OpenStack unter Solaris 11

08734031c152fb64f70dc38a4f632cee?s=47 fraosug
October 21, 2014

OpenStack unter Solaris 11

Vortrag von Detlef Drewanz

08734031c152fb64f70dc38a4f632cee?s=128

fraosug

October 21, 2014
Tweet

Transcript

  1. None
  2. Copyright © 2014 Oracle and/or its affiliates. All rights reserved.

    | Safe Harbor Statement The following is intended to outline our general product direction. It is intended for information purposes only, and may not be incorporated into any contract. It is not a commitment to deliver any material, code, or functionality, and should not be relied upon in making purchasing decisions. The development, release, and timing of any features or functionality described for Oracle’s products remains at the sole discretion of Oracle. 2
  3. Copyright © 2014 Oracle and/or its affiliates. All rights reserved.

    | Solaris und OpenStack Ein Überblick Detlef Drewanz Master Principal Sales Consultant Systems Architects Northern Europe
  4. Copyright © 2014 Oracle and/or its affiliates. All rights reserved.

    | Agenda What is OpenStack Oracle and OpenStack Oracle's Value add for OpenStack Implementations The Oracle OpenStack Integration into Oracle Solaris 1 2 3 4 4
  5. Copyright © 2014 Oracle and/or its affiliates. All rights reserved.

    | Evolution of Datacenters Computing Storage Networking 5
  6. Copyright © 2014 Oracle and/or its affiliates. All rights reserved.

    | More Evolution of Datacenters ... Creating Clouds More Computing More Storage More Networking 6
  7. Copyright © 2014 Oracle and/or its affiliates. All rights reserved.

    | Cloud Implementation Challenges • Months to deploy • Complex updates • Incompatible with compliance rules • Insufficient High Availability • Prohibitive virtualization overhead 7
  8. Copyright © 2014 Oracle and/or its affiliates. All rights reserved.

    | OpenStack - A Quick View Data Center Resources Single Management Pane 8
  9. Copyright © 2014 Oracle and/or its affiliates. All rights reserved.

    | What is OpenStack? Open source software for managing private and public clouds • A set of distributed services which control compute, storage, network, identity management, orchestration, and much more – Open source – Driven by a global community • Initial focus on Iaas, evolving into PaaS and SaaS • Single management dashboard • Open standardized API’s 9
  10. Copyright © 2014 Oracle and/or its affiliates. All rights reserved.

    | OpenStack - Modular Architecture • Governed by Apache 2.0 License – 6 month Release Cycle • Modular Architecture – Dashboard & self-service portal – Web portal for cloud admins and self-service users – CLI, Python libraries, ... – Cloud services exposed through APIs – Interoperating services with REST APIs 10
  11. Copyright © 2014 Oracle and/or its affiliates. All rights reserved.

    | OpenStack - Open APIs for Cloud Services 11
  12. Copyright © 2014 Oracle and/or its affiliates. All rights reserved.

    | OpenStack API RESTful API - http://docs.openstack.org/api REpresentational State Transfer 12
  13. Copyright © 2014 Oracle and/or its affiliates. All rights reserved.

    | OpenStack CLI 13
  14. Copyright © 2014 Oracle and/or its affiliates. All rights reserved.

    | OpenStack Logical Architecture 14
  15. Copyright © 2014 Oracle and/or its affiliates. All rights reserved.

    | Horizon Cloud Management Nova Compute Virtualization Neutron Cloud Networking Cinder/Swift Cloud Storage Glance Image Deployment OpenStack Simplified 15
  16. Copyright © 2014 Oracle and/or its affiliates. All rights reserved.

    | OpenStack in Action 16
  17. Copyright © 2014 Oracle and/or its affiliates. All rights reserved.

    | OpenStack History • Joint Project Launched by RackSpace and NASA in July 2010 • Evolved to Non-profit corporate entity in September 2012 – Kick-off Design Summit in Austin, TX: 2010 • 25+ Companies, 100+ Advisors, Developers, and Founding Members • Grown to 300+ Companies and Organizations – Oracle joined in December 2013 as Corporate Sponsor – Oracle Sponsors OpenStack Foundation; Offers Customers Ability to Use OpenStack to Manage Oracle Cloud Products and Services • http://www.oracle.com/us/corporate/press/2079843 17
  18. Copyright © 2014 Oracle and/or its affiliates. All rights reserved.

    | OpenStack Distros http://www.openstack.org/marketplace/distros 18
  19. Copyright © 2014 Oracle and/or its affiliates. All rights reserved.

    | What OpenStack is not… • Out-of-the-Box Ready to Use – Lots of work to configure underlying infrastructure • Overall integration – Bare-metal, network topologies, OS templates and images, security – Distribution and implementation specific customizations • Lots of moving parts – Servers, Storage, Networking, Virtualization, OS, Security, Management, Integration, etc. • Dependent on expertise, experience, vendors, maturing technology – Engineering versus Consulting 19
  20. Copyright © 2014 Oracle and/or its affiliates. All rights reserved.

    | What OpenStack is not… (Continued) • Mature – Aggressive release cycle; short support lifespan – New features and capabilities continue to be released – Update capability is limited, often “rip and replace” – However, it is improving • Free – OpenSource does not mean free – Large investment to set up and support environment 20
  21. Copyright © 2014 Oracle and/or its affiliates. All rights reserved.

    | OpenStack simplified Logical Architecture 21
  22. Copyright © 2014 Oracle and/or its affiliates. All rights reserved.

    | OpenStack Services Overview of Core Components Component Description Nova Compute virtualization Cinder Block storage Neutron Software defined networking Keystone Authentication between cloud services Glance Image management and deployment Horizon Web based dashboard Swift Object storage 22
  23. Copyright © 2014 Oracle and/or its affiliates. All rights reserved.

    | OpenStack Logical Architecture with Service Names Neutron Cinder Nova Glance Swift Keystone Horizon 23
  24. Copyright © 2014 Oracle and/or its affiliates. All rights reserved.

    | OpenStack Services Analogous Amazon Web Services (AWS) Component Description Nova Elastic Compute Cloud (EC2) Cinder Elastic Block Storage (EBS) Neutron Virtual Public Cloud (VPC) Keystone Identity and Access Management (IAM) Swift Simple Storage Service (S3) 24
  25. Copyright © 2014 Oracle and/or its affiliates. All rights reserved.

    | What is OpenStack? OpenStack Services beyond IaaS • Heat – Orchestration (Havana) – Represent an application (topology and resource needs) with a Heat Template – Perform fully automated, orchestrated deployment of Heat Template to the cloud. – Offers Amazon AWS Cloud Formation compatible APIs • Ceilometer – Cloud Metering and Monitoring (Havana) • Trove – Database As A Service (Icehouse) 25
  26. Copyright © 2014 Oracle and/or its affiliates. All rights reserved.

    | Agenda What is OpenStack Oracle and OpenStack Oracle's Value add for OpenStack Implementations The Oracle OpenStack Integration into Oracle Products 1 2 3 4 26
  27. Copyright © 2014 Oracle and/or its affiliates. All rights reserved.

    | Make your life easier and increase your business • Simplfy IT • Free up your ressources • Discover new or extended business Oracle helps by • Technology Innovation • Open Standards • Flexibile + Scalable DNA • Integrated Stack Oracle – The Cloud Company 27
  28. Copyright © 2014 Oracle and/or its affiliates. All rights reserved.

    | OpenStack integration into Oracle Products It is just the Beginning 28
  29. Copyright © 2014 Oracle and/or its affiliates. All rights reserved.

    | Horizon Cloud Management Oracle Solaris, Oracle VM Oracle Linux Nova Compute Virtualization Oracle Solaris, Oracle Virtual Networking Neutron Cloud Networking Oracle Solaris, Oracle ZS3, Oracle Axiom, Oracle StorageTek Tape Oracle Storage Cloud Swift API Cinder/Swift Cloud Storage Oracle Solaris Oracle VM Templates Glance Image Deployment OpenStack Engineering Across Oracle’s Portfolio 29
  30. Copyright © 2014 Oracle and/or its affiliates. All rights reserved.

    | Agenda What is OpenStack Oracle and OpenStack Oracle's Value add for OpenStack Implementations The Oracle OpenStack Integration into Oracle Products 1 2 3 4 30
  31. Copyright © 2014 Oracle and/or its affiliates. All rights reserved.

    | Cloud Computing Goals • Faster Time to Market • Flexible Use of Assets (Scalability, SLAs, Decommisioning) • Self-Service enabled/driven • Usage dependent/transparent charging • Max (platform) resource utilization • Reduce costs • Openness/Choice/no vendor lock-in Requirements on enabling technology • Virtualization capabilities • Secure Multitenancy • Interoperability (of the solution stack/btw layers) • Verified lifecycle/roadmap • Scalability + Availability • Managebility • Accountability • Standardization 31
  32. Copyright © 2014 Oracle and/or its affiliates. All rights reserved.

    | Cloud Computing Requirements on enabling technology • Virtualization capabilities • Secure Multitenancy • Interoperability (of the solution stack/btw layers) • Verified lifecycle/roadmap • Scalability + Availability • Managebility • Accountability • Standardization Customer values with Oracle • Create Private Clouds with Oracle Technology • Credible Vendor • Built-in Virtualization • Optimized Software Licensing • Engineered Products through the Stack • Service agility - From Iaas to SaaS • Non-Disruptive Evolution to OpenStack • Risk Reduction • Investment Protection 32
  33. Copyright © 2014 Oracle and/or its affiliates. All rights reserved.

    | OpenStack Deplyoments Oracle - One supplier for all your Cloud Requirements Platform as a Service (PaaS) Infrastructure as a Service (IaaS) Database as a Service (DbaaS) Software as a Service (SaaS) „cows“ „pets“ Oracle Server/Storage/NW Buliding Blocks Oracle Highend , EM12c and Engineered Systems Infrastructure as a Service (IaaS) Database as a Service (DbaaS) 33
  34. Copyright © 2014 Oracle and/or its affiliates. All rights reserved.

    | On Premise Private Cloud Oracle Cloud PaaS / IaaS Benefit Same Architecture Same Standards Same Products High End Mission Critical On-premise and Public Cloud Oracle Public Cloud DEPLOY ANYWHERE Same DNA Open Standards Same Products 34
  35. Copyright © 2014 Oracle and/or its affiliates. All rights reserved.

    | Agenda What is OpenStack Oracle and OpenStack Oracle's Value add for OpenStack Implementations The Oracle OpenStack Integration into Oracle Solaris 1 2 3 4 35
  36. Copyright © 2014 Oracle and/or its affiliates. All rights reserved.

    | Oracle Solaris 11.2: Enterprise OpenStack OS. Virtualization. SDN. OpenStack. Complete. • Complete OpenStack – Nova, Neutron, Cinder, Swift, Glance, Keystone, Horizon • All integrated into Oracle Solaris 11.2 • Upstream contributions to OpenStack Project 36
  37. Copyright © 2014 Oracle and/or its affiliates. All rights reserved.

    | OpenStack and Solaris http://www.oracle.com/technetwork/server-storage/solaris11/technologies/openstack-2135773.html 37
  38. Copyright © 2014 Oracle and/or its affiliates. All rights reserved.

    | Virtualization Network Server Server OS Changing the Design Focus The Traditional Way of Engineering the OS 38
  39. Copyright © 2014 Oracle and/or its affiliates. All rights reserved.

    | Virtualization Drives Management Costs 0 10 20 30 40 50 60 70 80 90 $0 $50 $100 $150 $200 $250 $300 '96 '97 '98 '99 '00 '01 '02 '03 '04 '05 '06 '07 '08 '09 '10 '11 '12 '13 Servers (M) Spending ($B) Physical Servers (M) Virtual Servers (M) Management & Administration 39
  40. Copyright © 2014 Oracle and/or its affiliates. All rights reserved.

    | Middleware Database Application Virtualization& Cloud Orchestration SDN Server Platform Hardware and Software Engineered to Work Together High Performance, High Efficiency, High Value A Better Way of Engineering the System 40
  41. Copyright © 2014 Oracle and/or its affiliates. All rights reserved.

    | Oracle Solaris – Engineered for Cloud Bringing Enterprise to the Cloud – #1 Enterprise OS – designed for mission critical apps – Immense workload scalability – Assured data integrity – Secure by design – Production safe observability Enterprise Ready Cloud Agility – Zero-overhead virtualization – Single step installation, simple update – Automated compliance reporting – Automatic service restart – Zero to OpenStack in 20 mins 41
  42. Copyright © 2014 Oracle and/or its affiliates. All rights reserved.

    | Horizon Cloud Management Zones and Kernel Zones Nova Compute Virtualization Elastic Virtual Switch Neutron Cloud Networking ZFS File System Cinder/Swift Cloud Storage Unified Archives Glance Image Deployment Oracle Solaris OpenStack - Services 42
  43. Copyright © 2014 Oracle and/or its affiliates. All rights reserved.

    | OpenStack and Oracle Solaris 11.2 - Package List • RabbitMQ as Messaging Broker 43 # pkg list -af | grep openstack cloud/openstack 0.2013.2.3-0.175.2.0.0.42.1 --- cloud/openstack/cinder 0.2013.2.3-0.175.2.3.0.4.0 --- cloud/openstack/glance 0.2013.2.3-0.175.2.3.0.4.0 --- cloud/openstack/heat 0.2013.2.3-0.175.2.3.0.4.0 --- cloud/openstack/horizon 0.2013.2.3-0.175.2.3.0.4.0 --- cloud/openstack/keystone 0.2013.2.3-0.175.2.3.0.4.0 --- cloud/openstack/neutron 0.2013.2.3-0.175.2.1.0.5.0 --- cloud/openstack/nova 0.2013.2.3-0.175.2.3.0.4.0 --- cloud/openstack/swift 1.10.0-0.175.2.1.0.5.0 ---
  44. Copyright © 2014 Oracle and/or its affiliates. All rights reserved.

    | Openstack and Oracle Solaris 11.2 - Versioning # pkg info -r cloud/openstack Name: cloud/openstack Summary: OpenStack Description: OpenStack is a cloud operating system that controls large pools of compute, storage, and networking resources throughout a data center, all managed through a dashboard that gives administrators control while empowering their users to provision resources through a web interface. Category: Meta Packages/Group Packages (org.opensolaris.category.2008) System/Administration and Configuration (org.opensolaris.category.2008) System/Enterprise Management (org.opensolaris.category.2008) System/Virtualization (org.opensolaris.category.2008) Web Services/Application and Web Servers (org.opensolaris.category.2008) State: Not installed Publisher: solaris Version: 0.2013.2.3 (Havana 2013.2.3) Build Release: 5.11 Branch: 0.175.2.0.0.42.1 Packaging Date: June 23, 2014 01:03:42 AM Size: 5.46 kB FMRI: pkg://solaris/cloud/openstack@0.2013.2.3,5.11-0.175.2.0.0.42.1:20140623T010342Z 44
  45. Copyright © 2014 Oracle and/or its affiliates. All rights reserved.

    | OpenStack Nova Compute – Oracle Solaris Zones High density virtual environments – ideal for multi-tenant cloud • Independent patching and updating with Oracle Solaris Kernel Zones – Same administrative interfaces • Fully portable with Unified Archives – Easy transitioning between Kernel Zones, Native Zones, Oracle VM and bare-metal • Provision Native Zones and/or Kernel Zones • Integrated SDN 45
  46. Copyright © 2014 Oracle and/or its affiliates. All rights reserved.

    | OpenStack Glance Image Management – Unified Archives Rapid deployment through VM templates • Flexible deployment on bare metal or virtualized – Same archive image for both • Snapshot a running VM as an image back to Glance to later re-deploy • Rapid deployment with Automated Installer across all compute nodes 46
  47. Copyright © 2014 Oracle and/or its affiliates. All rights reserved.

    | OpenStack Neutron Networking – EVS SDN for servers and switches • Integrated with Oracle Solaris network virtualization – Elastic Virtual Switch connects compute resources with virtual switching – Flexible resource management to help maintain critical SLAs 47
  48. Copyright © 2014 Oracle and/or its affiliates. All rights reserved.

    | OpenStack Cinder/Swift Data Management – ZFS Production ready data management, no compromises • ZFS is primary backend for block and object storage – Integrated data services including snapshots, encryption, and deduplication – iSCSI or FC LUN provisioning • Integrated Cinder Driver for the ZS3 Storage Appliance 48
  49. Copyright © 2014 Oracle and/or its affiliates. All rights reserved.

    | OpenStack Packaging – IPS Easy and fast cloud update • Fail proof updates with IPS – Full rollback to previous state if needed – Integrated with Oracle Solaris Zones and Unified Archives for seamless lifecycle management 49
  50. Copyright © 2014 Oracle and/or its affiliates. All rights reserved.

    | OpenStack Services – SMF Highly available and reliable and secure cloud services • Automatic service restart in case of failure – Integrated with Oracle Solaris fault management – Full dependency checking for precise and efficient cloud start up • OpenStack services run with minimum privileges necessary, and don’t run as root 50
  51. Copyright © 2014 Oracle and/or its affiliates. All rights reserved.

    | General Guidelines Concerning OpenStack on Solaris OpenStack packaging on Solaris • Each of the eight major components delivered by a single package – pkg:/cloud/openstack/<component> – The corresponding client APIs and CLI are in pkg:/library/python/<component>client • The packages typically deliver their configuration files under /etc/<component> • Horizon uses /etc/openstack_dashboard • Runtime information is stored under /var/lib/<component> • Group package, pkg:/cloud/openstack, installs all components. 51
  52. Copyright © 2014 Oracle and/or its affiliates. All rights reserved.

    | General Guidelines Concerning OpenStack on Solaris OpenStack services on Solaris • Each component is represent by one or more smf(5) services – Some are meant to be run on only one node – Others can be replicated for reliability or to meet expected demand • Common case is deploying additional nodes running Nova compute or Cinder volume services – Horizon is enabled through the use of Apache and a configuration file • Services names are of the form – svc:/application/openstack/<component>/<component>-<service> • Corresponding smf(5) logs contain a wealth of debugging information – Components support both a debug and a verbose mode settable in the configuration 52
  53. Copyright © 2014 Oracle and/or its affiliates. All rights reserved.

    | General Guidelines Concerning OpenStack on Solaris OpenStack and RBAC on Solaris • Each package delivers a RBAC profile for administering the component – Provide authorizations for managing corresponding smf(5) services and properties – Allows the modification of corresponding configuration files via pfedit(1M) – Allows the reading of the service log files which are normally not world-readable • Each package delivers a unique user and group for the component – The smf(5) services run a method context with this user and group – Services only include minimum necessary privileges in order to operate 53
  54. Copyright © 2014 Oracle and/or its affiliates. All rights reserved.

    | Deploying the Cinder Volume Service Backend storage choices • Most Cinder services (such as API or scheduler) are typically deployed once • Cinder volume service is typically deployed on as many nodes as necessary • Solaris implementation supplies four fully supported volume drivers • Each driver provisions volumes, typically via ZFS, for block storage – Local only driver useful for provisioning on single-node OpenStack setup – iSCSI driver that makes the provisioned ZFS volume available via iSCSI – Fibre Channel driver that makes the provisioned ZFS volume available via FC – ZFFSA driver that provisions iSCSI volumes from a remote ZFSSA 54
  55. Copyright © 2014 Oracle and/or its affiliates. All rights reserved.

    | Report Compliance • Compliance reporting for PCI or Solaris security policies • Integrate into SIEM systems for analysis Understand Risk • External security evaluations for Zones/Crypto • Infrastructure auditing for OpenStack components Reduced Threat • Minimized Solaris install • Encryption for Cinder (block) and Swift (object) storage Minimize Impact • Least privilege Sandboxes pre- applied to OpenStack core services • Read only virtual machines The Oracle Solaris OpenStack Distribution is Low Risk 55
  56. Copyright © 2014 Oracle and/or its affiliates. All rights reserved.

    | Getting Started with Solaris OpenStack OpenStack on Oracle Solaris Resources • OpenStack on Oracle Solaris Discussion solaris_openstack_interest@openstack.java.net • Oracle Solaris on Oracle Technology Network http://www.oracle.com/technetwork/server-storage/solaris11/technologies/openstack-2135773.html • Source Code https://java.net/projects/solaris-userland/sources/gate/show/components/openstack 56
  57. Copyright © 2014 Oracle and/or its affiliates. All rights reserved.

    | Detlef.Drewanz@oracle.com 57 Q & A
  58. None