Red Hat OpenStack Platform 12 Networking Guide An Advanced Guide to OpenStack Networking Last Updated: 2019-12-04 Red Hat OpenStack Platform 12 Networking Guide An Advanced Guide to OpenStack Networking OpenStack Team [email protected] Legal Notice Copyright © 2019 Red Hat, Inc. The text of and illustrations in this document are licensed by Red Hat under a Creative Commons Attribution–Share Alike 3.0 Unported license ("CC-BY-SA"). An explanation of CC-BY-SA is available at http://creativecommons.org/licenses/by-sa/3.0/ . In accordance with CC-BY-SA, if you distribute this document or an adaptation of it, you must provide the URL for the original version. Red Hat, as the licensor of this document, waives the right to enforce, and agrees not to assert, Section 4d of CC-BY-SA to the fullest extent permitted by applicable law. Red Hat, Red Hat Enterprise Linux, the Shadowman logo, the Red Hat logo, JBoss, OpenShift, Fedora, the Infinity logo, and RHCE are trademarks of Red Hat, Inc., registered in the United States and other countries. Linux ® is the registered trademark of Linus Torvalds in the United States and other countries. Java ® is a registered trademark of Oracle and/or its affiliates. XFS ® is a trademark of Silicon Graphics International Corp. or its subsidiaries in the United States and/or other countries. MySQL ® is a registered trademark of MySQL AB in the United States, the European Union and other countries. Node.js ® is an official trademark of Joyent. Red Hat is not formally related to or endorsed by the official Joyent Node.js open source or commercial project. The OpenStack ® Word Mark and OpenStack logo are either registered trademarks/service marks or trademarks/service marks of the OpenStack Foundation, in the United States and other countries and are used with the OpenStack Foundation's permission. We are not affiliated with, endorsed or sponsored by the OpenStack Foundation, or the OpenStack community. All other trademarks are the property of their respective owners. Abstract A Cookbook for Common OpenStack Networking Tasks. Table of Contents Table of Contents .P .R . E. .F . A. .C . E. 8. 1. OPENSTACK NETWORKING AND SDN 8 1.1. Topics covered in this book 8 2. THE POLITICS OF VIRTUAL NETWORKS 8 .C . H. .A . P. .T .E . R. 1.. .N . .E .T . W. O. .R . K. .I N. G. O. .V . E. .R . V. .I E. .W . 1.0 . 1.1. How Networking Works 10 1.1.1. VLANs 10 1.2. Connecting two LANs together 10 1.2.1. Firewalls 11 1.3. OpenStack Networking (neutron) 11 1.4. Using CIDR format 11 .C . H. .A . P. .T .E . R. 2. O. P. .E .N . .S .T . A. .C . K. N. .E . T. .W . .O . R. .K . I.N . G. .C . O. .N . C. .E . P. .T . S. 1. 3. 2.1. Installing OpenStack Networking (neutron) 13 2.1.1. Supported installation 13 2.2. OpenStack Networking diagram 13 2.3. Security Groups 14 2.4. Open vSwitch 14 2.5. Modular Layer 2 (ML2) 15 2.5.1. The reasoning behind ML2 15 2.5.2. ML2 network types 15 2.5.3. ML2 Mechanism Drivers 15 2.6. L2 Population 16 2.7. OpenStack Networking Services 17 2.7.1. L3 Agent 17 2.7.2. DHCP Agent 17 2.7.3. Open vSwitch Agent 17 2.8. Tenant and Provider networks 17 2.8.1. Tenant networks 18 2.8.2. Provider networks 18 2.8.2.1. Flat provider networks 18 2.8.2.2. Configure controller nodes 19 2.8.2.3. Configure the Network and Compute nodes 19 2.8.2.4. Configure the network node 20 2.9. Layer 2 and layer 3 networking 20 2.9.1. Use switching where possible 21 .P .A . R. .T . .I .. C. .O . .M . M. O. N. T. .A . S. K. .S . .2 . 3. .C . H. .A . P. .T .E . R. 3. C. O. .M . .M . .O . N. A. .D . M. I.N . .I S. .T .R . A. .T . I.V . E. T. A. .S . K. .S . .2 . 4. 3.1. Create a network 24 3.2. Create an advanced network 26 3.3. Add network routing 26 3.4. Delete a network 27 3.5. Purge a tenant’s networking 27 3.6. Create a subnet 28 3.6.1. Create a new subnet 28 3.7. Delete a subnet 30 3.8. Add a router 30 3.9. Delete a router 30 3.10. Add an interface 30 1 Red Hat OpenStack Platform 12 Networking Guide 3.11. Delete an interface 31 3.12. Configure IP addressing 31 3.12.1. Create floating IP pools 31 3.12.2. Assign a specific floating IP 31 3.12.3. Assign a random floating IP 32 3.13. Create multiple floating IP pools 32 3.14. Bridge the physical network 32 .C . H. .A . P. .T .E . R. 4. .P . L. A. .N . N. I.N . G. .I P. A. .D . D. .R . E. S. .S . .U . S. .A . G. .E . .3 .4 . 4.1. Using multiple VLANs 34 4.2. Isolating VLAN traffic 34 4.3. IP address consumption 36 4.4. Virtual Networking 36 4.5. Example network plan 36 .C . H. .A . P. .T .E . R. 5. R. .E . V. .I E. .W . O. .P . E. .N . S. .T . A. .C . K. N . .E .T . W. O. R. .K .I .N . G. R. .O . U. T. E. .R . .P . O. .R . T. .S . .3 . 8. 5.1. View current port status 38 .C . H. .A . P. .T .E . R. 6. .T .R . O. U. .B . L. E. .S . H. .O . O. T. P. .R .O . .V . I.D . E. .R . .N . E. .T .W . .O . .R . K. .S . .4 .0 . 6.1. Topics covered 40 6.2. Basic ping testing 40 6.3. Troubleshooting VLAN networks 42 6.3.1. Review the VLAN configuration and log files 42 6.4. Troubleshooting from within tenant networks 43 6.4.1. Perform advanced ICMP testing within the namespace 44 .C . H. .A . P. .T .E . R. 7. C. .O . .N . N. .E . C. .T . .A . N. I.N . .S .T . A. .N . C. .E . .T . O. T. .H . E. P. .H . Y. .S .I .C . A. .L . N. .E . T. .W . .O . R. .K . .4 .6 . 7.1. Using Flat Provider Networks 46 7.1.1. The flow of outgoing traffic 49 7.1.2. The flow of incoming traffic 51 7.1.3. Troubleshooting 52 7.2. Using VLAN provider networks 54 7.2.1. The flow of outgoing traffic 56 7.2.2. The flow of incoming traffic 59 7.2.3. Troubleshooting 59 7.3. Enable Compute metadata access 61 7.4. Floating IP addresses 61 .C . H. .A . P. .T .E . R. 8. .C . O. .N . F. .I G. U. .R . E. .P . H. .Y . S. .I C. .A . L. S. .W . .I T. .C . H. .E .S . .F . O. .R . .O . .P .E . N. .S . T. .A . C. .K . .N . E. .T .W . .O . .R . K. .I N. .G . .6 . 2. 8.1. Planning your physical network environment 62 8.2. Configure a Cisco Catalyst switch 63 8.2.1. Configure trunk ports 63 8.2.1.1. Configure trunk ports for a Cisco Catalyst switch 63 8.2.2. Configure access ports 64 8.2.2.1. Configure access ports for a Cisco Catalyst switch 64 8.2.3. Configure LACP port aggregation 65 8.2.3.1. Configure LACP on the physical NIC 65 8.2.3.2. Configure LACP on a Cisco Catalyst switch 65 8.2.4. Configure MTU.