OpenStack Neutron
OpenStack Neutron provides network connectivity for interface devices managed by other OpenStack services.
What OpenStack Neutron is
OpenStack Neutron provides network connectivity for interface devices managed by other OpenStack services. Its API lets operators define cloud connectivity and addressing, and manage networks, subnets, and ports. Neutron supports provider, routed provider, and self-service networks, with options including VLAN, VXLAN, GRE, and Geneve. It can configure L3 forwarding, NAT, perimeter firewalls, and virtual private networks. Plug-ins and agents are available for Open vSwitch, OVN, SR-IOV, and Macvtap, while Neutron mainly works with OpenStack Compute to connect instances. Quality-of-service rules can set bandwidth or packet-rate limits, mark DSCP, and specify minimum bandwidth or packet rate; availability depends on the backend. Security groups provide port-level ingress and egress rules, with default-deny and anti-spoofing rules by default. DNS controls cover ports, networks, and floating IPs, though floating IPs require an external DNS service. Neutron is open source under the Apache 2.0 license. Its installation guide describes a learning proof of concept requiring at least two hosts, not a production installation.
Good
- Manages networks, subnets, and ports through an API.
- Supports several network types and protocols.
- Security groups include default-deny and anti-spoofing rules.
- QoS options cover bandwidth, packet rates, and DSCP.
Watch out
- Only one networking plug-in can be used at a time.
- Floating IP DNS requires an external DNS service.
- The example deployment is not intended for production.
Who it suits
Neutron is aimed at OpenStack administrators deploying and managing networking for instances. The guide's example is for users with sufficient Linux experience learning through a proof of concept.
Verdict
Neutron offers broad network-management capabilities within OpenStack, with features and QoS options that depend on the selected backend. Its installation example is explicitly a learning proof of concept, so it is not a production deployment guide.
The facts
Each one read from OpenStack Neutron's own pages, with the date it was checked.
What it does
- Access control
- Default API policies support PROJECT_READER, PROJECT_MEMBER, PROJECT_MANAGER, ADMIN, and SERVICE roles; the documented policies accept project-scoped tokens only.checked 7 Oct 2026
- API
- Neutron implements the OpenStack Networking API, including extensions.checked 7 Oct 2026
- Compute integration
- Neutron mainly interacts with OpenStack Compute to provide networks and connectivity for instances.checked 7 Oct 2026
- Deployment
- The installation guide covers provider networks and self-service networks.checked 7 Oct 2026
- Deployment requirement
- The installation guide's example architecture requires at least two hosts to launch a basic virtual machine or instance.checked 8 Oct 2026
- DNS
- DNS integration lets users control DNS-related attributes on ports, networks, and floating IPs, with external DNS service required for floating IPs.checked 7 Oct 2026
- Drivers
- The documentation lists plug-ins and agents for Open vSwitch, OVN, SR-IOV, and Macvtap.checked 8 Oct 2026
- License
- The OpenStack project is provided under the Apache 2.0 license.checked 8 Oct 2026
- Maintainer organization
- The OpenInfra Foundation supports the OpenStack project and describes itself as a home for open source infrastructure projects.checked 7 Oct 2026
- Networking backends
- Neutron ships plug-ins and agents for Open vSwitch, OVN, SR-IOV, and Macvtap.checked 7 Oct 2026
- Network management
- Its API lets operators define cloud network connectivity and addressing and manage networks, subnets, and ports.checked 8 Oct 2026
- Network resources
- Neutron lets users create and attach interface devices to networks and supports plug-ins for different networking equipment and software.checked 7 Oct 2026
- Network types
- It supports provider, routed provider, and self-service networks, with options including VLAN, VXLAN, and GRE.checked 8 Oct 2026
- Notable limit
- Only one networking plug-in can be used at a time.checked 8 Oct 2026
- OpenStack integration
- Neutron mainly works with OpenStack Compute to provide networks and connectivity for instances.checked 8 Oct 2026
- Purpose
- Neutron provides network connectivity as a service between interface devices managed by other OpenStack services.checked 8 Oct 2026
- Quality of service
- QoS rule types include bandwidth limits, packet rate limits, DSCP marking, minimum bandwidth, and minimum packet rate, with support dependent on backend.checked 7 Oct 2026
- Release security
- OpenStack release artifacts, including Git tags and Python package files, are signed by release automation.checked 7 Oct 2026
- Routing and services
- The service can configure L3 forwarding, NAT, perimeter firewalls, and virtual private networks.checked 8 Oct 2026
- Security
- Security groups provide port-level ingress and egress firewall rules, use a default-deny policy, and include anti-spoofing rules by default.checked 8 Oct 2026
- Security guidance
- OpenStack security resources include advisories, security notes, and a deployer guide covering topics such as hardening, rate limiting, compliance, and cryptography.checked 7 Oct 2026
- Target users
- The Networking Guide is aimed at OpenStack administrators deploying and managing Neutron.checked 7 Oct 2026
- Who it is for
- The installation guide describes its example as a learning proof of concept for users with sufficient Linux experience and says it is not intended for production installations.checked 8 Oct 2026
The company
- Foundation headquarters
- The Open Infrastructure Foundation lists its principal office in Austin, Texas.checked 7 Oct 2026
Alternatives to OpenStack Neutron
- 1
Amazon VPC IP Address Manager
Free planWebAPI6.2Free plan - 2
JD Cloud
WebAPI5.9 - 35.1
- 4
OVHcloud Public Cloud
WebLinuxWindows5.0 - 54.7
- 64.6