blob: b6bc02818cf29fde5d9a39aae28b3e0f5cd5b46a [file] [log] [blame]
Sean M. Collins2a242512016-05-03 09:03:09 -04001#!/bin/bash
2# Subnet IP version
3IP_VERSION=${IP_VERSION:-"4+6"}
4# Validate IP_VERSION
5if [[ $IP_VERSION != "4" ]] && [[ $IP_VERSION != "6" ]] && [[ $IP_VERSION != "4+6" ]]; then
6 die $LINENO "IP_VERSION must be either 4, 6, or 4+6"
7fi
8# Specify if the initial private and external networks should be created
9NEUTRON_CREATE_INITIAL_NETWORKS=${NEUTRON_CREATE_INITIAL_NETWORKS:-True}
10
11## Provider Network Information
12PROVIDER_SUBNET_NAME=${PROVIDER_SUBNET_NAME:-"provider_net"}
13IPV6_PROVIDER_SUBNET_NAME=${IPV6_PROVIDER_SUBNET_NAME:-"provider_net_v6"}
14IPV6_PROVIDER_FIXED_RANGE=${IPV6_PROVIDER_FIXED_RANGE:-}
15IPV6_PROVIDER_NETWORK_GATEWAY=${IPV6_PROVIDER_NETWORK_GATEWAY:-}
16
17PUBLIC_BRIDGE=${PUBLIC_BRIDGE:-br-ex}
Ihar Hrachyshka7b5c7dc2016-07-15 20:17:13 +020018PUBLIC_BRIDGE_MTU=${PUBLIC_BRIDGE_MTU:-1500}
Sean M. Collins2a242512016-05-03 09:03:09 -040019
Kevin Benton1554ade2016-07-22 09:40:19 -070020# If Q_ASSIGN_GATEWAY_TO_PUBLIC_BRIDGE=True, assign the gateway IP of the public
21# subnet to the public bridge interface even if Q_USE_PROVIDERNET_FOR_PUBLIC is
22# used.
23Q_ASSIGN_GATEWAY_TO_PUBLIC_BRIDGE=${Q_ASSIGN_GATEWAY_TO_PUBLIC_BRIDGE:-True}
24
YAMAMOTO Takashi1aa43682016-07-21 19:37:04 +090025# The name of the default router
26Q_ROUTER_NAME=${Q_ROUTER_NAME:-router1}
27
Sean M. Collins2a242512016-05-03 09:03:09 -040028# If Q_USE_PUBLIC_VETH=True, create and use a veth pair instead of
29# PUBLIC_BRIDGE. This is intended to be used with
30# Q_USE_PROVIDERNET_FOR_PUBLIC=True.
31Q_USE_PUBLIC_VETH=${Q_USE_PUBLIC_VETH:-False}
32Q_PUBLIC_VETH_EX=${Q_PUBLIC_VETH_EX:-veth-pub-ex}
33Q_PUBLIC_VETH_INT=${Q_PUBLIC_VETH_INT:-veth-pub-int}
34
vsaienkod8942212016-05-13 12:51:30 +030035# The next variable is configured by plugin
Sean M. Collins2a242512016-05-03 09:03:09 -040036# e.g. _configure_neutron_l3_agent or lib/neutron_plugins/*
37#
Sean M. Collins2a242512016-05-03 09:03:09 -040038# L3 routers exist per tenant
39Q_L3_ROUTER_PER_TENANT=${Q_L3_ROUTER_PER_TENANT:-True}
40
41
Tim Swansonbb7d2f22017-12-16 17:14:10 -050042# Use providernet for public network
Sean M. Collins2a242512016-05-03 09:03:09 -040043#
Tim Swansonbb7d2f22017-12-16 17:14:10 -050044# If Q_USE_PROVIDERNET_FOR_PUBLIC=True, use a provider network
Sean M. Collins2a242512016-05-03 09:03:09 -040045# for external interface of neutron l3-agent. In that case,
46# PUBLIC_PHYSICAL_NETWORK specifies provider:physical_network value
47# used for the network. In case of ofagent, you should add the
48# corresponding entry to your OFAGENT_PHYSICAL_INTERFACE_MAPPINGS.
49# For openvswitch agent, you should add the corresponding entry to
50# your OVS_BRIDGE_MAPPINGS.
51#
52# eg. (ofagent)
53# Q_USE_PROVIDERNET_FOR_PUBLIC=True
54# Q_USE_PUBLIC_VETH=True
55# PUBLIC_PHYSICAL_NETWORK=public
56# OFAGENT_PHYSICAL_INTERFACE_MAPPINGS=public:veth-pub-int
57#
58# eg. (openvswitch agent)
59# Q_USE_PROVIDERNET_FOR_PUBLIC=True
60# PUBLIC_PHYSICAL_NETWORK=public
61# OVS_BRIDGE_MAPPINGS=public:br-ex
Tim Swansonbb7d2f22017-12-16 17:14:10 -050062#
63# The provider-network-type defaults to flat, however, the values
64# PUBLIC_PROVIDERNET_TYPE and PUBLIC_PROVIDERNET_SEGMENTATION_ID could
65# be set to specify the parameters for an alternate network type.
Kevin Benton1554ade2016-07-22 09:40:19 -070066Q_USE_PROVIDERNET_FOR_PUBLIC=${Q_USE_PROVIDERNET_FOR_PUBLIC:-True}
Sean M. Collins2a242512016-05-03 09:03:09 -040067PUBLIC_PHYSICAL_NETWORK=${PUBLIC_PHYSICAL_NETWORK:-public}
68
69# Generate 40-bit IPv6 Global ID to comply with RFC 4193
70IPV6_GLOBAL_ID=`uuidgen | sed s/-//g | cut -c 23- | sed -e "s/\(..\)\(....\)\(....\)/\1:\2:\3/"`
71
72# IPv6 gateway and subnet defaults, in case they are not customized in localrc
73IPV6_RA_MODE=${IPV6_RA_MODE:-slaac}
74IPV6_ADDRESS_MODE=${IPV6_ADDRESS_MODE:-slaac}
75IPV6_PUBLIC_SUBNET_NAME=${IPV6_PUBLIC_SUBNET_NAME:-ipv6-public-subnet}
76IPV6_PRIVATE_SUBNET_NAME=${IPV6_PRIVATE_SUBNET_NAME:-ipv6-private-subnet}
Kevin Benton4bfbc292016-11-15 17:26:05 -080077IPV6_ADDRS_SAFE_TO_USE=${IPV6_ADDRS_SAFE_TO_USE:-fd$IPV6_GLOBAL_ID::/56}
78# if we got larger than a /64 safe to use, we only use the first /64 to
79# avoid side effects outlined in rfc7421
Clark Boylana5afa7d2016-11-18 12:32:19 -080080FIXED_RANGE_V6=${FIXED_RANGE_V6:-$(echo $IPV6_ADDRS_SAFE_TO_USE | awk -F '/' '{ print $1"/"($2>63 ? $2 : 64) }')}
Brian Haley31813e92016-08-22 15:39:22 -040081IPV6_PRIVATE_NETWORK_GATEWAY=${IPV6_PRIVATE_NETWORK_GATEWAY:-}
Sean M. Collins2a242512016-05-03 09:03:09 -040082IPV6_PUBLIC_RANGE=${IPV6_PUBLIC_RANGE:-2001:db8::/64}
83IPV6_PUBLIC_NETWORK_GATEWAY=${IPV6_PUBLIC_NETWORK_GATEWAY:-2001:db8::2}
84IPV6_ROUTER_GW_IP=${IPV6_ROUTER_GW_IP:-2001:db8::1}
85
86# Gateway and subnet defaults, in case they are not customized in localrc
Brian Haley31813e92016-08-22 15:39:22 -040087NETWORK_GATEWAY=${NETWORK_GATEWAY:-}
88PUBLIC_NETWORK_GATEWAY=${PUBLIC_NETWORK_GATEWAY:-}
Sean M. Collins2a242512016-05-03 09:03:09 -040089PRIVATE_SUBNET_NAME=${PRIVATE_SUBNET_NAME:-"private-subnet"}
90PUBLIC_SUBNET_NAME=${PUBLIC_SUBNET_NAME:-"public-subnet"}
91
92# Subnetpool defaults
rajinirc58a1552016-09-27 17:14:59 -050093USE_SUBNETPOOL=${USE_SUBNETPOOL:-True}
Jens Rosenboomf069acf2017-02-24 16:25:59 +010094SUBNETPOOL_NAME_V4=${SUBNETPOOL_NAME:-"shared-default-subnetpool-v4"}
95SUBNETPOOL_NAME_V6=${SUBNETPOOL_NAME:-"shared-default-subnetpool-v6"}
Sean M. Collins2a242512016-05-03 09:03:09 -040096
Kevin Benton4bfbc292016-11-15 17:26:05 -080097SUBNETPOOL_PREFIX_V4=${SUBNETPOOL_PREFIX_V4:-$IPV4_ADDRS_SAFE_TO_USE}
98SUBNETPOOL_PREFIX_V6=${SUBNETPOOL_PREFIX_V6:-$IPV6_ADDRS_SAFE_TO_USE}
Sean M. Collins2a242512016-05-03 09:03:09 -040099
Kevin Benton4bfbc292016-11-15 17:26:05 -0800100SUBNETPOOL_SIZE_V4=${SUBNETPOOL_SIZE_V4:-26}
Sean M. Collins2a242512016-05-03 09:03:09 -0400101SUBNETPOOL_SIZE_V6=${SUBNETPOOL_SIZE_V6:-64}
102
Henry Gessau734f1442016-09-17 19:28:53 -0400103default_v4_route_devs=$(ip -4 route | grep ^default | awk '{print $5}')
Henry Gessau734f1442016-09-17 19:28:53 -0400104
aojeagarcia866efef2018-09-28 10:43:46 +0200105default_v6_route_devs=$(ip -6 route list match default table all | grep via | awk '{print $5}')
Monty Taylorc12d1d92016-08-23 19:07:57 -0500106
Sean M. Collins2a242512016-05-03 09:03:09 -0400107function _determine_config_l3 {
Angus Leesa1c70f22016-05-31 14:43:14 +1000108 local opts="--config-file $NEUTRON_CONF --config-file $Q_L3_CONF_FILE"
Sean M. Collins2a242512016-05-03 09:03:09 -0400109 echo "$opts"
110}
111
112function _configure_neutron_l3_agent {
Sean M. Collins2a242512016-05-03 09:03:09 -0400113
114 cp $NEUTRON_DIR/etc/l3_agent.ini.sample $Q_L3_CONF_FILE
115
Sean M. Collins2a242512016-05-03 09:03:09 -0400116 iniset $Q_L3_CONF_FILE DEFAULT debug $ENABLE_DEBUG_LOG_LEVEL
Sean M. Collinsa2ed0552016-05-11 15:35:10 -0400117 iniset $Q_L3_CONF_FILE AGENT root_helper "$Q_RR_COMMAND"
Sean M. Collins2a242512016-05-03 09:03:09 -0400118 if [[ "$Q_USE_ROOTWRAP_DAEMON" == "True" ]]; then
Sean M. Collinsa2ed0552016-05-11 15:35:10 -0400119 iniset $Q_L3_CONF_FILE AGENT root_helper_daemon "$Q_RR_DAEMON_COMMAND"
Sean M. Collins2a242512016-05-03 09:03:09 -0400120 fi
121
122 _neutron_setup_interface_driver $Q_L3_CONF_FILE
123
Stephen Finucane24e29f22016-06-15 14:31:51 +0100124 neutron_plugin_configure_l3_agent $Q_L3_CONF_FILE
Sean M. Collins2a242512016-05-03 09:03:09 -0400125
Sean Dague6a008fa2016-08-03 15:09:01 -0400126 # If we've given a PUBLIC_INTERFACE to take over, then we assume
127 # that we can own the whole thing, and privot it into the OVS
128 # bridge. If we are not, we're probably on a single interface
129 # machine, and we just setup NAT so that fixed guests can get out.
130 if [[ -n "$PUBLIC_INTERFACE" ]]; then
131 _move_neutron_addresses_route "$PUBLIC_INTERFACE" "$OVS_PHYSICAL_BRIDGE" True False "inet"
Sean M. Collins2a242512016-05-03 09:03:09 -0400132
Sean Dague6a008fa2016-08-03 15:09:01 -0400133 if [[ $(ip -f inet6 a s dev "$PUBLIC_INTERFACE" | grep -c 'global') != 0 ]]; then
134 _move_neutron_addresses_route "$PUBLIC_INTERFACE" "$OVS_PHYSICAL_BRIDGE" False False "inet6"
135 fi
136 else
Henry Gessau734f1442016-09-17 19:28:53 -0400137 for d in $default_v4_route_devs; do
138 sudo iptables -t nat -A POSTROUTING -o $d -s $FLOATING_RANGE -j MASQUERADE
139 done
Sean M. Collins2a242512016-05-03 09:03:09 -0400140 fi
141}
142
143# Explicitly set router id in l3 agent configuration
144function _neutron_set_router_id {
145 if [[ "$Q_L3_ROUTER_PER_TENANT" == "False" ]]; then
146 iniset $Q_L3_CONF_FILE DEFAULT router_id $ROUTER_ID
147 fi
148}
149
150# Get ext_gw_interface depending on value of Q_USE_PUBLIC_VETH
151function _neutron_get_ext_gw_interface {
152 if [[ "$Q_USE_PUBLIC_VETH" == "True" ]]; then
153 echo $Q_PUBLIC_VETH_EX
154 else
155 # Disable in-band as we are going to use local port
156 # to communicate with VMs
157 sudo ovs-vsctl set Bridge $PUBLIC_BRIDGE \
158 other_config:disable-in-band=true
159 echo $PUBLIC_BRIDGE
160 fi
161}
162
163function create_neutron_initial_network {
164 local project_id
165 project_id=$(openstack project list | grep " demo " | get_field 1)
166 die_if_not_set $LINENO project_id "Failure retrieving project_id for demo"
167
168 # Allow drivers that need to create an initial network to do so here
169 if type -p neutron_plugin_create_initial_network_profile > /dev/null; then
170 neutron_plugin_create_initial_network_profile $PHYSICAL_NETWORK
171 fi
172
Matt Van Dijkd7a3f5c2016-08-16 15:46:58 +0000173 if is_networking_extension_supported "auto-allocated-topology"; then
rajinirc58a1552016-09-27 17:14:59 -0500174 if [[ "$USE_SUBNETPOOL" == "True" ]]; then
175 if [[ "$IP_VERSION" =~ 4.* ]]; then
Jens Rosenboomf069acf2017-02-24 16:25:59 +0100176 SUBNETPOOL_V4_ID=$(openstack --os-cloud devstack-admin --os-region "$REGION_NAME" subnet pool create $SUBNETPOOL_NAME_V4 --default-prefix-length $SUBNETPOOL_SIZE_V4 --pool-prefix $SUBNETPOOL_PREFIX_V4 --share --default -f value -c id)
rajinirc58a1552016-09-27 17:14:59 -0500177 fi
178 if [[ "$IP_VERSION" =~ .*6 ]]; then
Jens Rosenboomf069acf2017-02-24 16:25:59 +0100179 SUBNETPOOL_V6_ID=$(openstack --os-cloud devstack-admin --os-region "$REGION_NAME" subnet pool create $SUBNETPOOL_NAME_V6 --default-prefix-length $SUBNETPOOL_SIZE_V6 --pool-prefix $SUBNETPOOL_PREFIX_V6 --share --default -f value -c id)
rajinirc58a1552016-09-27 17:14:59 -0500180 fi
Matt Van Dijkd7a3f5c2016-08-16 15:46:58 +0000181 fi
182 fi
183
Sean M. Collins2a242512016-05-03 09:03:09 -0400184 if is_provider_network; then
185 die_if_not_set $LINENO PHYSICAL_NETWORK "You must specify the PHYSICAL_NETWORK"
186 die_if_not_set $LINENO PROVIDER_NETWORK_TYPE "You must specify the PROVIDER_NETWORK_TYPE"
Armando Migliaccio4f11ff32016-10-27 06:15:23 -0700187 NET_ID=$(openstack --os-cloud devstack-admin --os-region "$REGION_NAME" network create $PHYSICAL_NETWORK --project $project_id --provider-network-type $PROVIDER_NETWORK_TYPE --provider-physical-network "$PHYSICAL_NETWORK" ${SEGMENTATION_ID:+--provider-segment $SEGMENTATION_ID} --share | grep ' id ' | get_field 2)
Sean M. Collins2a242512016-05-03 09:03:09 -0400188 die_if_not_set $LINENO NET_ID "Failure creating NET_ID for $PHYSICAL_NETWORK $project_id"
189
190 if [[ "$IP_VERSION" =~ 4.* ]]; then
Matt Van Dijkd7a3f5c2016-08-16 15:46:58 +0000191 if [ -z $SUBNETPOOL_V4_ID ]; then
192 fixed_range_v4=$FIXED_RANGE
193 fi
Shachar Snapirife4c3cf2017-09-19 09:52:00 +0300194 SUBNET_ID=$(openstack --os-cloud devstack-admin --os-region "$REGION_NAME" subnet create --project $project_id --ip-version 4 ${ALLOCATION_POOL:+--allocation-pool $ALLOCATION_POOL} $PROVIDER_SUBNET_NAME --gateway $NETWORK_GATEWAY ${SUBNETPOOL_V4_ID:+--subnet-pool $SUBNETPOOL_V4_ID} --network $NET_ID ${fixed_range_v4:+--subnet-range $fixed_range_v4} | grep ' id ' | get_field 2)
Sean M. Collins2a242512016-05-03 09:03:09 -0400195 die_if_not_set $LINENO SUBNET_ID "Failure creating SUBNET_ID for $PROVIDER_SUBNET_NAME $project_id"
196 fi
197
Sean M. Collinse34ec992016-06-07 12:36:50 -0400198 if [[ "$IP_VERSION" =~ .*6 ]]; then
Jan Stodt05dc1aa2016-08-25 15:46:02 +0200199 die_if_not_set $LINENO IPV6_PROVIDER_FIXED_RANGE "IPV6_PROVIDER_FIXED_RANGE has not been set, but Q_USE_PROVIDER_NETWORKING is true and IP_VERSION includes 6"
200 die_if_not_set $LINENO IPV6_PROVIDER_NETWORK_GATEWAY "IPV6_PROVIDER_NETWORK_GATEWAY has not been set, but Q_USE_PROVIDER_NETWORKING is true and IP_VERSION includes 6"
Matt Van Dijkd7a3f5c2016-08-16 15:46:58 +0000201 if [ -z $SUBNETPOOL_V6_ID ]; then
202 fixed_range_v6=$IPV6_PROVIDER_FIXED_RANGE
203 fi
Shachar Snapirife4c3cf2017-09-19 09:52:00 +0300204 IPV6_SUBNET_ID=$(openstack --os-cloud devstack-admin --os-region "$REGION_NAME" subnet create --project $project_id --ip-version 6 --gateway $IPV6_PROVIDER_NETWORK_GATEWAY $IPV6_PROVIDER_SUBNET_NAME ${SUBNETPOOL_V6_ID:+--subnet-pool $SUBNETPOOL_V6_ID} --network $NET_ID ${fixed_range_v6:+--subnet-range $fixed_range_v6} | grep ' id ' | get_field 2)
Ben Swartzlanderd15f2222017-01-24 00:23:41 -0500205 die_if_not_set $LINENO IPV6_SUBNET_ID "Failure creating IPV6_SUBNET_ID for $IPV6_PROVIDER_SUBNET_NAME $project_id"
Sean M. Collins2a242512016-05-03 09:03:09 -0400206 fi
207
208 if [[ $Q_AGENT == "openvswitch" ]]; then
209 sudo ip link set $OVS_PHYSICAL_BRIDGE up
210 sudo ip link set br-int up
211 sudo ip link set $PUBLIC_INTERFACE up
212 fi
213 else
Armando Migliaccio4f11ff32016-10-27 06:15:23 -0700214 NET_ID=$(openstack --os-cloud devstack-admin --os-region "$REGION_NAME" network create --project $project_id "$PRIVATE_NETWORK_NAME" | grep ' id ' | get_field 2)
Sean M. Collins2a242512016-05-03 09:03:09 -0400215 die_if_not_set $LINENO NET_ID "Failure creating NET_ID for $PRIVATE_NETWORK_NAME $project_id"
216
217 if [[ "$IP_VERSION" =~ 4.* ]]; then
218 # Create IPv4 private subnet
219 SUBNET_ID=$(_neutron_create_private_subnet_v4 $project_id)
220 fi
221
222 if [[ "$IP_VERSION" =~ .*6 ]]; then
223 # Create IPv6 private subnet
224 IPV6_SUBNET_ID=$(_neutron_create_private_subnet_v6 $project_id)
225 fi
226 fi
227
Sean M. Collinsc35110e2016-05-18 10:38:51 -0400228 if is_networking_extension_supported "router" && is_networking_extension_supported "external-net"; then
Sean M. Collins2a242512016-05-03 09:03:09 -0400229 # Create a router, and add the private subnet as one of its interfaces
230 if [[ "$Q_L3_ROUTER_PER_TENANT" == "True" ]]; then
231 # create a tenant-owned router.
Armando Migliaccio4f11ff32016-10-27 06:15:23 -0700232 ROUTER_ID=$(openstack --os-cloud devstack-admin --os-region "$REGION_NAME" router create --project $project_id $Q_ROUTER_NAME | grep ' id ' | get_field 2)
Sean M. Collins2a242512016-05-03 09:03:09 -0400233 die_if_not_set $LINENO ROUTER_ID "Failure creating ROUTER_ID for $project_id $Q_ROUTER_NAME"
234 else
235 # Plugin only supports creating a single router, which should be admin owned.
Armando Migliaccio4f11ff32016-10-27 06:15:23 -0700236 ROUTER_ID=$(openstack --os-cloud devstack-admin --os-region "$REGION_NAME" router create $Q_ROUTER_NAME | grep ' id ' | get_field 2)
Sean M. Collins2a242512016-05-03 09:03:09 -0400237 die_if_not_set $LINENO ROUTER_ID "Failure creating ROUTER_ID for $Q_ROUTER_NAME"
238 fi
239
Armando Migliaccio4f11ff32016-10-27 06:15:23 -0700240 EXTERNAL_NETWORK_FLAGS="--external"
Matt Van Dijkd7a3f5c2016-08-16 15:46:58 +0000241 if is_networking_extension_supported "auto-allocated-topology"; then
Armando Migliaccio4f11ff32016-10-27 06:15:23 -0700242 EXTERNAL_NETWORK_FLAGS="$EXTERNAL_NETWORK_FLAGS --default"
Sean M. Collins2a242512016-05-03 09:03:09 -0400243 fi
244 # Create an external network, and a subnet. Configure the external network as router gw
245 if [ "$Q_USE_PROVIDERNET_FOR_PUBLIC" = "True" ]; then
Tim Swansonbb7d2f22017-12-16 17:14:10 -0500246 EXT_NET_ID=$(openstack --os-cloud devstack-admin --os-region "$REGION_NAME" network create "$PUBLIC_NETWORK_NAME" $EXTERNAL_NETWORK_FLAGS --provider-network-type ${PUBLIC_PROVIDERNET_TYPE:-flat} ${PUBLIC_PROVIDERNET_SEGMENTATION_ID:+--provider-segment $PUBLIC_PROVIDERNET_SEGMENTATION_ID} --provider-physical-network ${PUBLIC_PHYSICAL_NETWORK} | grep ' id ' | get_field 2)
Sean M. Collins2a242512016-05-03 09:03:09 -0400247 else
Armando Migliaccio4f11ff32016-10-27 06:15:23 -0700248 EXT_NET_ID=$(openstack --os-cloud devstack-admin --os-region "$REGION_NAME" network create "$PUBLIC_NETWORK_NAME" $EXTERNAL_NETWORK_FLAGS | grep ' id ' | get_field 2)
Sean M. Collins2a242512016-05-03 09:03:09 -0400249 fi
250 die_if_not_set $LINENO EXT_NET_ID "Failure creating EXT_NET_ID for $PUBLIC_NETWORK_NAME"
251
252 if [[ "$IP_VERSION" =~ 4.* ]]; then
253 # Configure router for IPv4 public access
254 _neutron_configure_router_v4
255 fi
256
257 if [[ "$IP_VERSION" =~ .*6 ]]; then
258 # Configure router for IPv6 public access
259 _neutron_configure_router_v6
260 fi
261 fi
262}
263
264# Create private IPv4 subnet
265function _neutron_create_private_subnet_v4 {
266 local project_id=$1
Matt Van Dijkd7a3f5c2016-08-16 15:46:58 +0000267 if [ -z $SUBNETPOOL_V4_ID ]; then
268 fixed_range_v4=$FIXED_RANGE
269 fi
Armando Migliaccio4f11ff32016-10-27 06:15:23 -0700270 local subnet_params="--project $project_id "
271 subnet_params+="--ip-version 4 "
Brian Haley31813e92016-08-22 15:39:22 -0400272 if [[ -n "$NETWORK_GATEWAY" ]]; then
273 subnet_params+="--gateway $NETWORK_GATEWAY "
274 fi
Armando Migliaccio4f11ff32016-10-27 06:15:23 -0700275 subnet_params+="${SUBNETPOOL_V4_ID:+--subnet-pool $SUBNETPOOL_V4_ID} "
276 subnet_params+="${fixed_range_v4:+--subnet-range $fixed_range_v4} "
277 subnet_params+="--network $NET_ID $PRIVATE_SUBNET_NAME"
Sean M. Collins2a242512016-05-03 09:03:09 -0400278 local subnet_id
Armando Migliaccio4f11ff32016-10-27 06:15:23 -0700279 subnet_id=$(openstack --os-cloud devstack-admin --os-region "$REGION_NAME" subnet create $subnet_params | grep ' id ' | get_field 2)
Sean M. Collins2a242512016-05-03 09:03:09 -0400280 die_if_not_set $LINENO subnet_id "Failure creating private IPv4 subnet for $project_id"
281 echo $subnet_id
282}
283
284# Create private IPv6 subnet
285function _neutron_create_private_subnet_v6 {
286 local project_id=$1
287 die_if_not_set $LINENO IPV6_RA_MODE "IPV6 RA Mode not set"
288 die_if_not_set $LINENO IPV6_ADDRESS_MODE "IPV6 Address Mode not set"
289 local ipv6_modes="--ipv6-ra-mode $IPV6_RA_MODE --ipv6-address-mode $IPV6_ADDRESS_MODE"
Matt Van Dijkd7a3f5c2016-08-16 15:46:58 +0000290 if [ -z $SUBNETPOOL_V6_ID ]; then
291 fixed_range_v6=$FIXED_RANGE_V6
292 fi
Armando Migliaccio4f11ff32016-10-27 06:15:23 -0700293 local subnet_params="--project $project_id "
294 subnet_params+="--ip-version 6 "
Brian Haley31813e92016-08-22 15:39:22 -0400295 if [[ -n "$IPV6_PRIVATE_NETWORK_GATEWAY" ]]; then
296 subnet_params+="--gateway $IPV6_PRIVATE_NETWORK_GATEWAY "
297 fi
Armando Migliaccio4f11ff32016-10-27 06:15:23 -0700298 subnet_params+="${SUBNETPOOL_V6_ID:+--subnet-pool $SUBNETPOOL_V6_ID} "
Brian Haley1ec93a82017-01-12 16:11:11 -0500299 subnet_params+="${fixed_range_v6:+--subnet-range $fixed_range_v6} "
300 subnet_params+="$ipv6_modes --network $NET_ID $IPV6_PRIVATE_SUBNET_NAME "
Sean M. Collins2a242512016-05-03 09:03:09 -0400301 local ipv6_subnet_id
Armando Migliaccio4f11ff32016-10-27 06:15:23 -0700302 ipv6_subnet_id=$(openstack --os-cloud devstack-admin --os-region "$REGION_NAME" subnet create $subnet_params | grep ' id ' | get_field 2)
Sean M. Collins2a242512016-05-03 09:03:09 -0400303 die_if_not_set $LINENO ipv6_subnet_id "Failure creating private IPv6 subnet for $project_id"
304 echo $ipv6_subnet_id
305}
306
307# Create public IPv4 subnet
308function _neutron_create_public_subnet_v4 {
Armando Migliaccio4f11ff32016-10-27 06:15:23 -0700309 local subnet_params="--ip-version 4 "
Sean M. Collins2a242512016-05-03 09:03:09 -0400310 subnet_params+="${Q_FLOATING_ALLOCATION_POOL:+--allocation-pool $Q_FLOATING_ALLOCATION_POOL} "
Brian Haley31813e92016-08-22 15:39:22 -0400311 if [[ -n "$PUBLIC_NETWORK_GATEWAY" ]]; then
312 subnet_params+="--gateway $PUBLIC_NETWORK_GATEWAY "
313 fi
Armando Migliaccio4f11ff32016-10-27 06:15:23 -0700314 subnet_params+="--network $EXT_NET_ID --subnet-range $FLOATING_RANGE --no-dhcp "
315 subnet_params+="$PUBLIC_SUBNET_NAME"
Sean M. Collins2a242512016-05-03 09:03:09 -0400316 local id_and_ext_gw_ip
Armando Migliaccio4f11ff32016-10-27 06:15:23 -0700317 id_and_ext_gw_ip=$(openstack --os-cloud devstack-admin --os-region "$REGION_NAME" subnet create $subnet_params | grep -e 'gateway_ip' -e ' id ')
Sean M. Collins2a242512016-05-03 09:03:09 -0400318 die_if_not_set $LINENO id_and_ext_gw_ip "Failure creating public IPv4 subnet"
319 echo $id_and_ext_gw_ip
320}
321
322# Create public IPv6 subnet
323function _neutron_create_public_subnet_v6 {
Armando Migliaccio4f11ff32016-10-27 06:15:23 -0700324 local subnet_params="--ip-version 6 "
Sean M. Collins2a242512016-05-03 09:03:09 -0400325 subnet_params+="--gateway $IPV6_PUBLIC_NETWORK_GATEWAY "
Armando Migliaccio4f11ff32016-10-27 06:15:23 -0700326 subnet_params+="--network $EXT_NET_ID --subnet-range $IPV6_PUBLIC_RANGE --no-dhcp "
327 subnet_params+="$IPV6_PUBLIC_SUBNET_NAME"
Sean M. Collins2a242512016-05-03 09:03:09 -0400328 local ipv6_id_and_ext_gw_ip
Armando Migliaccio4f11ff32016-10-27 06:15:23 -0700329 ipv6_id_and_ext_gw_ip=$(openstack --os-cloud devstack-admin --os-region "$REGION_NAME" subnet create $subnet_params | grep -e 'gateway_ip' -e ' id ')
Sean M. Collins2a242512016-05-03 09:03:09 -0400330 die_if_not_set $LINENO ipv6_id_and_ext_gw_ip "Failure creating an IPv6 public subnet"
331 echo $ipv6_id_and_ext_gw_ip
332}
333
334# Configure neutron router for IPv4 public access
335function _neutron_configure_router_v4 {
Armando Migliaccio4f11ff32016-10-27 06:15:23 -0700336 openstack --os-cloud devstack-admin --os-region "$REGION_NAME" router add subnet $ROUTER_ID $SUBNET_ID
Sean M. Collins2a242512016-05-03 09:03:09 -0400337 # Create a public subnet on the external network
338 local id_and_ext_gw_ip
339 id_and_ext_gw_ip=$(_neutron_create_public_subnet_v4 $EXT_NET_ID)
340 local ext_gw_ip
341 ext_gw_ip=$(echo $id_and_ext_gw_ip | get_field 2)
342 PUB_SUBNET_ID=$(echo $id_and_ext_gw_ip | get_field 5)
343 # Configure the external network as the default router gateway
Armando Migliaccio36f81ff2016-11-02 17:50:56 -0700344 openstack --os-cloud devstack-admin --os-region "$REGION_NAME" router set --external-gateway $EXT_NET_ID $ROUTER_ID
Sean M. Collins2a242512016-05-03 09:03:09 -0400345
Radosław Piliszek95298782021-06-08 16:19:40 +0000346 # This logic is specific to using OVN or the l3-agent for layer 3
347 if ([[ $Q_AGENT == "ovn" ]] && [[ "$OVN_L3_CREATE_PUBLIC_NETWORK" == "True" ]] && is_service_enabled q-svc neutron-server) || is_service_enabled q-l3 neutron-l3; then
Sean M. Collins2a242512016-05-03 09:03:09 -0400348 # Configure and enable public bridge
349 local ext_gw_interface="none"
350 if is_neutron_ovs_base_plugin; then
351 ext_gw_interface=$(_neutron_get_ext_gw_interface)
352 elif [[ "$Q_AGENT" = "linuxbridge" ]]; then
Kevin Benton6a42a852016-07-21 11:11:54 -0700353 # Get the device the neutron router and network for $FIXED_RANGE
Sean M. Collins2a242512016-05-03 09:03:09 -0400354 # will be using.
Kevin Benton6a42a852016-07-21 11:11:54 -0700355 if [ "$Q_USE_PROVIDERNET_FOR_PUBLIC" = "True" ]; then
356 # in provider nets a bridge mapping uses the public bridge directly
357 ext_gw_interface=$PUBLIC_BRIDGE
358 else
359 # e.x. brq3592e767-da for NET_ID 3592e767-da66-4bcb-9bec-cdb03cd96102
360 ext_gw_interface=brq${EXT_NET_ID:0:11}
361 fi
Sean M. Collins2a242512016-05-03 09:03:09 -0400362 fi
363 if [[ "$ext_gw_interface" != "none" ]]; then
364 local cidr_len=${FLOATING_RANGE#*/}
365 local testcmd="ip -o link | grep -q $ext_gw_interface"
366 test_with_retry "$testcmd" "$ext_gw_interface creation failed"
Kevin Benton1554ade2016-07-22 09:40:19 -0700367 if [[ $(ip addr show dev $ext_gw_interface | grep -c $ext_gw_ip) == 0 && ( $Q_USE_PROVIDERNET_FOR_PUBLIC == "False" || $Q_USE_PUBLIC_VETH == "True" || $Q_ASSIGN_GATEWAY_TO_PUBLIC_BRIDGE == "True" ) ]]; then
Sean M. Collins2a242512016-05-03 09:03:09 -0400368 sudo ip addr add $ext_gw_ip/$cidr_len dev $ext_gw_interface
369 sudo ip link set $ext_gw_interface up
370 fi
Armando Migliaccio4f11ff32016-10-27 06:15:23 -0700371 ROUTER_GW_IP=$(openstack --os-cloud devstack-admin --os-region "$REGION_NAME" port list -c 'Fixed IP Addresses' --device-owner network:router_gateway | awk -F'ip_address' '{ print $2 }' | cut -f2 -d\' | tr '\n' ' ')
Sean M. Collins2a242512016-05-03 09:03:09 -0400372 die_if_not_set $LINENO ROUTER_GW_IP "Failure retrieving ROUTER_GW_IP"
Sean M. Collins2a242512016-05-03 09:03:09 -0400373 fi
374 _neutron_set_router_id
375 fi
376}
377
378# Configure neutron router for IPv6 public access
379function _neutron_configure_router_v6 {
Armando Migliaccio4f11ff32016-10-27 06:15:23 -0700380 openstack --os-cloud devstack-admin --os-region "$REGION_NAME" router add subnet $ROUTER_ID $IPV6_SUBNET_ID
Sean M. Collins2a242512016-05-03 09:03:09 -0400381 # Create a public subnet on the external network
382 local ipv6_id_and_ext_gw_ip
383 ipv6_id_and_ext_gw_ip=$(_neutron_create_public_subnet_v6 $EXT_NET_ID)
384 local ipv6_ext_gw_ip
385 ipv6_ext_gw_ip=$(echo $ipv6_id_and_ext_gw_ip | get_field 2)
386 local ipv6_pub_subnet_id
387 ipv6_pub_subnet_id=$(echo $ipv6_id_and_ext_gw_ip | get_field 5)
388
389 # If the external network has not already been set as the default router
390 # gateway when configuring an IPv4 public subnet, do so now
391 if [[ "$IP_VERSION" == "6" ]]; then
PranaliD705b3782017-02-01 11:32:09 +0530392 openstack --os-cloud devstack-admin --os-region "$REGION_NAME" router set --external-gateway $EXT_NET_ID $ROUTER_ID
Sean M. Collins2a242512016-05-03 09:03:09 -0400393 fi
394
Gregory Thiemonge949f5ad2021-03-15 18:25:04 +0100395 # This logic is specific to using OVN or the l3-agent for layer 3
Radosław Piliszek95298782021-06-08 16:19:40 +0000396 if ([[ $Q_AGENT == "ovn" ]] && [[ "$OVN_L3_CREATE_PUBLIC_NETWORK" == "True" ]] && is_service_enabled q-svc neutron-server) || is_service_enabled q-l3 neutron-l3; then
aojeagarcia866efef2018-09-28 10:43:46 +0200397 # if the Linux host considers itself to be a router then it will
398 # ignore all router advertisements
Henry Gessau734f1442016-09-17 19:28:53 -0400399 # Ensure IPv6 RAs are accepted on interfaces with a default route.
Monty Taylorc12d1d92016-08-23 19:07:57 -0500400 # This is needed for neutron-based devstack clouds to work in
401 # IPv6-only clouds in the gate. Please do not remove this without
402 # talking to folks in Infra.
Henry Gessau734f1442016-09-17 19:28:53 -0400403 for d in $default_v6_route_devs; do
Drago Rossonb34d4592016-09-26 13:23:23 -0500404 # Slashes must be used in this sysctl command because route devices
405 # can have dots in their names. If dots were used, dots in the
406 # device name would be reinterpreted as a slash, causing an error.
407 sudo sysctl -w net/ipv6/conf/$d/accept_ra=2
Henry Gessau734f1442016-09-17 19:28:53 -0400408 done
Jens Harbott0c9a6ca2019-09-19 13:57:43 +0000409 # Ensure IPv6 forwarding is enabled on the host
410 sudo sysctl -w net.ipv6.conf.all.forwarding=1
Sean M. Collins2a242512016-05-03 09:03:09 -0400411 # Configure and enable public bridge
412 # Override global IPV6_ROUTER_GW_IP with the true value from neutron
Armando Migliaccio4f11ff32016-10-27 06:15:23 -0700413 IPV6_ROUTER_GW_IP=$(openstack --os-cloud devstack-admin --os-region "$REGION_NAME" port list -c 'Fixed IP Addresses' | grep $ipv6_pub_subnet_id | awk -F'ip_address' '{ print $2 }' | cut -f2 -d\' | tr '\n' ' ')
Sean M. Collins2a242512016-05-03 09:03:09 -0400414 die_if_not_set $LINENO IPV6_ROUTER_GW_IP "Failure retrieving IPV6_ROUTER_GW_IP"
415
416 if is_neutron_ovs_base_plugin; then
417 local ext_gw_interface
418 ext_gw_interface=$(_neutron_get_ext_gw_interface)
419 local ipv6_cidr_len=${IPV6_PUBLIC_RANGE#*/}
420
421 # Configure interface for public bridge
Yi Zhaoa464ea72016-05-12 10:32:58 +0800422 sudo ip -6 addr replace $ipv6_ext_gw_ip/$ipv6_cidr_len dev $ext_gw_interface
Gregory Thiemonge949f5ad2021-03-15 18:25:04 +0100423 # Any IPv6 private subnet that uses the default IPV6 subnet pool
424 # and that is plugged into the default router (Q_ROUTER_NAME) will
425 # be reachable from the devstack node (ex: ipv6-private-subnet).
426 # Some scenario tests (such as octavia-tempest-plugin) rely heavily
427 # on this feature.
Matt Van Dijkd7a3f5c2016-08-16 15:46:58 +0000428 local replace_range=${SUBNETPOOL_PREFIX_V6}
429 if [[ -z "${SUBNETPOOL_V6_ID}" ]]; then
430 replace_range=${FIXED_RANGE_V6}
431 fi
432 sudo ip -6 route replace $replace_range via $IPV6_ROUTER_GW_IP dev $ext_gw_interface
Sean M. Collins2a242512016-05-03 09:03:09 -0400433 fi
434 _neutron_set_router_id
435 fi
436}
watanabe.isao4f4d95a2016-05-12 20:35:20 +0900437
Sean M. Collinsc35110e2016-05-18 10:38:51 -0400438function is_networking_extension_supported {
439 local extension=$1
440 # TODO(sc68cal) cache this instead of calling every time
Armando Migliaccio4f11ff32016-10-27 06:15:23 -0700441 EXT_LIST=$(openstack --os-cloud devstack-admin --os-region "$REGION_NAME" extension list --network -c Alias -f value)
Sean M. Collinsc35110e2016-05-18 10:38:51 -0400442 [[ $EXT_LIST =~ $extension ]] && return 0
443}