This How-To will describe how to create an instance of DANOS in openstack for functional testing and training. The VNF image will be a 4 vcpu, 4096 GB memory, 8 GB disk glance image with 4 network connections that could be used to spin up a Danos VRR for testing. The vcpu/memory/disk simply matches the assumptions for the iso. The 4 network ports a sufficient for testing with 1 external port for OA&M and 3 internal networks for demonstrating flows. Following the steps additional networks can be attached.
The intent is that the vRR could be reached via ssh/netconf NETCONF for configuration on the external port and the 3 other ports are for flow and feature functional testing. This configuration is not for throughput testing but rather to get familiar with the features and functions in a Danos Virtual Router.
At a high level, we are creating a glance image from the iso by creating a virtual server, installing the danos Danos image, detaching the disk image and then creating a working vRR from the disk image using the flavor that has the netowrk/vcpu/memory/disk settings that match our test assumptions.
CAVEAT:
Your environment must expose ssse3 to the Virtual Machine or Danos will not install. “host-passthrough” is the setting in your nova.conf that is requirerequired
Instructions
A. Networks
In horizon or via cli CLI , create 3 networks (in addition to the external network).
Set options for no gateway but dhcp DHCP on.
In this example I will use these names and IP blocks:
...
| Code Block |
|---|
source openstack.rc |
E. Import the danos Danos iso
| Code Block |
|---|
openstack image create --public \ --disk-format iso --container-format bare \ --file danos-1908-amd64-vrouter.iso danos-1908-amd64-vrouter.iso openstack image list |
...
a. show interfaces
b. enter config mode and add the external network (get ip address from horiazon ) so we dont don't have to use console anymore
...
dp0s3 10.0.200.135/24 u/u a-10g/a-full
dp0s4 - A/D auto/auto
dp0s5 - A/D auto/auto
dp0s6 - A/D auto/auto
O. Add configruation configuration for the 3 others ports on the private networks using ip address from horizon
...
dp0s3 10.0.200.135/24 u/u a-10g/a-full
dp0s4 192.168.101.222/24 u/u a-10g/a-full
dp0s5 192.168.102.216/24 u/u a-10g/a-full
dp0s6 192.168.103.227/24 u/u a-10g/a-full
P. you can also start netconf NETCONF if you want
set service netconf
...
Curl should now be blocked lets see how many packets are dropped.
on danosDanos
show firewall dp0s4
Rulesets Information: Firewall
...
V. Next Steps
1. Add cloud-init to the danos Danos image
2. Create a heat template to spin up all 3 VM's and the associated networking
...