> ## Documentation Index
> Fetch the complete documentation index at: https://docs.xloud.tech/llms.txt
> Use this file to discover all available pages before exploring further.

# Networking Administration

> Configure SDN agents, provider networks, VLAN and VXLAN segmentation, QoS policies, network quotas, and security hardening for Xloud Networking.

<p style={{ fontSize: '1.25rem', fontWeight: 700, marginBottom: '0.75rem' }}>Overview</p>

Xloud Networking administration covers the full lifecycle of the SDN fabric — from
deploying and monitoring the agents that drive the virtual switching layer to defining
provider networks, enforcing QoS policies, and hardening the network plane against
misconfiguration and spoofing attacks. Use this guide to maintain the networking infrastructure across your cluster.

<Warning>
  **Administrator Access Required** — This operation requires the `admin` role. Contact your
  Xloud administrator if you do not have sufficient permissions.
</Warning>

<Tabs>
  <Tab title="XDeploy" icon="server">
    Network configuration is managed through the XDeploy Configuration panel:

    <Steps titleSize="h3">
      <Step title="Open Configuration" icon="settings">
        Navigate to **XDeploy → Configuration** and select the **Network** tab.
      </Step>

      <Step title="Configure network settings" icon="network">
        Set the following options as needed:

        | Setting                | Description                                            |
        | ---------------------- | ------------------------------------------------------ |
        | **External Interface** | Physical interface for provider network traffic        |
        | **VPNaaS**             | Toggle to enable VPN-as-a-Service                      |
        | **QoS**                | Toggle to enable Quality of Service bandwidth policies |
        | **VLAN Trunking**      | Toggle to enable VLAN trunk port support               |
        | **Agent HA**           | Toggle to enable L3/DHCP agent high availability       |
        | **SR-IOV**             | Toggle to enable Single Root I/O Virtualization        |
      </Step>

      <Step title="Save and deploy" icon="rocket">
        Click **Save Configuration**, then navigate to **XDeploy → Operations** and
        run a **Deploy** or **Reconfigure** for the Networking service.

        <Check>Network configuration is applied across all nodes.</Check>
      </Step>
    </Steps>
  </Tab>

  <Tab title="CLI" icon="terminal">
    Configure networking by editing `neutron.conf`, `ml2_conf.ini`, and agent
    configuration files directly at `/etc/xavs/config/neutron/`. See the individual
    topic guides below for detailed parameters.
  </Tab>
</Tabs>

<Note>
  **Prerequisites**

  * Admin credentials sourced from `openrc.sh`
  * `openstack` CLI installed and configured
  * XDeploy access for cluster-level configuration changes
  * All networking agents running and healthy on all nodes
</Note>

***

<p style={{ fontSize: '1.25rem', fontWeight: 700, marginBottom: '0.75rem' }}>Administration Topics</p>

<CardGroup cols={4}>
  <Card title="Service Architecture" icon="network" href="/services/networking/architecture" color="#197560">
    Distributed SDN agent model — API server, message bus, L2/L3 agents, DHCP, and metadata
  </Card>

  <Card title="Provider Networks" icon="layers" href="/services/networking/provider-networks" color="#197560">
    Configure VLAN, flat, and VXLAN provider networks and physical interface mappings
  </Card>

  <Card title="Network Agent Management" icon="activity" href="/services/networking/network-agents" color="#197560">
    Monitor agent health, enable or disable agents for maintenance, and recover failed agents
  </Card>

  <Card title="DHCP Configuration" icon="server" href="/services/networking/dhcp" color="#197560">
    Manage DHCP agents, network assignments, and high-availability DHCP
  </Card>

  <Card title="L3 Router Configuration" icon="route" href="/services/networking/l3-routing" color="#197560">
    Enable HA routers with VRRP failover and distributed virtual routing for scale
  </Card>

  <Card title="Quality of Service" icon="gauge" href="/services/networking/qos" color="#197560">
    Apply bandwidth limits and burst controls to ports and networks
  </Card>

  <Card title="Network Quotas" icon="shield" href="/services/networking/quotas" color="#197560">
    Set per-project limits for networks, subnets, routers, floating IPs, and security groups
  </Card>

  <Card title="Security Hardening" icon="lock" href="/services/networking/security" color="#197560">
    Port security, anti-spoofing enforcement, allowed address pairs, and default group hardening
  </Card>

  <Card title="Troubleshooting" icon="wrench" href="/services/networking/admin-troubleshooting" color="#197560">
    Diagnose agent failures, VXLAN tunnel issues, HA router failover, and MTU problems
  </Card>
</CardGroup>

***

<p style={{ fontSize: '1.25rem', fontWeight: 700, marginBottom: '0.75rem' }}>Architecture Overview</p>

```mermaid theme={null}
graph TD
    U([Dashboard / CLI]) --> API[Networking API<br/>:9696]
    API --> DB[(Database)]
    API --> MQ[Message Bus]
    MQ --> L2A1[L2 Agent<br/>Compute Node 1]
    MQ --> L2A2[L2 Agent<br/>Compute Node 2]
    MQ --> L3A[L3 Agent<br/>Network Node]
    MQ --> DHCP[DHCP Agent<br/>Network Node]
    L3A --> GW([External Gateway])
    L2A1 --> VS1[Virtual Switch<br/>Host 1]
    L2A2 --> VS2[Virtual Switch<br/>Host 2]
    style API fill:#197560,color:#fff
    style L3A fill:#197560,color:#fff
    style DHCP fill:#3F8F7E,color:#fff
```

***

<p style={{ fontSize: '1.25rem', fontWeight: 700, marginBottom: '0.75rem' }}>Agent Health Quick Check</p>

```bash title="Check all networking agent status" theme={null}
openstack network agent list
```

All agents should show `Alive: True` and `Admin State: UP`. If any agent shows
`Alive: False`, see [Network Agent Management](/services/networking/network-agents)
for recovery procedures.

***

<p style={{ fontSize: '1.25rem', fontWeight: 700, marginBottom: '0.75rem' }}>Related Resources</p>

<CardGroup cols={4}>
  <Card title="Networking User Guide" icon="book-open" href="/services/networking/user-guide" color="#197560">
    User-facing workflows for creating networks, routers, floating IPs, and security groups
  </Card>

  <Card title="Compute Admin Guide" icon="server" href="/services/compute/admin-guide" color="#197560">
    Manage compute hosts, flavors, and quotas alongside networking configuration
  </Card>

  <Card title="Authentication" icon="key" href="/cli-setup" color="#197560">
    Configure admin credentials and project-scoped access for networking operations
  </Card>

  <Card title="CLI Setup" icon="terminal" href="/cli-setup" color="#197560">
    Install and configure the `openstack` CLI for full administrative control
  </Card>
</CardGroup>
