Introduction to OpenStack
Michael Lessard, RHCA
Senior Solutions Architect
mlessard@redhat.com
michaellessard
1
Agenda
• What is Openstack ?
• What is a cloud workload ?
• OpenStack upstream
• OpenStack Architecture
• OpenStack incubating projects
• OpenStack Red Hat distributions
What is Openstack ?
3
OpenStack is ...
Public or Private Cloud
Cloud workload
OpenStack is ...
Self Service
APIs
Web
Dashboard
OpenStack is ...
Building blocks
OpenStack is ...
Illusion of Infinite Capacity
OpenStack is ...
Massive Scale
OPENSTACK
OPENSTACK COMMUNITY
In 4 years
The second largest after Linux
Contribution by companies
*Havana
What is a cloud workload ?
12
SERVICE MODELS / WORKLOADS
TRADITIONAL WORKLOADS CLOUD WORKLOADS
●
Stateful VMs, application defined in VM ●
Stateless VMs, application distributed
●
Big VMs: vCPU, vRAM, local storage ●
Small VMs: vCPU, vRAM, storage
inside VM separate
●
Application SLA = SLA of VM ●
Application SLA not dependent on any
one VM
●
SLA requires enterprise virtualization
features to keep VMs highly available ●
SLA requires ability to create and
destroy VMs where needed
●
Lifecycle measured in years
●
Lifecycle measured in hours to months
●
VMs scale up: add vCPU, vRAM, etc.
●
Applications scale out: add more VMs
●
Applications not designed to tolerate
failure of VMs ●
Applications designed to tolerate failure
of VMs
SERVICE MODELS / WORKLOADS
TRADITIONAL CLOUD
WORKLOADS WORKLOADS
• Pets are unique, lovingly • Cattle are almost identical to
hand raised and cared for each other
• They are given names • They are given numbers
• When they get ill you nurse • When they get ill you get
them back to health another one
Credit : Bill Baker @ Microsoft & Tim Bell @ CERN
OpenStack upstream
15
UPSTREAM
• Releases every 6 months
– April & October: Named Alphabetically
• Upstream focus
– Distribution neutral
• Does not provide :
– Installer (devstack?) or centralized
management
Austin – October 2010
- Initial release
- Object Storage production ready
- Compute in testing
Bexar – February 2011
- Compute production ready
- Initial release of Image Service
- Focus on installation and deployment
Cactus – April 2011
- Focus on scaling enhancement
- Support for KVM/QEMU, XenServer, Xen, ESXi, LXC
Diablo – September 2011 Havana – October
- First “production ready” release 2013
Essex – April 2012
- Dashboard and Identity added to core
- Quantum incubated
Folsom – October 2012
- Quantum added to core
- Cinder added to core Grizzly – April 2013 (planned)
- Ceilometer and Heat incubated
- Focus on upgrade support
RED HAT UPSTREAM FOCUS
• Heavily engaged in community since 2011
– Established leadership position in community
– Both in terms of governance and technology
– Including Project Technical Leads on Nova, Keystone, Oslo, Heat
and Ceilometer
– Creating and leading stable tree
• 3rd largest contributor to Essex Release
• 2nd largest contributor to Folsom Release
• Largest contributor to Grizzly Release
– Note: These statistics do not include external dependencies
eg. libvirt, kvm, Linux components
OpenStack Architecture
20
OPENSTACK ARCHITECTURE
Neutron
• Modular architecture
• Designed to easily scale out
• Based on (growing) set of core services
OPENSTACK ARCHITECTURE
Keystone
– Identity Service
– Common authorization framework
– Manages users, tenants and roles
– Pluggable backends (SQL, PAM, LDAP, IDM, etc)
OPENSTACK ARCHITECTURE
NOVA
– Core compute service comprised of
• Compute Nodes – hypervisors that run virtual machines
– Supports multiple hypervisors KVM, Xen, LXC, Hyper-V and ESX
• Distributed controllers that handle scheduling, API calls, etc
– Native OpenStack API and Amazon EC2 compatible API
OPENSTACK ARCHITECTURE
Glance
– Image service
– Stores and retrieves disk images (virtual machine templates)
– Supports Raw, QCOW, VMDK, VHD, ISO, OVF & AMI/AKI
– Backend storage : Filesystem, Swift, Gluster, Amazon S3
OPENSTACK ARCHITECTURE
Swift
– Object Storage service
– Modeled after Amazon's S3 service
– Provides simple service for storing and retrieving arbitrary data
– Native API and S3 compatible API
OPENSTACK ARCHITECTURE
Neutron
Neutron
– Network Service
– Provides framework for Software Defined Network (SDN)
– Plugin architecture
• Allows integration of hardware and software based network solutions
– Open vSwitch, Cicso UCS, Standard Linux Bridge, Nicira NVP
OPENSTACK ARCHITECTURE
Cinder
– Block Storage (Volume) Service
– Provides block storage for virtual machines (persistent disks)
– Similar to Amazon EBS service
– Plugin architecture for vendor extensions
eg. NetApp driver for Cinder
OPENSTACK ARCHITECTURE
Horizon
– Dashboard
– Provides simple self service UI for end-users
– Basic cloud administrator functions
• Define users, tenants and quotas
• No infrastructure management
Let’s Follow a Request..
Hey Glance,
Spin me up a
can I get the
RHEL 6.4 VM!
8)
It’s Thank And make it
image?
renderi you LARGE!
8)
ng OpenStac
time! k!!
Umm, Do I
Swift
Glance Node know you? I
need to see
some
papers!!
Indeed I do. capacity capacity
Don’t forget
to mount it! Keystone
Papers
Cinder, have are
that volume VM capacity good.
ready for me? Nova Time to
get to
work!
Ok, we
Node need to
find a
Here’s your
Nova place to
IP, default build this
route and VM.
FW settings. Tag -
Neutron, I you’re it!
need a
Neutron network with
all the Node
trimmings!
OPENSTACK INCUBATING PROJECTS
OpenStack Orchestration (HEAT)
●
Provides template driven cloud
application orchestration
●
Modeled after AWS CloudFormation
●
Targeted to provide advanced
functionality such as high availability
and autoscaling
●
Introduced by
Graduated from Incubation to Integrated
status for the Havana release
OPENSTACK INCUBATING PROJECTS
OpenStack Monitoring and Metering
(CEILOMETER)
●
Goal: To provide a single infrastructure to
collect measurements from an entire
OpenStack infrastructure; eliminate need for
multiple agents attaching to multiple
OpenStack projects
●
Primary targets metering and monitoring;
provides extensibility
Graduated from Incubation to Integrated status for
the Havana release
OpenStack Incubating projects
32
OTHER OPENSTACK PROJECTS
• Deployment (TripleO)
– Installing, upgrading and operating Openstack using Openstack’s
own cloud facilities (nova, neutron and heat)
– Continuous integration and deployment testing at the bare metal
layer (Ironic)
• File storage (Manila)
– Shared filesystem as a service
– NFS, Cifs and others
• Database Service (Trove)
• Bare metal (Ironic)
• Raksha (Backup)
• Queue service (Marconi)
• Common Libraries (Oslo)
OpenStack Red Hat distributions
34
BUILDING A COMMUNITY
• RDO Project
– Community distribution of OpenStack
– Packaged for *EL6 and Fedora
– Freely available without registration
– Packstack (puppet modules) to simplify the installation
• < 10 minutes to install
• Vanilla distribution – closely follows upstream
– Upstream release cadence
– 6 month lifecycle – limited updates based on upstream
RELEASE CADENCE
• Upstream
– Source code Only
– Releases every 6 month
– 2 to 3 'snapshots' including bug fixes
– No more fixes/snapshots after next release
• RDO
– Follows upstream cadence
– Delivers binaries
WEBSITE
37
38
RDO Quick Start
# yum install y http://rdo.fedorapeople.org/openstack
havana/rdoreleasehavana.rpm sudo
# yum install y openstackpackstack
# packstack allinone –osneutroninstall=n
http://$YOURIP/dashboard
RED HAT ENTERPRISE LINUX OPENSTACK
PLATFORM
• Hardened OpenStack, API identical with upstream, longer (starting
with 1 year) enterprise life cycle
• Optimized for and integrated with Red Hat Enterprise Linux
RED HAT ENTERPRISE LINUX
RED HAT ENTERPRISE LINUX OPENSTACK
PLATFORM VALUE
• Enterprise grade OpenStack deployment with ecosystem,
lifecycle, support that customers expect from Red Hat
– Based on RHEL and includes required fixes in both OpenStack and
RHEL
– Enterprise hardened OpenStack code
– Longer supported lifecycle
• includes bug fixes, security errata, selected backports
– Certified ecosystem (Red Hat Certified OpenStack Partner program
and Red Hat Enterprise Linux ecosystem)
– Full support and Certifications for RHEL and Windows workloads
RELEASE CADENCE
• Red Hat OpenStack (RHOS)
– 6 Month cadence
– Roughly 2 to 3 months AFTER upstream
• Time to stabilize, certify, backport etc.
– Initially 1 year lifecycle
• eg. Support for Folsom ends after Havana release
• eg. Support for Grizzly ends after “I” release
– Will increase lifecycle over time
• Likely to move to 2 years after Havana
– Based on upstream stability and resources
46
OPENSTACK PROGRESSION
• Open source, community- • Latest OpenStack software, • Enterprise-hardened
developed (upstream) packaged in a managed OpenStack software
software open source community
• Delivered with an
• Founded by Rackspace • Provide an easy way to enterprise life cycle
Hosting and NASA install Openstack with
Packstack (Puppet modules) • Six-month release cadence
• Managed by the OpenStack offset from community
Foundation • Aimed at architects and releases to allow testing
developers who want to
• Vibrant group of developers • Aimed at long-term
create, test, collaborate
collaborating on open source production deployments
cloud infrastructure • Freely available, not for sale
• Certified hardware and
• Software distributed under • Six-month release cadence software through the Red
the Apache 2.0 license mirroring community Hat OpenStack Cloud
• No certifications, no support • No certification, no support Infrastructure Partner
Network
• Installs on Red Hat and
derivatives • Supported by Red Hat
• OpenStack certification
(CL210 and EX210)
Use cases
48
CERN's infrastructure
~1300 compute nodes
Run ~1000 VMs simultaneously
Deployed ~250VMs in ~5min
Conclusion
50
TO LEARN MORE
• Learn more about RDO
– openstack.redhat.com
• Learn more about RHOS
– redhat.com/products/cloud-computing/openstack
• 90-day RHOS Eval (Includes RHEL lics for 3 RHOS nodes)
– redhat.com/openstack
• Openstack summit videos
THE BIRTH OF OPENSTACK
Questions
54