Sign In Start Free Trial

Book Overview & Buying
Table Of Contents

Learning OpenStack Networking (Neutron), Second Edition

By : James Denton

4.8 (14)

Learning OpenStack Networking (Neutron), Second Edition

4.8 (14)

By: James Denton

Overview of this book

OpenStack Neutron is an OpenStack component that provides networking as a service for other OpenStack services to architect networks and create virtual machines through its API. This API lets you define network connectivity in order to leverage network capabilities to cloud deployments. Through this practical book, you will build a strong foundational knowledge of Neutron, and will architect and build an OpenStack cloud using advanced networking features. We start with an introduction to OpenStack Neutron and its various components, including virtual switching, routing, FWaaS, VPNaaS, and LBaaS. You’ll also get hands-on by installing OpenStack and Neutron and its components, and use agents and plugins to orchestrate network connectivity and build a virtual switching infrastructure. Moving on, you’ll get to grips with the HA routing capabilities utilizing VRRP and distributed virtual routers in Neutron. You’ll also discover load balancing fundamentals, including the difference between nodes, pools, pool members, and virtual IPs. You’ll discover the purpose of security groups and learn how to apply the security concept to your cloud/tenant/instance. Finally, you' ll configure virtual private networks that will allow you to avoid the use of SNAT and floating IPs when connecting to remote networks.

Preface

Preface

What this book covers

What you need for this book

Who this book is for

Conventions

Reader feedback

Customer support

Free Chapter

1. Preparing the Network for OpenStack

1. Preparing the Network for OpenStack

What is OpenStack Networking?

Preparing the physical infrastructure

Physical server connections

Separating services across nodes

Summary

2. Installing OpenStack

2. Installing OpenStack

System requirements

Initial network configuration

Initial steps

Installing OpenStack

Summary

3. Installing Neutron

3. Installing Neutron

Basic networking elements in Neutron

Extending functionality with plugins

Network namespaces

Installing and configuring Neutron services

Configuring Neutron services

Summary

4. Building a Virtual Switching Infrastructure

4. Building a Virtual Switching Infrastructure

Virtual network devices

Network types supported by Neutron

Choosing a plugin and driver

Visualizing traffic flow when using LinuxBridge

Visualizing the traffic flow when using Open vSwitch

Configuring the ML2 networking plugin

Configuring the LinuxBridge driver and agent

Configuring the Open vSwitch driver and agent

Summary

5. Creating Networks with Neutron

5. Creating Networks with Neutron

Network management

Neutron ports

Attaching instances to networks

Exploring how instances get their addresses

Exploring how instances retrieve their metadata

Summary

6. Managing Security Groups

6. Managing Security Groups

Security groups in OpenStack

An introduction to iptables

Working with security groups

Implementing security group rules

Working with security groups in the dashboard

Disabling port security

Summary

7. Creating Standalone Routers with Neutron

7. Creating Standalone Routers with Neutron

Routing traffic in a cloud

Installing and configuring the Neutron L3 agent

Router management in the CLI

Network address translation

Floating IP management

Demonstrating traffic flow from an instance to the Internet

Router management in the dashboard

Summary

8. Router Redundancy Using VRRP

8. Router Redundancy Using VRRP

Using keepalived and VRRP to provide redundancy

Networking of highly available routers

Installing and configuring additional L3 agents

Configuring Neutron

Working with highly available routers

Decomposing a highly available router

Summary

9. Distributed Virtual Routers

9. Distributed Virtual Routers

Distributing routers across the cloud

Installing and configuring Neutron components

Routing east-west traffic between instances

Centralized SNAT

Floating IPs through distributed virtual routers

Summary

10. Load Balancing Traffic to Instances

10. Load Balancing Traffic to Instances

Fundamentals of load balancing

Integrating load balancers into the network

Installing LBaaS

Load balancer management in the CLI

Building a load balancer

Load balancer management in the dashboard

Summary

11. Firewall as a Service

11. Firewall as a Service

Enabling FWaaS

Firewall Management in the CLI

Demonstrating traffic flow through a firewall

Summary

12. Virtual Private Network as a Service

12. Virtual Private Network as a Service

An overview of IPSec

Installing VPNaaS

VPN management in the CLI

VPN management in the dashboard

A tale of two routers

Summary

A. Additional Neutron Commands

A. Additional Neutron Commands

Neutron extensions

Neutron agents

Per-tenant quotas

Cisco Nexus 1000V command reference

VMware NSX command reference

Nuage VSP command reference

L3 metering

The LBaaS v2 API

Summary

B. Virtualizing the Environment

B. Virtualizing the Environment

Configuring VirtualBox networking

Creating a virtual machine

Configuring a virtual machine

Installing the Ubuntu operating system

Configuring virtual machine networking

Accessing a virtual machine over SSH

Changes to the OpenStack installation

Summary

Index

Index

Conventions

In this book, you will find a number of text styles that distinguish between different kinds of information. Here are some examples of these styles and an explanation of their meaning.

Code words in text, database table names, folder names, filenames, file extensions, pathnames, dummy URLs, user input, and Twitter handles are shown as follows: "The OPENSTACK_KEYSTONE_DEFAULT_ROLE setting in the /etc/openstack-dashboard/local_settings.py file must also be modified before the dashboard can be used."

A block of code is set as follows:

[DEFAULT] 
...
my_ip = 10.254.254.101
vncserver_proxyclient_address = 10.254.254.101
vnc_enabled = True
vncserver_listen = 0.0.0.0
novncproxy_base_url = http://controller01:6080/vnc_auto.html

When we wish to draw your attention to a particular part of a code block, the relevant lines or items are set in bold:

nova boot --flavor <FLAVOR_ID> --image <IMAGE_ID> \
--nic net-id=<NETWORK_ID> --security-group <SECURITY_GROUP_ID> \
INSTANCE_NAME

Any command-line input or output is written as follows:

# service nova-api restart
# service nova-cert restart
# service nova-consoleauth restart
# service nova-scheduler restart
# service nova-conductor restart
# service nova-novncproxy restart

New terms and important words are shown in bold. Words that you see on the screen, for example, in menus or dialog boxes, appear in the text like this: "Looking at the following screenshot, the System Information panel provides the user with information about the environment, including Services and Compute Services."

Note

Warnings or important notes appear in a box like this.

Tip

Tips and tricks appear like this.

CONTINUE READING

83

Tech Concepts

36

Programming languages

73

Tech Tools

Unlimited access to the largest independent learning library in tech of over 8,000 expert-authored tech books and videos.

Innovative learning tools, including AI book assistants, code context explainers, and text-to-speech.

50+ new titles added per month and exclusive early access to books as they are being written.

Learning OpenStack Networking (Neutron), Second Edition

Search

Your notes and bookmarks