fuel-plugin-nsxv/doc/user/source/usage.rst

Usage

Easiest way to check that plugin works as expected would be trying to create network or router using neutron command line client:

[root@nailgun ~]# ssh node-4    # node-4 is a controller node
root@node-4:~# . openrc
root@node-4:~# neutron router-create r1

You can monitor plugin actions in /var/log/neutron/server.log and see how edges appear in list of Networking & Security -> NSX Edges pane in vSphere Web Client. If you see error messages check Troubleshooting <troubleshooting> section.

VXLAN MTU considerations

The VXLAN protocol is used for L2 logical switching across ESXi hosts. VXLAN adds additional data to the packet, please consider to increase MTU size on network equipment that is connected to ESXi hosts.

Consider following calculation when settings MTU size:

Outer IPv4 header == 20 bytes

Outer UDP header == 8 bytes

VXLAN header == 8 bytes

Inner Ethernet frame == 1518 (14 bytes header, 4 bytes 802.1q header, 1500 Payload)

Summarizing all of these we get 1554 bytes. Consider increasing MTU on network hardware up to 1600 bytes (default MTU value when you are configuring VXLAN on ESXi hosts during Host Preparation step).

Instances usage notes

Instances that you run in OpenStack cluster with vCenter and NSXv must have VMware Tools installed, otherwise there will be no connectivity and security groups functionality.

Neutron usage notes

The only way to create distributed router is to use neutron CLI tool:

$ neutron router-create dvr --distributed True

Creation of exclusive tenant router is not supported in OpenStack dashboard (Horizon). You can create exclusive router using Neutron CLI tool:

$ neutron router-create DbTierRouter-exclusive --router_type exclusive

During creation of external network for tenants you must specify physical network (--provider:physical_network parameter) that will be used to carry VM traffic into physical network segment. For Neutron with NSX plugin this parameter must be set to MoRef ID of portgroup which provides connectivity with physical network to NSX edge nodes.

$ neutron net-create External --router:external --provider:physical_network network-222

Starting from version 2.0.0 plugin enables Neutron load balancing functionality and enables it in OpenStack dashboard.

Note

Load balancing functionality requires attachment of an exclusive or distributed router to the subnet prior to provisioning of an load balancer.

Create exclusive or distributed router and connect it to subnet.

$ neutron router-create --router_type exclusive r1
$ neutron router-interface-add r1 private-subnet

Create servers.

$ nova boot --image <image-uuid> --flavor m1.small www1
$ nova boot --image <image-uuid> --flavor m1.small www2

Create a load balancer pool.

$ neutron lb-pool-create --lb-method ROUND_ROBIN --protocol HTTP --name http-pool \
      --subnet-id <private-subnet-id>

Create members.

$ neutron lb-member-create --address <www1-ip> --protocol-port 80 http-pool
$ neutron lb-member-create --address <www2-ip> --protocol-port 80 http-pool

Create a virtual IP address.

$ neutron lb-vip-create --name lb_vip --subnet-id <private-subnet-id> \
      --protocol-port 80 --protocol HTTP http-pool

Allocate floating IP and associate it with VIP.

$ neutron floatingip-create <public-net> --port-id <vip-port-uuid>

Add rule that will allow HTTP traffic.

$ neutron security-group-rule-create --protocol tcp --port-range-min 80 \
      --port-range-max 80 default

Create a healthmonitor and associate it with the pool.

$ neutron lb-heathmonitor-create --delay 3 --type HTTP --max-retries 3
      --timeout 5 --pool http-pool
$ neutron lb-healthmonitor-associate <healthmonitor_name> http-pool