OpenStack的网络

网络类型有local,flat,vlan,vxlan。这些不同网络类型的实现借助于network driver,比如Linux Bridge和Open vSwitch。环境搭建需要多个网卡,控制节点或网络节点需要一个打通外网(集群外)的网卡。

local

local网络不支持跨节点,所有网络内的虚拟机通过bridge联通。bridge不会通过网卡对外通讯。

Linux Bridge – local

flat

flat网络和物理网卡一对一绑定。不存在一个物理网卡能支持多个flat网络的情况。flat可以跨节点。

每一个flat 网络都有一个dhcp服务,实际上是在网络控制节点上的一个独有的dnsmasq进程,每个进程独占一个网络namespace, 以便为某个flat网络单独服务。通过veth pair和flat bridge相连,打通两个namespace。

创建flat网络实例,openstack会根据该flat网络的设置分配一个port 包括ip和mac,并被dhcp获取,nova会给vm VIF虚拟网卡分配这个mac。获取ip的过程是这样的,dhcp进程通过虚拟网卡对监听到实例启动,vm会发广播到整个flat网络,dhcp的虚拟网卡会监听到,dhcp根据自己的host文件和mac查询到对应信息,然后分配ip子网掩码和地址租用期限。不同计算节点上的实例可以互相通信,每个节点上的bridge名称是一样的,每个flat网络绑定独占一个网卡。

Linux Bridge – flat

vlan

一个物理网卡可以支持多个vlan。vlan可以是夸节点的,每个节点的bridge名字相同。bridge通过vlan网口eth1.100与物理网卡联通。不同vlan可以通过路由router互通,可以是物理路由器,接到交换机之外,上面配置需要打通的所有vlan的网关。也可以是虚拟路由,首先建立一个虚拟网络,可以是flat类型的,通过物理网卡联通外网,存在于单独的network namespace,由veth pair打通和vlan bridge的通信。网关配置在路由到bridge的tap上。

和路由相连的所谓的外部网络,绑定一个控制节点的网卡,以后所有对外通信都通过这个网络,网络和网络之间用veth pair打通。

Linux Bridge – vlan

通过路由和相连接的外网可以设置某个vm的floating ip,floating IP 是配置在 router 提供网关的外网 interface 上的,而非 instance 中。所以路由保存有floating ip和网内ip的映射,是一种静态NAT。floating ip方便外网直接访问内网vm。

如果没有floating ip,向外的流量,路由会把内网ip转为自己的外网ip,当流量返回时,路由会找到相应的内网ip,这就是所谓的source NAT。

路由默认网关是外网网关,所有内网虚拟机访问除了内网的流量都会走向这个默认的网关。floating IP 配置到 router 的外网 interface qg-b8b32a88-03 上。

其他的比如dhcp和flat网络差不多。

Linux Bridge – vlan 路由 外网 两个内网的逻辑关系图

vxlan

由通道技术实现的虚拟网络。是基于三层网络协议实现的的二层协议。核心是vtep,一种虚拟网卡。基本思路,由vtep封装二层协议包打上vxlan标签,并用ip+udp封装,通过原始ip和终点ip打通通信。所以是一种基于网络之上的虚拟网络。

vxlan是一种虚拟二层网络,支持arp,不过在openstack中不需要广播,因为有代理会直接把ip mac的信息分享给虚拟机。

借助linux bridge 或 open vswitch可以实现vxlan。和vlan相比,vxlan适合更大规模的集群。其他的比如dhcp和router基本和vlan一样。

Linux Bridge vxlan

Security Group和FWaaS

这两种都是OpenStack的安全策略,都是通过iptables来实现的,前者是对特定虚拟机来设置的,后者是对整个定制网络的subnet指定的安全策略。可结合使用。

OpenStack LBaaS

OpenStack Loadbalance as a Service。方便搭建lb集群,默认HAProxy,可以选择其他。

需要一个lb server的虚拟机,这个lb server有一个VIP,是属于和集群(web server)相同网段的IP,在外围路由配置floating ip,这样集群外可通过floating ip访问lb。OpenStack界面支持lb的各种策略,第一次访问的策略,比如round robin,least connection,source ip。之后的session persistence策略比如source ip,http cookie,app cookie等。后两者是发送给客户端特定的cookie,比如srv,记录上次连接的server信息。

Open vSwitch

和Linux Bridge一样,Open vSwitch也可用来实现不同网络类型。不同的是,OVS有自己专有的网桥以及利用flow rule来隔离vlan,而不是Linux Bridge的veth1.100, eth1.101等vlan interface。
– br-int(integration),打通instance和其他虚拟网络设备
– br-ex(external),和网卡直连,打通和外网的通道
– br-tun(tunnel),只适用于基于tunnel技术的vxlan和GRE网络

OVS vlan


OVS vxlan

注:原创。图表来源于CloudMan

《OpenStack的网络》有448个想法

  1. Pingback: fpsouthnashua

  2. Pingback: sugotogo

  3. Pingback: jamesjean

  4. Pingback: thegfxlab

  5. Pingback: johnsonwedding

  6. Pingback: caspigas

  7. Pingback: eolziwf

  8. Pingback: medicinesnorx

  9. Pingback: hairulafiz

  10. Pingback: booyahsmomma

  11. Pingback: bestpricemoving

  12. Pingback: deluxeautosales

  13. Pingback: cikgudollah

  14. Pingback: stevierock

  15. Pingback: tecavuz

  16. Pingback: seoservicesdelhi

  17. Pingback: syndesmo

  18. Pingback: larosaviola

  19. Pingback: submitwebsites

  20. Pingback: spiritartists

  21. Pingback: alyadance

  22. Pingback: dhinfra

  23. Pingback: margaretowen

  24. Pingback: ds-flow

  25. Pingback: luxiform

  26. Pingback: gearandrack

  27. Pingback: croftmanor

  28. Pingback: heuermann

  29. Pingback: alniam

  30. Pingback: scrompany

  31. Pingback: myschoolinfo

  32. Pingback: sifaligidalar

  33. Pingback: depotwines

  34. Pingback: bluegoldmarketing

  35. Pingback: tommydalton

  36. Pingback: sitetraq

  37. Pingback: snapitf

  38. Pingback: sellmineralrights

  39. Pingback: mygohotels

  40. Pingback: tokensci

  41. Pingback: fluteringtone

  42. Pingback: schreibstube

  43. Pingback: lefouineur

  44. Pingback: gestiondenegocios

  45. Pingback: imaginexmedia

  46. Pingback: drachenshop

  47. Pingback: valoriel

  48. Pingback: eidmubarakwishes

  49. Pingback: polofutar

  50. Pingback: moltenmama

  51. Pingback: edicoesabm

  52. Pingback: mseteit

  53. Pingback: bushkim

  54. Pingback: stevedekay

  55. Pingback: vastewine

  56. Pingback: execedits

  57. Pingback: scifiindia

  58. Pingback: theassetedge

  59. Pingback: wanakahomes

  60. Pingback: sommarbutik

  61. Pingback: jimhfl

  62. Pingback: salluzfoods

  63. Pingback: bionutronics

  64. Pingback: raspberrypihacks

  65. Pingback: lvalverde

  66. Pingback: buckleyk

  67. Pingback: theicecreambucket

  68. Pingback: mathewslodge

  69. Pingback: reneecascarina

  70. Pingback: peruconelmundo

  71. Pingback: thephelpsgroup

  72. Pingback: atmosphile

  73. Pingback: ceosoul

  74. Pingback: communityzap

  75. Pingback: highgearelectric

  76. Pingback: resiliens

  77. Pingback: gmchevydealer

  78. Pingback: dudukner

  79. Pingback: housebaba

  80. Pingback: vicksfabs

  81. Pingback: agapcanada

  82. Pingback: infoadicciones

  83. Pingback: ilovejay

  84. Pingback: philippeelkaim

  85. Pingback: cairnsparency

  86. Pingback: postaim

  87. Pingback: biskstudio

  88. Pingback: cefashion

  89. Pingback: latestime

  90. Pingback: ebaumsnation

  91. Pingback: sbtribalfarms

  92. Pingback: cedizmir

  93. Pingback: lucomania

  94. Pingback: sinkaltim

  95. Pingback: serioussam

  96. Pingback: mamnbeb

  97. Pingback: adlimeira

  98. Pingback: ilovemage

  99. Pingback: ecovinowines

  100. Pingback: nuttours

  101. Pingback: aselresorthotel

  102. Pingback: maidsquadtx

  103. Pingback: canseidesercool

  104. Pingback: lwthai

  105. Pingback: boominets

  106. Pingback: jinteex

  107. Pingback: saglikara

  108. Pingback: sodmgmodels

  109. Pingback: haydayhacktoolz

  110. Pingback: cialisonlinegp

  111. Pingback: giftbowtique

  112. Pingback: chzsun

  113. Pingback: coffeecertified

  114. Pingback: desnichons

  115. Pingback: seasonalshoptips

  116. Pingback: virukshamtrust

  117. Pingback: calimercado

  118. Pingback: kuwaitwebinfo

  119. Pingback: ntrfanz

  120. Pingback: mumofthreeboys

  121. Pingback: caltav

  122. Pingback: valtercasini

  123. Pingback: hetkookboek

  124. Pingback: keralatourslane

  125. Pingback: merrakech

  126. Pingback: ninjapopgrip

  127. Pingback: vanelus

  128. Pingback: genericcialisfe

  129. Pingback: andthegiraffe

  130. Pingback: cranfordhairco

  131. Pingback: imwrks

  132. Pingback: aldarakuae

  133. Pingback: zeneventsja

  134. Pingback: homembt

  135. Pingback: tidyweekender

  136. Pingback: rightcoastranch

  137. Pingback: classfaqs

  138. Pingback: sikaikhabar

  139. Pingback: portalsituspoker

  140. Pingback: hyperkast

  141. Pingback: greaterkakinada

  142. Pingback: pdftoget

  143. Pingback: lahoreview

  144. Pingback: aragonya

  145. Pingback: snywlt

  146. Pingback: carasello

  147. Pingback: lapioo

  148. Pingback: lsdmuzic

  149. Pingback: jiaqi100

  150. Pingback: stephensng

  151. Pingback: theallegromovement

  152. Pingback: hyo-kin

  153. Pingback: jhrollover

  154. Pingback: frderoubaix

  155. Pingback: eastendprints

  156. Pingback: netformation

  157. Pingback: gbsmelaka

  158. Pingback: autumnimports

  159. Pingback: vedspace

  160. Pingback: lespitchousvoyagent

  161. Pingback: dramaindoxxi

  162. Pingback: viagzaibis

  163. Pingback: spartzmedia

  164. Pingback: fifa55hot

  165. Pingback: myprimevideotv

  166. Pingback: africannuaire

  167. Pingback: proevalua

  168. Pingback: sinjambi

  169. Pingback: oleotek

  170. Pingback: toptenofworld

  171. Pingback: emiratesphonenumber

  172. Pingback: synchroltd

  173. Pingback: profmaison

  174. Pingback: victorytelemedicine

  175. Pingback: edcialistop

  176. Pingback: luxpetco

  177. Pingback: celestebarcelona

  178. Pingback: dcrespond

  179. Pingback: anniebowco

  180. Pingback: surveier

  181. Pingback: tucamiseta

  182. Pingback: protozoaweb

  183. Pingback: novaapk

  184. Pingback: katalog-nasa

  185. Pingback: surfray

  186. Pingback: tvamazontv

  187. Pingback: rechanma

  188. Pingback: bitencore

  189. Pingback: brownfont

  190. Pingback: aegismultimedia

  191. Pingback: mt-amazon

  192. Pingback: dorichon

  193. Pingback: fildupuis

  194. Pingback: manbirsandhu

  195. Pingback: patelshopping

  196. Pingback: silifkeli

  197. Pingback: pagiaphat

  198. Pingback: holdingsahara

  199. Pingback: raulpastor

  200. Pingback: lakshmiprecastinn

  201. Pingback: vndsnkr

  202. Pingback: neilizur

  203. Pingback: mafhum-tech

  204. Pingback: dewapokerplay

  205. Pingback: stargiochi

  206. Pingback: srsearthing

  207. Pingback: chicagonano

  208. Pingback: chloroquinepack

  209. Pingback: dubai-developer

  210. Pingback: kucing-kelabu

  211. Pingback: photonaix

  212. Pingback: nosuvia

  213. Pingback: intellectivetech

  214. Pingback: celebritysweatnelly

  215. Pingback: lysj8

  216. Pingback: smefaculty

  217. Pingback: ainhoaart

  218. Pingback: tvmyprime

  219. Pingback: ahuela

  220. Pingback: agencemdc

  221. Pingback: obxpubcrawl

  222. Pingback: jetskilakehavasu

  223. Pingback: nguyenthinhaudio

  224. Pingback: homestorymarket

  225. Pingback: m-nortoncomsetup

  226. Pingback: paoaowjaisai

  227. Pingback: uppicfree

  228. Pingback: cassademaria

  229. Pingback: khangsneakers

  230. Pingback: kit963

  231. Pingback: sockeye-camp

  232. Pingback: viagrapoi

  233. Pingback: capilarspain

  234. Pingback: legitkushsuppliers

  235. Pingback: mobilestatstracker

  236. Pingback: fieldenergyllc

  237. Pingback: newcarlights

  238. Pingback: cialischeaponlinegt

  239. Pingback: ouchaz

  240. Pingback: redbasement

  241. Pingback: srankhala

  242. Pingback: asoonkhoon

  243. Pingback: pubspaces

  244. Pingback: ugibilisim

  245. Pingback: antsevak

  246. Pingback: lczbic

  247. Pingback: jacobperlowhospice

  248. Pingback: stanthonyshyd

  249. Pingback: otohortumdunyasi

  250. Pingback: mnfvtc

  251. Pingback: smithlevi

  252. Pingback: kit963

  253. Pingback: odt-pbj

  254. Pingback: sadlifebox

  255. Pingback: federalspare

  256. Pingback: malatyaneykursu

  257. Pingback: vfokus

  258. Pingback: theallegromovement

  259. Pingback: vgrspain

  260. Pingback: livechatklub4d

  261. Pingback: rcnutricion

  262. Pingback: arananeu

  263. Pingback: blincville

  264. Pingback: lipitormed

  265. Pingback: cagdasck

  266. Pingback: coprintpromo

  267. Pingback: viagrahuupup

  268. Pingback: cialisgrn

  269. Pingback: purplesagedesigns

  270. Pingback: villahomeinteriors

  271. Pingback: sockeye-camp

  272. Pingback: thedreamboxshop

  273. Pingback: lindblomgd

  274. Pingback: owendemocrats

  275. Pingback: expologtech

  276. Pingback: indian-superstar

  277. Pingback: cineseriestv

  278. Pingback: stkhaberleri

  279. Pingback: tadalafilalt

  280. Pingback: konanatural

  281. Pingback: njbulk

  282. Pingback: thecreagent

  283. Pingback: getesionow

  284. Pingback: nevaktar

  285. Pingback: basignon

  286. Pingback: doctordomson

  287. Pingback: getvviagragets

  288. Pingback: roundclip

  289. Pingback: soccerprorc

  290. Pingback: columbiagorgebnb

  291. Pingback: lutaniccreations

  292. Pingback: belgiansaison

  293. Pingback: tomcatmining

  294. Pingback: grieftheunspoken

  295. Pingback: ticklast

  296. Pingback: mytableq

  297. Pingback: sfmlondon

  298. Pingback: mysummervilleford

  299. Pingback: blueskydigi

  300. Pingback: mercedescsi

  301. Pingback: greenglobestaffing

  302. Pingback: gcclcareers

  303. Pingback: harbenpumps

  304. Pingback: tosseldorf

  305. Pingback: lamaisondemma

  306. Pingback: udecoder

  307. Pingback: tenzingnorgaymtb

  308. Pingback: ecrgrup

  309. Pingback: siefertmurphy

  310. Pingback: winstonmalta

  311. Pingback: fargovn

  312. Pingback: bcapalt

  313. Pingback: talcottcenter

  314. Pingback: jmlcomputers

  315. Pingback: sardstudios

  316. Pingback: sedfab

  317. Pingback: freedomqdro

  318. Pingback: guiacinefila

  319. Pingback: hiteauto

  320. Pingback: fermomia

  321. Pingback: fredmarvin

  322. Pingback: triplenickles

  323. Pingback: tildesheim

  324. Pingback: ctfohempcbd

  325. Pingback: sinspi

  326. Pingback: motobc

  327. Pingback: estatesdelray

  328. Pingback: bucumarket

  329. Pingback: cambridgeauto

  330. Pingback: fibuilders

  331. Pingback: visionitgroup

  332. Pingback: drivingmama

  333. Pingback: transcapins

  334. Pingback: caldreamapp

  335. Pingback: calmission

  336. Pingback: tuinvlangdh

  337. Pingback: debagliano

  338. Pingback: designinator

  339. Pingback: comunidadmh

  340. Pingback: leblogfm

  341. Pingback: aptarismrm

  342. Pingback: dmealliance

  343. Pingback: eurorumo

  344. Pingback: danbloom

  345. Pingback: requeil

  346. Pingback: einspurauto

  347. Pingback: acukinetics

  348. Pingback: doodadsinc

  349. Pingback: ascarov

  350. Pingback: vetteleader

  351. Pingback: dapasten

  352. Pingback: autodealsva

  353. Pingback: hpalmyros

  354. Pingback: alicecassidy

  355. Pingback: thocbdc

  356. Pingback: gestdom

  357. Pingback: bibleclues

  358. Pingback: hapustahl

  359. Pingback: corkcityyoga

  360. Pingback: techieva

  361. Pingback: pedsbif

  362. Pingback: postrom

  363. Pingback: eccucourse

  364. Pingback: laeamerica

  365. Pingback: boekstuk

  366. Pingback: mehrhost

  367. Pingback: juragon

  368. Pingback: tsilifeline

  369. Pingback: sagerllp

  370. Pingback: wewebla

  371. Pingback: aviurban

  372. Pingback: eklandia

  373. Pingback: sisdrog

  374. Pingback: encweddings

  375. Pingback: motorloaf

  376. Pingback: selectakaza

  377. Pingback: toruseurope

  378. Pingback: ncgrassfed

  379. Pingback: surfmorocco

  380. Pingback: jasonlinphoto

  381. Pingback: aiawyoming

  382. Pingback: segurosblog

  383. Pingback: saunasmith

  384. Pingback: baugeraete

  385. Pingback: brassmedia

  386. Pingback: actiocloud

  387. Pingback: supracables

  388. Pingback: simairway

  389. Pingback: reinery

  390. Pingback: ibmwsc

  391. Pingback: osbornenash

  392. Pingback: weareguthrie

  393. Pingback: notairegranby

  394. Pingback: blusealdoors

  395. Pingback: granne

  396. Pingback: qubacafe

  397. Pingback: stephenemay

  398. Pingback: berkleypak

  399. Pingback: fethiyemap

  400. Pingback: nanopose

  401. Pingback: delmarballet

  402. Pingback: erisfilms

  403. Pingback: flirtwithmen

  404. Pingback: sensepeanut

  405. Pingback: frankboddy

  406. Pingback: saveorpave

  407. Pingback: peggymyer

  408. Pingback: pariswin

  409. Pingback: feastdesign

  410. Pingback: onedayonefilm

  411. Pingback: bifudo

  412. Pingback: midtnbiz

  413. Pingback: hollymackler

  414. Pingback: destinydeal

  415. Pingback: montananest

  416. Pingback: polargy

  417. Pingback: hostelprague

  418. Pingback: carloscurbelo

  419. Pingback: niubvnp

  420. Pingback: blitzbarpdx

  421. Pingback: radassure

  422. Pingback: peggymayer

  423. Pingback: joshwoodward

  424. Pingback: sugiftofhope

  425. Pingback: sarksofrasi

  426. Pingback: swissneth

  427. Pingback: chscbd

  428. Pingback: cedartownchat

  429. Pingback: zoppecircus

  430. Pingback: oetopia

  431. Pingback: toisondeoro

  432. Pingback: palcapital

  433. Pingback: uticajobs

  434. Pingback: adecorar

  435. Pingback: wilfredagroup

  436. Pingback: painmm

  437. Pingback: usephoenix

  438. Pingback: oasouth

  439. Pingback: cschneebeck

  440. Pingback: amettis

  441. Pingback: lumistor

  442. Pingback: samangus

  443. Pingback: dieselusa

  444. Pingback: raphaelcruz

  445. Pingback: loadiq

  446. Pingback: hydrometry

  447. Pingback: predaktor

  448. Pingback: houseoftablas

发表评论