Learning OpenStack networking : build a solid foundation in virtual networking technologies for OpenStack-based clouds

Title Page
Copyright and Credits
Packt Upsell
Contributors
Table of Contents
Preface
Introduction to OpenStack Networking
	What is OpenStack Networking?
		Features of OpenStack Networking
			Switching
			Routing
			Load balancing
			Firewalling
			Virtual private networks
			Network functions virtualization
		OpenStack Networking resources
			Virtual network interfaces
			Virtual network switches
		Overlay networks
			Virtual Extensible Local Area Network (VXLAN)
			Generic Router Encapsulation (GRE)
			Generic Network Virtualization Encapsulation (GENEVE)
	Preparing the physical infrastructure
		Configuring the physical infrastructure
			Management network
			API network
			External network
			Guest network
		Physical server connections
			Single interface
			Multiple interfaces
			Bonding
	Separating services across nodes
		Using a single controller node
		Using a dedicated network node
	Summary
Installing OpenStack
	System requirements
		Operating system requirements
	Initial network configuration
		Example networks
		Interface configuration
	Initial steps
		Permissions
		Configuring the OpenStack repository
		Upgrading the system
		Setting the hostnames
		Installing and configuring Network Time Protocol
		Rebooting the system
	Installing OpenStack
		Installing and configuring the MySQL database server
		Installing and configuring the messaging server
		Installing and configuring memcached
		Installing and configuring the identity service
			Configuring the database
		Installing Keystone
			Configuring tokens and drivers
			Bootstrap the Identity service
			Configuring the Apache HTTP server
			Setting environment variables
			Defining services and API endpoints in Keystone
			Defining users, projects, and roles in Keystone
		Installing and configuring the image service
			Configuring the database
			Defining the Glance user, service, and endpoints
			Installing and configuring Glance components
			Configuring authentication settings
			Configuring additional settings
			Verifying the Glance image service installation
			Installing additional images
		Installing and configuring the Compute service
			Configuring the database
			Defining the Nova user, service, and endpoints
			Installing and configuring controller node components
			Configuring authentication settings
			Additional controller tasks
			Installing and configuring compute node components
				Additional compute tasks
			Adding the compute node(s) to the cell database
		Installing the OpenStack Dashboard
			Updating the host and API version configuration
			Configuring Keystone settings
			Modifying network configuration
			Uninstalling default Ubuntu theme (optional)
			Reloading Apache
			Testing connectivity to the dashboard
			Familiarizing yourself with the dashboard
	Summary
Installing Neutron
	Basic networking elements in Neutron
	Extending functionality with plugins
		Modular Layer 2 plugin
			Drivers
				TypeDrivers
				Mechanism drivers
			ML2 architecture
	Network namespaces
	Installing and configuring Neutron services
		Creating the Neutron database
		Configuring the Neutron user, role, and endpoint in Keystone
		Installing Neutron packages
		Configuring Neutron to use Keystone
		Configuring Neutron to use a messaging service
		Configuring Nova to utilize Neutron networking
		Configuring Neutron to notify Nova
	Configuring Neutron services
		Starting neutron-server
		Configuring the Neutron DHCP agent
			Restarting the Neutron DHCP agent
		Configuring the Neutron metadata agent
			Restarting the Neutron metadata agent
	Interfacing with OpenStack Networking
		Using the OpenStack command-line interface
		Using the Neutron command-line interface
		Using the OpenStack Python SDK
		Using the cURL utility
	Summary
Virtual Network Infrastructure Using Linux Bridges
	Using the Linux bridge driver
	Visualizing traffic flow through Linux bridges
		VLAN
		Flat
		VXLAN
			Potential issues when using overlay networks
		Local
	Configuring the ML2 networking plugin
		Configuring the bridge interface
		Configuring the overlay interface
		ML2 plugin configuration options
			Type drivers
			Mechanism drivers
				Using the L2 population driver
			Tenant network types
			Flat networks
			Network VLAN ranges
			VNI ranges
			Security groups
	Configuring the Linux bridge driver and agent
		Installing the Linux bridge agent
		Updating the Linux bridge agent configuration file
			Physical interface mappings
			Enabling VXLAN
			L2 population
			Local IP
			Firewall driver
		Configuring the DHCP agent to use the Linux bridge driver
		Restarting services
		Verifying Linux bridge agents
	Summary
Building a Virtual Switching Infrastructure Using Open vSwitch
	Using the Open vSwitch driver
	Basic OpenvSwitch commands
		Base commands
			ovs-vsctl
			ovs-ofctl
			ovs-dpctl
			ovs-appctl
	Visualizing traffic flow when using Open vSwitch
		Identifying ports on the virtual switch
		Identifying the local VLANs associated with ports
		Programming flow rules
			Flow rules for VLAN networks
				Return traffic
			Flow rules for flat networks
			Flow rules for overlay networks
			Flow rules for local networks
	Configuring the ML2 networking plugin
		Configuring the bridge interface
		Configuring the overlay interface
		ML2 plugin configuration options
			Mechanism drivers
			Flat networks
			Network VLAN ranges
			Tunnel ID ranges
			VNI Ranges
			Security groups
	Configuring the Open vSwitch driver and agent
		Installing the Open vSwitch agent
		Updating the Open vSwitch agent configuration file
			Tunnel types
			L2 population
			VXLAN UDP port
			Integration bridge
			Tunnel bridge
			Local IP
			Bridge mappings
				Configuring the bridges
			Firewall driver
		Configuring the DHCP agent to use the Open vSwitch driver
		Restarting services
		Verifying Open vSwitch agents
	Summary
Building Networks with Neutron
	Network management in OpenStack
		Provider and tenant networks
		Managing networks in the CLI
			Creating a flat network in the CLI
			Creating a VLAN network in the CLI
			Creating a local network in the CLI
			Listing networks in the CLI
			Showing network properties in the CLI
			Updating network attributes in the CLI
			Deleting networks in the CLI
		Creating networks in the dashboard
			Via the Project panel
			Via the Admin panel
	Subnet management in OpenStack
		Working with IPv4 addresses
		Working with IPv6 addresses
		Creating subnets in the CLI
			Creating a subnet in the CLI
			Listing subnets in the CLI
			Showing subnet properties in the CLI
			Updating a subnet in the CLI
		Creating subnets in the dashboard
			Via the Project tab
			Via the Admin tab
		Managing subnet pools
			Creating a subnet pool
			Creating a subnet from a pool
			Deleting a subnet pool
			Assigning a default subnet pool
	Managing network ports in OpenStack
		Creating a port
	Summary
Attaching Instances to Networks
	Attaching instances to networks 
		Attaching instances to networks at creation
			Specifying a network
			Specifying a port
			Attaching multiple interfaces
		Attaching network interfaces to running instances
		Detaching network interfaces
	Exploring how instances get their addresses
		Watching the DHCP lease cycle
		Troubleshooting DHCP
	Exploring how instances retrieve their metadata
		The DHCP namespace
			Adding a manual route to 169.254.169.254
			Using DHCP to inject the route
	Summary
Managing Security Groups
	Security groups in OpenStack
	An introduction to iptables
		Using ipset
	Working with security groups
		Managing security groups in the CLI
			Creating security groups in the CLI
			Deleting security groups in the CLI
			Listing security groups in the CLI
			Showing the details of a security group in the CLI
			Updating security groups in the CLI
			Creating security group rules in the CLI
			Deleting security group rules in the CLI
			Listing security group rules in the CLI
			Showing the details of a security group rule in the CLI
	Applying security groups to instances and ports
		Removing security groups from instances and ports in the CLI
	Implementing security group rules
		Stepping through the chains
	Working with security groups in the dashboard
		Creating a security group
		Managing security group rules
		Applying security groups to instances
	Disabling port security
		Configuring Neutron
		Disabling port security for all ports on a network
		Modifying port security on an individual port
	Allowed address pairs
	Summary
Role-Based Access Control
	Working with access control policies
		Managing access control policies in the CLI
			Creating access control policies in the CLI
			Deleting access control policies in the CLI
			Listing access control policies in the CLI
			Showing the details of an access control policy in the CLI
			Updating access control policies in the CLI
	Applying RBAC policies to projects
		Creating projects and users
		Creating a network to share
		Creating a policy
		Viewing the policy in action
	Creating policies for external networks
	Summary
Creating Standalone Routers with Neutron
	Routing traffic in the cloud
	Installing and configuring the Neutron L3 agent
		Defining an interface driver
		Enabling the metadata proxy
		Setting the agent mode
		Enabling the router service plugin
		Enabling router management in the dashboard
		Restarting services
	Router management in the CLI
		Creating routers in the CLI
		Listing routers in the CLI
		Displaying router attributes in the CLI
		Updating router attributes in the CLI
		Working with router interfaces in the CLI
			Attaching internal interfaces to routers
			Attaching a gateway interface to a router
		Listing interfaces attached to routers
		Deleting internal interfaces
		Clearing the gateway interface
		Deleting routers in the CLI
	Network address translation
		Floating IP addresses
	Floating IP management
		Creating floating IPs in the CLI
		Associating floating IPs with ports in the CLI
		Listing floating IPs in the CLI
		Displaying floating IP attributes in the CLI
		Disassociating floating IPs in the CLI
		Deleting floating IPs in the CLI
	Demonstrating traffic flow from an instance to the internet
		Setting the foundation
		Creating an external provider network
		Creating a Neutron router
		Attaching the router to an external network
			Identifying the L3 agent and namespace
		Testing gateway connectivity
		Creating an internal network
		Attaching the router to the internal network
		Creating instances
		Verifying instance connectivity
		Observing default NAT behavior
		Assigning floating IPs
		Reassigning floating IPs
	Router management in the dashboard
		Creating a router in the dashboard
		Attaching internal interfaces in the dashboard
		Viewing the network topology in the dashboard
		Associating floating IPs to instances in the dashboard
		Disassociating floating IPs in the dashboard
	Summary
Router Redundancy Using VRRP
	Using keepalived and VRRP to provide redundancy
		VRRP groups
		VRRP priority
		VRRP working mode
			Preemptive
			Non-preemptive
		VRRP timers
			Advertisement interval timer
			Preemption delay timer
	Networking of highly available routers
		Dedicated HA network
			Limitations
		Virtual IP
		Determining the master router
	Installing and configuring additional L3 agents
		Defining an interface driver
		Setting the agent mode
		Restarting the Neutron L3 agent
	Configuring Neutron
	Working with highly available routers
		Creating highly-available routers
		Deleting highly-available routers
	Decomposing a highly available router
		Examining the keepalived configuration
		Executing a failover
	Summary
Distributed Virtual Routers
	Distributing routers across the cloud
	Installing and configuring Neutron components
		Installing additional L3 agents
		Defining an interface driver
		Enabling distributed mode
		Setting the agent mode
		Configuring Neutron
		Restarting the Neutron L3 and Open vSwitch agent
		Managing distributed virtual routers
			Creating distributed virtual routers
	Routing east-west traffic between instances
		Reviewing the topology
		Plumbing it up
		Distributing router ports
			Making it work
		Demonstrating traffic between instances
	Centralized SNAT
		Reviewing the topology
		Using the routing policy database
		Tracing a packet through the SNAT namespace
	Floating IPs through distributed virtual routers
		Introducing the FIP namespace
		Tracing a packet through the FIP namespace
			Sending traffic from an instance with a floating IP
			Returning traffic to the floating IP
				Using proxy ARP
	Summary
Load Balancing Traffic to Instances
	Fundamentals of load balancing
		Load balancing algorithms
		Monitoring
		Session persistence
	Integrating load balancers into the network
		Network namespaces
	Installing LBaaS v2
		Configuring the Neutron LBaaS agent service
			Defining an interface driver
			Defining a device driver
		Defining a user group
		Configuring Neutron
			Defining a service plugin
			Defining a service provider
		Updating the database schema
		Restarting the Neutron LBaaS agent and API service
	Load balancer management in the CLI
		Managing load balancers in the CLI
			Creating load balancers in the CLI
			Deleting load balancers in the CLI
			Listing load balancers in the CLI
			Showing load balancer details in the CLI
			Showing load balancer statistics in the CLI
			Showing the load balancer's status in the CLI
			Updating a load balancer in the CLI
		Managing pools in the CLI
			Creating a pool in the CLI
			Deleting a pool in the CLI
			Listing pools in the CLI
			Showing pool details in the CLI
			Updating a pool in the CLI
		Managing pool members in the CLI
			Creating pool members in the CLI
			Deleting pool members
			Listing pool members
			Showing pool member details
			Updating a pool member
		Managing health monitors in the CLI
			Creating a health monitor in the CLI
			Deleting a health monitor in the CLI
			Listing health monitors in the CLI
			Showing health monitor details
			Updating a health monitor
		Managing listeners in the CLI
			Creating listeners in the CLI
			Deleting listeners in the CLI
			Listing listeners in the CLI
			Showing listener details in the CLI
			Updating a listener in the CLI
	Building a load balancer
		Creating a load balancer
		Creating a pool
		Creating pool members
		Creating a health monitor
		Creating a listener
		The LBaaS network namespace
		Confirming load balancer functionality
			Observing health monitors
			Connecting to the virtual IP externally
	Load balancer management in the dashboard
		Creating a load balancer in the dashboard
			Assigning a floating IP to the load balancer
	Summary
Advanced Networking Topics
	VLAN-aware VMs
		Configuring the trunk plugin
		Defining the workflow
		Managing trunks in the CLI
			Creating trunks in the CLI
			Deleting trunks in the CLI
			Listing trunks in the CLI
			Showing trunk details in the CLI
			Updating a trunk in the CLI
		Building a trunk
			Creating the parent port
			Creating a sub-port
			Creating a trunk
		Booting an instance with a trunk
			Configuring the instance
			Reviewing the network plumbing
	BGP dynamic routing
		Prefix advertisement requirements
		Operations with distributed virtual routers
		Configuring BGP dynamic routing
			Installing the agent
			Configuring the agent
			Restarting services
		Managing BGP speakers in the CLI
	Network availability zones
		Configuring network availability zones
		Scheduling routers to availability zones
		Scheduling DHCP services to availability zones
	Summary
Other Books You May Enjoy
Index