VPNaaS neutron
•
0 likes•352 views
This document provides instructions for installing and configuring Neutron VPNaaS in an OpenStack Kilo environment using Ubuntu. It outlines steps to install the neutron-vpn-agent on controller and network nodes, configure the neutron.conf and vpn_agent.ini files to use StrongSwan for VPN, and restart the neutron server and agents. Additional links are provided for dashboard and command line usage of the VPNaaS service.
Report
Share
Report
Share
Download to read offline
![NEUTRON VPNaaS installation and configuration in
Kilo Openstack(Ubuntu):
1. Install vpn agent on both controller and network nodes.
$ aptget install y neutronvpnagent
2. Update neutron.conf file in controller node with below configurations for using strongswan.
$ vi /etc/neutron/neutron.conf
service_plugins=router,vpnaas
[service_providers]
service_provider=VPN:strongswan:neutron_vpnaas.services.vpn.service_drivers.ipsec.I
PsecVPNDriver:default
3. Update vpn_agent.ini with the below configurations for using strongswan in both controller
and network nodes.
$ vi /etc/neutron/vpn_agent.ini
[vpnagent]
vpn_device_driver=neutron_vpnaas.services.vpn.device_drivers.strongswan_ipsec.Stro
ngSwanDriver
4. Restart neutron server on controller node.
$ service neutronserver restart
5. Restart vpn agent on network node
$ service neutronvpnagent restart
Note:
Dashboard steps to work with VPN:
https://www.packtpub.com/books/content/settingvpnaasopenstack
Command Line steps to work with VPN:
https://wiki.openstack.org/wiki/Neutron/VPNaaS/HowToInstall](https://image.slidesharecdn.com/vpnaasneutron-160419115536/85/VPNaaS-neutron-1-320.jpg)
Recommended
Openstack Neutron LBAAS 
This document provides instructions for installing and configuring load balancing as a service (LBaaS) on an OpenStack CentOS setup with three nodes. It describes configuring the controller node to install neutron LBaaS packages and plugins. It also describes configuring the network nodes to install neutron LBaaS agents, packages for the chosen load balancer (HAProxy), and updating configuration files to enable the LBaaS agents.
Burrow in basel
Burrow in Basel provides a workshop to teach participants how to:
1. Install Burrow and dependencies to set up a local blockchain network.
2. Quickly boot a local Burrow chain and clean it up.
3. Create keys to participate in a collaborative Burrow network and start a node to join the network.
4. Deploy and test smart contracts on the collaborative network.
5. Become a validator on the collaborative network by making a governance transaction.
6. Set up a Burrow.js service to interact with a smart contract over HTTP.
7. Call the Burrow.js service using curl to simulate external interactions.
Devstack
This document provides instructions for installing the latest OpenStack code using DevStack with either Nova network or Neutron network. The instructions include downloading DevStack, adding a stack user, giving permissions to the DevStack folder, and running stack.sh to install with Nova network. Alternatively, a local.conf file can be created to specify configuration options for installing with Neutron network instead.
Rdo mitaka
This document provides instructions for installing OpenStack Mitaka on a single node using Packstack. The steps include disabling NetworkManager and firewall services, installing the RDO repository RPM, updating packages, installing Packstack, and using Packstack to deploy the latest OpenStack Mitaka in all-in-one mode with a single command.
How to install nginx vs unicorn
This guide will show how to install nginx with unicorn in Ubuntu.
All config files, i put it as comment below.
Webinar - Centralising syslogs with the new beats, logstash and elasticsearch
This webinar will cover details on Centralising syslogs with the help of Beats, Logstash and Elasticsearch. This will help you to Centralise logs for monitoring and analysis.
Mongo db program_installation_guide
This document provides instructions for installing and configuring MongoDB version 0.1. It includes steps to tune the operating system by checking the kernel version and file system, setting file descriptor limits, tuning network parameters, disabling atime for data volumes, and disabling NUMA. It also describes adding a MongoDB user and group, setting process and file limits for that user, extracting the MongoDB program files, and moving them to the /opt/ directory.
Setting up MySQL Replication Cluster in Kubernetes
We will use a traditional slave/master set up with asynchronous replication, configurable replication, depending on user configuration, and no requirement for a constant connection.
Recommended
Openstack Neutron LBAAS
This document provides instructions for installing and configuring load balancing as a service (LBaaS) on an OpenStack CentOS setup with three nodes. It describes configuring the controller node to install neutron LBaaS packages and plugins. It also describes configuring the network nodes to install neutron LBaaS agents, packages for the chosen load balancer (HAProxy), and updating configuration files to enable the LBaaS agents.
Burrow in basel
Burrow in Basel provides a workshop to teach participants how to:
1. Install Burrow and dependencies to set up a local blockchain network.
2. Quickly boot a local Burrow chain and clean it up.
3. Create keys to participate in a collaborative Burrow network and start a node to join the network.
4. Deploy and test smart contracts on the collaborative network.
5. Become a validator on the collaborative network by making a governance transaction.
6. Set up a Burrow.js service to interact with a smart contract over HTTP.
7. Call the Burrow.js service using curl to simulate external interactions.
Devstack
This document provides instructions for installing the latest OpenStack code using DevStack with either Nova network or Neutron network. The instructions include downloading DevStack, adding a stack user, giving permissions to the DevStack folder, and running stack.sh to install with Nova network. Alternatively, a local.conf file can be created to specify configuration options for installing with Neutron network instead.
Rdo mitaka
This document provides instructions for installing OpenStack Mitaka on a single node using Packstack. The steps include disabling NetworkManager and firewall services, installing the RDO repository RPM, updating packages, installing Packstack, and using Packstack to deploy the latest OpenStack Mitaka in all-in-one mode with a single command.
How to install nginx vs unicorn
This guide will show how to install nginx with unicorn in Ubuntu.
All config files, i put it as comment below.
Webinar - Centralising syslogs with the new beats, logstash and elasticsearch
This webinar will cover details on Centralising syslogs with the help of Beats, Logstash and Elasticsearch. This will help you to Centralise logs for monitoring and analysis.
Mongo db program_installation_guide
This document provides instructions for installing and configuring MongoDB version 0.1. It includes steps to tune the operating system by checking the kernel version and file system, setting file descriptor limits, tuning network parameters, disabling atime for data volumes, and disabling NUMA. It also describes adding a MongoDB user and group, setting process and file limits for that user, extracting the MongoDB program files, and moving them to the /opt/ directory.
Setting up MySQL Replication Cluster in Kubernetes
We will use a traditional slave/master set up with asynchronous replication, configurable replication, depending on user configuration, and no requirement for a constant connection.
Task 2
The document outlines the steps to launch an EC2 instance and attach an EBS volume using AWS CLI:
1. Create a key pair and security group using AWS CLI commands.
2. Launch an EC2 instance using the created key pair and security group, along with specifying an AMI, instance type, and subnet.
3. Create a 1GB EBS volume in the same availability zone and attach it to the newly launched instance, specifying the volume ID and instance ID.
Squid file
The document provides instructions for installing and configuring the Squid proxy server on CentOS/RHEL 5. It describes using yum to install Squid, configuring the squid.conf file to define ACLs for allowed internal networks, starting the Squid service, verifying port 3128 is open, and opening the port in iptables firewall.
Openstack installation using rdo multi node
Openstack 3 node setup using RDO on top of RHEL 7.
Complete steps which will give you more convenience to work on top of Openstack without any installation issues.
Aws
This document provides instructions for setting up a Node.js and Express application on an EC2 instance and deploying Express and Node.js Lambda functions, including installing dependencies, creating sample applications, and testing Lambda functions by sending events.
Installing OpenStack Juno using RDO on RHEL
This document provides instructions for installing Openstack Juno using RDO on a Red Hat 7 server. It outlines preparing the server environment by disabling NetworkManager, attaching subscription repositories, and installing packstack. Upon completion, it notes important files containing credentials and configuration. Quick install steps and links to additional guides are also included.
Shibuya,trac セッション
The document discusses various code hosting and project management tools including GitHub, Google Code, Amazon EC2 and S3, SourceRepo, and Hosting Playground. It also mentions the Trac wiki and plugin system for project tracking and mentions setting up a new project, repositories, users, and integrating with version control systems like Git, Subversion, and Mercurial.
Rule of two
Microservice = docker two layer image. Dynamic binding (coupling) responsible for microservice layer reuse :: runtime image consists of only Service layer and Dependency layer. Dependency layer contains statically bound technology components needed to realize Service layer. Service layer implements focused business domain functions.
Step by-step installation of a secure linux web dns- and mail server
Step by-step installation of a secure linux web dns- and mail serverIntegrated Circuit Design Research & Education Center (ICDREC)
This document provides a step-by-step guide to installing and configuring a secure Linux-based web, DNS, and mail server. The key aspects summarized are:
1) An Openna Linux 1.0 installation is performed and secured, adding firewall, intrusion detection, and chroot jailing of services.
2) Popular internet services like Apache, BIND, Qmail, MySQL, and Snort are installed and hardened through configuration of access controls, passwords, and file permissions.
3) Additional security tools like AIDE and log monitoring are implemented to detect intrusions and limit damage from any potential cracks.Data analysis with Galaxy on the Cloud
Workshop slides demonstrating how to setup a CloudMan cluster and use Galaxy to perform the Galaxy 101 exercise.
Configuration of mail server on cisco packet tracer1 converted
This document provides instructions for configuring a mail server on Cisco Packet Tracer. It involves setting up 3 laptops, a mail server, and a DNS server on a single network switch. The mail server is assigned IP 192.168.1.1 and DNS server 192.168.1.2. On the mail server, a domain name is selected and SMTP and POP3 services are enabled. Usernames and passwords are created. Then on the DNS server, the same domain name and mail server IP are provided. Finally, mail can be sent and received on the laptops using the accounts configured on the mail server.
How To Connect Amazon AWS EC2 with Key Pair – Linux
This document provides instructions for connecting to an Amazon AWS EC2 Linux instance using a key pair. It outlines downloading the key pair file, modifying its permissions, and then using it to connect via SSH either by public IP or private IP. The key steps are: 1) Identify the key pair associated with the instance; 2) Copy the private key file to the local machine; 3) Change permissions on the key file; 4) Connect using SSH and specifying the key file and either public or private IP address. Following these steps allows logging into the EC2 instance securely using the key pair.
Openstack kilo installation using rdo
This document provides instructions for installing OpenStack Kilo using RDO on a single node or on a 3 node environment consisting of a controller, network, and compute node. For a single node installation, it describes installing the necessary RPMs and packages and then running packstack. For a 3 node installation, it provides steps to configure each node including network interfaces and sysctl settings, and then generate an answer file and run packstack on the controller node.
Web sockets
This document summarizes the WebSocket protocol specifications for establishing a WebSocket connection between a client and server, including the handshake process and frame format for sending messages. It also provides an example of an incoming message stream class that can unmask payloads according to the WebSocket specifications.
Site-to-Site IPSEC VPN Between Cisco ASA and Pfsense
Configuration tutorial for a site to site IPSEC VPN between a Cisco ASA firewall and pfsense firewall.
Knowledge article
This document provides steps to set up a private Ethereum network on AWS using Geth. It describes launching two EC2 instances and installing Geth on each, configuring security groups to allow communication between nodes, initializing each node with a custom genesis file, and connecting the nodes to synchronize the blockchain. Specifically, it details how to launch an EC2 instance and install Geth, configure security groups to allow port 30000-30999, set up key pairs to SSH into instances, initialize each node with a custom genesis.json file, and use the admin.addPeer() command to connect one node to the other for synchronization.
Lab 1 my sql tutorial
This document provides instructions on installing and configuring MySQL and MySQL Fabric on an Oracle Linux virtual machine. It outlines downloading prerequisites like Vagrant and MySQL binaries. It then details steps to install MySQL server 5.6.10 or higher, the MySQL python connector and MySQL utilities including Fabric 1.5. It describes configuring Fabric privileges, backing store tables, and starting the Fabric controller service. It also provides commands for creating a Fabric group, adding MySQL server nodes to the group, checking the group's health and promoting a master node.
Openstack installation using rdo
Openstack RDO installation steps on RHEL 7. Many packages were missing if we try to install openstack with as specified in RDO Quickstart site. For those missing fucntionalities we need ti subscribe to some other repos.
5.installing oracle grid_11g_r2_on_red_hat_enterp
This document provides steps to install Oracle Grid 11gR2 on Red Hat Enterprise Linux 5:
1. Prepare by copying installation files, syncing system time, and changing to the installation directory.
2. Run the installer and select options like cluster name, SCAN name, and adding the second node.
3. The installer will perform prerequisite checks and configuration scripts will run on each node.
4. Additional post-installation steps include creating ASM disk groups and verifying the Grid installation is complete. Troubleshooting advice is provided in case of failures.
Strongswan ipsec vpn_linux_strongswan_ip
This document discusses the configuration of an IPsec VPN between two Linux systems using StrongSwan. It describes setting up the network topology, generating pre-shared keys, configuring IPsec policies and connections in StrongSwan, and testing connectivity between the VPN endpoints by pinging an internal IP address. The status output shows the VPN connection is established with encryption and authentication using AES-256 and SHA-1.
Triangle OpenStack meetup 09 2013
The document provides instructions for deploying Red Hat OpenStack on Red Hat Enterprise Linux using PackStack. It describes starting two virtual machines for the RDO control and compute nodes. It then discusses using PackStack to install OpenStack on the nodes in an interactive or automated way. Finally, it outlines exploring the OpenStack dashboard and services like Keystone, Glance, Nova, Cinder, and Swift after installation.
OpenStack Neutron Advanced Services by Akanda
Sean Roberts, VP of Development at Akanda Inc, gave a presentation on OpenStack Neutron networking basics and advanced services. He discussed Neutron architecture, plugins, tunneling technologies, and reference implementations for load balancing, VPN, and firewall-as-a-service. He then introduced Akanda as a multi-process orchestration service for advanced Neutron services like routers, with goals of being simple, compatible, and with open development. Looking ahead, he covered upcoming Neutron features in the Liberty release like IPAM, BGP speaker, and service function chaining.
VPNaaS in Neutron
- VPNaaS in Neutron aims to provide virtual private network services to OpenStack tenants through the Neutron API and plugins.
- Initial work focused on IPsec VPN support, including defining a resource model and APIs for VPN services, connections, policies and more.
- Future work will explore supporting BGP/MPLS VPNs, which provide inter-AS connectivity and require integration with external MPLS domains and protocols like BGP.
- Two potential architectures are proposed for BGP/MPLS VPN support: one relying on configuring provider edge routers from Neutron, and another using an L3 agent and separate controller/forwarder.
More Related Content
What's hot
Task 2
The document outlines the steps to launch an EC2 instance and attach an EBS volume using AWS CLI:
1. Create a key pair and security group using AWS CLI commands.
2. Launch an EC2 instance using the created key pair and security group, along with specifying an AMI, instance type, and subnet.
3. Create a 1GB EBS volume in the same availability zone and attach it to the newly launched instance, specifying the volume ID and instance ID.
Squid file
The document provides instructions for installing and configuring the Squid proxy server on CentOS/RHEL 5. It describes using yum to install Squid, configuring the squid.conf file to define ACLs for allowed internal networks, starting the Squid service, verifying port 3128 is open, and opening the port in iptables firewall.
Openstack installation using rdo multi node
Openstack 3 node setup using RDO on top of RHEL 7.
Complete steps which will give you more convenience to work on top of Openstack without any installation issues.
Aws
This document provides instructions for setting up a Node.js and Express application on an EC2 instance and deploying Express and Node.js Lambda functions, including installing dependencies, creating sample applications, and testing Lambda functions by sending events.
Installing OpenStack Juno using RDO on RHEL
This document provides instructions for installing Openstack Juno using RDO on a Red Hat 7 server. It outlines preparing the server environment by disabling NetworkManager, attaching subscription repositories, and installing packstack. Upon completion, it notes important files containing credentials and configuration. Quick install steps and links to additional guides are also included.
Shibuya,trac セッション
The document discusses various code hosting and project management tools including GitHub, Google Code, Amazon EC2 and S3, SourceRepo, and Hosting Playground. It also mentions the Trac wiki and plugin system for project tracking and mentions setting up a new project, repositories, users, and integrating with version control systems like Git, Subversion, and Mercurial.
Rule of two
Microservice = docker two layer image. Dynamic binding (coupling) responsible for microservice layer reuse :: runtime image consists of only Service layer and Dependency layer. Dependency layer contains statically bound technology components needed to realize Service layer. Service layer implements focused business domain functions.
Step by-step installation of a secure linux web dns- and mail server
Step by-step installation of a secure linux web dns- and mail serverIntegrated Circuit Design Research & Education Center (ICDREC)
This document provides a step-by-step guide to installing and configuring a secure Linux-based web, DNS, and mail server. The key aspects summarized are:
1) An Openna Linux 1.0 installation is performed and secured, adding firewall, intrusion detection, and chroot jailing of services.
2) Popular internet services like Apache, BIND, Qmail, MySQL, and Snort are installed and hardened through configuration of access controls, passwords, and file permissions.
3) Additional security tools like AIDE and log monitoring are implemented to detect intrusions and limit damage from any potential cracks.Data analysis with Galaxy on the Cloud
Workshop slides demonstrating how to setup a CloudMan cluster and use Galaxy to perform the Galaxy 101 exercise.
Configuration of mail server on cisco packet tracer1 converted
This document provides instructions for configuring a mail server on Cisco Packet Tracer. It involves setting up 3 laptops, a mail server, and a DNS server on a single network switch. The mail server is assigned IP 192.168.1.1 and DNS server 192.168.1.2. On the mail server, a domain name is selected and SMTP and POP3 services are enabled. Usernames and passwords are created. Then on the DNS server, the same domain name and mail server IP are provided. Finally, mail can be sent and received on the laptops using the accounts configured on the mail server.
How To Connect Amazon AWS EC2 with Key Pair – Linux
This document provides instructions for connecting to an Amazon AWS EC2 Linux instance using a key pair. It outlines downloading the key pair file, modifying its permissions, and then using it to connect via SSH either by public IP or private IP. The key steps are: 1) Identify the key pair associated with the instance; 2) Copy the private key file to the local machine; 3) Change permissions on the key file; 4) Connect using SSH and specifying the key file and either public or private IP address. Following these steps allows logging into the EC2 instance securely using the key pair.
Openstack kilo installation using rdo
This document provides instructions for installing OpenStack Kilo using RDO on a single node or on a 3 node environment consisting of a controller, network, and compute node. For a single node installation, it describes installing the necessary RPMs and packages and then running packstack. For a 3 node installation, it provides steps to configure each node including network interfaces and sysctl settings, and then generate an answer file and run packstack on the controller node.
Web sockets
This document summarizes the WebSocket protocol specifications for establishing a WebSocket connection between a client and server, including the handshake process and frame format for sending messages. It also provides an example of an incoming message stream class that can unmask payloads according to the WebSocket specifications.
Site-to-Site IPSEC VPN Between Cisco ASA and Pfsense
Configuration tutorial for a site to site IPSEC VPN between a Cisco ASA firewall and pfsense firewall.
Knowledge article
This document provides steps to set up a private Ethereum network on AWS using Geth. It describes launching two EC2 instances and installing Geth on each, configuring security groups to allow communication between nodes, initializing each node with a custom genesis file, and connecting the nodes to synchronize the blockchain. Specifically, it details how to launch an EC2 instance and install Geth, configure security groups to allow port 30000-30999, set up key pairs to SSH into instances, initialize each node with a custom genesis.json file, and use the admin.addPeer() command to connect one node to the other for synchronization.
Lab 1 my sql tutorial
This document provides instructions on installing and configuring MySQL and MySQL Fabric on an Oracle Linux virtual machine. It outlines downloading prerequisites like Vagrant and MySQL binaries. It then details steps to install MySQL server 5.6.10 or higher, the MySQL python connector and MySQL utilities including Fabric 1.5. It describes configuring Fabric privileges, backing store tables, and starting the Fabric controller service. It also provides commands for creating a Fabric group, adding MySQL server nodes to the group, checking the group's health and promoting a master node.
Openstack installation using rdo
Openstack RDO installation steps on RHEL 7. Many packages were missing if we try to install openstack with as specified in RDO Quickstart site. For those missing fucntionalities we need ti subscribe to some other repos.
5.installing oracle grid_11g_r2_on_red_hat_enterp
This document provides steps to install Oracle Grid 11gR2 on Red Hat Enterprise Linux 5:
1. Prepare by copying installation files, syncing system time, and changing to the installation directory.
2. Run the installer and select options like cluster name, SCAN name, and adding the second node.
3. The installer will perform prerequisite checks and configuration scripts will run on each node.
4. Additional post-installation steps include creating ASM disk groups and verifying the Grid installation is complete. Troubleshooting advice is provided in case of failures.
Strongswan ipsec vpn_linux_strongswan_ip
This document discusses the configuration of an IPsec VPN between two Linux systems using StrongSwan. It describes setting up the network topology, generating pre-shared keys, configuring IPsec policies and connections in StrongSwan, and testing connectivity between the VPN endpoints by pinging an internal IP address. The status output shows the VPN connection is established with encryption and authentication using AES-256 and SHA-1.
Triangle OpenStack meetup 09 2013
The document provides instructions for deploying Red Hat OpenStack on Red Hat Enterprise Linux using PackStack. It describes starting two virtual machines for the RDO control and compute nodes. It then discusses using PackStack to install OpenStack on the nodes in an interactive or automated way. Finally, it outlines exploring the OpenStack dashboard and services like Keystone, Glance, Nova, Cinder, and Swift after installation.
What's hot (20)
Step by-step installation of a secure linux web dns- and mail server
Step by-step installation of a secure linux web dns- and mail server
Configuration of mail server on cisco packet tracer1 converted
Configuration of mail server on cisco packet tracer1 converted
How To Connect Amazon AWS EC2 with Key Pair – Linux
How To Connect Amazon AWS EC2 with Key Pair – Linux
Site-to-Site IPSEC VPN Between Cisco ASA and Pfsense
Site-to-Site IPSEC VPN Between Cisco ASA and Pfsense
Viewers also liked
OpenStack Neutron Advanced Services by Akanda
Sean Roberts, VP of Development at Akanda Inc, gave a presentation on OpenStack Neutron networking basics and advanced services. He discussed Neutron architecture, plugins, tunneling technologies, and reference implementations for load balancing, VPN, and firewall-as-a-service. He then introduced Akanda as a multi-process orchestration service for advanced Neutron services like routers, with goals of being simple, compatible, and with open development. Looking ahead, he covered upcoming Neutron features in the Liberty release like IPAM, BGP speaker, and service function chaining.
VPNaaS in Neutron
- VPNaaS in Neutron aims to provide virtual private network services to OpenStack tenants through the Neutron API and plugins.
- Initial work focused on IPsec VPN support, including defining a resource model and APIs for VPN services, connections, policies and more.
- Future work will explore supporting BGP/MPLS VPNs, which provide inter-AS connectivity and require integration with external MPLS domains and protocols like BGP.
- Two potential architectures are proposed for BGP/MPLS VPN support: one relying on configuring provider edge routers from Neutron, and another using an L3 agent and separate controller/forwarder.
Mastering OpenStack - Episode 14 - Network Design
A presentation about OpenStack network design in production that presented in Iran OpenStack users group in 19th January of 2016.
Open stack implementation
This document outlines the process of implementing OpenStack on 4 machines each with Intel Core processors, 8GB RAM and Ubuntu 14.04. It discusses OpenStack components like Nova, Glance, Swift etc. Devstack was used to deploy OpenStack which pulls code from git repositories. Procedures included installing components without clustering, LVM, MAAS and Trove. Issues faced included TFTP booting, Wake on LAN, image importing and accessing instances. In conclusion, the team was able to understand OpenStack functionality which was the goal of the project.
HP Helion Webinar #5 - Security Beyond Firewalls
Giuseppe Paternò is an IT security expert who has worked with many large companies. He discussed security issues with OpenStack and cloud applications. Neutron provides software-defined networking and security groups for network segmentation. Keystone handles identity management. APIs must be secured to protect resources and authentication tokens. Continuous security practices like automated testing and monitoring help harden the cloud platform.
BGP Dynamic Routing and Neutron
The document discusses using BGP dynamic routing with Neutron to route cloud network traffic. It provides an overview of Neutron's BGP dynamic routing service and applications. Currently Neutron networks use static routing, but dynamic routing would allow routes to move between routers more easily. The document outlines how Neutron could insert routes into a routing protocol to advertise to infrastructure routers. Future applications discussed include routed network segments, L3 VPNs, and directly routible tenant networks.
Running OpenStack on Amazon AWS, Alex Fishman
Running OpenStack on Amazon AWS: In this talk we will demonstrate how to create an exact replica of an on-premises OpenStack configuration in the public cloud (AWS/EC-2, GCE or HP Cloud) and spin multiple copies of this environment in a matter of minutes. We will technically elaborate how we use our own high performance nested hypervisor HVX, and software defined networking - to run OpenStack guests with KVM acceleration on top of any public cloud.
OpenStack: Security Beyond Firewalls
OpenStack security is a huge topic. In these slides I presented at the OpenStack Day, I analyzed cloud security the network to the application layer, going through specific layers, some in common between OpenStack itself and the applications.
Interconnecting Neutron and Network Operators' BGP VPNs
joint presentation given at OpenStack summit Barcelona (Oct. 2016) with Paul Carver and Tim Irnich
talk video: https://www.youtube.com/watch?v=LCDeR7MwTzE
demo: https://www.youtube.com/watch?v=5iRoZcmQyuU
OpenStack Quantum Intro (OS Meetup 3-26-12)
Quantum provides network connectivity as a service for OpenStack clouds. It allows tenants to create multiple private networks with custom topologies and control IP addressing. Quantum uses a plugin architecture that supports different networking technologies like Open vSwitch, Cisco UCS, and Linux bridge. This provides choice and enables advanced network services. The Quantum API and plugins manage network connectivity independently of compute resources.
Openstack Neutron, interconnections with BGP/MPLS VPNs
This document discusses the Openstack Neutron networking-bgpvpn project, which provides a Neutron API and service plugin that allows tenants to interconnect their Openstack networks and routers with BGP/MPLS VPNs. The API exposes constructs like BGPVPNs, network associations, and router associations. It works with drivers for Neutron/OVS, OpenDaylight, OpenContrail, and others. The goal is to provide a common way for tenants to control interconnections in a controller-agnostic manner. The project is part of Openstack and OPNFV, and provides a model for integrating telco functionality into Openstack.
Openstack Neutron & Interconnections with BGP/MPLS VPNs
The document discusses Neutron networking-bgpvpn, an OpenStack Neutron extension that enables interconnection between OpenStack deployments and BGP/MPLS VPNs. It provides a high-level overview of networking-bgpvpn's architecture, supported drivers, features, and integration with OPNFV SDNVPN for automated deployment and testing of BGPVPN use cases. Neutron networking-bgpvpn allows tenants to define and manage their own BGP VPNs to interconnect with external networks or between distributed OpenStack installations.
OpenStack Neutron Tutorial
This was a tutorial which Mark McClain and I led at ONUG, Spring 2015. It was well received and serves as a walk through of OpenStack Neutron and it's features and usage.
Viewers also liked (13)
Interconnecting Neutron and Network Operators' BGP VPNs
Interconnecting Neutron and Network Operators' BGP VPNs
Openstack Neutron, interconnections with BGP/MPLS VPNs
Openstack Neutron, interconnections with BGP/MPLS VPNs
Openstack Neutron & Interconnections with BGP/MPLS VPNs
Openstack Neutron & Interconnections with BGP/MPLS VPNs
Similar to VPNaaS neutron
How To Configure VNC Server on CentOS 7
This document provides steps to install and configure a VNC server on CentOS 7 to allow remote desktop connections. It describes installing the vnc-server package, configuring the service, enabling the firewall, setting passwords, and connecting with a VNC client. The key steps are: 1) Installing vnc-server, 2) Configuring a service file for each user, 3) Enabling and starting the service, 4) Opening the firewall port, 5) Setting the VNC password, and 6) Connecting with a VNC viewer using the configured password.
Nuxeo5 - Continuous Integration
This document provides instructions for setting up a continuous integration environment for Nuxeo modules using Ubuntu Server 7.10 virtualized with VmWare. It describes installing Ubuntu, configuring it with tools like MySQL, Maven, and Subversion. It then covers setting up Continuum and Archiva for continuous integration and artifact deployment. The document demonstrates configuring a sample Nuxeo module project in Eclipse to build with Maven and deploy artifacts to the Archiva repository for continuous integration with each code change.
EMC Networker installation Document
1. The document outlines the steps to setup Networker for backup and recovery including installing the Networker app server on a Windows machine and Linux client, configuring a virtual tape library using Firestreamer, adding the Linux client to the Windows server, and performing basic Networker operations like start, stop, and status checks.
2. A key step is installing necessary dependency RPMs before installing the Networker software on Linux, as the default OS installation may be missing packages required by Networker.
3. The Windows server can then back up and recover the configured Linux client after ensuring the server hostname is resolvable in the client's hosts file.
Open Stack compute-service-nova
This document provides an overview of OpenStack Compute (Nova), which is an open source software that provides infrastructure as a service cloud computing capabilities. It discusses how Nova controls virtual machine instances, networks, and access through users and projects similar to Amazon EC2. Nova exposes these capabilities through APIs for developers and interfaces for administrators. Key components of Nova like nova-compute, nova-scheduler, nova-api and message queue are described along with their functions and communication processes. Several Nova API examples are listed with their use cases, expected return codes and outcomes. Process flow diagrams are included for creating a server, attaching a volume, and detaching a volume to illustrate the component interactions.
Openstack Study Nova 1
The document discusses the components of OpenStack Nova and their roles. It describes nova-api, nova-conductor, nova-scheduler, and nova-compute.
Nova-api handles user requests and initiates orchestration activities. Nova-conductor acts as an intermediary between the database and compute nodes. Nova-scheduler determines which compute node to place new instances on. Nova-compute runs on compute nodes and creates/terminates VMs using hypervisor APIs.
TECHNICAL WHITE PAPER▸ NetBackup 7.6 Plugin for VMware vCenter
In NetBackup 7.6, the NetBackup plug-in for vCenter integrates with VMware’s vSphere Client user interface to provide new VMware virtual machine administration capabilities.
The plug-in enables VMware administrators…
▸ To monitor their Virtual machine backups directly from the VMware vSphere Client UI.
▸ To export virtual machine backup reports from the vSphere Client UI.
▸ Initiate full virtual machine recovery directly from a Recovery Portal in the vSphere Client UI.
How To Configure Nginx Load Balancer on CentOS 7
This document provides instructions on how to configure Nginx as a load balancer on CentOS 7. It describes installing Nginx, configuring two web servers and a load balancer node, setting up the load balancing configuration in the Nginx configuration file, and testing the load balancer functionality using curl commands and a web browser.
Federating new FIWARE Lab nodes
Presentation about the different steps that the tools that you can use if you want to federate an OpenStack into the FIWARE Lab architecture.
Eucalyptus on Xen - Build Enterprise Private Cloud | Torry Harris Whitepaper
Eucalyptus on Xen - Build Enterprise Private Cloud | Torry Harris WhitepaperTorry Harris Business Solutions
A technical whitepaper describing steps to setup a Private Cloud using the Eucalyptus Private Cloud Software and Xen hypervisor.WSO2 Dep Sync for Artifact Synchronization of Cluster Nodes
The document discusses deployment synchronization between cluster nodes in WSO2 products. It introduces the need for deployment synchronization in clustered environments to distribute artifacts and metadata transparently. It demonstrates how the Deployment Synchronizer (DepSync) feature works in WSO2 products using a SVN repository. It shows how to configure a minimal WSO2 cluster with one management node and one worker node connected by a load balancer, by enabling DepSync and making the appropriate configuration changes.
[WSO2] Deployment Synchronizer for Deployment Artifact Synchronization Betwee...
Setting up a cluster is important when developing enterprise software and deploying them in production environments. Distributing deployment artifacts & related metadata to all nodes in a homogeneous cluster is a typical requirement for a clustered deployment of any middleware platform. In such a cluster, all nodes should contain the deployed artifacts as well as the related metadata.
The Deployment Synchronizer (DepSync) is the mechanism used in the WSO2 platform for distributing these artifacts and metadata across all nodes in the cluster. It provides the ability to synchronize data between the worker nodes of a product cluster. When used with the WSO2 Application Server, or the WSO2 ESB, you can synchronize your deployable artifacts like web services, and web applications etc. across the cluster nodes. In addition, with the latest WSO2 Carbon 4 release, WSO2 provides the ability to synchronize service metadata which includes service policies, transports, and service-type specific data. Now you only have to deploy and configure services in one node - called the manager. Then, DepSync will replicate those to other nodes - workers.
In this presentation, we present how this is done in the WSO2 Cloud-enabled middleware platform. Typical deployment artifacts will include webapps, JAXWS/JAXRS apps, data services, proxy services, and BPEL processes . The WSO2 platform also natively supports multi-tenancy. Tenants & tenant artifacts are loaded on demand. We will demonstrate how DepSync works efficiently with multi-tenancy.
Kasun Gajasinghe did the demonstration section of this webinar presentation while Pradeep Fernando provided technical aspects of Deployment Synchronizer
Fortinet Ansible Solution Part 2
In the second part of a 4 series presentation, I will go over how to configure 2 CentOS servers to operate on dedicated VLANs with a FortiGate appliance.
YouTube presentation is available here: https://www.youtube.com/watch?v=GqwRov972ng
Prometheus on EKS
Helm was used to deploy Prometheus and the Prometheus stack on an EKS cluster for monitoring purposes. This included deploying Prometheus, Grafana, Alertmanager and associated pods and services. Some key steps taken were adding the Prometheus chart repository, configuring storage classes, and accessing the deployed applications. Potential issues with default storage configurations were also discussed.
Setup guide nos-v3_5
The document provides instructions for configuring IP addresses on a Nutanix cluster in 3 steps:
1. Use the web-based configuration tool to automatically configure IP addresses on Controller VMs and the cluster by inputting network settings.
2. Log into any Controller VM with SSH and start the Nutanix cluster.
3. Verify the cluster services start properly on each node to confirm the cluster is running.
Multi tier-app-network-topology-neutron-final
This document discusses how Neutron builds network topology for multi-tier applications. It explains that Neutron uses network namespaces to isolate tenant resources and correlate application topology to Neutron components. It provides details on how Neutron creates networks, routers, load balancers, firewalls, and VPN connections to build the necessary infrastructure for a sample multi-tier application topology across two OpenStack sites.
An Express Guide ~ "dummynet" for tweaking network latencies & bandwidth
It's an Express Guide to "dummynet" for testing Web/Network Applications in real-use-case scenario ~~~~~ it can allow you to tweak Network Latencies and bandwidth to any value and test the application in those circumstances
论文答辩
This document summarizes the use of Nginx as a web server and load balancer in internet development. It discusses Nginx's high performance and low resource usage. Key points covered include installing and configuring Nginx, using it for load balancing, and integrating it with other technologies.
Dockerizing the Hard Services: Neutron and Nova
Talk about the benefits and pitfalls involved in successfully running complex services like Neutron and Nova inside of Docker containers.
Topics include:
* What magic incantations are needed to run these services at all?
* How to prevent HA router failover on service restarts.
* How to prevent network namespaces from breaking everything.
* Bonus: How network namespace fixes also helped fix Cinder NFS backend
Monitoring kubernetes with prometheus
Monitoring containerised apps creates a whole new set of challenges that traditional monitoring systems struggle with. In this talk, Brice Fernandes from Weaveworks will introduce and demo the open source Prometheus monitoring toolkit and its integration with Kubernetes. After this talk, you'll be able to use Prometheus to monitor your microservices on a Kubernetes cluster. We'll cover:
- An introduction to Kubernetes to manage containers;
- The monitoring maturity model;
- An overview of whitebox and blackbox monitoring;
- Monitoring with Prometheus;
- Using PromQL (the Prometheus Query Language) to monitor your app in a dynamic system
Network performance test plan_v0.3
This document contains testing procedures to verify that the implemented design successfully addresses customer requirements and expectations.
Similar to VPNaaS neutron (20)
TECHNICAL WHITE PAPER▸ NetBackup 7.6 Plugin for VMware vCenter
TECHNICAL WHITE PAPER▸ NetBackup 7.6 Plugin for VMware vCenter
Eucalyptus on Xen - Build Enterprise Private Cloud | Torry Harris Whitepaper
Eucalyptus on Xen - Build Enterprise Private Cloud | Torry Harris Whitepaper
WSO2 Dep Sync for Artifact Synchronization of Cluster Nodes
WSO2 Dep Sync for Artifact Synchronization of Cluster Nodes
[WSO2] Deployment Synchronizer for Deployment Artifact Synchronization Betwee...
[WSO2] Deployment Synchronizer for Deployment Artifact Synchronization Betwee...
An Express Guide ~ "dummynet" for tweaking network latencies & bandwidth
An Express Guide ~ "dummynet" for tweaking network latencies & bandwidth
Recently uploaded
GraphSummit Singapore | Graphing Success: Revolutionising Organisational Stru...
Sudheer Mechineni, Head of Application Frameworks, Standard Chartered Bank
Discover how Standard Chartered Bank harnessed the power of Neo4j to transform complex data access challenges into a dynamic, scalable graph database solution. This keynote will cover their journey from initial adoption to deploying a fully automated, enterprise-grade causal cluster, highlighting key strategies for modelling organisational changes and ensuring robust disaster recovery. Learn how these innovations have not only enhanced Standard Chartered Bank’s data infrastructure but also positioned them as pioneers in the banking sector’s adoption of graph technology.
Goodbye Windows 11: Make Way for Nitrux Linux 3.5.0!
As the digital landscape continually evolves, operating systems play a critical role in shaping user experiences and productivity. The launch of Nitrux Linux 3.5.0 marks a significant milestone, offering a robust alternative to traditional systems such as Windows 11. This article delves into the essence of Nitrux Linux 3.5.0, exploring its unique features, advantages, and how it stands as a compelling choice for both casual users and tech enthusiasts.
How to Get CNIC Information System with Paksim Ga.pptx
Pakdata Cf is a groundbreaking system designed to streamline and facilitate access to CNIC information. This innovative platform leverages advanced technology to provide users with efficient and secure access to their CNIC details.
TrustArc Webinar - 2024 Global Privacy Survey
How does your privacy program stack up against your peers? What challenges are privacy teams tackling and prioritizing in 2024?
In the fifth annual Global Privacy Benchmarks Survey, we asked over 1,800 global privacy professionals and business executives to share their perspectives on the current state of privacy inside and outside of their organizations. This year’s report focused on emerging areas of importance for privacy and compliance professionals, including considerations and implications of Artificial Intelligence (AI) technologies, building brand trust, and different approaches for achieving higher privacy competence scores.
See how organizational priorities and strategic approaches to data security and privacy are evolving around the globe.
This webinar will review:
- The top 10 privacy insights from the fifth annual Global Privacy Benchmarks Survey
- The top challenges for privacy leaders, practitioners, and organizations in 2024
- Key themes to consider in developing and maintaining your privacy program
UiPath Test Automation using UiPath Test Suite series, part 5
Welcome to UiPath Test Automation using UiPath Test Suite series part 5. In this session, we will cover CI/CD with devops.
Topics covered:
CI/CD with in UiPath
End-to-end overview of CI/CD pipeline with Azure devops
Speaker:
Lyndsey Byblow, Test Suite Sales Engineer @ UiPath, Inc.
“Building and Scaling AI Applications with the Nx AI Manager,” a Presentation...
“Building and Scaling AI Applications with the Nx AI Manager,” a Presentation...Edge AI and Vision Alliance
For the full video of this presentation, please visit: https://www.edge-ai-vision.com/2024/06/building-and-scaling-ai-applications-with-the-nx-ai-manager-a-presentation-from-network-optix/
Robin van Emden, Senior Director of Data Science at Network Optix, presents the “Building and Scaling AI Applications with the Nx AI Manager,” tutorial at the May 2024 Embedded Vision Summit.
In this presentation, van Emden covers the basics of scaling edge AI solutions using the Nx tool kit. He emphasizes the process of developing AI models and deploying them globally. He also showcases the conversion of AI models and the creation of effective edge AI pipelines, with a focus on pre-processing, model conversion, selecting the appropriate inference engine for the target hardware and post-processing.
van Emden shows how Nx can simplify the developer’s life and facilitate a rapid transition from concept to production-ready applications.He provides valuable insights into developing scalable and efficient edge AI solutions, with a strong focus on practical implementation.Uni Systems Copilot event_05062024_C.Vlachos.pdf
Unlocking Productivity: Leveraging the Potential of Copilot in Microsoft 365, a presentation by Christoforos Vlachos, Senior Solutions Manager – Modern Workplace, Uni Systems
Generative AI Deep Dive: Advancing from Proof of Concept to Production
Join Maher Hanafi, VP of Engineering at Betterworks, in this new session where he'll share a practical framework to transform Gen AI prototypes into impactful products! He'll delve into the complexities of data collection and management, model selection and optimization, and ensuring security, scalability, and responsible use.
Presentation of the OECD Artificial Intelligence Review of Germany
Consult the full report at https://www.oecd.org/digital/oecd-artificial-intelligence-review-of-germany-609808d6-en.htm
Mind map of terminologies used in context of Generative AI
Mind map of common terms used in context of Generative AI.
Full-RAG: A modern architecture for hyper-personalization
Mike Del Balso, CEO & Co-Founder at Tecton, presents "Full RAG," a novel approach to AI recommendation systems, aiming to push beyond the limitations of traditional models through a deep integration of contextual insights and real-time data, leveraging the Retrieval-Augmented Generation architecture. This talk will outline Full RAG's potential to significantly enhance personalization, address engineering challenges such as data management and model training, and introduce data enrichment with reranking as a key solution. Attendees will gain crucial insights into the importance of hyperpersonalization in AI, the capabilities of Full RAG for advanced personalization, and strategies for managing complex data integrations for deploying cutting-edge AI solutions.
Alt. GDG Cloud Southlake #33: Boule & Rebala: Effective AppSec in SDLC using ...
Effective Application Security in Software Delivery lifecycle using Deployment Firewall and DBOM
The modern software delivery process (or the CI/CD process) includes many tools, distributed teams, open-source code, and cloud platforms. Constant focus on speed to release software to market, along with the traditional slow and manual security checks has caused gaps in continuous security as an important piece in the software supply chain. Today organizations feel more susceptible to external and internal cyber threats due to the vast attack surface in their applications supply chain and the lack of end-to-end governance and risk management.
The software team must secure its software delivery process to avoid vulnerability and security breaches. This needs to be achieved with existing tool chains and without extensive rework of the delivery processes. This talk will present strategies and techniques for providing visibility into the true risk of the existing vulnerabilities, preventing the introduction of security issues in the software, resolving vulnerabilities in production environments quickly, and capturing the deployment bill of materials (DBOM).
Speakers:
Bob Boule
Robert Boule is a technology enthusiast with PASSION for technology and making things work along with a knack for helping others understand how things work. He comes with around 20 years of solution engineering experience in application security, software continuous delivery, and SaaS platforms. He is known for his dynamic presentations in CI/CD and application security integrated in software delivery lifecycle.
Gopinath Rebala
Gopinath Rebala is the CTO of OpsMx, where he has overall responsibility for the machine learning and data processing architectures for Secure Software Delivery. Gopi also has a strong connection with our customers, leading design and architecture for strategic implementations. Gopi is a frequent speaker and well-known leader in continuous delivery and integrating security into software delivery.
GraphSummit Singapore | The Art of the Possible with Graph - Q2 2024
Neha Bajwa, Vice President of Product Marketing, Neo4j
Join us as we explore breakthrough innovations enabled by interconnected data and AI. Discover firsthand how organizations use relationships in data to uncover contextual insights and solve our most pressing challenges – from optimizing supply chains, detecting fraud, and improving customer experiences to accelerating drug discoveries.
UiPath Test Automation using UiPath Test Suite series, part 6
Welcome to UiPath Test Automation using UiPath Test Suite series part 6. In this session, we will cover Test Automation with generative AI and Open AI.
UiPath Test Automation with generative AI and Open AI webinar offers an in-depth exploration of leveraging cutting-edge technologies for test automation within the UiPath platform. Attendees will delve into the integration of generative AI, a test automation solution, with Open AI advanced natural language processing capabilities.
Throughout the session, participants will discover how this synergy empowers testers to automate repetitive tasks, enhance testing accuracy, and expedite the software testing life cycle. Topics covered include the seamless integration process, practical use cases, and the benefits of harnessing AI-driven automation for UiPath testing initiatives. By attending this webinar, testers, and automation professionals can gain valuable insights into harnessing the power of AI to optimize their test automation workflows within the UiPath ecosystem, ultimately driving efficiency and quality in software development processes.
What will you get from this session?
1. Insights into integrating generative AI.
2. Understanding how this integration enhances test automation within the UiPath platform
3. Practical demonstrations
4. Exploration of real-world use cases illustrating the benefits of AI-driven test automation for UiPath
Topics covered:
What is generative AI
Test Automation with generative AI and Open AI.
UiPath integration with generative AI
Speaker:
Deepak Rai, Automation Practice Lead, Boundaryless Group and UiPath MVP
Why You Should Replace Windows 11 with Nitrux Linux 3.5.0 for enhanced perfor...
The choice of an operating system plays a pivotal role in shaping our computing experience. For decades, Microsoft's Windows has dominated the market, offering a familiar and widely adopted platform for personal and professional use. However, as technological advancements continue to push the boundaries of innovation, alternative operating systems have emerged, challenging the status quo and offering users a fresh perspective on computing.
One such alternative that has garnered significant attention and acclaim is Nitrux Linux 3.5.0, a sleek, powerful, and user-friendly Linux distribution that promises to redefine the way we interact with our devices. With its focus on performance, security, and customization, Nitrux Linux presents a compelling case for those seeking to break free from the constraints of proprietary software and embrace the freedom and flexibility of open-source computing.
Communications Mining Series - Zero to Hero - Session 1
This session provides introduction to UiPath Communication Mining, importance and platform overview. You will acquire a good understand of the phases in Communication Mining as we go over the platform with you. Topics covered:
• Communication Mining Overview
• Why is it important?
• How can it help today’s business and the benefits
• Phases in Communication Mining
• Demo on Platform overview
• Q/A
Observability Concepts EVERY Developer Should Know -- DeveloperWeek Europe.pdf
Monitoring and observability aren’t traditionally found in software curriculums and many of us cobble this knowledge together from whatever vendor or ecosystem we were first introduced to and whatever is a part of your current company’s observability stack.
While the dev and ops silo continues to crumble….many organizations still relegate monitoring & observability as the purview of ops, infra and SRE teams. This is a mistake - achieving a highly observable system requires collaboration up and down the stack.
I, a former op, would like to extend an invitation to all application developers to join the observability party will share these foundational concepts to build on:
Recently uploaded (20)
GraphSummit Singapore | Graphing Success: Revolutionising Organisational Stru...
GraphSummit Singapore | Graphing Success: Revolutionising Organisational Stru...
Goodbye Windows 11: Make Way for Nitrux Linux 3.5.0!
Goodbye Windows 11: Make Way for Nitrux Linux 3.5.0!
How to Get CNIC Information System with Paksim Ga.pptx
How to Get CNIC Information System with Paksim Ga.pptx
UiPath Test Automation using UiPath Test Suite series, part 5
UiPath Test Automation using UiPath Test Suite series, part 5
“Building and Scaling AI Applications with the Nx AI Manager,” a Presentation...
“Building and Scaling AI Applications with the Nx AI Manager,” a Presentation...
Generative AI Deep Dive: Advancing from Proof of Concept to Production
Generative AI Deep Dive: Advancing from Proof of Concept to Production
Presentation of the OECD Artificial Intelligence Review of Germany
Presentation of the OECD Artificial Intelligence Review of Germany
Mind map of terminologies used in context of Generative AI
Mind map of terminologies used in context of Generative AI
Full-RAG: A modern architecture for hyper-personalization
Full-RAG: A modern architecture for hyper-personalization
Alt. GDG Cloud Southlake #33: Boule & Rebala: Effective AppSec in SDLC using ...
Alt. GDG Cloud Southlake #33: Boule & Rebala: Effective AppSec in SDLC using ...
GraphSummit Singapore | The Art of the Possible with Graph - Q2 2024
GraphSummit Singapore | The Art of the Possible with Graph - Q2 2024
Monitoring Java Application Security with JDK Tools and JFR Events
Monitoring Java Application Security with JDK Tools and JFR Events
UiPath Test Automation using UiPath Test Suite series, part 6
UiPath Test Automation using UiPath Test Suite series, part 6
Why You Should Replace Windows 11 with Nitrux Linux 3.5.0 for enhanced perfor...
Why You Should Replace Windows 11 with Nitrux Linux 3.5.0 for enhanced perfor...
Communications Mining Series - Zero to Hero - Session 1
Communications Mining Series - Zero to Hero - Session 1
Observability Concepts EVERY Developer Should Know -- DeveloperWeek Europe.pdf
Observability Concepts EVERY Developer Should Know -- DeveloperWeek Europe.pdf
VPNaaS neutron
- 1. NEUTRON VPNaaS installation and configuration in Kilo Openstack(Ubuntu): 1. Install vpn agent on both controller and network nodes. $ aptget install y neutronvpnagent 2. Update neutron.conf file in controller node with below configurations for using strongswan. $ vi /etc/neutron/neutron.conf service_plugins=router,vpnaas [service_providers] service_provider=VPN:strongswan:neutron_vpnaas.services.vpn.service_drivers.ipsec.I PsecVPNDriver:default 3. Update vpn_agent.ini with the below configurations for using strongswan in both controller and network nodes. $ vi /etc/neutron/vpn_agent.ini [vpnagent] vpn_device_driver=neutron_vpnaas.services.vpn.device_drivers.strongswan_ipsec.Stro ngSwanDriver 4. Restart neutron server on controller node. $ service neutronserver restart 5. Restart vpn agent on network node $ service neutronvpnagent restart Note: Dashboard steps to work with VPN: https://www.packtpub.com/books/content/settingvpnaasopenstack Command Line steps to work with VPN: https://wiki.openstack.org/wiki/Neutron/VPNaaS/HowToInstall