- Home
- Virtual Private Cloud (VPC) Software
- OpenStack Neutron
OpenStack Neutron
What it is
OpenStack Neutron is an open-source networking service for connecting interface devices managed by other OpenStack services. Its API lets operators define cloud connectivity and addressing, and manage networks, subnets, and ports. Neutron supports provider, routed provider, and self-service networks, with VLAN, VXLAN, GRE, and Geneve options. It can configure L3 forwarding, NAT, perimeter firewalls, and virtual private networks, and works mainly with OpenStack Compute to connect instances. Plug-ins and agents are available for Open vSwitch, OVN, SR-IOV, and Macvtap, although only one networking plug-in can be used at a time. Quality-of-service rules include bandwidth and packet-rate limits, DSCP marking, and minimum bandwidth or packet rate, depending on the backend. Security groups apply port-level ingress and egress rules with default-deny and anti-spoofing protections. The documented API policies accept project-scoped tokens only. The installation guide's example requires at least two hosts and is framed as a learning proof of concept for users with sufficient Linux experience, not a production installation. Neutron is provided under the Apache 2.0 license.
For and against
For
- Manages networks, subnets, and ports through an API.
- Supports provider, routed provider, and self-service networks.
- Offers several networking plug-ins and agents.
- Security groups include default-deny and anti-spoofing rules.
- Available under the Apache 2.0 license.
Against
- Only one networking plug-in can be used at a time.
- Example installation requires at least two hosts.
- The documented example is not intended for production.
The verdict
Neutron provides network connectivity and policy controls within OpenStack, with network options and QoS features that depend in part on the selected backend. Its documented installation example is a learning proof of concept, not a production deployment.
Who it suits
Neutron is aimed at OpenStack administrators deploying and managing networking, especially those with sufficient Linux experience. The documented example is intended for learning rather than production use.
On the record
- Access control
- Default API policies support PROJECT_READER, PROJECT_MEMBER, PROJECT_MANAGER, ADMIN, and SERVICE roles; the documented policies accept project-scoped tokens only.docs.openstack.org · read 7 Oct 2026
- API
- Neutron implements the OpenStack Networking API, including extensions.docs.openstack.org · read 7 Oct 2026
- Compute integration
- Neutron mainly interacts with OpenStack Compute to provide networks and connectivity for instances.docs.openstack.org · read 7 Oct 2026
- Deployment
- The installation guide covers provider networks and self-service networks.docs.openstack.org · read 7 Oct 2026
- Deployment requirement
- The installation guide's example architecture requires at least two hosts to launch a basic virtual machine or instance.docs.openstack.org · read 8 Oct 2026
- DNS
- DNS integration lets users control DNS-related attributes on ports, networks, and floating IPs, with external DNS service required for floating IPs.docs.openstack.org · read 7 Oct 2026
- Drivers
- The documentation lists plug-ins and agents for Open vSwitch, OVN, SR-IOV, and Macvtap.docs.openstack.org · read 8 Oct 2026
- Foundation headquarters
- The Open Infrastructure Foundation lists its principal office in Austin, Texas.openinfra.dev · read 7 Oct 2026
- License
- The OpenStack project is provided under the Apache 2.0 license.docs.openstack.org · read 8 Oct 2026
- Maintainer organization
- The OpenInfra Foundation supports the OpenStack project and describes itself as a home for open source infrastructure projects.openstack.org · read 7 Oct 2026
- Networking backends
- Neutron ships plug-ins and agents for Open vSwitch, OVN, SR-IOV, and Macvtap.docs.openstack.org · read 7 Oct 2026
- Network management
- Its API lets operators define cloud network connectivity and addressing and manage networks, subnets, and ports.docs.openstack.org · read 8 Oct 2026
- Network resources
- Neutron lets users create and attach interface devices to networks and supports plug-ins for different networking equipment and software.docs.openstack.org · read 7 Oct 2026
- Network types
- It supports provider, routed provider, and self-service networks, with options including VLAN, VXLAN, and GRE.docs.openstack.org · read 8 Oct 2026
- Notable limit
- Only one networking plug-in can be used at a time.docs.openstack.org · read 8 Oct 2026
- OpenStack integration
- Neutron mainly works with OpenStack Compute to provide networks and connectivity for instances.docs.openstack.org · read 8 Oct 2026
- Purpose
- Neutron provides network connectivity as a service between interface devices managed by other OpenStack services.docs.openstack.org · read 8 Oct 2026
- Quality of service
- QoS rule types include bandwidth limits, packet rate limits, DSCP marking, minimum bandwidth, and minimum packet rate, with support dependent on backend.docs.openstack.org · read 7 Oct 2026
