Skip to content
SPECIFICTION
Get listed

OpenStack Neutron

docs.openstack.org

LinuxAPISelf-hosted
Visit docs.openstack.org
Spec score 7.3 #3 of 13 in Virtual Private Cloud (VPC) Software

What it is

OpenStack Neutron provides network connectivity between interface devices managed by other OpenStack services. Its API lets operators define cloud connectivity and addressing, and manage networks, subnets, and ports. Neutron supports provider, routed provider, and self-service networks, with options including VLAN, VXLAN, GRE, and Geneve. It can configure L3 forwarding, NAT, perimeter firewalls, and virtual private networks, and works mainly with OpenStack Compute to connect instances. Plug-ins and agents are available for Open vSwitch, OVN, SR-IOV, and Macvtap, although only one networking plug-in can be used at a time. Security groups provide port-level ingress and egress firewall rules, with default-deny and anti-spoofing rules. Quality-of-service options include bandwidth and packet-rate limits, DSCP marking, and minimum rates, depending on the backend. Neutron is free and open source under Apache 2.0, for Linux and self-hosted deployments. The installation guide’s example requires at least two hosts and is framed as a learning proof of concept for people with sufficient Linux experience, not a production setup.

Spec sheet

Purpose
Neutron provides network connectivity as a service between interface devices managed by other OpenStack services.Read 8 Oct 2026 · docs.openstack.org
Deployment
The installation guide covers provider networks and self-service networks.Read 7 Oct 2026 · docs.openstack.org
API
Neutron implements the OpenStack Networking API, including extensions.Read 7 Oct 2026 · docs.openstack.org
Security
Security groups provide port-level ingress and egress firewall rules, use a default-deny policy, and include anti-spoofing rules by default.Read 8 Oct 2026 · docs.openstack.org
License
The OpenStack project is provided under the Apache 2.0 license.Read 8 Oct 2026 · docs.openstack.org
Access control
Default API policies support PROJECT_READER, PROJECT_MEMBER, PROJECT_MANAGER, ADMIN, and SERVICE roles; the documented policies accept project-scoped tokens only.Read 7 Oct 2026 · docs.openstack.org
Compute integration
Neutron mainly interacts with OpenStack Compute to provide networks and connectivity for instances.Read 7 Oct 2026 · docs.openstack.org
Deployment requirement
The installation guide's example architecture requires at least two hosts to launch a basic virtual machine or instance.Read 8 Oct 2026 · docs.openstack.org
DNS
DNS integration lets users control DNS-related attributes on ports, networks, and floating IPs, with external DNS service required for floating IPs.Read 7 Oct 2026 · docs.openstack.org
Drivers
The documentation lists plug-ins and agents for Open vSwitch, OVN, SR-IOV, and Macvtap.Read 8 Oct 2026 · docs.openstack.org
Foundation headquarters
The Open Infrastructure Foundation lists its principal office in Austin, Texas.Read 7 Oct 2026 · openinfra.dev
Maintainer organization
The OpenInfra Foundation supports the OpenStack project and describes itself as a home for open source infrastructure projects.Read 7 Oct 2026 · openstack.org
Network management
Its API lets operators define cloud network connectivity and addressing and manage networks, subnets, and ports.Read 8 Oct 2026 · docs.openstack.org
Network resources
Neutron lets users create and attach interface devices to networks and supports plug-ins for different networking equipment and software.Read 7 Oct 2026 · docs.openstack.org
Network types
It supports provider, routed provider, and self-service networks, with options including VLAN, VXLAN, and GRE.Read 8 Oct 2026 · docs.openstack.org
Networking backends
Neutron ships plug-ins and agents for Open vSwitch, OVN, SR-IOV, and Macvtap.Read 7 Oct 2026 · docs.openstack.org
Notable limit
Only one networking plug-in can be used at a time.Read 8 Oct 2026 · docs.openstack.org
OpenStack integration
Neutron mainly works with OpenStack Compute to provide networks and connectivity for instances.Read 8 Oct 2026 · docs.openstack.org
Quality of service
QoS rule types include bandwidth limits, packet rate limits, DSCP marking, minimum bandwidth, and minimum packet rate, with support dependent on backend.Read 7 Oct 2026 · docs.openstack.org
Release security
OpenStack release artifacts, including Git tags and Python package files, are signed by release automation.Read 7 Oct 2026 · security.openstack.org
Routing and services
The service can configure L3 forwarding, NAT, perimeter firewalls, and virtual private networks.Read 8 Oct 2026 · docs.openstack.org
Security guidance
OpenStack security resources include advisories, security notes, and a deployer guide covering topics such as hardening, rate limiting, compliance, and cryptography.Read 7 Oct 2026 · security.openstack.org
Target users
The Networking Guide is aimed at OpenStack administrators deploying and managing Neutron.Read 7 Oct 2026 · docs.openstack.org
Who it is for
The installation guide describes its example as a learning proof of concept for users with sufficient Linux experience and says it is not intended for production installations.Read 8 Oct 2026 · docs.openstack.org

Strong points and limits

Strong points

  • Manages networks, subnets, ports, and addressing through an API.
  • Supports provider, routed provider, and self-service networks.
  • Security groups include default-deny and anti-spoofing rules.
  • Free and open source under Apache 2.0.

Limits

  • Only one networking plug-in can be used at a time.
  • Example deployment requires at least two hosts.
  • Installation example is not intended for production.

Who it suits

Neutron suits OpenStack administrators who need to define and manage cloud networks and connect instances. Its example deployment is aimed at learners with sufficient Linux experience, rather than production installations.

Verdict

Neutron offers a broad set of network types, routing services, and security controls for OpenStack environments. Plan for the single-plug-in limit and treat the documented example as a learning setup, not a production design.

Where Specifiction places it

Alternatives to OpenStack NeutronAll alternatives →