The
neutron-server
service exposes the Neutron API to users and passes all calls to the configured Neutron plugins for processing.
By default, Neutron is configured to listen for API calls on all configured addresses as seen by the default bind_hosts
option in the Neutron configuration file:
bind_host = 0.0.0.0
As an additional security measure, it is possible to expose the API only on the management or API network. On the controller node, update the bind_host
value in the [DEFAULT]
section of the Neutron configuration located at /etc/neutron/neutron.conf
with the management address of the controller node:
[DEFAULT] ... bind_host = 10.254.254.100
Other configuration options that may require tweaking include:
core_plugin
service_plugins
dhcp_lease_duration
Some of these settings apply to all nodes, while others apply only to the network or controller node. The core_plugin
configuration option instructs Neutron to use the specified networking plugin. Beginning with the...