Book Image

Learning OpenStack Networking (Neutron)

By : James Denton
Book Image

Learning OpenStack Networking (Neutron)

By: James Denton

Overview of this book

OpenStack Neutron is an OpenStack component that provides networking as a service for other OpenStack services to architect networks and create virtual machines through its API. This API lets you define network connectivity in order to leverage network capabilities to cloud deployments. Through this practical book, you will build a strong foundational knowledge of Neutron, and will architect and build an OpenStack cloud using advanced networking features. We start with an introduction to OpenStack Neutron and its various components, including virtual switching, routing, FWaaS, VPNaaS, and LBaaS. You’ll also get hands-on by installing OpenStack and Neutron and its components, and use agents and plugins to orchestrate network connectivity and build a virtual switching infrastructure. Moving on, you’ll get to grips with the HA routing capabilities utilizing VRRP and distributed virtual routers in Neutron. You’ll also discover load balancing fundamentals, including the difference between nodes, pools, pool members, and virtual IPs. You’ll discover the purpose of security groups and learn how to apply the security concept to your cloud/tenant/instance. Finally, you' ll configure virtual private networks that will allow you to avoid the use of SNAT and floating IPs when connecting to remote networks.
Table of Contents (21 chapters)
Learning OpenStack Networking (Neutron) Second Edition
Credits
About the Author
About the Reviewers
www.PacktPub.com
Preface
Index

Demonstrating traffic flow from an instance to the Internet


To demonstrate the process of creating and connecting standalone Neutron routers to both tenant and external provider networks so as to provide network connectivity to instances, this section of the chapter is dedicated to a walkthrough that leverages the fundamental Neutron concepts that have been discussed in the book so far.

A VLAN provider network will be created and used as an external gateway network for the Neutron router, while a VLAN tenant network will be created and used by instances. A Neutron router will be created and used to route traffic from the instances in the tenant network to the Internet, and floating IPs will be created and used to provide direct connectivity to instances.

Setting the foundation

In this demonstration, a Cisco Adaptive Security Appliance (ASA) device serves as the physical network gateway device and is connected to the Internet. The inside interface of the Cisco ASA device has a configured IP...