Mindmajix

Automatically assigning and modifying fixed networks of tenants – OpenStack

OpenStack Networking provides a rich tenant-facing API for defining network connectivity and addressing in the cloud. The OpenStack Networking project gives operators the ability to leverage different networking technologies to power their cloud networking. It is a virtual network service that provides a powerful API to define the network connectivity and addressing used by devices from other services, such as OpenStack Compute. It has a rich API which consists of the following components.

When using VlanManager to separate tenants, we can manually assign VLANs and network ranges to them by creating a secure multi-tenant environment. We can also have OpenStack to manage this association for us, so that when we create a project it automatically gets assigned to these details.

Getting started

To begin with, ensure you’re logged in to the Controller server (our OpenStack VirtualBox Virtual Machine, controller, created in , Starting OpenStack Compute). If this was created using Vagrant, you can log into this box using the following command:

vagrant ssh controller

How to achieve it…

Carry out the following steps to configure networking in OpenStack to automatically assign new tenants’ individual VLANs and private (fixed) IP ranges:

  • In the file /etc/nova/nova.conf, ensure there is a flag called vlan_start with a VLAN ID, for example:
vlan_start=100
  • We can now create a range of networks, each with 256 addresses available, by issuing the following command:
sudo nova-manage network create \
--num_networks=10 \ --
network_size=256 \ --
fixed_range_v4=10.0.0.0/8 \ --
label=auto
  • This creates 10 networks, with 256 IP addresses starting from 0.0.0/24 to 10.0.9.0/24 and starting from VLAN ID 100 to VLAN ID 110.

Tip

You can specify an alternative VLAN start ID on the command line by adding in the —vlan=id option, where id is a number.

How it works…

By specifying the —num_networks option and specifying the —network_size option (the number of IPs in each of the created networks), we can tell our OpenStack environment to create multiple networks within the range specified by — fixed_range_v4. When projects are created now, rather than having to manually associate an address range with a tenant, they are automatically assigned a VLAN, starting from the –vlan_start ID, as specified in /etc/nova/nova.conf.

Modifying a tenant’s fixed network

To ensure that our OpenStack environment is able to separate traffic from one tenant to another, we assign different fixed ranges to each. When a fixed network is no longer required, or we want to assign a particular tenant to a specific network, we can use the nova-manage command to modify these details.

Getting ready

To begin with, ensure you’re logged in to the OpenStack API server as well as to a client that can access the keystone environment.

How to do it…

To assign a particular network to a tenant, carry out the following steps:

  • On a client that has access to the keystone command, run the following commands to list the projects available:
# Use the admin token
export ENDPOINT=172.16.0.201 
export SERVICE_TOKEN=ADMIN
export SERVICE_ENDPOINT=http://${ENDPOINT}:35357/v2.0 
keystone tenant-list

An example of running the previous commands is as follows:

Screenshot_639

  • To view the list of networks and ranges available, issue the following command on an OpenStack API host:
sudo nova-manage network list

An example of running the previous commands is as follows:

Screenshot_640

  • The output shown lists network ranges and their associated project IDs. From this, we can see that we have 10.0.3.0/24 not assigned to a project (where it says None under the project column). To assign this network range to the development tenant, we issue the following commands:
sudo nova-manage network modify \ --
project=bfe40200d6ee413aa8062891a8270edb \ --
fixed_range=10.0.3.0/24
  • When we view the output now for that network range, we will have this project ID assigned to it and any instances spawned under this tenant will be assigned an address in this range.

How it works…

When configuring tenants in our OpenStack environment, it is recommended (although not a requirement) to have their own private (fixed) range assigned to them. This allows for those instances in each particular tenant to be kept separated through their different ranges along with appropriately set security group rules.

The syntax to modify a network is as follows:

nova-manage network modify \
      -- project=project_id \
      --fixed_range=ip_range


 

 

 


 

0 Responses on Automatically assigning and modifying fixed networks of tenants – OpenStack"

Leave a Message

Your email address will not be published. Required fields are marked *

Copy Rights Reserved © Mindmajix.com All rights reserved. Disclaimer.
Course Adviser

Fill your details, course adviser will reach you.