OpenStack for Architects电子书

Title Page

Copyright and Credits

OpenStack for Architects Second Edition

Packt Upsell

Why subscribe?

PacktPub.com

Contributors

About the authors

About the reviewer

Packt is searching for authors like you

Preface

Who this book is for

What this book covers

To get the most out of this book

Download the example code files

Download the color images

Conventions used

Get in touch

Reviews

Introducing OpenStack

What is OpenStack?

OpenStack – an API

OpenStack – an open source software project

OpenStack – a private cloud platform

OpenStack components

Compute

Object storage

Block storage

Network

Common OpenStack use cases

Public hosting

High-performance computing

Rapid application development

Network Function Virtualization

Drafting an initial deployment plan

The role of the Architect

The design document

The deployment plan

Your first OpenStack deployment

Writing the initial deployment plan

Hardware

Network addressing

Configuration notes

Requirements

Installing OpenStack

Installation instructions

Verifying the installation

Next steps

Summary

Further reading

Architecting the Cloud

Picking an OpenStack distribution

Running from the trunk

Community distributions

Commercially supported distributions

Compute hardware considerations

Hypervisor selection

Sizing the hardware to match the workload

Considerations for performance-intensive workloads

Network design

Providing network segmentation

Software-defined networking

Physical network design

Storage design

Ephemeral storage

Block storage

Object storage

Expanding the initial deployment

Updating the design document

Cloud controller

Compute node

Management network

Provider network

Tenant network

Updating the deployment plan

Installing OpenStack with the new configuration

Summary

Further reading

Planning for Failure and Success

Building a highly available control plane

About failure and success

High availability patterns for the control plane

Active/passive service configuration

Active/active service configuration

OpenStack service specifics

OpenStack web services

Database services

The message bus

Compute, storage, and network agents

Regions, cells, and availability zones

Regions

Cells

Availability zones

Updating the design document

Planning the physical architecture

Updating the physical architecture design

Implementing HA in the lab deployment

Provisioning a second controller

Installing the Pacemaker resource manager

Installing and configuring HAProxy

Additional API service configuration

Summary

Further reading

Building the Deployment Pipeline

Dealing with Infrastructure as a Software

Eating the elephant

Writing the tests first

Always be deploying

Using configuration management for deployment

Using the community modules

Assigning roles

Choosing a starting point

Test infrastructure

Types of testing

Writing the tests

Running the tests

Putting the pipeline together

Setting up the CI server

Installing Git

Installing a Puppet master

Installing Jenkins

Creating the composition layer

Starting our Puppet modules

Defining the first role and profile

Running the first build

Writing the tests

Assigning the first role to a system

Installing Keystone

Fully automating the pipeline

Summary

Further reading

Building to Operate

Logging, monitoring, and alerting

Logging

Monitoring

What to monitor

Monitoring practices

Monitoring availability

Monitoring performance

Monitoring resource usage

Alerting

Active monitoring

Services

Processes

HA control cluster

A dashboard example

The future of OpenStack troubleshooting and Artificial Intelligence-driven operations

Capacity planning

Planning your city

Tracking usage and analyzing growth

Flavor sizing and compute server hardware selection

Backups and recovery

Infrastructure backup architecture

Backup strategies – what to back up

Workload backup architecture

Planning for disaster recovery

Summary

Further reading

Integrating the Platform

IdM integration

Authentication and authorization in OpenStack

Configuring Keystone with split assignment and identity

Provisioning workflows

The Horizon user interface

Using REST APIs

Provisioning with templates

Metering and billing

Listening to OpenStack

Using the notification subsystem

Consuming events from Ceilometer

Reading meters in Ceilometer

Introducing OpenStack Gnocchi

Updating the design document

Writing requirements

Testing requirements

Summary

Further reading

Securing the Cloud

Security zones within OpenStack

Software vulnerabilities

Instance software security and patching

Infrastructure host security and patching

Patching OpenStack code

Patching the operating system

Red Hat Enterprise Linux and CentOS

Canonical Ubuntu-based operating systems

Software repository management

Hardening hypervisors

Standard Linux hardening practices and hypervisors

SELinux and AppArmor

sVirt

SELinux and sVirt in action

SSL and certificate management

Assessing risk

Best practices for endpoint security

Examples

Auditing OpenStack

CADF details

Using CADF with OpenStack

Log aggregation and analysis

Summary

Further reading

OpenStack Use Cases

Network Function Virtualization (NFV) / Telco Cloud

What is NFV?

The difference between NFV and Software-Defined Networking (SDN)

NFV architecture

European Telecommunication Standards Institute (ETSI)

Open Platform for NFV (OPNFV)

OpenStack's role in NFV

Top requirements from Telcos for NFV on OpenStack

Performance

High availability, resiliency, and scaling

Handling the rest of NFV management with NFVO and VNFM

The NFV use case is solid and growing

Big data and scientific compute use case

Storing Data – Hadoop

Combining Data - MapReduce

Hadoop-as-a-Service, OpenStack Sahara

Example architecture for Hadoop Use Case

CERN – Big Data and OpenStack at Scale

Edge Computing use case

What is Cloud Edge Computing?

Real-life use cases for Edge Computing

Current challenges with Cloud Edge Computing

Summary

Containers

What are containers?

So why are people so excited about containers?

How do I manage containers?

Containers and OpenStack

Docker on OpenStack

Kubernetes on OpenStack

OpenStack container-related projects

Nova-Docker

Integration with Neutron – Kuryr

Integration with Cinder – Fuxi

Magnum

Zun

OpenStack On Containers

Kolla

Helm

Summary

Conclusion

Emerging trends in OpenStack

Moving up the stack

Building the roadmap

Introducing new features

Releasing new versions

Summary

Further reading

Other Books You May Enjoy

Leave a review - let other readers know what you think