blob: b598241c78ac712cc5bee8935349eef5fb70d6db [file] [log] [blame]
Sean M. Collins2a242512016-05-03 09:03:09 -04001#!/bin/bash
2# Subnet IP version
3IP_VERSION=${IP_VERSION:-"4+6"}
4# Validate IP_VERSION
5if [[ $IP_VERSION != "4" ]] && [[ $IP_VERSION != "6" ]] && [[ $IP_VERSION != "4+6" ]]; then
6 die $LINENO "IP_VERSION must be either 4, 6, or 4+6"
7fi
8# Specify if the initial private and external networks should be created
9NEUTRON_CREATE_INITIAL_NETWORKS=${NEUTRON_CREATE_INITIAL_NETWORKS:-True}
10
11## Provider Network Information
12PROVIDER_SUBNET_NAME=${PROVIDER_SUBNET_NAME:-"provider_net"}
13IPV6_PROVIDER_SUBNET_NAME=${IPV6_PROVIDER_SUBNET_NAME:-"provider_net_v6"}
14IPV6_PROVIDER_FIXED_RANGE=${IPV6_PROVIDER_FIXED_RANGE:-}
15IPV6_PROVIDER_NETWORK_GATEWAY=${IPV6_PROVIDER_NETWORK_GATEWAY:-}
16
17PUBLIC_BRIDGE=${PUBLIC_BRIDGE:-br-ex}
Ihar Hrachyshka7b5c7dc2016-07-15 20:17:13 +020018PUBLIC_BRIDGE_MTU=${PUBLIC_BRIDGE_MTU:-1500}
Sean M. Collins2a242512016-05-03 09:03:09 -040019
Kevin Benton1554ade2016-07-22 09:40:19 -070020# If Q_ASSIGN_GATEWAY_TO_PUBLIC_BRIDGE=True, assign the gateway IP of the public
21# subnet to the public bridge interface even if Q_USE_PROVIDERNET_FOR_PUBLIC is
22# used.
23Q_ASSIGN_GATEWAY_TO_PUBLIC_BRIDGE=${Q_ASSIGN_GATEWAY_TO_PUBLIC_BRIDGE:-True}
24
Sean M. Collins2a242512016-05-03 09:03:09 -040025# If Q_USE_PUBLIC_VETH=True, create and use a veth pair instead of
26# PUBLIC_BRIDGE. This is intended to be used with
27# Q_USE_PROVIDERNET_FOR_PUBLIC=True.
28Q_USE_PUBLIC_VETH=${Q_USE_PUBLIC_VETH:-False}
29Q_PUBLIC_VETH_EX=${Q_PUBLIC_VETH_EX:-veth-pub-ex}
30Q_PUBLIC_VETH_INT=${Q_PUBLIC_VETH_INT:-veth-pub-int}
31
vsaienkod8942212016-05-13 12:51:30 +030032# The next variable is configured by plugin
Sean M. Collins2a242512016-05-03 09:03:09 -040033# e.g. _configure_neutron_l3_agent or lib/neutron_plugins/*
34#
Sean M. Collins2a242512016-05-03 09:03:09 -040035# L3 routers exist per tenant
36Q_L3_ROUTER_PER_TENANT=${Q_L3_ROUTER_PER_TENANT:-True}
37
38
39# Use flat providernet for public network
40#
41# If Q_USE_PROVIDERNET_FOR_PUBLIC=True, use a flat provider network
42# for external interface of neutron l3-agent. In that case,
43# PUBLIC_PHYSICAL_NETWORK specifies provider:physical_network value
44# used for the network. In case of ofagent, you should add the
45# corresponding entry to your OFAGENT_PHYSICAL_INTERFACE_MAPPINGS.
46# For openvswitch agent, you should add the corresponding entry to
47# your OVS_BRIDGE_MAPPINGS.
48#
49# eg. (ofagent)
50# Q_USE_PROVIDERNET_FOR_PUBLIC=True
51# Q_USE_PUBLIC_VETH=True
52# PUBLIC_PHYSICAL_NETWORK=public
53# OFAGENT_PHYSICAL_INTERFACE_MAPPINGS=public:veth-pub-int
54#
55# eg. (openvswitch agent)
56# Q_USE_PROVIDERNET_FOR_PUBLIC=True
57# PUBLIC_PHYSICAL_NETWORK=public
58# OVS_BRIDGE_MAPPINGS=public:br-ex
Kevin Benton1554ade2016-07-22 09:40:19 -070059Q_USE_PROVIDERNET_FOR_PUBLIC=${Q_USE_PROVIDERNET_FOR_PUBLIC:-True}
Sean M. Collins2a242512016-05-03 09:03:09 -040060PUBLIC_PHYSICAL_NETWORK=${PUBLIC_PHYSICAL_NETWORK:-public}
61
62# Generate 40-bit IPv6 Global ID to comply with RFC 4193
63IPV6_GLOBAL_ID=`uuidgen | sed s/-//g | cut -c 23- | sed -e "s/\(..\)\(....\)\(....\)/\1:\2:\3/"`
64
65# IPv6 gateway and subnet defaults, in case they are not customized in localrc
66IPV6_RA_MODE=${IPV6_RA_MODE:-slaac}
67IPV6_ADDRESS_MODE=${IPV6_ADDRESS_MODE:-slaac}
68IPV6_PUBLIC_SUBNET_NAME=${IPV6_PUBLIC_SUBNET_NAME:-ipv6-public-subnet}
69IPV6_PRIVATE_SUBNET_NAME=${IPV6_PRIVATE_SUBNET_NAME:-ipv6-private-subnet}
70FIXED_RANGE_V6=${FIXED_RANGE_V6:-fd$IPV6_GLOBAL_ID::/64}
Brian Haley31813e92016-08-22 15:39:22 -040071IPV6_PRIVATE_NETWORK_GATEWAY=${IPV6_PRIVATE_NETWORK_GATEWAY:-}
Sean M. Collins2a242512016-05-03 09:03:09 -040072IPV6_PUBLIC_RANGE=${IPV6_PUBLIC_RANGE:-2001:db8::/64}
73IPV6_PUBLIC_NETWORK_GATEWAY=${IPV6_PUBLIC_NETWORK_GATEWAY:-2001:db8::2}
74IPV6_ROUTER_GW_IP=${IPV6_ROUTER_GW_IP:-2001:db8::1}
75
76# Gateway and subnet defaults, in case they are not customized in localrc
Brian Haley31813e92016-08-22 15:39:22 -040077NETWORK_GATEWAY=${NETWORK_GATEWAY:-}
78PUBLIC_NETWORK_GATEWAY=${PUBLIC_NETWORK_GATEWAY:-}
Sean M. Collins2a242512016-05-03 09:03:09 -040079PRIVATE_SUBNET_NAME=${PRIVATE_SUBNET_NAME:-"private-subnet"}
80PUBLIC_SUBNET_NAME=${PUBLIC_SUBNET_NAME:-"public-subnet"}
81
82# Subnetpool defaults
83SUBNETPOOL_NAME=${SUBNETPOOL_NAME:-"shared-default-subnetpool"}
84
85SUBNETPOOL_PREFIX_V4=${SUBNETPOOL_PREFIX_V4:-10.0.0.0/8}
86SUBNETPOOL_PREFIX_V6=${SUBNETPOOL_PREFIX_V6:-2001:db8:8000::/48}
87
88SUBNETPOOL_SIZE_V4=${SUBNETPOOL_SIZE_V4:-24}
89SUBNETPOOL_SIZE_V6=${SUBNETPOOL_SIZE_V6:-64}
90
Monty Taylorc12d1d92016-08-23 19:07:57 -050091default_route_dev=$(ip route | grep ^default | awk '{print $5}')
92die_if_not_set $LINENO default_route_dev "Failure retrieving default route device"
93
Sean M. Collins2a242512016-05-03 09:03:09 -040094function _determine_config_l3 {
Angus Leesa1c70f22016-05-31 14:43:14 +100095 local opts="--config-file $NEUTRON_CONF --config-file $Q_L3_CONF_FILE"
Sean M. Collins2a242512016-05-03 09:03:09 -040096 echo "$opts"
97}
98
99function _configure_neutron_l3_agent {
Sean M. Collins2a242512016-05-03 09:03:09 -0400100
101 cp $NEUTRON_DIR/etc/l3_agent.ini.sample $Q_L3_CONF_FILE
102
Sean M. Collins2a242512016-05-03 09:03:09 -0400103 iniset $Q_L3_CONF_FILE DEFAULT debug $ENABLE_DEBUG_LOG_LEVEL
Sean M. Collinsa2ed0552016-05-11 15:35:10 -0400104 iniset $Q_L3_CONF_FILE AGENT root_helper "$Q_RR_COMMAND"
Sean M. Collins2a242512016-05-03 09:03:09 -0400105 if [[ "$Q_USE_ROOTWRAP_DAEMON" == "True" ]]; then
Sean M. Collinsa2ed0552016-05-11 15:35:10 -0400106 iniset $Q_L3_CONF_FILE AGENT root_helper_daemon "$Q_RR_DAEMON_COMMAND"
Sean M. Collins2a242512016-05-03 09:03:09 -0400107 fi
108
109 _neutron_setup_interface_driver $Q_L3_CONF_FILE
110
Stephen Finucane24e29f22016-06-15 14:31:51 +0100111 neutron_plugin_configure_l3_agent $Q_L3_CONF_FILE
Sean M. Collins2a242512016-05-03 09:03:09 -0400112
Sean Dague6a008fa2016-08-03 15:09:01 -0400113 # If we've given a PUBLIC_INTERFACE to take over, then we assume
114 # that we can own the whole thing, and privot it into the OVS
115 # bridge. If we are not, we're probably on a single interface
116 # machine, and we just setup NAT so that fixed guests can get out.
117 if [[ -n "$PUBLIC_INTERFACE" ]]; then
118 _move_neutron_addresses_route "$PUBLIC_INTERFACE" "$OVS_PHYSICAL_BRIDGE" True False "inet"
Sean M. Collins2a242512016-05-03 09:03:09 -0400119
Sean Dague6a008fa2016-08-03 15:09:01 -0400120 if [[ $(ip -f inet6 a s dev "$PUBLIC_INTERFACE" | grep -c 'global') != 0 ]]; then
121 _move_neutron_addresses_route "$PUBLIC_INTERFACE" "$OVS_PHYSICAL_BRIDGE" False False "inet6"
122 fi
123 else
Monty Taylorc12d1d92016-08-23 19:07:57 -0500124 sudo iptables -t nat -A POSTROUTING -o $default_route_dev -s $FLOATING_RANGE -j MASQUERADE
Sean M. Collins2a242512016-05-03 09:03:09 -0400125 fi
126}
127
128# Explicitly set router id in l3 agent configuration
129function _neutron_set_router_id {
130 if [[ "$Q_L3_ROUTER_PER_TENANT" == "False" ]]; then
131 iniset $Q_L3_CONF_FILE DEFAULT router_id $ROUTER_ID
132 fi
133}
134
135# Get ext_gw_interface depending on value of Q_USE_PUBLIC_VETH
136function _neutron_get_ext_gw_interface {
137 if [[ "$Q_USE_PUBLIC_VETH" == "True" ]]; then
138 echo $Q_PUBLIC_VETH_EX
139 else
140 # Disable in-band as we are going to use local port
141 # to communicate with VMs
142 sudo ovs-vsctl set Bridge $PUBLIC_BRIDGE \
143 other_config:disable-in-band=true
144 echo $PUBLIC_BRIDGE
145 fi
146}
147
148function create_neutron_initial_network {
149 local project_id
150 project_id=$(openstack project list | grep " demo " | get_field 1)
151 die_if_not_set $LINENO project_id "Failure retrieving project_id for demo"
152
153 # Allow drivers that need to create an initial network to do so here
154 if type -p neutron_plugin_create_initial_network_profile > /dev/null; then
155 neutron_plugin_create_initial_network_profile $PHYSICAL_NETWORK
156 fi
157
158 if is_provider_network; then
159 die_if_not_set $LINENO PHYSICAL_NETWORK "You must specify the PHYSICAL_NETWORK"
160 die_if_not_set $LINENO PROVIDER_NETWORK_TYPE "You must specify the PROVIDER_NETWORK_TYPE"
161 NET_ID=$(neutron --os-cloud devstack-admin --os-region "$REGION_NAME" net-create $PHYSICAL_NETWORK --tenant_id $project_id --provider:network_type $PROVIDER_NETWORK_TYPE --provider:physical_network "$PHYSICAL_NETWORK" ${SEGMENTATION_ID:+--provider:segmentation_id $SEGMENTATION_ID} --shared | grep ' id ' | get_field 2)
162 die_if_not_set $LINENO NET_ID "Failure creating NET_ID for $PHYSICAL_NETWORK $project_id"
163
164 if [[ "$IP_VERSION" =~ 4.* ]]; then
165 SUBNET_ID=$(neutron --os-cloud devstack-admin --os-region "$REGION_NAME" subnet-create --tenant_id $project_id --ip_version 4 ${ALLOCATION_POOL:+--allocation-pool $ALLOCATION_POOL} --name $PROVIDER_SUBNET_NAME --gateway $NETWORK_GATEWAY $NET_ID $FIXED_RANGE | grep ' id ' | get_field 2)
166 die_if_not_set $LINENO SUBNET_ID "Failure creating SUBNET_ID for $PROVIDER_SUBNET_NAME $project_id"
167 fi
168
Sean M. Collinse34ec992016-06-07 12:36:50 -0400169 if [[ "$IP_VERSION" =~ .*6 ]]; then
170 die_if_not_set $LINENO IPV6_PROVIDER_FIXED_RANGE "IPV6_PROVIDER_FIXED_RANGE has not been set, but Q_USE_PROVIDERNET_FOR_PUBLIC is true and IP_VERSION includes 6"
171 die_if_not_set $LINENO IPV6_PROVIDER_NETWORK_GATEWAY "IPV6_PROVIDER_NETWORK_GATEWAY has not been set, but Q_USE_PROVIDERNET_FOR_PUBLIC is true and IP_VERSION includes 6"
Sean M. Collins2a242512016-05-03 09:03:09 -0400172 SUBNET_V6_ID=$(neutron --os-cloud devstack-admin --os-region "$REGION_NAME" subnet-create --tenant_id $project_id --ip_version 6 --ipv6-address-mode $IPV6_ADDRESS_MODE --gateway $IPV6_PROVIDER_NETWORK_GATEWAY --name $IPV6_PROVIDER_SUBNET_NAME $NET_ID $IPV6_PROVIDER_FIXED_RANGE | grep 'id' | get_field 2)
173 die_if_not_set $LINENO SUBNET_V6_ID "Failure creating SUBNET_V6_ID for $IPV6_PROVIDER_SUBNET_NAME $project_id"
174 fi
175
176 if [[ $Q_AGENT == "openvswitch" ]]; then
177 sudo ip link set $OVS_PHYSICAL_BRIDGE up
178 sudo ip link set br-int up
179 sudo ip link set $PUBLIC_INTERFACE up
180 fi
181 else
182 NET_ID=$(neutron --os-cloud devstack-admin --os-region "$REGION_NAME" net-create --tenant-id $project_id "$PRIVATE_NETWORK_NAME" | grep ' id ' | get_field 2)
183 die_if_not_set $LINENO NET_ID "Failure creating NET_ID for $PRIVATE_NETWORK_NAME $project_id"
184
185 if [[ "$IP_VERSION" =~ 4.* ]]; then
186 # Create IPv4 private subnet
187 SUBNET_ID=$(_neutron_create_private_subnet_v4 $project_id)
188 fi
189
190 if [[ "$IP_VERSION" =~ .*6 ]]; then
191 # Create IPv6 private subnet
192 IPV6_SUBNET_ID=$(_neutron_create_private_subnet_v6 $project_id)
193 fi
194 fi
195
Sean M. Collinsc35110e2016-05-18 10:38:51 -0400196 if is_networking_extension_supported "router" && is_networking_extension_supported "external-net"; then
Sean M. Collins2a242512016-05-03 09:03:09 -0400197 # Create a router, and add the private subnet as one of its interfaces
198 if [[ "$Q_L3_ROUTER_PER_TENANT" == "True" ]]; then
199 # create a tenant-owned router.
200 ROUTER_ID=$(neutron --os-cloud devstack-admin --os-region "$REGION_NAME" router-create --tenant-id $project_id $Q_ROUTER_NAME | grep ' id ' | get_field 2)
201 die_if_not_set $LINENO ROUTER_ID "Failure creating ROUTER_ID for $project_id $Q_ROUTER_NAME"
202 else
203 # Plugin only supports creating a single router, which should be admin owned.
204 ROUTER_ID=$(neutron --os-cloud devstack-admin --os-region "$REGION_NAME" router-create $Q_ROUTER_NAME | grep ' id ' | get_field 2)
205 die_if_not_set $LINENO ROUTER_ID "Failure creating ROUTER_ID for $Q_ROUTER_NAME"
206 fi
207
Sean M. Collins2a242512016-05-03 09:03:09 -0400208 EXTERNAL_NETWORK_FLAGS="--router:external"
Sean M. Collinsc35110e2016-05-18 10:38:51 -0400209 if is_networking_extension_supported "auto-allocated-topology" && is_networking_extension_supported "subnet_allocation"; then
Sean M. Collins2a242512016-05-03 09:03:09 -0400210 EXTERNAL_NETWORK_FLAGS="$EXTERNAL_NETWORK_FLAGS --is-default"
211 if [[ "$IP_VERSION" =~ 4.* ]]; then
212 SUBNETPOOL_V4_ID=$(neutron --os-cloud devstack-admin --os-region "$REGION_NAME" subnetpool-create $SUBNETPOOL_NAME --default-prefixlen $SUBNETPOOL_SIZE_V4 --pool-prefix $SUBNETPOOL_PREFIX_V4 --shared --is-default=True | grep ' id ' | get_field 2)
213 fi
214 if [[ "$IP_VERSION" =~ .*6 ]]; then
215 SUBNETPOOL_V6_ID=$(neutron --os-cloud devstack-admin --os-region "$REGION_NAME" subnetpool-create $SUBNETPOOL_NAME --default-prefixlen $SUBNETPOOL_SIZE_V6 --pool-prefix $SUBNETPOOL_PREFIX_V6 --shared --is-default=True | grep ' id ' | get_field 2)
216 fi
217 fi
218 # Create an external network, and a subnet. Configure the external network as router gw
219 if [ "$Q_USE_PROVIDERNET_FOR_PUBLIC" = "True" ]; then
220 EXT_NET_ID=$(neutron --os-cloud devstack-admin --os-region "$REGION_NAME" net-create "$PUBLIC_NETWORK_NAME" -- $EXTERNAL_NETWORK_FLAGS --provider:network_type=flat --provider:physical_network=${PUBLIC_PHYSICAL_NETWORK} | grep ' id ' | get_field 2)
221 else
222 EXT_NET_ID=$(neutron --os-cloud devstack-admin --os-region "$REGION_NAME" net-create "$PUBLIC_NETWORK_NAME" -- $EXTERNAL_NETWORK_FLAGS | grep ' id ' | get_field 2)
223 fi
224 die_if_not_set $LINENO EXT_NET_ID "Failure creating EXT_NET_ID for $PUBLIC_NETWORK_NAME"
225
226 if [[ "$IP_VERSION" =~ 4.* ]]; then
227 # Configure router for IPv4 public access
228 _neutron_configure_router_v4
229 fi
230
231 if [[ "$IP_VERSION" =~ .*6 ]]; then
232 # Configure router for IPv6 public access
233 _neutron_configure_router_v6
234 fi
235 fi
236}
237
238# Create private IPv4 subnet
239function _neutron_create_private_subnet_v4 {
240 local project_id=$1
241 local subnet_params="--tenant-id $project_id "
242 subnet_params+="--ip_version 4 "
Brian Haley31813e92016-08-22 15:39:22 -0400243 if [[ -n "$NETWORK_GATEWAY" ]]; then
244 subnet_params+="--gateway $NETWORK_GATEWAY "
245 fi
Sean M. Collins2a242512016-05-03 09:03:09 -0400246 subnet_params+="--name $PRIVATE_SUBNET_NAME "
247 subnet_params+="$NET_ID $FIXED_RANGE"
248 local subnet_id
249 subnet_id=$(neutron --os-cloud devstack-admin --os-region "$REGION_NAME" subnet-create $subnet_params | grep ' id ' | get_field 2)
250 die_if_not_set $LINENO subnet_id "Failure creating private IPv4 subnet for $project_id"
251 echo $subnet_id
252}
253
254# Create private IPv6 subnet
255function _neutron_create_private_subnet_v6 {
256 local project_id=$1
257 die_if_not_set $LINENO IPV6_RA_MODE "IPV6 RA Mode not set"
258 die_if_not_set $LINENO IPV6_ADDRESS_MODE "IPV6 Address Mode not set"
259 local ipv6_modes="--ipv6-ra-mode $IPV6_RA_MODE --ipv6-address-mode $IPV6_ADDRESS_MODE"
260 local subnet_params="--tenant-id $project_id "
261 subnet_params+="--ip_version 6 "
Brian Haley31813e92016-08-22 15:39:22 -0400262 if [[ -n "$IPV6_PRIVATE_NETWORK_GATEWAY" ]]; then
263 subnet_params+="--gateway $IPV6_PRIVATE_NETWORK_GATEWAY "
264 fi
Sean M. Collins2a242512016-05-03 09:03:09 -0400265 subnet_params+="--name $IPV6_PRIVATE_SUBNET_NAME "
266 subnet_params+="$NET_ID $FIXED_RANGE_V6 $ipv6_modes"
267 local ipv6_subnet_id
268 ipv6_subnet_id=$(neutron --os-cloud devstack-admin --os-region "$REGION_NAME" subnet-create $subnet_params | grep ' id ' | get_field 2)
269 die_if_not_set $LINENO ipv6_subnet_id "Failure creating private IPv6 subnet for $project_id"
270 echo $ipv6_subnet_id
271}
272
273# Create public IPv4 subnet
274function _neutron_create_public_subnet_v4 {
Brian Haley31813e92016-08-22 15:39:22 -0400275 local subnet_params="--ip_version 4 "
Sean M. Collins2a242512016-05-03 09:03:09 -0400276 subnet_params+="${Q_FLOATING_ALLOCATION_POOL:+--allocation-pool $Q_FLOATING_ALLOCATION_POOL} "
Brian Haley31813e92016-08-22 15:39:22 -0400277 if [[ -n "$PUBLIC_NETWORK_GATEWAY" ]]; then
278 subnet_params+="--gateway $PUBLIC_NETWORK_GATEWAY "
279 fi
Sean M. Collins2a242512016-05-03 09:03:09 -0400280 subnet_params+="--name $PUBLIC_SUBNET_NAME "
281 subnet_params+="$EXT_NET_ID $FLOATING_RANGE "
282 subnet_params+="-- --enable_dhcp=False"
283 local id_and_ext_gw_ip
284 id_and_ext_gw_ip=$(neutron --os-cloud devstack-admin --os-region "$REGION_NAME" subnet-create $subnet_params | grep -e 'gateway_ip' -e ' id ')
285 die_if_not_set $LINENO id_and_ext_gw_ip "Failure creating public IPv4 subnet"
286 echo $id_and_ext_gw_ip
287}
288
289# Create public IPv6 subnet
290function _neutron_create_public_subnet_v6 {
291 local subnet_params="--ip_version 6 "
292 subnet_params+="--gateway $IPV6_PUBLIC_NETWORK_GATEWAY "
293 subnet_params+="--name $IPV6_PUBLIC_SUBNET_NAME "
294 subnet_params+="$EXT_NET_ID $IPV6_PUBLIC_RANGE "
295 subnet_params+="-- --enable_dhcp=False"
296 local ipv6_id_and_ext_gw_ip
297 ipv6_id_and_ext_gw_ip=$(neutron --os-cloud devstack-admin --os-region "$REGION_NAME" subnet-create $subnet_params | grep -e 'gateway_ip' -e ' id ')
298 die_if_not_set $LINENO ipv6_id_and_ext_gw_ip "Failure creating an IPv6 public subnet"
299 echo $ipv6_id_and_ext_gw_ip
300}
301
302# Configure neutron router for IPv4 public access
303function _neutron_configure_router_v4 {
304 neutron --os-cloud devstack-admin --os-region "$REGION_NAME" router-interface-add $ROUTER_ID $SUBNET_ID
305 # Create a public subnet on the external network
306 local id_and_ext_gw_ip
307 id_and_ext_gw_ip=$(_neutron_create_public_subnet_v4 $EXT_NET_ID)
308 local ext_gw_ip
309 ext_gw_ip=$(echo $id_and_ext_gw_ip | get_field 2)
310 PUB_SUBNET_ID=$(echo $id_and_ext_gw_ip | get_field 5)
311 # Configure the external network as the default router gateway
312 neutron --os-cloud devstack-admin --os-region "$REGION_NAME" router-gateway-set $ROUTER_ID $EXT_NET_ID
313
314 # This logic is specific to using the l3-agent for layer 3
Sean M. Collinsd00cbb72016-06-20 13:53:44 -0400315 if is_service_enabled q-l3 || is_service_enabled neutron-l3; then
Sean M. Collins2a242512016-05-03 09:03:09 -0400316 # Configure and enable public bridge
317 local ext_gw_interface="none"
318 if is_neutron_ovs_base_plugin; then
319 ext_gw_interface=$(_neutron_get_ext_gw_interface)
320 elif [[ "$Q_AGENT" = "linuxbridge" ]]; then
Kevin Benton6a42a852016-07-21 11:11:54 -0700321 # Get the device the neutron router and network for $FIXED_RANGE
Sean M. Collins2a242512016-05-03 09:03:09 -0400322 # will be using.
Kevin Benton6a42a852016-07-21 11:11:54 -0700323 if [ "$Q_USE_PROVIDERNET_FOR_PUBLIC" = "True" ]; then
324 # in provider nets a bridge mapping uses the public bridge directly
325 ext_gw_interface=$PUBLIC_BRIDGE
326 else
327 # e.x. brq3592e767-da for NET_ID 3592e767-da66-4bcb-9bec-cdb03cd96102
328 ext_gw_interface=brq${EXT_NET_ID:0:11}
329 fi
Sean M. Collins2a242512016-05-03 09:03:09 -0400330 fi
331 if [[ "$ext_gw_interface" != "none" ]]; then
332 local cidr_len=${FLOATING_RANGE#*/}
333 local testcmd="ip -o link | grep -q $ext_gw_interface"
334 test_with_retry "$testcmd" "$ext_gw_interface creation failed"
Kevin Benton1554ade2016-07-22 09:40:19 -0700335 if [[ $(ip addr show dev $ext_gw_interface | grep -c $ext_gw_ip) == 0 && ( $Q_USE_PROVIDERNET_FOR_PUBLIC == "False" || $Q_USE_PUBLIC_VETH == "True" || $Q_ASSIGN_GATEWAY_TO_PUBLIC_BRIDGE == "True" ) ]]; then
Sean M. Collins2a242512016-05-03 09:03:09 -0400336 sudo ip addr add $ext_gw_ip/$cidr_len dev $ext_gw_interface
337 sudo ip link set $ext_gw_interface up
338 fi
339 ROUTER_GW_IP=$(neutron --os-cloud devstack-admin --os-region "$REGION_NAME" port-list -c fixed_ips -c device_owner | grep router_gateway | awk -F'ip_address' '{ print $2 }' | cut -f3 -d\" | tr '\n' ' ')
340 die_if_not_set $LINENO ROUTER_GW_IP "Failure retrieving ROUTER_GW_IP"
341 sudo ip route replace $FIXED_RANGE via $ROUTER_GW_IP
342 fi
343 _neutron_set_router_id
344 fi
345}
346
347# Configure neutron router for IPv6 public access
348function _neutron_configure_router_v6 {
349 neutron --os-cloud devstack-admin --os-region "$REGION_NAME" router-interface-add $ROUTER_ID $IPV6_SUBNET_ID
350 # Create a public subnet on the external network
351 local ipv6_id_and_ext_gw_ip
352 ipv6_id_and_ext_gw_ip=$(_neutron_create_public_subnet_v6 $EXT_NET_ID)
353 local ipv6_ext_gw_ip
354 ipv6_ext_gw_ip=$(echo $ipv6_id_and_ext_gw_ip | get_field 2)
355 local ipv6_pub_subnet_id
356 ipv6_pub_subnet_id=$(echo $ipv6_id_and_ext_gw_ip | get_field 5)
357
358 # If the external network has not already been set as the default router
359 # gateway when configuring an IPv4 public subnet, do so now
360 if [[ "$IP_VERSION" == "6" ]]; then
361 neutron --os-cloud devstack-admin --os-region "$REGION_NAME" router-gateway-set $ROUTER_ID $EXT_NET_ID
362 fi
363
364 # This logic is specific to using the l3-agent for layer 3
Sean M. Collinsd00cbb72016-06-20 13:53:44 -0400365 if is_service_enabled q-l3 || is_service_enabled neutron-l3; then
Monty Taylorc12d1d92016-08-23 19:07:57 -0500366 # Ensure IPv6 RAs are accepted on the interface with the default route.
367 # This is needed for neutron-based devstack clouds to work in
368 # IPv6-only clouds in the gate. Please do not remove this without
369 # talking to folks in Infra.
370 sudo sysctl -w net.ipv6.conf.$default_route_dev.accept_ra=2
Sean M. Collins2a242512016-05-03 09:03:09 -0400371 # Ensure IPv6 forwarding is enabled on the host
372 sudo sysctl -w net.ipv6.conf.all.forwarding=1
373 # Configure and enable public bridge
374 # Override global IPV6_ROUTER_GW_IP with the true value from neutron
375 IPV6_ROUTER_GW_IP=$(neutron --os-cloud devstack-admin --os-region "$REGION_NAME" port-list -c fixed_ips | grep $ipv6_pub_subnet_id | awk -F'ip_address' '{ print $2 }' | cut -f3 -d\" | tr '\n' ' ')
376 die_if_not_set $LINENO IPV6_ROUTER_GW_IP "Failure retrieving IPV6_ROUTER_GW_IP"
377
378 if is_neutron_ovs_base_plugin; then
379 local ext_gw_interface
380 ext_gw_interface=$(_neutron_get_ext_gw_interface)
381 local ipv6_cidr_len=${IPV6_PUBLIC_RANGE#*/}
382
383 # Configure interface for public bridge
Yi Zhaoa464ea72016-05-12 10:32:58 +0800384 sudo ip -6 addr replace $ipv6_ext_gw_ip/$ipv6_cidr_len dev $ext_gw_interface
Sean M. Collins2a242512016-05-03 09:03:09 -0400385 sudo ip -6 route replace $FIXED_RANGE_V6 via $IPV6_ROUTER_GW_IP dev $ext_gw_interface
386 fi
387 _neutron_set_router_id
388 fi
389}
watanabe.isao4f4d95a2016-05-12 20:35:20 +0900390
391function is_provider_network {
vsaienkod8942212016-05-13 12:51:30 +0300392 if [ "$Q_USE_PROVIDER_NETWORKING" == "True" ]; then
watanabe.isao4f4d95a2016-05-12 20:35:20 +0900393 return 0
394 fi
395 return 1
396}
Sean M. Collinsc35110e2016-05-18 10:38:51 -0400397
398function is_networking_extension_supported {
399 local extension=$1
400 # TODO(sc68cal) cache this instead of calling every time
401 EXT_LIST=$(neutron --os-cloud devstack-admin --os-region "$REGION_NAME" ext-list -c alias -f value)
402 [[ $EXT_LIST =~ $extension ]] && return 0
403}