OpenStack Yoga : Neutron ネットワークを構成 (FLAT)2022/04/04 |
|
OpenStack Network Service（Neutron）による仮想ネットワークの構成です。
例として、FLAT タイプのネットワークを構成します。
事前に以下のように Control ノード、 Network ノード、 Compute ノードの 各 Neutron サービスノードを構築済みであることが前提です。
また、当例では Network ノードと Compute ノードが 2 つのネットワークインターフェースを持っているものとします。
また、下例で eth1 の方は IP なしでインターフェースを UP しています。 IP なしでのインターフェース UP の設定はこちらの [1] を参照ください。
------------+---------------------------+---------------------------+------------
| | |
eth0|10.0.0.30 eth0|10.0.0.50 eth0|10.0.0.51
+-----------+-----------+ +-----------+-----------+ +-----------+-----------+
| [ Control Node ] | | [ Network Node ] | | [ Compute Node ] |
| | | | | |
| MariaDB RabbitMQ | | L2 Agent | | Libvirt |
| Memcached httpd | | L3 Agent | | Nova Compute |
| Keystone Glance | | Metadata Agent | | L2 Agent |
| Nova API | | | | |
| Neutron Server | | | | |
| Metadata Agent | | | | |
+-----------------------+ +-----------+-----------+ +-----------+-----------+
eth1|(UP with no IP) eth1|(UP with no IP)
|
| [1] | Network ノード および Compute ノードの両方で以下のように設定します。 |
|
root@network:~#
vi /etc/neutron/plugins/ml2/ml2_conf.ini # 206行目 : 追記 [ml2_type_flat]
flat_networks = physnet1
root@network:~#
vi /etc/neutron/plugins/ml2/linuxbridge_agent.ini # 190行目 : 追記 [linux_bridge]
physical_interface_mappings = physnet1:eth1
systemctl restart neutron-linuxbridge-agent |
| [2] | ネットワークを作成します。作業場所はどこでもよいですが、当例では Control ノード上で作業します。 |
|
root@dlp ~(keystone)#
projectID=$(openstack project list | grep service | awk '{print $2}') # [sharednet1] という名称のネットワークを作成 root@dlp ~(keystone)# openstack network create --project $projectID \ --share --provider-network-type flat --provider-physical-network physnet1 sharednet1
+---------------------------+---------------------------------------------------------------------+
| Field | Value |
+---------------------------+---------------------------------------------------------------------+
| admin_state_up | UP |
| availability_zone_hints | |
| availability_zones | |
| created_at | 2022-04-04T03:43:33Z |
| description | |
| dns_domain | None |
| id | 4b661c82-828a-450e-b5bb-bbdd682b3ade |
| ipv4_address_scope | None |
| ipv6_address_scope | None |
| is_default | False |
| is_vlan_transparent | None |
| location | Munch({'cloud': '', 'region_name': '', 'zone': None, 'project'..... |
| mtu | 1500 |
| name | sharednet1 |
| port_security_enabled | True |
| project_id | c043fb355eff47e69642adfcd7a55620 |
| provider:network_type | flat |
| provider:physical_network | physnet1 |
| provider:segmentation_id | None |
| qos_policy_id | None |
| revision_number | 1 |
| router:external | Internal |
| segments | None |
| shared | True |
| status | ACTIVE |
| subnets | |
| tags | |
| updated_at | 2022-04-04T03:43:33Z |
+---------------------------+---------------------------------------------------------------------+
# [sharednet1] に [10.0.0.0/24] のサブネットを作成 root@dlp ~(keystone)# openstack subnet create subnet1 --network sharednet1 \ --project $projectID --subnet-range 10.0.0.0/24 \ --allocation-pool start=10.0.0.200,end=10.0.0.254 \ --gateway 10.0.0.1 --dns-nameserver 10.0.0.10
+----------------------+----------------------------------------------------------------------------+
| Field | Value |
+----------------------+----------------------------------------------------------------------------+
| allocation_pools | 10.0.0.200-10.0.0.254 |
| cidr | 10.0.0.0/24 |
| created_at | 2022-04-04T03:44:12Z |
| description | |
| dns_nameservers | 10.0.0.10 |
| dns_publish_fixed_ip | None |
| enable_dhcp | True |
| gateway_ip | 10.0.0.1 |
| host_routes | |
| id | 9cc8391d-d917-4c5a-8594-7dca26b7ba52 |
| ip_version | 4 |
| ipv6_address_mode | None |
| ipv6_ra_mode | None |
| location | Munch({'cloud': '', 'region_name': '', 'zone': None, 'project': Munch..... |
| name | subnet1 |
| network_id | 4b661c82-828a-450e-b5bb-bbdd682b3ade |
| project_id | c043fb355eff47e69642adfcd7a55620 |
| revision_number | 0 |
| segment_id | None |
| service_types | |
| subnetpool_id | None |
| tags | |
| updated_at | 2022-04-04T03:44:12Z |
+----------------------+----------------------------------------------------------------------------+
# 設定確認 root@dlp ~(keystone)# openstack network list +--------------------------------------+------------+--------------------------------------+ | ID | Name | Subnets | +--------------------------------------+------------+--------------------------------------+ | 4b661c82-828a-450e-b5bb-bbdd682b3ade | sharednet1 | 9cc8391d-d917-4c5a-8594-7dca26b7ba52 | +--------------------------------------+------------+--------------------------------------+ |
| [3] | 任意のユーザーでログインし、作成したネットワークをインスタンスに関連付けてインスタンスを作成/起動します。 |
|
# 利用可能な [flavor] 確認 ubuntu@dlp ~(keystone)$ openstack flavor list +----+----------+------+------+-----------+-------+-----------+ | ID | Name | RAM | Disk | Ephemeral | VCPUs | Is Public | +----+----------+------+------+-----------+-------+-----------+ | 0 | m1.small | 2048 | 10 | 0 | 1 | True | +----+----------+------+------+-----------+-------+-----------+ # 利用可能なイメージ確認 ubuntu@dlp ~(keystone)$ openstack image list +--------------------------------------+------------+--------+ | ID | Name | Status | +--------------------------------------+------------+--------+ | 53f6415a-1f98-485f-be0b-3f80edf523df | Ubuntu2004 | active | +--------------------------------------+------------+--------+ # 利用可能なネットワーク確認 ubuntu@dlp ~(keystone)$ openstack network list +--------------------------------------+------------+--------------------------------------+ | ID | Name | Subnets | +--------------------------------------+------------+--------------------------------------+ | 4b661c82-828a-450e-b5bb-bbdd682b3ade | sharednet1 | 9cc8391d-d917-4c5a-8594-7dca26b7ba52 | +--------------------------------------+------------+--------------------------------------+ # インスタンス用のセキュリティグループを作成 ubuntu@dlp ~(keystone)$ openstack security group create secgroup01
+-----------------+----------------------------------------------------------------------------+
| Field | Value |
+-----------------+----------------------------------------------------------------------------+
| created_at | 2022-04-04T03:46:50Z |
| description | secgroup01 |
| id | 442b3351-ecff-49be-a48b-c5f36bc906b9 |
| location | Munch({'cloud': '', 'region_name': '', 'zone': None, 'project': Munch(.... |
| name | secgroup01 |
| project_id | d3434f55aa5541cfab5f13916da0697d |
| revision_number | 1 |
| rules | created_at='2022-04-04T03:46:50Z', direction='egress', ethertype='IPv6.... |
| | created_at='2022-04-04T03:46:50Z', direction='egress', ethertype='IPv4.... |
| stateful | True |
| tags | [] |
| updated_at | 2022-04-04T03:46:50Z |
+-----------------+----------------------------------------------------------------------------+
# インスタンス接続用の SSH キーペア作成 ubuntu@dlp ~(keystone)$ ssh-keygen -q -N "" Enter file in which to save the key (/home/ubuntu/.ssh/id_rsa): # 公開鍵登録 ubuntu@dlp ~(keystone)$ openstack keypair create --public-key ~/.ssh/id_rsa.pub mykey +-------------+-------------------------------------------------+ | Field | Value | +-------------+-------------------------------------------------+ | created_at | None | | fingerprint | c1:4e:1a:12:3a:d1:b5:dd:64:c8:52:4d:2f:3c:6e:82 | | id | mykey | | is_deleted | None | | name | mykey | | type | ssh | | user_id | 95f196a1851c4b93b016871f7d5ded82 | +-------------+-------------------------------------------------+ubuntu@dlp ~(keystone)$ netID=$(openstack network list | grep sharednet1 | awk '{ print $2 }')
ubuntu@dlp ~(keystone)$
ubuntu@dlp ~(keystone)$ openstack server create --flavor m1.small --image Ubuntu2004 --security-group secgroup01 --nic net-id=$netID --key-name mykey Ubuntu-2004
openstack server list +--------------------------------------+-------------+--------+-----------------------+------------+----------+ | ID | Name | Status | Networks | Image | Flavor | +--------------------------------------+-------------+--------+-----------------------+------------+----------+ | 7e6b6996-a067-4fd3-a9dd-13bd4ba6fc23 | Ubuntu-2004 | ACTIVE | sharednet1=10.0.0.233 | Ubuntu2004 | m1.small | +--------------------------------------+-------------+--------+-----------------------+------------+----------+ |
| [4] | 起動した仮想マシンインスタンスに SSH 接続できるように、先に作成したセキュリティグループにポート許可の設定を追加します。 |
|
# ICMP 許可 ubuntu@dlp ~(keystone)$ openstack security group rule create --protocol icmp --ingress secgroup01
+-------------------------+-----------------------------------------------------------------------+
| Field | Value |
+-------------------------+-----------------------------------------------------------------------+
| created_at | 2022-04-04T04:40:20Z |
| description | |
| direction | ingress |
| ether_type | IPv4 |
| id | 8d2a4bc7-1a0c-4ec0-b77d-b5522de3b603 |
| location | Munch({'cloud': '', 'region_name': '', 'zone': None, 'project': ..... |
| name | None |
| port_range_max | None |
| port_range_min | None |
| project_id | d3434f55aa5541cfab5f13916da0697d |
| protocol | icmp |
| remote_address_group_id | None |
| remote_group_id | None |
| remote_ip_prefix | 0.0.0.0/0 |
| revision_number | 0 |
| security_group_id | 442b3351-ecff-49be-a48b-c5f36bc906b9 |
| tags | [] |
| updated_at | 2022-04-04T04:40:20Z |
+-------------------------+-----------------------------------------------------------------------+
# SSH 許可 ubuntu@dlp ~(keystone)$ openstack security group rule create --protocol tcp --dst-port 22:22 secgroup01
+-------------------------+------------------------------------------------------------------------+
| Field | Value |
+-------------------------+------------------------------------------------------------------------+
| created_at | 2022-04-04T04:40:49Z |
| description | |
| direction | ingress |
| ether_type | IPv4 |
| id | 886f4f4f-74e1-4246-82b6-d97bedc214bb |
| location | Munch({'cloud': '', 'region_name': '', 'zone': None, 'project': M..... |
| name | None |
| port_range_max | 22 |
| port_range_min | 22 |
| project_id | d3434f55aa5541cfab5f13916da0697d |
| protocol | tcp |
| remote_address_group_id | None |
| remote_group_id | None |
| remote_ip_prefix | 0.0.0.0/0 |
| revision_number | 0 |
| security_group_id | 442b3351-ecff-49be-a48b-c5f36bc906b9 |
| tags | [] |
| updated_at | 2022-04-04T04:40:49Z |
+-------------------------+------------------------------------------------------------------------+
ubuntu@dlp ~(keystone)$ openstack security group rule list secgroup01 +--------------------------------------+-------------+-----------+-----------+------------+-----------+-----------------------+----------------------+ | ID | IP Protocol | Ethertype | IP Range | Port Range | Direction | Remote Security Group | Remote Address Group | +--------------------------------------+-------------+-----------+-----------+------------+-----------+-----------------------+----------------------+ | 43ddb4a5-caa8-4418-b1ce-9d3ac47b2164 | None | IPv6 | ::/0 | | egress | None | None | | 4be8aab2-ed86-4f87-b032-4c43695823a4 | None | IPv4 | 0.0.0.0/0 | | egress | None | None | | 886f4f4f-74e1-4246-82b6-d97bedc214bb | tcp | IPv4 | 0.0.0.0/0 | 22:22 | ingress | None | None | | 8d2a4bc7-1a0c-4ec0-b77d-b5522de3b603 | icmp | IPv4 | 0.0.0.0/0 | | ingress | None | None | +--------------------------------------+-------------+-----------+-----------+------------+-----------+-----------------------+----------------------+ |
| [5] | インスタンスにログインします。 |
|
ubuntu@dlp ~(keystone)$ ssh ubuntu@10.0.0.233 The authenticity of host '10.0.0.233 (10.0.0.233)' can't be established. ECDSA key fingerprint is SHA256:jrIIJCrvZkA/UgYrTvURdsOAD8PA/Xiq7TgyAbzOWYk. Are you sure you want to continue connecting (yes/no/[fingerprint])? yes Warning: Permanently added '10.0.0.233' (ECDSA) to the list of known hosts. Welcome to Ubuntu 20.04.4 LTS (GNU/Linux 5.4.0-105-generic x86_64) ..... ..... To run a command as administrator (user "root"), use "sudo <command>". See "man sudo_root" for details. ubuntu@ubuntu-2004:~$ # ログインできた |
| Sponsored Link |