29cdefc9f6
Further clarify installation guide networking content to reduce potential confusion about the purpose of each network. Change-Id: I1c7f79784eb80e317be1f156bc3a0e68ac39df3b Closes-Bug: #1372669 backport: Juno
85 lines
4.4 KiB
XML
85 lines
4.4 KiB
XML
<?xml version="1.0" encoding="UTF-8"?>
|
|
<section xmlns="http://docbook.org/ns/docbook"
|
|
xmlns:xi="http://www.w3.org/2001/XInclude"
|
|
xmlns:xlink="http://www.w3.org/1999/xlink"
|
|
version="5.0"
|
|
xml:id="basics-networking">
|
|
<?dbhtml stop-chunking?>
|
|
<title>Networking</title>
|
|
<para>After installing the operating system on each node for the
|
|
architecture that you choose to deploy, you must configure the network
|
|
interfaces. We recommend that you disable any automated network
|
|
management tools and manually edit the appropriate configuration files
|
|
for your distribution. For more information on how to configure networking
|
|
on your distribution, see the
|
|
<link os="ubuntu"
|
|
xlink:href="https://help.ubuntu.com/lts/serverguide/network-configuration.html"
|
|
>documentation.</link>
|
|
<link os="debian"
|
|
xlink:href="https://wiki.debian.org/NetworkConfiguration"
|
|
>documentation.</link>
|
|
<link os="rhel;centos;fedora"
|
|
xlink:href="https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/Deployment_Guide/s1-networkscripts-interfaces.html"
|
|
>documentation.</link>
|
|
<link os="sles;opensuse"
|
|
xlink:href="https://www.suse.com/documentation/sles11/book_sle_admin/data/sec_basicnet_manconf.html"
|
|
>SLES 11</link>
|
|
<phrase os="sles;opensuse"> or </phrase>
|
|
<link os="sles;opensuse"
|
|
xlink:href="http://activedoc.opensuse.org/book/opensuse-reference/chapter-13-basic-networking"
|
|
>openSUSE documentation.</link></para>
|
|
<para>All nodes require Internet access for administrative purposes
|
|
such as package installation, security updates,
|
|
<glossterm>DNS</glossterm>, and
|
|
<glossterm baseform="Network Time Protocol (NTP)"
|
|
>NTP</glossterm>. In most cases, nodes should obtain Internet
|
|
access through the management network interface. To highlight
|
|
the importance of network separation, the example architectures
|
|
use <link xlink:href="https://tools.ietf.org/html/rfc1918"
|
|
>private address space</link> for the management network and assume
|
|
that network infrastructure provides Internet access via
|
|
<glossterm baseform="Network Address Translation (NAT)"
|
|
>NAT</glossterm>. To illustrate the flexibility of
|
|
<glossterm>IaaS</glossterm>, the example architectures use public
|
|
IP address space for the external network and assume that network
|
|
infrastructure provides direct Internet access to instances in
|
|
your OpenStack environment. In environments with only one block
|
|
of public IP address space, both the management and external networks
|
|
must ultimately obtain Internet access using it. For simplicity, the
|
|
diagrams in this guide only show Internet access for OpenStack
|
|
services.</para>
|
|
<procedure os="sles;opensuse">
|
|
<title>To disable Network Manager</title>
|
|
<step>
|
|
<para>Use the YaST network module:</para>
|
|
<screen os="opensuse;sles"><prompt>#</prompt> <userinput>yast2 network</userinput></screen>
|
|
<para>For more information, see the
|
|
<link xlink:href="https://www.suse.com/documentation/sles11/book_sle_admin/data/sec_nm_activate.html">SLES </link> or
|
|
the
|
|
<link xlink:href="http://activedoc.opensuse.org/book/opensuse-reference/chapter-13-basic-networking#sec.basicnet.yast.netcard.global">
|
|
openSUSE documentation</link>.
|
|
</para>
|
|
</step>
|
|
</procedure>
|
|
<note>
|
|
<para os="rhel;centos;fedora;sles;opensuse">Your distribution enables
|
|
a restrictive <glossterm>firewall</glossterm> by default. During the
|
|
installation process, certain steps will fail unless you alter or
|
|
disable the firewall. For more information about securing your
|
|
environment, refer to the
|
|
<link xlink:href="http://docs.openstack.org/sec/">OpenStack
|
|
Security Guide</link>.</para>
|
|
<para os="ubuntu;debian">Your distribution does not enable a
|
|
restrictive <glossterm>firewall</glossterm> by default. For more
|
|
information about securing your environment, refer to the
|
|
<link xlink:href="http://docs.openstack.org/sec/">OpenStack
|
|
Security Guide</link>.</para>
|
|
</note>
|
|
<para>Proceed to network configuration for the example
|
|
<link linkend="basics-networking-neutron">OpenStack Networking (neutron)
|
|
</link> or <link linkend="basics-networking-nova">legacy
|
|
networking (nova-network)</link> architecture.</para>
|
|
<xi:include href="section_basics-networking-neutron.xml"/>
|
|
<xi:include href="section_basics-networking-nova.xml"/>
|
|
</section>
|