Book Image

Production Ready OpenStack - Recipes for Successful Environments

By : Arthur Berezin
Book Image

Production Ready OpenStack - Recipes for Successful Environments

By: Arthur Berezin

Overview of this book

OpenStack is the most popular open source cloud platform used by organizations building internal private clouds and by public cloud providers. OpenStack is designed in a fully distributed architecture to provide Infrastructure as a Service, allowing us to maintain a massively scalable cloud infrastructure. OpenStack is developed by a vibrant community of open source developers who come from the largest software companies in the world. The book provides a comprehensive and practical guide to the multiple uses cases and configurations that OpenStack supports. This book simplifies the learning process by guiding you through how to install OpenStack in a single controller configuration. The book goes deeper into deploying OpenStack in a highly available configuration. You'll then configure Keystone Identity Services using LDAP, Active Directory, or the MySQL identity provider and configure a caching layer and SSL. After that, you will configure storage back-end providers for Glance and Cinder, which will include Ceph, NFS, Swift, and local storage. Then you will configure the Neutron networking service with provider network VLANs, and tenant network VXLAN and GRE. Also, you will configure Nova's Hypervisor with KVM, and QEMU emulation, and you will configure Nova's scheduler filters and weights. Finally, you will configure Horizon to use Apache HTTPD and SSL, and you will customize the dashboard's appearance.
Table of Contents (16 chapters)
Production Ready OpenStack - Recipes for Successful Environments
Credits
About the Author
About the Reviewers
www.PacktPub.com
Preface
Index

Configuring Firewall as a Service


The Neutron Firewall as a Service (FWaaS) plugin adds perimeter firewall management to networking. FWaaS uses IPTables to apply firewall policy to all Networking routers within a project. FWaaS uses IPTables on the node running Layer-3 agent.

How to do it…

Follow these steps to configure Neutron FWaaS:

  1. In Neutron's main configuration file, under the DEFAULT section, set the service_plugins parameter to point the FWaaS plugin:

    [root@neutron-node ~]# openstack-config --set /etc/neutron/neutron.conf DEFAULT service_plugins neutron.services.firewall.fwaas_plugin.FirewallPlugin
    

    Note

    If additional services are configured, you will need to manually edit the file /etc/neutron/neutron.conf, separate the existing value with a comma, and add neutron.services.loadbalancer.plugin.LoadBalancerPlugin, for example, loading both L3 and LBaaS would result in the following code:

    service_plugins = neutron.services.l3_router.l3_router_plugin.L3RouterPlugin, neutron.services.firewall...