化云为雨/Openstack – Cloud Native应用交付

[root@controller heat(keystone_fulladmin)]$ more deploy-lb.yaml 
description: >
  This heat template demonstrates a basic load-balancing scenario on an F5 Device.

heat_template_version: 2016-04-08

parameters:
  bigip_un:
    description: BigIP Username
    label: BigIP Login Username
    type: string
    default: admin
  bigip_pw:
    description: BigIP Password
    label: BigIP Login Password
    type: string
    hidden: True
  vs_name:
    description: Virtual Server Name
    label: Virtual Server Name
    type: string
    default: virtual_server1
  pool_name:
    description: Pool Name
    label: Pool Name
    type: string
    default: pool1
  bigip_fip:
    description: BigIP Floating IP
    label: BigIP FIP
    type: string
  vs_vip:
    description: Virtual Server Virtual IP
    label: Virtual Server VIP
    type: string
  vs_port:
    description: Virtual Server Port
    label: Virtual Server Port
    type: number
    default: 443
  pool_member_port:
    description: Pool Member Port
    label: Pool Member Port
    type: number
    default: 8080

parameter_groups:
  - label: BigIP Parameters 
    parameters:
      - bigip_fip
      - bigip_un
      - bigip_pw
  - label: Load Balancing Parameters
    parameters:
      - vs_name
      - vs_vip
      - vs_port
      - pool_name
      - pool_member_port

resources:
  bigip:
    type: F5::BigIP::Device
    properties:
      ip: { get_param: bigip_fip }
      username: { get_param: bigip_un }
      password: { get_param: bigip_pw }
  partition:
    type: F5::Sys::Partition
    depends_on: bigip
    properties:
      name: Common
      bigip_server: { get_resource: bigip }
  iapp_service:
    type: F5::Sys::iAppService
    depends_on: iapp_template
    properties:
      name: lb_service
      bigip_server: { get_resource: bigip }
      partition: { get_resource: partition }
      template_name: alb_templ
      traffic_group: /Common/traffic-group-local-only
  iapp_template:
    type: F5::Sys::iAppCompositeTemplate
    depends_on: partition
    properties:
      name: alb_templ
      bigip_server: { get_resource: bigip }
      partition: { get_resource: partition }
      requires_modules: [ ltm ]
      implementation:
        str_replace:
          params:
            __partition__: Common
            __pool_name__: { get_param: pool_name }
            __vs_name__: { get_param: vs_name }
            __vip__: { get_param: vs_vip }
            __vs_port__: { get_param: vs_port }
            __rs_port__: { get_param: pool_member_port }
            __rs_ip__: 11.0.0.10
          template: |
            tmsh::create {
                ltm pool /__partition__/__pool_name__
                    load-balancing-mode least-connections-node
                    members replace-all-with {
                        __rs_ip__:__rs_port__ {
                            address __rs_ip__
                        }
                    }
            }

            tmsh::create {
                ltm virtual /__partition__/__vs_name__
                    connection-limit 1
                    destination /__partition__/__vip__:__vs_port__
                    mask 255.255.255.255
                    pool /__partition__/__pool_name__
                    profiles replace-all-with {
                        /Common/clientssl {
                            context clientside
                        }
                    }
                    source 0.0.0.0/0
                    source-address-translation {
                        type automap
                    }
                    translate-address enabled
                    translate-port enabled
                    vlans replace-all-with {
                        /Common/external
                    }
                    vlans-enabled
            }

            tmsh::create {
                ltm virtual-address /__partition__/__vip__
                    address __vip__
                    arp enabled
                    icmp-echo enabled
                    mask 255.255.255.255
                    traffic-group traffic-group-1
            }
      presentation: |
        section say_hello {
            message intro "This template deploys a virtual server and a pool with two members."
        }

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

49

50

51

52

53

54

55

56

57

58

59

60

61

62

63

64

65

66

67

68

69

70

71

72

73

74

75

76

77

78

79

80

81

82

83

84

85

86

87

88

89

90

91

92

93

94

95

96

97

98

99

100

101

102

103

104

105

106

107

108

109

110

111

112

113

114

115

116

117

118

119

120

121

122

123

124

125

126

127

128

129

130

131

132

133

134

135

136

137

138

139

140

141

142

143

144

145

146

[root@controller heat(keystone_fulladmin)]$ more deploy-lb.yaml

description: >

This heat template demonstrates a basic load-balancing scenario on an F5 Device.

heat_template_version: 2016-04-08

parameters:

bigip_un:

description: BigIP Username

label: BigIP Login Username

type: string

default: admin

bigip_pw:

description: BigIP Password

label: BigIP Login Password

type: string

hidden: True

vs_name:

description: Virtual Server Name

label: Virtual Server Name

type: string

default: virtual_server1

pool_name:

description: Pool Name

label: Pool Name

type: string

default: pool1

bigip_fip:

description: BigIP Floating IP

label: BigIP FIP

type: string

vs_vip:

description: Virtual Server Virtual IP

label: Virtual Server VIP

type: string

vs_port:

description: Virtual Server Port

label: Virtual Server Port

type: number

default: 443

pool_member_port:

description: Pool Member Port

label: Pool Member Port

type: number

default: 8080

parameter_groups:

- label: BigIP Parameters

parameters:

- bigip_fip

- bigip_un

- bigip_pw

- label: Load Balancing Parameters

parameters:

- vs_name

- vs_vip

- vs_port

- pool_name

- pool_member_port

resources:

bigip:

type: F5::BigIP::Device

properties:

ip: { get_param: bigip_fip }

username: { get_param: bigip_un }

password: { get_param: bigip_pw }

partition:

type: F5::Sys::Partition

depends_on: bigip

properties:

bigip_server: { get_resource: bigip }

iapp_service:

type: F5::Sys::iAppService

depends_on: iapp_template

properties:

bigip_server: { get_resource: bigip }

partition: { get_resource: partition }

template_name: alb_templ

traffic_group: /Common/traffic-group-local-only

iapp_template:

type: F5::Sys::iAppCompositeTemplate

depends_on: partition

properties:

bigip_server: { get_resource: bigip }

partition: { get_resource: partition }

requires_modules: [ ltm ]

implementation:

str_replace:

params:

__partition__: Common

__pool_name__: { get_param: pool_name }

__vs_name__: { get_param: vs_name }

__vip__: { get_param: vs_vip }

__vs_port__: { get_param: vs_port }

__rs_port__: { get_param: pool_member_port }

__rs_ip__: 11.0.0.10

tmsh::create {

ltm pool /__partition__/__pool_name__

load-balancing-mode least-connections-node

members replace-all-with {

__rs_ip__:__rs_port__ {

address __rs_ip__

}

tmsh::create {

ltm virtual /__partition__/__vs_name__

connection-limit 1

destination /__partition__/__vip__:__vs_port__

mask 255.255.255.255

pool /__partition__/__pool_name__

profiles replace-all-with {

/Common/clientssl {

context clientside

}

source 0.0.0.0/0

source-address-translation {

type automap

}

translate-address enabled

translate-port enabled

vlans replace-all-with {

/Common/external

}

vlans-enabled

}

tmsh::create {

ltm virtual-address /__partition__/__vip__

address __vip__

arp enabled

icmp-echo enabled

mask 255.255.255.255

traffic-group traffic-group-1

}

presentation: |

section say_hello {

message intro "This template deploys a virtual server and a pool with two members."

}

[root@controller heat(keystone_fulladmin)]$ cat deploy-lb-params.yaml 
parameters:
  bigip_un: admin
  bigip_pw: admin
  vs_name: virtual_server_heat
  pool_name: pool_heat
  bigip_fip: 192.168.214.253
  vs_vip: 6.7.8.9
  vs_port: 443
  pool_member_port: 8080

1

2

3

4

5

6

7

8

9

10

[root@controller heat(keystone_fulladmin)]$ cat deploy-lb-params.yaml

parameters:

bigip_un: admin

bigip_pw: admin

vs_name: virtual_server_heat

pool_name: pool_heat

bigip_fip: 192.168.214.253

vs_vip: 6.7.8.9

vs_port: 443

pool_member_port: 8080

openstack stack create -t deploy-lb.yaml -e deploy-lb-params.yaml f5-heat-stack

1月 13, 2017

Mitaka Openstack 排错备忘

作者纳米在化云为雨/Openstack 标签 mitaka, ml2, openstack, vxlan

问题1：安装mitaka并安装F5 agent后，设置F5 agent的配置中tunnel类型为vxlan 在openstack中创建网络，并创建loadbalancer，发现在F5上自动创建的tunnel是gre的阅读更多

7月 27, 2016

Openstack Mitaka 在Centos7上的自动化安装

作者纳米在化云为雨/Openstack 标签 centos7, mitaka, openstack

[danger]M版本已经不再支持，centos已经从安装源中去除M版本[/danger] 1.虚机三个网卡，网卡1 管理网络 host-only，网卡2 可上网 public internet，网卡3 opensta阅读更多

6月 25, 2015

Neutron/DVR L2 Agent

作者纳米在化云为雨/Openstack 标签 dvr, openstack

https://wiki.openstack.org/wiki/Neutron/DVR_L2_Agent L2 Interaction with Plugin and L3 Agent L2 OVS Agent initialization During initialization the L2 OV阅读更多

5月 15, 2015

VXLAN与flat网络共存测试模型

作者纳米在化云为雨/Openstack 标签 flat, openstack, provider network, VLAN

受限于实体网络以及主机网卡，利用em2接口作为vm的流量接口，该接口所在网络以vxlan 网络运行，同时compute主机的另一个接口em1配置为支持openstack flat网络，这样可以在openstack内部起一个flat类型网络，该网络还可以顺便作为L3 agent的external 网络。

5月 14, 2015

Openstack L3-VXLAN网络与 F5 LBaaS 协作之多外部BIGIP(ICEHOUSE)及同一外部F5支持多租户测试

作者纳米在化云为雨/Openstack 标签 bigip, cloud, lbaas

多外部F5情况下，F5目前的lbaas agent采用的是 1 agent 对 1（套）F5，因此在openstack里起多个 f5-bigip-lbaas-agent 服务实例

5月 13, 2015

ovs patch port 与 linux veth方式下传输性能对比

作者纳米在化云为雨/Openstack 标签 openvswitch, veth

http://www.opencloudblog.com/?p=386 The Openvswitch installed on a Linux system provides the feature to configure multiple bridges. Multiple OVS bridges b阅读更多

5月 13, 2015

【转】openstack 的vlan配置方式

作者纳米在化云为雨/Openstack

http://www.opencloudblog.com/?p=460 http://www.s3it.uzh.ch/blog/openstack-neutron-vlan/

5月 13, 2015

观察openstack中VXLAN的flows（Icehouse，ubuntu14.04）

作者纳米在化云为雨/Openstack 标签 openstack, vxlan

首先观察一下br-tun的接口，可以看到 -接口1是与br-int互联的口 -接口2是到10.1.1.145的tunnel接口 -接口3是到10.1.1.5的tunnel接口最后一个local是内部接阅读更多

5月 13, 2015

Ubuntu版本对openstack支持情况

作者纳米在化云为雨/Openstack

https://wiki.ubuntu.com/ServerTeam/CloudArchive

5月 13, 2015

Icehouse Vxlan 配置

作者纳米在化云为雨/Openstack 标签 F5, lbaas, openstack, vxlan

root@controller-network:/home/gavin# cat /etc/neutron/neutron.conf | egrep -v "^#|^$"
[DEFAULT]
state_path = /var/lib/neutron
lock_path = $state_path/lock
core_plugin = ml2
service_plugins = router,lbaas
auth_strategy = keystone
allow_overlapping_ips = True
rpc_backend = neutron.openstack.common.rpc.impl_kombu
rabbit_host = 10.1.1.5
notification_driver = neutron.openstack.common.notifier.rpc_notifier
f5_loadbalancer_pool_scheduler_driver = neutron.services.loadbalancer.drivers.f5.agent_scheduler.TenantScheduler
notify_nova_on_port_status_changes = True
notify_nova_on_port_data_changes = True
nova_url = http://10.1.1.5:8774/v2
nova_admin_username = nova
nova_admin_tenant_id = f4c275fc67c2455fb02044bcba1230b9
nova_admin_password = service_pass
nova_admin_auth_url = http://10.1.1.5:35357/v2.0
[quotas]
[agent]
root_helper = sudo /usr/bin/neutron-rootwrap /etc/neutron/rootwrap.conf
[keystone_authtoken]
auth_host = 10.1.1.5
auth_port = 35357
auth_uri = http://10.1.1.5:5000
auth_protocol = http
admin_tenant_name = service
admin_user = neutron
admin_password = service_pass
signing_dir = $state_path/keystone-signing
[database]
connection = mysql://neutron:NEUTRON_DBPASS@10.1.1.5/neutron
[service_providers]
service_provider=LOADBALANCER:F5:neutron.services.loadbalancer.drivers.f5.plugin_driver.F5PluginDriver:default

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

root@controller-network:/home/gavin# cat /etc/neutron/neutron.conf | egrep -v "^#|^$"

[DEFAULT]

state_path = /var/lib/neutron

lock_path = $state_path/lock

core_plugin = ml2

service_plugins = router,lbaas

auth_strategy = keystone

allow_overlapping_ips = True

rpc_backend = neutron.openstack.common.rpc.impl_kombu

rabbit_host = 10.1.1.5

notification_driver = neutron.openstack.common.notifier.rpc_notifier

f5_loadbalancer_pool_scheduler_driver = neutron.services.loadbalancer.drivers.f5.agent_scheduler.TenantScheduler

notify_nova_on_port_status_changes = True

notify_nova_on_port_data_changes = True

nova_url = http://10.1.1.5:8774/v2

nova_admin_username = nova

nova_admin_tenant_id = f4c275fc67c2455fb02044bcba1230b9

nova_admin_password = service_pass

nova_admin_auth_url = http://10.1.1.5:35357/v2.0

[quotas]

[agent]

root_helper = sudo /usr/bin/neutron-rootwrap /etc/neutron/rootwrap.conf

[keystone_authtoken]

auth_host = 10.1.1.5

auth_port = 35357

auth_uri = http://10.1.1.5:5000

auth_protocol = http

admin_tenant_name = service

admin_user = neutron

admin_password = service_pass

signing_dir = $state_path/keystone-signing

[database]

connection = mysql://neutron:NEUTRON_DBPASS@10.1.1.5/neutron

[service_providers]

service_provider=LOADBALANCER:F5:neutron.services.loadbalancer.drivers.f5.plugin_driver.F5PluginDriver:default

root@controller-network:/home/gavin# cat /etc/neutron/plugins/ml2/ml2_conf.ini | egrep -v "^#|^$"
[ml2]
type_drivers = vxlan
tenant_network_types = vxlan
mechanism_drivers = openvswitch
[ml2_type_flat]
[ml2_type_vlan]
[ml2_type_gre]
tunnel_id_ranges = 1:1000
[ml2_type_vxlan]
vni_ranges = 65537:69999
[ovs]
local_ip = 10.1.1.5
tunnel_type = vxlan
tunnel_bridge = br-tun
integration_bridge = br-int
tunnel_id_ranges = 65537:69999
tenant_network_type = vxlan
enable_tunneling = true
[agent]
root_helper = sudo neutron-rootwrap /etc/neutron/rootwrap.conf
tunnel_types = vxlan
vxlan_udp_port = 4789
l2_population = False
[securitygroup]
enable_security_group = True
firewall_driver = neutron.agent.linux.iptables_firewall.OVSHybridIptablesFirewallDriver

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

root@controller-network:/home/gavin# cat /etc/neutron/plugins/ml2/ml2_conf.ini | egrep -v "^#|^$"

[ml2]

type_drivers = vxlan

tenant_network_types = vxlan

mechanism_drivers = openvswitch

[ml2_type_flat]

[ml2_type_vlan]

[ml2_type_gre]

tunnel_id_ranges = 1:1000

[ml2_type_vxlan]

vni_ranges = 65537:69999

[ovs]

local_ip = 10.1.1.5

tunnel_type = vxlan

tunnel_bridge = br-tun

integration_bridge = br-int

tunnel_id_ranges = 65537:69999

tenant_network_type = vxlan

enable_tunneling = true

[agent]

root_helper = sudo neutron-rootwrap /etc/neutron/rootwrap.conf

tunnel_types = vxlan

vxlan_udp_port = 4789

l2_population = False

[securitygroup]

enable_security_group = True

firewall_driver = neutron.agent.linux.iptables_firewall.OVSHybridIptablesFirewallDriver

root@compute:/home/gavin#  cat /etc/neutron/plugins/ml2/ml2_conf.ini | egrep -v "^#|^$"
[ml2]
type_drivers = vxlan
tenant_network_types = vxlan
mechanism_drivers = openvswitch
[ml2_type_flat]
[ml2_type_vlan]
[ml2_type_gre]
tunnel_id_ranges = 1:1000
[ml2_type_vxlan]
vni_ranges = 65537:69999
[ovs]
local_ip = 10.1.1.6
tunnel_type = vxlan
tunnel_bridge = br-tun
integration_bridge = br-int
tunnel_id_ranges = 65537:69999
tenant_network_type = vxlan
enable_tunneling = true
[agent]
root_helper = sudo neutron-rootwrap /etc/neutron/rootwrap.conf
tunnel_types = vxlan
vxlan_udp_port = 4789
l2_population = False
[securitygroup]
enable_security_group = True
firewall_driver = neutron.agent.linux.iptables_firewall.OVSHybridIptablesFirewallDriver

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

root@compute:/home/gavin# cat /etc/neutron/plugins/ml2/ml2_conf.ini | egrep -v "^#|^$"

[ml2]

type_drivers = vxlan

tenant_network_types = vxlan

mechanism_drivers = openvswitch

[ml2_type_flat]

[ml2_type_vlan]

[ml2_type_gre]

tunnel_id_ranges = 1:1000

[ml2_type_vxlan]

vni_ranges = 65537:69999

[ovs]

local_ip = 10.1.1.6

tunnel_type = vxlan

tunnel_bridge = br-tun

integration_bridge = br-int

tunnel_id_ranges = 65537:69999

tenant_network_type = vxlan

enable_tunneling = true

[agent]

root_helper = sudo neutron-rootwrap /etc/neutron/rootwrap.conf

tunnel_types = vxlan

vxlan_udp_port = 4789

l2_population = False

[securitygroup]

enable_security_group = True

firewall_driver = neutron.agent.linux.iptables_firewall.OVSHybridIptablesFirewallDriver

如果把上面的ovs配置中的l2_population 设阅读更多

分类目录化云为雨/Openstack