Sean Dague | e263c82 | 2014-12-05 14:25:28 -0500 | [diff] [blame] | 1 | #!/bin/bash |
| 2 | # |
Mark McClain | b05c876 | 2013-07-06 23:29:39 -0400 | [diff] [blame] | 3 | # Neutron Modular Layer 2 plugin |
Bob Kukura | c9b0f1a | 2013-04-23 16:28:24 -0400 | [diff] [blame] | 4 | # ------------------------------ |
| 5 | |
| 6 | # Save trace setting |
Dean Troyer | e3a9160 | 2014-03-28 12:40:56 -0500 | [diff] [blame] | 7 | ML2_XTRACE=$(set +o | grep xtrace) |
Bob Kukura | c9b0f1a | 2013-04-23 16:28:24 -0400 | [diff] [blame] | 8 | set +o xtrace |
| 9 | |
Kyle Mestery | b772659 | 2013-07-19 14:26:53 +0000 | [diff] [blame] | 10 | # Enable this to simply and quickly enable tunneling with ML2. |
Akihiro Motoki | 2307f9d | 2014-08-09 18:58:20 +0900 | [diff] [blame] | 11 | # Select either 'gre', 'vxlan', or 'gre,vxlan' |
Attila Fazekas | 8feaf6c | 2014-07-27 20:47:04 +0200 | [diff] [blame] | 12 | Q_ML2_TENANT_NETWORK_TYPE=${Q_ML2_TENANT_NETWORK_TYPE:-"vxlan"} |
Kyle Mestery | b772659 | 2013-07-19 14:26:53 +0000 | [diff] [blame] | 13 | # This has to be set here since the agent will set this in the config file |
Kevin Benton | e3cfbf1 | 2014-08-04 11:25:20 -0600 | [diff] [blame] | 14 | if [[ "$Q_ML2_TENANT_NETWORK_TYPE" == "gre" || "$Q_ML2_TENANT_NETWORK_TYPE" == "vxlan" ]]; then |
Akihiro Motoki | 2307f9d | 2014-08-09 18:58:20 +0900 | [diff] [blame] | 15 | Q_TUNNEL_TYPES=$Q_ML2_TENANT_NETWORK_TYPE |
Kyle Mestery | bd08550 | 2014-04-30 23:50:29 +0000 | [diff] [blame] | 16 | elif [[ "$ENABLE_TENANT_TUNNELS" == "True" ]]; then |
Akihiro Motoki | 2307f9d | 2014-08-09 18:58:20 +0900 | [diff] [blame] | 17 | Q_TUNNEL_TYPES=gre |
Kyle Mestery | b772659 | 2013-07-19 14:26:53 +0000 | [diff] [blame] | 18 | fi |
| 19 | |
Bob Kukura | c9b0f1a | 2013-04-23 16:28:24 -0400 | [diff] [blame] | 20 | # Default openvswitch L2 agent |
| 21 | Q_AGENT=${Q_AGENT:-openvswitch} |
Mark McClain | b05c876 | 2013-07-06 23:29:39 -0400 | [diff] [blame] | 22 | source $TOP_DIR/lib/neutron_plugins/${Q_AGENT}_agent |
Bob Kukura | c9b0f1a | 2013-04-23 16:28:24 -0400 | [diff] [blame] | 23 | |
Kyle Mestery | b772659 | 2013-07-19 14:26:53 +0000 | [diff] [blame] | 24 | # List of MechanismDrivers to load |
Kyle Mestery | bc63247 | 2013-09-06 14:59:30 +0000 | [diff] [blame] | 25 | Q_ML2_PLUGIN_MECHANISM_DRIVERS=${Q_ML2_PLUGIN_MECHANISM_DRIVERS:-openvswitch,linuxbridge} |
Kyle Mestery | b772659 | 2013-07-19 14:26:53 +0000 | [diff] [blame] | 26 | # List of Type Drivers to load |
| 27 | Q_ML2_PLUGIN_TYPE_DRIVERS=${Q_ML2_PLUGIN_TYPE_DRIVERS:-local,flat,vlan,gre,vxlan} |
| 28 | # Default GRE TypeDriver options |
| 29 | Q_ML2_PLUGIN_GRE_TYPE_OPTIONS=${Q_ML2_PLUGIN_GRE_TYPE_OPTIONS:-tunnel_id_ranges=$TENANT_TUNNEL_RANGES} |
| 30 | # Default VXLAN TypeDriver options |
| 31 | Q_ML2_PLUGIN_VXLAN_TYPE_OPTIONS=${Q_ML2_PLUGIN_VXLAN_TYPE_OPTIONS:-vni_ranges=1001:2000} |
| 32 | # Default VLAN TypeDriver options |
| 33 | Q_ML2_PLUGIN_VLAN_TYPE_OPTIONS=${Q_ML2_PLUGIN_VLAN_TYPE_OPTIONS:-} |
Yalei Wang | a48e5dc | 2015-03-06 17:05:11 +0800 | [diff] [blame] | 34 | # List of extension drivers to load, use '-' instead of ':-' to allow people to |
| 35 | # explicitly override this to blank |
| 36 | Q_ML2_PLUGIN_EXT_DRIVERS=${Q_ML2_PLUGIN_EXT_DRIVERS-port_security} |
Kyle Mestery | b772659 | 2013-07-19 14:26:53 +0000 | [diff] [blame] | 37 | |
Kyle Mestery | 14ea1a2 | 2013-09-22 03:04:56 +0000 | [diff] [blame] | 38 | # L3 Plugin to load for ML2 |
| 39 | ML2_L3_PLUGIN=${ML2_L3_PLUGIN:-neutron.services.l3_router.l3_router_plugin.L3RouterPlugin} |
| 40 | |
Ian Wienand | aee18c7 | 2014-02-21 15:35:08 +1100 | [diff] [blame] | 41 | function populate_ml2_config { |
Akihiro Motoki | 130c90e | 2013-11-28 16:56:51 +0900 | [diff] [blame] | 42 | CONF=$1 |
| 43 | SECTION=$2 |
| 44 | OPTS=$3 |
Kyle Mestery | b772659 | 2013-07-19 14:26:53 +0000 | [diff] [blame] | 45 | |
Akihiro Motoki | 130c90e | 2013-11-28 16:56:51 +0900 | [diff] [blame] | 46 | if [ -z "$OPTS" ]; then |
| 47 | return |
| 48 | fi |
Kyle Mestery | b772659 | 2013-07-19 14:26:53 +0000 | [diff] [blame] | 49 | for I in "${OPTS[@]}"; do |
| 50 | # Replace the first '=' with ' ' for iniset syntax |
| 51 | iniset $CONF $SECTION ${I/=/ } |
| 52 | done |
| 53 | } |
| 54 | |
Ian Wienand | aee18c7 | 2014-02-21 15:35:08 +1100 | [diff] [blame] | 55 | function neutron_plugin_configure_common { |
Mark McClain | b05c876 | 2013-07-06 23:29:39 -0400 | [diff] [blame] | 56 | Q_PLUGIN_CONF_PATH=etc/neutron/plugins/ml2 |
Bob Kukura | c9b0f1a | 2013-04-23 16:28:24 -0400 | [diff] [blame] | 57 | Q_PLUGIN_CONF_FILENAME=ml2_conf.ini |
Mark McClain | b05c876 | 2013-07-06 23:29:39 -0400 | [diff] [blame] | 58 | Q_PLUGIN_CLASS="neutron.plugins.ml2.plugin.Ml2Plugin" |
Bob Melander | 748fe3d | 2013-01-31 17:12:56 +0100 | [diff] [blame] | 59 | # The ML2 plugin delegates L3 routing/NAT functionality to |
| 60 | # the L3 service plugin which must therefore be specified. |
Isaku Yamahata | 9e136b4 | 2013-12-16 15:52:03 +0900 | [diff] [blame] | 61 | _neutron_service_plugin_class_add $ML2_L3_PLUGIN |
Bob Kukura | c9b0f1a | 2013-04-23 16:28:24 -0400 | [diff] [blame] | 62 | } |
| 63 | |
Ian Wienand | aee18c7 | 2014-02-21 15:35:08 +1100 | [diff] [blame] | 64 | function neutron_plugin_configure_service { |
Attila Fazekas | 8feaf6c | 2014-07-27 20:47:04 +0200 | [diff] [blame] | 65 | if [[ "$Q_ML2_TENANT_NETWORK_TYPE" != "local" ]]; then |
Kyle Mestery | 061d525 | 2013-09-09 08:52:19 +0000 | [diff] [blame] | 66 | Q_SRV_EXTRA_OPTS+=(tenant_network_types=$Q_ML2_TENANT_NETWORK_TYPE) |
Kyle Mestery | bd08550 | 2014-04-30 23:50:29 +0000 | [diff] [blame] | 67 | elif [[ "$ENABLE_TENANT_TUNNELS" == "True" ]]; then |
Kyle Mestery | b772659 | 2013-07-19 14:26:53 +0000 | [diff] [blame] | 68 | # This assumes you want a simple configuration, and will overwrite |
| 69 | # Q_SRV_EXTRA_OPTS if set in addition to ENABLE_TENANT_TUNNELS. |
Kyle Mestery | 061d525 | 2013-09-09 08:52:19 +0000 | [diff] [blame] | 70 | Q_SRV_EXTRA_OPTS+=(tenant_network_types=gre) |
Kyle Mestery | b772659 | 2013-07-19 14:26:53 +0000 | [diff] [blame] | 71 | Q_ML2_PLUGIN_GRE_TYPE_OPTIONS=(tunnel_id_ranges=$TENANT_TUNNEL_RANGES) |
Kyle Mestery | bd08550 | 2014-04-30 23:50:29 +0000 | [diff] [blame] | 72 | elif [[ "$ENABLE_TENANT_VLANS" == "True" ]]; then |
Kyle Mestery | 061d525 | 2013-09-09 08:52:19 +0000 | [diff] [blame] | 73 | Q_SRV_EXTRA_OPTS+=(tenant_network_types=vlan) |
Bob Kukura | c9b0f1a | 2013-04-23 16:28:24 -0400 | [diff] [blame] | 74 | else |
| 75 | echo "WARNING - The ml2 plugin is using local tenant networks, with no connectivity between hosts." |
| 76 | fi |
| 77 | |
Kyle Mestery | b772659 | 2013-07-19 14:26:53 +0000 | [diff] [blame] | 78 | # Allow for overrding VLAN configuration (for example, to configure provider |
| 79 | # VLANs) by first checking if Q_ML2_PLUGIN_VLAN_TYPE_OPTIONS is set. |
| 80 | if [ "$Q_ML2_PLUGIN_VLAN_TYPE_OPTIONS" == "" ]; then |
Kyle Mestery | bd08550 | 2014-04-30 23:50:29 +0000 | [diff] [blame] | 81 | if [[ "$ML2_VLAN_RANGES" == "" ]] && [[ "$PHYSICAL_NETWORK" != "" ]]; then |
Kyle Mestery | b772659 | 2013-07-19 14:26:53 +0000 | [diff] [blame] | 82 | ML2_VLAN_RANGES=$PHYSICAL_NETWORK |
| 83 | if [[ "$TENANT_VLAN_RANGE" != "" ]]; then |
| 84 | ML2_VLAN_RANGES=$ML2_VLAN_RANGES:$TENANT_VLAN_RANGE |
| 85 | fi |
Bob Kukura | c9b0f1a | 2013-04-23 16:28:24 -0400 | [diff] [blame] | 86 | fi |
Kyle Mestery | b772659 | 2013-07-19 14:26:53 +0000 | [diff] [blame] | 87 | if [[ "$ML2_VLAN_RANGES" != "" ]]; then |
| 88 | Q_ML2_PLUGIN_VLAN_TYPE_OPTIONS=(network_vlan_ranges=$ML2_VLAN_RANGES) |
| 89 | fi |
Bob Kukura | c9b0f1a | 2013-04-23 16:28:24 -0400 | [diff] [blame] | 90 | fi |
| 91 | |
yunhong jiang | 73d3216 | 2014-10-06 09:34:35 -0700 | [diff] [blame] | 92 | |
| 93 | # Allow for setup the flat type network |
| 94 | if [[ -z "$Q_ML2_PLUGIN_FLAT_TYPE_OPTIONS" && -n "$PHYSICAL_NETWORK" ]]; then |
Ramakrishnan G | 8f5fe87 | 2015-04-17 12:48:39 +0000 | [diff] [blame] | 95 | Q_ML2_PLUGIN_FLAT_TYPE_OPTIONS="flat_networks=$PHYSICAL_NETWORK" |
yunhong jiang | 73d3216 | 2014-10-06 09:34:35 -0700 | [diff] [blame] | 96 | fi |
Bob Kukura | c9b0f1a | 2013-04-23 16:28:24 -0400 | [diff] [blame] | 97 | # REVISIT(rkukura): Setting firewall_driver here for |
Mark McClain | b05c876 | 2013-07-06 23:29:39 -0400 | [diff] [blame] | 98 | # neutron.agent.securitygroups_rpc.is_firewall_enabled() which is |
Bob Kukura | c9b0f1a | 2013-04-23 16:28:24 -0400 | [diff] [blame] | 99 | # used in the server, in case no L2 agent is configured on the |
| 100 | # server's node. If an L2 agent is configured, this will get |
| 101 | # overridden with the correct driver. The ml2 plugin should |
| 102 | # instead use its own config variable to indicate whether security |
| 103 | # groups is enabled, and that will need to be set here instead. |
| 104 | if [[ "$Q_USE_SECGROUP" == "True" ]]; then |
Akihiro Motoki | 4074e29 | 2014-02-14 00:54:58 +0900 | [diff] [blame] | 105 | iniset /$Q_PLUGIN_CONF_FILE securitygroup firewall_driver neutron.agent.not.a.real.FirewallDriver |
Bob Kukura | c9b0f1a | 2013-04-23 16:28:24 -0400 | [diff] [blame] | 106 | else |
Akihiro Motoki | 4074e29 | 2014-02-14 00:54:58 +0900 | [diff] [blame] | 107 | iniset /$Q_PLUGIN_CONF_FILE securitygroup firewall_driver neutron.agent.firewall.NoopFirewallDriver |
Bob Kukura | c9b0f1a | 2013-04-23 16:28:24 -0400 | [diff] [blame] | 108 | fi |
| 109 | |
Akihiro Motoki | 130c90e | 2013-11-28 16:56:51 +0900 | [diff] [blame] | 110 | populate_ml2_config /$Q_PLUGIN_CONF_FILE ml2 mechanism_drivers=$Q_ML2_PLUGIN_MECHANISM_DRIVERS |
Kyle Mestery | 3ea28ec | 2013-08-05 12:24:32 +0000 | [diff] [blame] | 111 | |
Akihiro Motoki | 130c90e | 2013-11-28 16:56:51 +0900 | [diff] [blame] | 112 | populate_ml2_config /$Q_PLUGIN_CONF_FILE ml2 type_drivers=$Q_ML2_PLUGIN_TYPE_DRIVERS |
Kyle Mestery | b772659 | 2013-07-19 14:26:53 +0000 | [diff] [blame] | 113 | |
Yalei Wang | a48e5dc | 2015-03-06 17:05:11 +0800 | [diff] [blame] | 114 | populate_ml2_config /$Q_PLUGIN_CONF_FILE ml2 extension_drivers=$Q_ML2_PLUGIN_EXT_DRIVERS |
| 115 | |
Akihiro Motoki | 130c90e | 2013-11-28 16:56:51 +0900 | [diff] [blame] | 116 | populate_ml2_config /$Q_PLUGIN_CONF_FILE ml2 $Q_SRV_EXTRA_OPTS |
Kyle Mestery | b772659 | 2013-07-19 14:26:53 +0000 | [diff] [blame] | 117 | |
Akihiro Motoki | 130c90e | 2013-11-28 16:56:51 +0900 | [diff] [blame] | 118 | populate_ml2_config /$Q_PLUGIN_CONF_FILE ml2_type_gre $Q_ML2_PLUGIN_GRE_TYPE_OPTIONS |
Kyle Mestery | b772659 | 2013-07-19 14:26:53 +0000 | [diff] [blame] | 119 | |
Akihiro Motoki | 130c90e | 2013-11-28 16:56:51 +0900 | [diff] [blame] | 120 | populate_ml2_config /$Q_PLUGIN_CONF_FILE ml2_type_vxlan $Q_ML2_PLUGIN_VXLAN_TYPE_OPTIONS |
Kyle Mestery | b772659 | 2013-07-19 14:26:53 +0000 | [diff] [blame] | 121 | |
yunhong jiang | 73d3216 | 2014-10-06 09:34:35 -0700 | [diff] [blame] | 122 | populate_ml2_config /$Q_PLUGIN_CONF_FILE ml2_type_flat $Q_ML2_PLUGIN_FLAT_TYPE_OPTIONS |
| 123 | |
Akihiro Motoki | 130c90e | 2013-11-28 16:56:51 +0900 | [diff] [blame] | 124 | populate_ml2_config /$Q_PLUGIN_CONF_FILE ml2_type_vlan $Q_ML2_PLUGIN_VLAN_TYPE_OPTIONS |
Brian Haley | eea7621 | 2014-06-27 11:45:50 -0400 | [diff] [blame] | 125 | |
| 126 | if [[ "$Q_DVR_MODE" != "legacy" ]]; then |
| 127 | populate_ml2_config /$Q_PLUGIN_CONF_FILE agent l2_population=True |
| 128 | populate_ml2_config /$Q_PLUGIN_CONF_FILE agent tunnel_types=vxlan |
| 129 | populate_ml2_config /$Q_PLUGIN_CONF_FILE agent enable_distributed_routing=True |
| 130 | fi |
Bob Kukura | c9b0f1a | 2013-04-23 16:28:24 -0400 | [diff] [blame] | 131 | } |
| 132 | |
Ian Wienand | aee18c7 | 2014-02-21 15:35:08 +1100 | [diff] [blame] | 133 | function has_neutron_plugin_security_group { |
Bob Kukura | c9b0f1a | 2013-04-23 16:28:24 -0400 | [diff] [blame] | 134 | return 0 |
| 135 | } |
| 136 | |
| 137 | # Restore xtrace |
Dean Troyer | e3a9160 | 2014-03-28 12:40:56 -0500 | [diff] [blame] | 138 | $ML2_XTRACE |