OpenStack Neutron’s Load Balancer as a Service (LBaaS), Firewall as a service (FWaaS), and IPSec VPN as a Service (VPNaaS) are also referred to as Neutron advanced services.

Starting with NSX-T Data Center 2.5 NSX-T plugins (both Policy and Manager) support the Octavia load balancing service, which replaces the deprectated Neutron LBaaS service.

The following information assumes that you have NSX-T Data Center 2.4, and OpenStack Stein 14.0.

The current versions supported are listed in System Requirements

To enable Neutron advanced services NSX-T Data Center the following should be specified in the Neutron configuration:
  • Enable service plugin for the specific service
  • Configure service providers for the service
  • Provide NSX-T Data Center driver, where applicable, and configuration entries specific to NSX-T Data Center
These options are specified in neutron configuration files, usually found in /etc/neutron (note: plugin-specific configuration files are usually found in /etc/neutron/plugins/vmware. Neutron accepts one or more configuration files in the command line. These files are merged when the configuration is parsed so that the configuration file structure can reflect a particular user’s preferences. The following structure is usually employed:
  • neutron.conf - core neutron options, basic configuration parameters (e.g.: API manager endpoint, transport zone identifiers), service plugin list.
  • neutron_lbass.conf - load balancing service provider and options.
  • Octavia.conf - load balancing provider and MQ topic. Only for Octavia Load Balancer service. This file is usually located in /etc/Octavia/Octavia.conf and is loaded by the Octavia service.
  • neutron_fwass.conf - firewall service provider, driver, and driver options.
  • neutron_vpnaas.conf - VPN service provider and other options.

Service providers are specified using the service_provider option. This option can be repeated multiple times in a neutron configuration for different kind of services, but there cannot be more than one default service provider for a given service type.

Service_provider configuration attribute structure: <SERVICE_TYPE>:<PROVIDER_CLASS>:[<DEFAULT>].