Book Image

Learning OpenStack Networking (Neutron)

By : James Denton
Book Image

Learning OpenStack Networking (Neutron)

By: James Denton

Overview of this book

OpenStack Neutron is an OpenStack component that provides networking as a service for other OpenStack services to architect networks and create virtual machines through its API. This API lets you define network connectivity in order to leverage network capabilities to cloud deployments. Through this practical book, you will build a strong foundational knowledge of Neutron, and will architect and build an OpenStack cloud using advanced networking features. We start with an introduction to OpenStack Neutron and its various components, including virtual switching, routing, FWaaS, VPNaaS, and LBaaS. You’ll also get hands-on by installing OpenStack and Neutron and its components, and use agents and plugins to orchestrate network connectivity and build a virtual switching infrastructure. Moving on, you’ll get to grips with the HA routing capabilities utilizing VRRP and distributed virtual routers in Neutron. You’ll also discover load balancing fundamentals, including the difference between nodes, pools, pool members, and virtual IPs. You’ll discover the purpose of security groups and learn how to apply the security concept to your cloud/tenant/instance. Finally, you' ll configure virtual private networks that will allow you to avoid the use of SNAT and floating IPs when connecting to remote networks.
Table of Contents (21 chapters)
Learning OpenStack Networking (Neutron) Second Edition
About the Author
About the Reviewers

VPN management in the dashboard

In the Horizon dashboard, VPN policies and connections are managed within the VPN section under the Project tab:

Figure 12.5

In the dashboard, the workflow to create functional site-to-site connections is similar to the CLI. IKE policies, IPSec policies, and VPN services must first be created and then applied to the IPSec site connections, which completes the tunnel configuration.

Creating an IKE policy

To create an IKE policy, perform the following steps:

  1. From the IKE Policies tab, click on the Add IKE Policy button in the upper right-hand corner of the screen. A window will appear that allows you to create an IKE policy:

    Figure 12.6

  2. Once the IKE policy is configured, click on the blue Add button to create the policy. The resulting policy will be listed on the main VPN page under IKE Policies, as shown in the following screenshot:

    Figure 12.7

Creating an IPSec policy

To create an IPSec policy, perform the following steps:

  1. From the IPSec Policies tab, click on the Add...