8. Protecting Instances on the Network | LEARNING OPENSTACK NETWORKING (NEUTRON)

Sign In Start Free Trial

Book Overview & Buying
Table Of Contents
Feedback & Rating

LEARNING OPENSTACK NETWORKING (NEUTRON)

By : James Denton

4.2 (17)

LEARNING OPENSTACK NETWORKING (NEUTRON)

4.2 (17)

By: James Denton

Overview of this book

If you are an OpenStack-based cloud operator with experience in OpenStack Compute and nova-network but are new to Neutron networking, then this book is for you. Some networking experience is recommended, and a physical network infrastructure is required to provide connectivity to instances and other network resources configured in the book.

Preface

Preface

What this book covers

What you need for this book

Who this book is for

Conventions

Reader feedback

Customer support

Free Chapter

1. Preparing the Network for OpenStack

1. Preparing the Network for OpenStack

What is OpenStack Networking?

Preparing the physical infrastructure

Physical server connections

Summary

2. Installing OpenStack

2. Installing OpenStack

System requirements

Before you begin

Installation of OpenStack

Summary

3. Installing Neutron

3. Installing Neutron

Basic Neutron constructs

Installing and configuring Neutron services

Configuring Neutron services

Summary

4. Building a Virtual Switching Infrastructure

4. Building a Virtual Switching Infrastructure

Providing layer 2 connectivity to instances

Types of networks in Neutron

Choosing a networking plugin

Configuring a layer 2 networking plugin

Summary

5. Creating Networks with Neutron

5. Creating Networks with Neutron

Network management

Attaching instances to networks

Exploring how instances get their addresses

Exploring how instances retrieve their metadata

Summary

6. Creating Routers with Neutron

6. Creating Routers with Neutron

Configuring the Neutron L3 agent

Router management in the CLI

Network Address Translation

Floating IP Management

Demonstrating traffic flow from instance to Internet

Router management in the dashboard

Summary

7. Load Balancing Traffic in Neutron

7. Load Balancing Traffic in Neutron

Fundamentals of load balancing

Integrating load balancers into the network

Installing LBaaS

Load balancer management in the CLI

Building a load balancer

Load balancer management in the dashboard

Summary

8. Protecting Instances on the Network

8. Protecting Instances on the Network

Security groups in OpenStack

Firewall-as-a-service

Introducing iptables

Working with security groups

Working with FWaaS

Firewall rules – behind the scenes

Summary

A. Additional Neutron Commands

A. Additional Neutron Commands

Neutron extensions

Virtual private networks

Per-tenant quotas

Cisco Nexus 1000V command reference

VMware/Nicera command reference

B. ML2 Configuration

B. ML2 Configuration

Installing the ML2 plugin

Configuring the ML2 plugin

Index

Index

Customer Reviews

4.2 (17)

5 star

70.6%

4 star

11.8%

3 star

0%

2 star

5.9%

1 star

11.8%

Firewall-as-a-service

FWaaS is an extension for Neutron that provides users with the ability to deploy perimeter firewalls to protect their networks. The FWaaS extension enables you to do the following things:

Apply firewall rules on traffic entering and leaving tenant networks attached to Neutron routers
Create and share firewall policies that hold an ordered collection of the firewall rules
Audit firewall rules and policies

The FWaaS extension introduces the following network resources:

Firewall: This represents a logical firewall resource that a tenant can instantiate and manage. A firewall is associated with one firewall policy.
Firewall policy: This is an ordered collection of firewall rules that can be shared across tenants.
Firewall rule: This represents a collection of attributes, such as layer 4 ports and IP addresses, that define match criteria and perform an action to be taken on the matched data traffic.

Like security group rules, firewalls in Neutron utilize iptables to perform traffic...

Visually different images

CONTINUE READING

83

Tech Concepts

36

Programming languages

73

Tech Tools

Unlimited access to the largest independent learning library in tech of over 8,000 expert-authored tech books and videos.

Innovative learning tools, including AI book assistants, code context explainers, and text-to-speech.

50+ new titles added per month and exclusive early access to books as they are being written.

LEARNING OPENSTACK NETWORKING (NEUTRON)

Search

Your notes and bookmarks