Difference between revisions of "Network/LBaaS/docs/how-to-create-tls-loadbalancer"
Phil Toohill (talk | contribs) (Created blank page) |
Phil Toohill (talk | contribs) |
||
| Line 1: | Line 1: | ||
| + | == How To Create A TLS Enabled Load Balancer == | ||
| + | The following article will walk through the steps required to set up a load balancer to serve TLS terminated traffic. | ||
| + | This article is geared towards the current state of the project and will evolve along with the project itself. | ||
| + | |||
| + | Some of the items to be discussed are: | ||
| + | * Barbican devstack setup | ||
| + | * Certificate and key generation | ||
| + | * Barbican secret and container operations | ||
| + | * Required patchsets for neutron-lbaas | ||
| + | * Verifying the setup | ||
| + | |||
| + | Neutron-LBaaS utilizes Barbican as its keystore and requires some setting up, let's get started. | ||
| + | |||
| + | Firstly, this article assumes that the reader is familiar with Git, Openstack, Devstack and other related tools and technologies to get this going. This article will not go through setting up Devstack, Openstack, Git or any thing in this regard. | ||
| + | |||
| + | With that said, assuming you don't have Devstack set up already use this script to get started with Devstack and Barbican: https://gist.github.com/rm-you/6feacb91182f5c011018 | ||
| + | Alternatively, the reader can copy the two needed files and add 'barbican' to the enabled services in your localrc/local.conf. These instructions are found here: https://wiki.openstack.org/wiki/BarbicanDevStack | ||
| + | |||
| + | TL;DR | ||
| + | <pre><nowiki> | ||
| + | $ git clone https://github.com/openstack/barbican.git | ||
| + | $ cp barbican/contrib/devstack/lib/barbican <devstack_dir>/lib/ | ||
| + | $ cp barbican/contrib/devstack/extras.d/70-barbican.sh <devstack_dir>/extras.d/ | ||
| + | </nowiki></pre> | ||
| + | |||
| + | Then add 'barbican' to the end of 'enabled_services' in your localrc, then run stack.sh | ||
| + | <pre><nowiki> | ||
| + | $ ./<devstack_dir>/stack.sh | ||
| + | </nowiki></pre> | ||
Revision as of 22:19, 16 March 2015
How To Create A TLS Enabled Load Balancer
The following article will walk through the steps required to set up a load balancer to serve TLS terminated traffic. This article is geared towards the current state of the project and will evolve along with the project itself.
Some of the items to be discussed are:
- Barbican devstack setup
- Certificate and key generation
- Barbican secret and container operations
- Required patchsets for neutron-lbaas
- Verifying the setup
Neutron-LBaaS utilizes Barbican as its keystore and requires some setting up, let's get started.
Firstly, this article assumes that the reader is familiar with Git, Openstack, Devstack and other related tools and technologies to get this going. This article will not go through setting up Devstack, Openstack, Git or any thing in this regard.
With that said, assuming you don't have Devstack set up already use this script to get started with Devstack and Barbican: https://gist.github.com/rm-you/6feacb91182f5c011018 Alternatively, the reader can copy the two needed files and add 'barbican' to the enabled services in your localrc/local.conf. These instructions are found here: https://wiki.openstack.org/wiki/BarbicanDevStack
TL;DR
$ git clone https://github.com/openstack/barbican.git $ cp barbican/contrib/devstack/lib/barbican <devstack_dir>/lib/ $ cp barbican/contrib/devstack/extras.d/70-barbican.sh <devstack_dir>/extras.d/
Then add 'barbican' to the end of 'enabled_services' in your localrc, then run stack.sh
$ ./<devstack_dir>/stack.sh
