floating IP允许外部网直接访问租户网络中的实例。 这是通过在router上应用iptalbes的NAT规则实现的。
需要特别注意的是，floating IP位于路由器的外部网接口上，而不是位于实例上。
1、controller控制节点
# CD/etc/sys config/network-scripts/# cpifcfg-eth0if CFG-et h1 [根@控制器网络- scripts ] # catifcfg-et h1 type='以太网' boot proto=static name=et h1 device=et h1 on boot=' yes ' IP addr=10.0.0.131 net mask ml2 _ conf.iniml2_ type _ flat flat _ networks provider， private # open stack-config-- set/etc/neutron/plugins/ml2/Linux bridge _ agent.ini Linux _ bridge physical _ ing systemctlrestartneutron-server.service neutron-Linux bridge-agent.service #开放堆栈配置-配置- neutron.coom 打开堆栈- config-- set/etc/neutron/neutron.confdefaultallow _ over打开堆栈- config-- set/etc/neutron/PLL VX LAN #开放堆栈配置--set/etc/neutron/plugins/ml2/ml2 _ conf.iniml2mechanism _ driverslinuxbridge， L2 population # open stack-config-- set/etc/neutron/plugins/ml2/ml2 _ conf.iniml2tenant _ network _ typesvxlark ml2/ml2 _ conf.iniml2_ type _ vxlanvni _ ranges 133601000 ml2/Linux bridge _ agent.inivxlanenable _ vxlantrue # opop linuxbbbase open stack-config-- set/etc/neutron/plugins/ml2/Linux bridge _ agent.inivxlanl2_ popu lation true # open stack-1 L3 _ agent.inidefaultinterface _ driverlinuxbridge # open stack-config-- set/etc/neutron/plugins/mins neutron/L3 _ agent.inidefaultexternal _ network _ bridge # systemctlrestartneutron-neutron-Linux bridge-age.sent neutron-metadata-agent.service neutron-L3-agent.service # systemctlenableneutron-L3-agent.servicecreatedsymlion neutron-L3-agent.service to/usr/lib/systemd/system/neutron-L3-agent.service systemctlstatusneutron-L3-agent.serviceneutron-L3-agent.service-openstack neutroutron set :禁用(活动：活动(运行一2020-03-30 11:02:12 CST； 1 min 46 sagomainpid :492 (/usr/bin/python ) cgroup :/system.slice/neutron-L3-agent.service (492/neutrron ) neutron-dist.conf-- config-dir/usr/share/neutro or neutron.conf . 3月30日11336002:12控制lersystemd [1]
# CD/etc/sys config/network-scripts/# cpifcfg-eth0if CFG-et h1 #开放堆栈配置/etc/neutron/pluging Linux bridge _ agent.ini Linux _ bridge physical _ interface _ mappings provider 3360 eth 0， private : eth1# systemctlrestartneutron-Linux bridge-agent.service #开放堆栈配置集/etc/neutron/pluggg Linux bridge _ agent.inivxlanenable _ vxlantrue # open stack-config-- set/etc/neutron/plugins/ml2/Linux bbbig ml2/Linux bridge _ agent.inivxlanl2_ population true # open stack-1 Linux bridge _ agent.inivxlanlocal _ IP 10.0.0.0 systemctlrestartneutron-Linux网桥代理. service # systemctlstatusneutron-Linux bridge-agent.serviceneutron-Linux bridge-agent.service-openstackneutronlinuxbridge 启用的厂商预设：禁用(活动：活动(运行一2020-03-30 11:04:58 CST； 9 sago process :3905 execstartpre=/usr/bin/neutron-enable-bridge-firewall.sh (code=exited， satus=0/success (主PID :3912 )/usr/bin/python ) tasks : cgroup :/system.slice/neutron-linuxbridididion neutron-Linux网桥代理--config-file/usr/share/neutron/neutron-dist.conf-confile etc/neutron/plug 3360 startingopenstackneutronlinuxbridgeagent . 3月30日11336004336058 compute neutron-enable-bridge-firewall.sh [ 3905 ] 3360 net.bridge.bridge-nf-call-iptables=13月30日11336004336058计算neutron-enable-bridge-firewall.sh [ 3999 ] 3360 net.bridge.bridge-nf-call-IP6tables=13月30日11336004336058 computesystemd [1] 3360 startedopenstackneutronlinuxbbbbbbbled PWD=/； 用户=路线； command=/bin/neutron-root wrap/etc/neutron/root wrap.confprivsep-helper-- config-file/usr/share/neutre/neutred 用户=路线； COMMAND=/bin/neu