Certified OpenStack Administrator

OpenStack Architecture Overview

Alta3 Proof of Concept Deployment

• Nodes
• Controller Node
• Neutron Node (Networking Node)
• Compute Nodes (Compute)
• Storage Node
• OpenStack Deployment Recommendations

Big Picture

• OpenStack Big Picture
• IaaS (Infrastructure as a Service)
• PaaS (Platform as a Service)
• SaaS (Software as a Service)
• OpenStack XaaS

OpenStack Foundation

• OpenStack Foundation, Design Summits, and Releases

Versions

• OpenStack Versions

Horizon

Overview

• OpenStack Services in Detail
• Horizon

Dashboard

• Horizon Dashboard
• Overview of Domain, Project (Tenant), and User
• Admin > System > Hypervisors
• Project > Compute > Overview
• Identity > Projects
• Instances

Managing Guest VMs

Python Clients

• IaaS - Horizon & CLI
• CLI uses OpenStack python-clients
• The OpenStack python-openstackclient (OSC)
• Using the CLI python-openstackclient
• Finding a python-openstackclient command at the Linux CLI
• Common CLI python-openstackclient commands to know…

Lab Access

• Labs @ https://alta3.com/labs/openstack/
• Connecting to your remote desktop lab environment
• Inside your remote desktop lab environment
• How to drive your remote desktop

Hypervisors

Overview

• The Virtual Machine Stack
• The Old Way without Virtualization
• Virtualization
• A Snowflake Computer on Bare Metal
• A Virtualized System installed on a Bare Metal Hypervisor
• The Top Half of the Hypervisor
• The “Bottom Half” of the Hypervisor
• Why is the Hypervisor shown as an upper and lower portions?

Images

• “Imaging” the Operating System
• Imaging our Machine

Migration

• “Migrating” the Virtual Machine

Compute

• “Compute”
• Compute Space Example
• Compute Space Example
• Assemble the Node
• Install the Hypervisor
• The Compute Space
• Resulting Compute Space with just 2 Intel Xeon E5-2699 v3 CPUs
• Intel’s Most Powerful Processor (July 20, 2015)
• Compute Space Example

Compute Cloud

• A “360-Core” Cloud
• Clouds not Cloud
• Remember we talked about "Migrating?
• Migrating
• Instantiation
• Oversubscribing 16:1 is the OpenStack Default!

Virtualization Types

• Virtualization Techniques
• x86 CPU Privilege Level - No virtualization
• Popek and Goldberg Virtualization Requirements (1974)
• Binary Translation - VMware 1998 x86 Solution
• Para Virtualization
• Kernel-Only Instructions (No Virtualization)
• Hardware Assisted Virtualization

Keystone

Overview

• Keystone
• Tokens - what they are and why you need them
• Token Types - UUID tokens (old) vs PKI tokens (new)
• Projects, Roles, Users & Groups
• How Domains work with Projects, Roles, Users & Groups
• OpenStack Shell Command Permissions
• Keystone Authentication Message Flow
• How to use curl with the Keystone Identity API

Permissions

• Keystone Access - Token and Service Catalog

Nova

nova-api

• Nova API

nova-scheduler

• Nova Scheduler

Nova Architecture

• Nova Cert
• Nova Compute
• Nova Hypervisor Support
• Nova Console
• Nova Conductor
• Nova Compute Interfaces
• Nova Components
• Nova Review

Management

• Nova-api CLI

SDN

Stack

• Network Functions Virtualization (NFV)
• Network Functions Virtualization (NFV)

Overview

• Virtualize the Middleboxes
• Goal: All routers share the same picture
• Goal: All routers share the same picture
• Goal: “Network Omniscience”
• Goal: “Networking Becomes Software Defined”
• The Current State of Networking
• The Current State of Networking
• SDN Déj  vu?
• If H.248 behaved like SDN (OpenFlow)
• Defining Software “Abstraction”
• Abstracting the Network
• SDN in a Nutshell
• SDN in a Nutshell
• Isolating Networks
• Yet Another Abstraction: Network Slicing
• SDN Architecture

OpenFlow

• Merchant Silicon Example
• Requirement: Non blocking at 10 Gbps
• OpenFlow
• OpenFlow Example
• OpenFlow Example
• Forwarding an Audio Packet
• Destination MAC Address
• Type Field means “An IP header is next”
• IP Source Address Validity Check
• IP Destination Address
• IP Destination Address
• Deep Packet Inspection (DPI) “Crossing the Line”
• The “Really Bad” Stuff is Always BELOW the Line
• Fabrics are Really Fast

Data Center Fabric

Overview

• Classic Hierarchical Network Design
• Classic Hierarchical Network Design
• TRILL
• Path #1
• Path #2
• Path #3
• Path #4
• Interfacing NFV with the Fabric

NFV Integration

• vSwitch
• Namespace and the “veth”
• Heat Makes Clouds Rise
• vSwitch vs Hardware Switch
• Virtual Router

OpenStack Networking

Neutron

• Why Traditional Networking is Inefficient
• Network Virtualization
• Agents and Plugins
• Agents
• Neutron Configuration

Architecture

• Nova Networking - Flat Mode (Generation 1)
• Nova Networking - Flat Mode + DHCP (Generation 2)
• Nova Networking - Multi-Host Mode (Generation 3)
• VLAN
• VXLAN Packet Headers
• GRE Packet Headers
• Compute Node Network OVS Integration
• Compute Node Network OVS Integration
• Neutron Networking (Generation 4)
• East West Traffic in Neutron Networking without Distributed Virtual Router
• Neutron Networking Distributed Virtual Router (Generation 5)
• East West Traffic with Distributed Virtual Router
• East West Traffic with Distributed Virtual Router
• North South SNAT Traffic with Distributed Virtual Router
• North South Floating IP Traffic with Distributed Virtual Router
• Neutron Big Picture with Open vSwitch

Network Namespace

• Heat Makes Clouds Rise

OpenvSwitch

• Traditional VM Ethernet Processing
• Intel VMDq (Virtual Machine Device Queues)
• Intel SR-IOV (Single Root IO Virtualization)

Wiring an OpenStack Node

• How do I Physically wire an OpenStack Node?
• Step one: Physical Wiring
• Step Two: Bonding (1 of 2)
• Step 2 Bonding (2 of 2)
• Step 3 VLAN (1 of 4)
• Step 3: VLAN (2 of 4)
• Step 3: VLAN (3 of 4)
• Step 3: VLAN (4 of 4)
• Step 4: Network Function Virtualization
• Step 5: Tie it all together in a single diagram

OpenStack Network Function Virtualization

• Network Function Virtualization
• 8 Network Function Virtualization Components
• Why Two Bridges?
• Simple NFV (Network Function Virtualization) Example
• OVS-based openstack “wiring”

Provider vs Tenant Networks

• Provider vs. Tenant Networks
• Tenant Networking Exam
• Tenant Network Example (1 of 5)
• Tenant Network Example (2 of 5)
• Tenant Network Example (4 of 5)
• Tenant Network Example (5 of 5)
• Provider Networks
• NFV Provider Network “wiring”
• OVS-based openstack “wiring”
• Connecting directly to the Provider Network

Configuring Neutron

• Configuring Neutron
• Creating an OpenStack Provider Network from Neutron to NFV
• The neutron command structure
• The ml2_conf.ini file
• openvswitch_agent.ini file
• Attaching OpenStack to Network Function Virtualization
• Neutron Plugins

Glance

Architecture

• Glance
• Basic Architecture
• Glance Command Line
• Container Format
• Disk Format
• Common Image Properties

Image

• Metadata Definition Catalog (Juno tries to herd the cats)

Swift

Overview

• Swift
• Block vs Object Storage
• Object Storage Examples
• Defining an Object
• HTTP RESTful API

Working with Swift

• Analyzing the Swift URL
• Data Types
• Comparing Storage Types: Object, File, Block
• Consistency vs Availability Example
• Saving a Swift Object
• Immutable Cluster Sizing
• Calculating part_power
• The Swift Proxy
• Multiple Swift Proxies and Load Balancing
• Swift Enhanced Consistent Hashing Ring
• Durability with MD5 Metadata
• Durability with Replication
• Swift Background Auditor
• Background Replicator
• Enhanced Consistent Hashing Ring
• Comparing Swift and Ceph
• Swift Regions
• How Ceph and Swift fit in OpenStack

Ceph

Overview

• Storage Node - Ceph
• Ceph Advantages
• RADOS
• Ceph Architecture
• Building Ceph Storage Nodes

OSD

• OSD (Object Storage Daemons)
• Building Ceph Cluster for Geographic Disparity
• Configuration to Prepare and Mount the Storage Devices to be Used with Ceph
• Prepare and Mount the Storage Devices to be Used with Ceph