OpenStack Mitaka Neutron SR-IOV配置
### 一、在所有节点(控制节点、计算节点) 1、修改BIOS ``` BOIS里面开启SR-IOV功能 开启 VT-d (inter virtualization technology)和 SR-IOV ``` 2、修改系统配置 ``` # cat /etc/default/grub GRUB_TIMEOUT=5 GRUB_DISTRIBUTOR="$(sed 's, release .*$,,g' /etc/system-release)" GRUB_DEFAULT=saved GRUB_DISABLE_SUBMENU=true GRUB_TERMINAL_OUTPUT="console" GRUB_CMDLINE_LINUX="rd.lvm.lv=cl/root rd.lvm.lv=cl/swap rhgb quiet intel_iommu=on ixgbe.max_vfs=16" GRUB_DISABLE_RECOVERY="true" 其中intel_iommu=on ixgbe.max_vfs=16是新添加的 ``` ``` grub2-mkconfig -o /boot/grub2/grub.cfg ``` 3、安装配置软件包 ``` yum -y install openstack-neutron-sriov-nic-agent.noarch ``` 4、所有节点全部重启 为了保证控制节点集群稳定性,控制节点请一台一台重启 ### 二、控制节点配置 ``` # 增加sriov支持 vi /etc/neutron/plugins/ml2/ml2_conf.ini mechanism_drivers = openvswitch,sriovnicswitch # 查看网卡 lspci -nn | grep -i ethernet [root@controller01 ~]# lspci -nn | grep -i ethernet 04:00.0 Ethernet controller [0200]: Intel Corporation I350 Gigabit Network Connection [8086:1521] (rev 01) 04:00.1 Ethernet controller [0200]: Intel Corporation I350 Gigabit Network Connection [8086:1521] (rev 01)... 08:12.6 Ethernet controller [0200]: Intel Corporation 82599 Ethernet Controller Virtual Function [8086:10ed] (rev 01) 08:13.0 Ethernet controller [0200]: Intel Corporation 82599 Ethernet Controller Virtual Function [8086:10ed] (rev 01) 08:13.2 Ethernet controller [0200]: Intel Corporation 82599 Ethernet Controller Virtual Function [8086:10ed] (rev 01) 08:13.4 Ethernet controller [0200]: Intel Corporation 82599 Ethernet Controller Virtual Function [8086:10ed] (rev 01) 08:13.6 Ethernet controller [0200]: Intel Corporation 82599 Ethernet Controller Virtual Function [8086:10ed] (rev 01) 82:00.0 Ethernet controller [0200]: Intel Corporation 82599ES 10-Gigabit SFI/SFP+ Network Connection [8086:10fb] (rev 0... 82:10.0 Ethernet controller [0200]: Intel Corporation 82599 Ethernet Controller Virtual Function [8086:10ed] (rev 01) 82:13.6 Ethernet controller [0200]: Intel Corporation 82599 Ethernet Controller Virtual Function [8086:10ed] (rev 01) # 配置PCI vi /etc/neutron/plugins/ml2/ml2_conf_sriov.ini [ml2_sriov] supported_pci_vendor_devs = 8086:10ed # 增加sriov配置文件 vi /usr/lib/systemd/system/neutron-server.service --config-file /etc/neutron/neutron.conf --config-file /etc/neutron/plugin.ini --config-file /etc/neutron/plugins/ml2/ml2_conf_sriov.ini # 增加调度算法支持sriov vi /etc/nova/nova.conf [DEFAULT] scheduler_available_filters=nova.scheduler.filters.all_filters scheduler_default_filters=RetryFilter,AvailabilityZoneFilter,RamFilter,ComputeFilter,ComputeCapabilitiesFilter,ImagePropertiesFilter,CoreFilter, PciPassthroughFilter # 绑定物理网卡 vi /etc/neutron/plugins/ml2/sriov_agent.ini [sriov_nic] physical_device_mappings = external:enp130s0 # 重启服务 pcs resource restart openstack-nova-consoleauth-clone pcs resource restart neutron-server-clone ``` ### 三、计算节点配置 ``` # 计算节点开启SR-IOV agent vi /etc/neutron/plugins/ml2/sriov_agent.ini [securitygroup] firewall_driver = neutron.agent.firewall.NoopFirewallDriver [sriov_nic] physical_device_mappings = external:enp130s0 exclude_devices = # 计算节点开放白名单 vi /etc/nova/nova.conf pci_passthrough_whitelist = [{"devname":"enp130s0","physical_network":"external"}] # 重启服务 systemctl start neutron-sriov-nic-agent systemctl enable neutron-sriov-nic-agent systemctl restart openstack-nova-compute ``` ### 四、测试 ``` # 创建相关主机 neutron port-create <net-id> --binding:vnic-type direct #nova boot --flavor m1.large --image <image>--nic port-id=<port1> --nic port-id=<port2> <vm name> ip link show p4p1 [root@compute04 ~]# ip link show enp130s0 5: enp130s0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT qlen 1000 link/ether 00:e0:ed:2e:20:c6 brd ff:ff:ff:ff:ff:ff vf 0 MAC 00:00:00:00:00:00, spoof checking on, link-state auto vf 1 MAC 00:00:00:00:00:00, spoof checking on, link-state auto vf 2 MAC 00:00:00:00:00:00, spoof checking on, link-state auto vf 3 MAC 00:00:00:00:00:00, spoof checking on, link-state auto vf 4 MAC 00:00:00:00:00:00, spoof checking on, link-state auto vf 5 MAC 00:00:00:00:00:00, spoof checking on, link-state auto vf 6 MAC 00:00:00:00:00:00, spoof checking on, link-state auto vf 7 MAC 00:00:00:00:00:00, spoof checking on, link-state auto vf 8 MAC 00:00:00:00:00:00, spoof checking on, link-state auto vf 9 MAC 00:00:00:00:00:00, spoof checking on, link-state auto vf 10 MAC 00:00:00:00:00:00, spoof checking on, link-state auto vf 11 MAC 00:00:00:00:00:00, spoof checking on, link-state auto vf 12 MAC 00:00:00:00:00:00, spoof checking on, link-state auto vf 13 MAC 00:00:00:00:00:00, spoof checking on, link-state auto vf 14 MAC 00:00:00:00:00:00, spoof checking on, link-state auto vf 15 MAC fa:16:3e:73:2c:ee, vlan 46, spoof checking on, link-state auto ```
生活不会突变,你要做的只是耐心和积累。人这一辈子没法做太多的事情,所以每一件都要做得精彩绝伦。你的时间有限,做喜欢的事情会令人愉悦,所以跟随自己的本心。