This section explains the installation process for single-tenant mode. You can create a tenant for the Controller and the SEs.

To create a tenant for the Controller and SEs:

  1. Log in to the OpenStack Horizon dashboard with an account that has cloud administrator privileges and navigate to Identity > Projects.

  2. Click New Project and follow the wizard’s instructions.

  3. To deploy NSX Advanced Load Balancer , specify a project name, (NSX Advanced Load Balancer-tenant, for instance) and click the Project Members tab. You can add a user account to Project Members and assign the admin role to the account. Click the Quota tab and modify the maximum resources. These settings allow for three Controllers (for redundancy), up to 1000 SEs and some other managerial instances, if required, as shown below.

Figure 1. Quota Tab

Creating Multiple Flavors of Controller Image

You can create multiple flavors of NSX Advanced Load Balancer as follows:

  1. In the Horizon dashboard, navigate to Admin > system > Flavors and click Create Flavor.

  2. Create an appropriate flavor for the Service Engine.

  3. Create appropriate flavor for the Controller.

You can manually configure the flavor if you want to use flavors other than the recommended ones using CLI. Also ensure that you check minimum and recommended resources required for Service Engine.


The OpenStack flavor name should be specified and not the flavor ID or UUID.

To install single tenant and NSX Advanced Load Balancer-managed mode:

Uploading the Controller Image

You can upload the Controller image by copying the Controller qcow2 image onto your hard drive. Then navigate to Project > Images in the Horizon dashboard. Click Create Image and fill out the form. Use at least these resource allocations.

Creating Management Network

A management network is required for communication between the Controller and the SEs. An existing network can be used but a dedicated management network is recommended.

You can create management network by navigating to Network > Networks on the Horizon dashboard. Click Create Network and follow the wizard’s instructions.

  1. Connect the network to your Neutron router by navigating to Network > Routers. Click the router in the Name column to add an interface to the network.

  2. Click the Interfaces tab and click Add Interface to add the interface details.

Creating Security Group

A security group is required to allow the Controller and SEs to exchange management traffic. The group specifies the protocol ports for which traffic will be allowed. For ingress traffic, the group must allow these ports. For egress traffic, the group can allow all ports.

The NSX Advanced Load Balancer Controller automatically creates a security group for the SEs.

You can create a security group (for instance, Avi-mgmt-sg) and allow management traffic by navigating to Project > Access & Security on the Horizon dashboard. Click Create Security Groups and add rules, for instance, is the management network.

Deploying Controller and Assigning it a Floating IP

You can assign a floating IP address to the Controller by navigating to Project > Compute > Access & Security on the Horizon dashboard. If no floating IP address is available, click Allocate IP to Project. If a floating IP address is already available, you can associate it with the NSX Advanced Load Balancer Controller instance.