では Control ノード上で作業します。 |
|
root@dlp ~(keystone)#
projectID=$(openstack project list | grep service | awk '{print $2}') # [sharednet1] という名称のネットワークを作成 root@dlp ~(keystone)# openstack network create --project $projectID \ --share --provider-network-type flat --provider-physical-network physnet1 sharednet1 Created a new network:
+---------------------------+--------------------------------------------------------------------------------------------+
| Field | Value |
+---------------------------+--------------------------------------------------------------------------------------------+
| admin_state_up | UP |
| availability_zone_hints | |
| availability_zones | |
| created_at | 2019-04-12T06:23:05Z |
| description | |
| dns_domain | None |
| id | aa949532-0434-4000-a712-4b27e7bbb833 |
| ipv4_address_scope | None |
| ipv6_address_scope | None |
| is_default | False |
| is_vlan_transparent | None |
| location | Munch({'project': Munch({'domain_name': None, 'domain_id': None, 'name': None, 'id': u...) |
| mtu | 1500 |
| name | sharednet1 |
| port_security_enabled | True |
| project_id | efc5c6a05d444cae80c0a80f49ba87d4 |
| provider:network_type | flat |
| provider:physical_network | physnet1 |
| provider:segmentation_id | None |
| qos_policy_id | None |
| revision_number | 1 |
| router:external | Internal |
| segments | None |
| shared | True |
| status | ACTIVE |
| subnets | |
| tags | |
| updated_at | 2019-04-12T06:23:05Z |
+---------------------------+--------------------------------------------------------------------------------------------+
# [sharednet1] に [10.0.0.0/24] のサブネットを作成 root@dlp ~(keystone)# openstack subnet create subnet1 --network sharednet1 \ --project $projectID --subnet-range 10.0.0.0/24 \ --allocation-pool start=10.0.0.200,end=10.0.0.254 \ --gateway 10.0.0.1 --dns-nameserver 10.0.0.10 Created a new subnet:
+-------------------+-------------------------------------------------------------------------------------------+
| Field | Value |
+-------------------+-------------------------------------------------------------------------------------------+
| allocation_pools | 10.0.0.200-10.0.0.254 |
| cidr | 10.0.0.0/24 |
| created_at | 2019-04-12T06:23:54Z |
| description | |
| dns_nameservers | 10.0.0.10 |
| enable_dhcp | True |
| gateway_ip | 10.0.0.1 |
| host_routes | |
| id | b3f2bca2-0390-405d-bd05-a55a4573a343 |
| ip_version | 4 |
| ipv6_address_mode | None |
| ipv6_ra_mode | None |
| location | Munch({'project': Munch({'domain_name': None, 'domain_id': None, 'name': None, 'id': ...) |
| name | subnet1 |
| network_id | aa949532-0434-4000-a712-4b27e7bbb833 |
| prefix_length | None |
| project_id | efc5c6a05d444cae80c0a80f49ba87d4 |
| revision_number | 0 |
| segment_id | None |
| service_types | |
| subnetpool_id | None |
| tags | |
| updated_at | 2019-04-12T06:23:54Z |
+-------------------+-------------------------------------------------------------------------------------------+
# 設定確認 root@dlp ~(keystone)# openstack network list +--------------------------------------+------------+--------------------------------------+ | ID | Name | Subnets | +--------------------------------------+------------+--------------------------------------+ | aa949532-0434-4000-a712-4b27e7bbb833 | sharednet1 | b3f2bca2-0390-405d-bd05-a55a4573a343 | +--------------------------------------+------------+--------------------------------------+ |
| [3] | 任意のユーザーでログインし、作成したネットワークをインスタンスに紐付けてインスタンスを作成・起動します。 |
|
# 利用可能な flavor 確認 ubuntu@dlp ~(keystone)$ openstack flavor list +----+----------+------+------+-----------+-------+-----------+ | ID | Name | RAM | Disk | Ephemeral | VCPUs | Is Public | +----+----------+------+------+-----------+-------+-----------+ | 0 | m1.small | 2048 | 10 | 0 | 1 | True | +----+----------+------+------+-----------+-------+-----------+ # 利用可能なイメージ確認 ubuntu@dlp ~(keystone)$ openstack image list +--------------------------------------+------------+--------+ | ID | Name | Status | +--------------------------------------+------------+--------+ | 7690a3c0-99f7-40fe-8cde-343824edc74a | Ubuntu1804 | active | +--------------------------------------+------------+--------+ # 利用可能なネットワーク確認 ubuntu@dlp ~(keystone)$ openstack network list +--------------------------------------+------------+--------------------------------------+ | ID | Name | Subnets | +--------------------------------------+------------+--------------------------------------+ | aa949532-0434-4000-a712-4b27e7bbb833 | sharednet1 | b3f2bca2-0390-405d-bd05-a55a4573a343 | +--------------------------------------+------------+--------------------------------------+ # インスタンス用のセキュリティグループを作成 ubuntu@dlp ~(keystone)$ openstack security group create secgroup01
+-----------------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+
| Field | Value |
+-----------------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+
| created_at | 2019-04-12T06:26:43Z |
| description | secgroup01 |
| id | b382df90-654a-4351-9b14-9896d5e2446d |
| location | Munch({'project': Munch({'domain_name': 'default', 'domain_id': None, 'name': 'hiroshima', 'id': u'ff03eefa265b423aa3375acb46a8e4e0'}), 'cloud': '', 'region_name': '', 'zone': None}) |
| name | secgroup01 |
| project_id | ff03eefa265b423aa3375acb46a8e4e0 |
| revision_number | 1 |
| rules | created_at='2019-04-12T06:26:44Z', direction='egress', ethertype='IPv4', id='c85bf106-4928-4c29-b353-7d8a73f3fa90', updated_at='2019-04-12T06:26:44Z' |
| | created_at='2019-04-12T06:26:44Z', direction='egress', ethertype='IPv6', id='f6ce27b6-b631-4714-9c97-b9ed041c37a4', updated_at='2019-04-12T06:26:44Z' |
| tags | [] |
| updated_at | 2019-04-12T06:26:44Z |
+-----------------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+
# インスタンス接続用の SSH キーペア作成 ubuntu@dlp ~(keystone)$ ssh-keygen -q -N "" Enter file in which to save the key (/home/ubuntu/.ssh/id_rsa): # 公開鍵登録 ubuntu@dlp ~(keystone)$ openstack keypair create --public-key ~/.ssh/id_rsa.pub mykey +-------------+-------------------------------------------------+ | Field | Value | +-------------+-------------------------------------------------+ | fingerprint | 1d:9b:15:96:8d:d6:6f:ed:2b:3f:2b:dd:df:12:1c:d3 | | name | mykey | | user_id | 5ed13a6b898b412383faf11ab2099a66 | +-------------+-------------------------------------------------+ubuntu@dlp ~(keystone)$ netID=$(openstack network list | grep sharednet1 | awk '{ print $2 }')
ubuntu@dlp ~(keystone)$
ubuntu@dlp ~(keystone)$ openstack server create --flavor m1.small --image Ubuntu1804 --security-group secgroup01 --nic net-id=$netID --key-name mykey Ubuntu_1804
openstack server list +--------------------------------------+-------------+--------+-----------------------+------------+----------+ | ID | Name | Status | Networks | Image | Flavor | +--------------------------------------+-------------+--------+-----------------------+------------+----------+ | b502c428-154b-4348-af00-f813f90def03 | Ubuntu_1804 | ACTIVE | sharednet1=10.0.0.216 | Ubuntu1804 | m1.small | +--------------------------------------+-------------+--------+-----------------------+------------+----------+ |
| [4] | 起動した仮想マシンインスタンスに SSH 接続できるように、先に作成したセキュリティグループにポート許可の設定を追加します。 |
|
# ICMP 許可 ubuntu@dlp ~(keystone)$ openstack security group rule create --protocol icmp --ingress secgroup01
+-------------------+-------------------------------------------------------------------------------------------------------+
| Field | Value |
+-------------------+-------------------------------------------------------------------------------------------------------+
| created_at | 2019-04-12T06:48:33Z |
| description | |
| direction | ingress |
| ether_type | IPv4 |
| id | 37055ca0-a078-4075-905e-45dede425100 |
| location | Munch({'project': Munch({'domain_name': 'default', 'domain_id': None, 'name': 'hiroshima', 'id': ...) |
| name | None |
| port_range_max | None |
| port_range_min | None |
| project_id | ff03eefa265b423aa3375acb46a8e4e0 |
| protocol | icmp |
| remote_group_id | None |
| remote_ip_prefix | 0.0.0.0/0 |
| revision_number | 0 |
| security_group_id | b382df90-654a-4351-9b14-9896d5e2446d |
| tags | [] |
| updated_at | 2019-04-12T06:48:33Z |
+-------------------+-------------------------------------------------------------------------------------------------------+
# SSH 許可 ubuntu@dlp ~(keystone)$ openstack security group rule create --protocol tcp --dst-port 22:22 secgroup01
+-------------------+--------------------------------------------------------------------------------------------------------+
| Field | Value |
+-------------------+--------------------------------------------------------------------------------------------------------+
| created_at | 2019-04-12T06:49:05Z |
| description | |
| direction | ingress |
| ether_type | IPv4 |
| id | 32c353b4-8abb-4ddd-8ff5-f1e326a7654b |
| location | Munch({'project': Munch({'domain_name': 'default', 'domain_id': None, 'name': 'hiroshima', 'id': u...) |
| name | None |
| port_range_max | 22 |
| port_range_min | 22 |
| project_id | ff03eefa265b423aa3375acb46a8e4e0 |
| protocol | tcp |
| remote_group_id | None |
| remote_ip_prefix | 0.0.0.0/0 |
| revision_number | 0 |
| security_group_id | b382df90-654a-4351-9b14-9896d5e2446d |
| tags | [] |
| updated_at | 2019-04-12T06:49:05Z |
+-------------------+--------------------------------------------------------------------------------------------------------+
ubuntu@dlp ~(keystone)$ openstack security group rule list +--------------------------------------+-------------+-----------+------------+--------------------------------------+--------------------------------------+ | ID | IP Protocol | IP Range | Port Range | Remote Security Group | Security Group | +--------------------------------------+-------------+-----------+------------+--------------------------------------+--------------------------------------+ | 15f7264a-69fe-4da4-835b-82aa1eb6dca7 | None | None | | None | 73e79f0c-7e3b-491a-984e-b6fb4253aed3 | | 32c353b4-8abb-4ddd-8ff5-f1e326a7654b | tcp | 0.0.0.0/0 | 22:22 | None | b382df90-654a-4351-9b14-9896d5e2446d | | 37055ca0-a078-4075-905e-45dede425100 | icmp | 0.0.0.0/0 | | None | b382df90-654a-4351-9b14-9896d5e2446d | | 518f075d-945e-4b73-a71d-d652e0e9d161 | None | None | | 73e79f0c-7e3b-491a-984e-b6fb4253aed3 | 73e79f0c-7e3b-491a-984e-b6fb4253aed3 | | 6bb91aea-d6a2-4cae-b9e5-30bbdbf60fb5 | None | None | | 73e79f0c-7e3b-491a-984e-b6fb4253aed3 | 73e79f0c-7e3b-491a-984e-b6fb4253aed3 | | 74711741-d1ab-4280-a870-12523f28c903 | None | None | | None | 73e79f0c-7e3b-491a-984e-b6fb4253aed3 | | c85bf106-4928-4c29-b353-7d8a73f3fa90 | None | None | | None | b382df90-654a-4351-9b14-9896d5e2446d | | f6ce27b6-b631-4714-9c97-b9ed041c37a4 | None | None | | None | b382df90-654a-4351-9b14-9896d5e2446d | +--------------------------------------+-------------+-----------+------------+--------------------------------------+--------------------------------------+ |
| [5] | インスタンスにログインします。 |
|
ubuntu@dlp ~(keystone)$ ssh ubuntu@10.0.0.216
The authenticity of host '10.0.0.216 (10.0.0.216)' can't be established.
ECDSA key fingerprint is SHA256:rkZic1mh6IAENFSUB828BwNnxfVHP+wMrBaCYvLLlQY.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added '10.0.0.216' (ECDSA) to the list of known hosts.
Welcome to Ubuntu 18.04.2 LTS (GNU/Linux 4.15.0-47-generic x86_64)
* Documentation: https://help.ubuntu.com
* Management: https://landscape.canonical.com
* Support: https://ubuntu.com/advantage
System information as of Fri Apr 12 15:50:24 JST 2019
System load: 0.17 Processes: 89
Usage of /: 19.6% of 8.80GB Users logged in: 0
Memory usage: 6% IP address for ens3: 10.0.0.216
Swap usage: 0%
2 packages can be updated.
0 updates are security updates.
ubuntu@ubuntu-1804:~$ # ログインできた
|
| Sponsored Link |