Multi-location Implementation of OpenStack

http://sched.co/49t1

ConoHa supports multi locations which are Japan(Tokyo), USA(San Jose) and Singapore.  In this session, we will talk about the backend system operation when deploying OpenStack systems(multi locations) on single KeyStone, from a developer’s point of view.

This session will cover:
- Replication of KeyStone databases.
- In the case of the token table, Striping the table in order to reduce replication cost

About GMO Internet, Inc.
GMO Internet Group, headquartered in Tokyo, is a leading force in the Internet industry offering one of the most comperehensive ranges of Internet services worldwide. We are providing a public cloud called “ConoHa” and “GMO APPs Cloud” as part of our services. Both are based on OpenStack.

Naoto Gohko
Naoto-Gohko, GMO Internet, Inc.
our product by OpenStack. | ConoHa public cloud; https//www.conoha.jp/en/ | GMO AppsCloud; https://cloud.gmo.jp/en/

HYUNTAE PARK
Assistant Manager, GMO Internet, Inc.
Hyuntae Park, GMO Internet, Inc. | hyuntae-park@gmo.jp | https://www.linkedin.com/profile/preview?locale=ja_JP&trk=prof-0-sb-preview-primary-button

Transcript

1. OpenStack Summit Tokyo Hyuntae Park <hyuntae-park@gmo.jp> Naoto Gohko <naoto-gohko@gmo.jp> Team Manger / OpenStack Engineer IT Architect Enginner Multi location implementation of OpenStack
2. š History of our services using OpenStack š Overview of Multi Region š Original extensions to OpenStack š Multi Region supported Domain # Agenda
3. š Diablo š Grizzly š Havana š Juno V1 V1,V2 V3 2012 - 2013 - 2015 - V2 IPv6 / GRE on Virtual Network Block Storage Object Storage # History of our services using OpenStack
4. Physical Servers Running VM Physical Server 1508 25294 Created VM Running Infrastructure 137223
5. š Multi Region š SSD Only š Scalability š API š Simple and competitive pricing # Newly Released ConoHa
6. Tokyo Singapore Sanjose # ConoHa has data centers in 3 Locations
7. Share single KeyStone in multiple OpenStack environment Keystone Neutron Glance Nova Compute node Compute node Block Storage(Cinder) object Storage (swift) Keystone Neutron Glance Nova Compute node Compute node Block Storage(Cinder) object Storage (swift) Keystone Tokyo Region Singapore Region # Description of Multi Region
8. CentOS 7.1 x86_64 Juno (RDO) Maria DB Connect to Tokyo KeyStone from All regions. Add each region endpoints to Tokyo KeyStone. Did not need to modify OpenStack code. š OS and OpenStack Versions š Multi Region Setting # Specs
9. Tokyo SanJose Singapore API  Management Keystone API API  Management Keystone API API  Management Keystone API User/tenant token Nova Neutron Glance Cinder Nova-compute Nova Neutron Glance Cinder Nova-compute Nova Neutron Glance Cinder Nova-compute # Multi Region Design 1
10. Tokyo Sanjose Singapole User/tenant User/tenant API  Management Keystone API API  Management Keystone API API  Management Keystone API User/tenant DB Replication DB Replication Nova-API Neutron Glance Cinder Nova-compute Nova-API Neutron Glance Cinder Nova-compute Nova-API Neutron Glance Cinder Nova-compute Token Token Token Tokyo SanJose Singapore User/tenant token User/tenant token API  Management Keystone API API  Management Keystone API API  Management Keystone API User/tenant token DB Replication DB Replication Nova Neutron Glance Cinder Nova-compute Nova Neutron Glance Cinder Nova-compute Nova Neutron Glance Cinder Nova-compute # Multi Region Design 2
11. # Issues and Restrictions on Multi Region š User-registration is possible in Japan only š VPN performance issue š Issues on replicating token table.
12. Tokyo Singapole User/tenant User/tenant API  Management Keystone API API  Management Keystone API API  Management Keystone API Token Token Tokyo SanJose Singapore API  Management Keystone API API  Management Keystone API READ/WRITE READ READ Token Token Token Do not create/delete users Do not create/delete users Our Customer base User administration # User-registration is possible in Japan only DB Replication DB Replication User/tenant User/tenant User/tenant R/W R/W
13. MNGLine / STGLine 10Gbps VPN 10Mbps (measurement value) # VPN Performance issue
14. API  Management Keystone API KeystoneDB Nova Neutron Glance Cinder OpenStack Cluster Nova Get/token Glance Get/token Neutron Get/token Cinder Get/token VM Create ! Nova user token:001 Neutron Token:002 Glance Token:003 Cinder Token:004 VM Create ! VM Create ! Nova user token:002 Neutron Token:003 Glance Token:004 Cinder Token:005 Nova user token:006 Neutron Token:007 Glance Token:008 Cinder Token:009 # Bloat access tokens š Too many tokens will be created from each components.
15. Setting example.conf [keystone_authtoken] token= 100 year expires token [neutron_authtoken] token= 100 year expires token [glance_authtoken] token= 100 year expires token [cinder_authtoken] token= 100 year expires token # Issues on replicating token table. š 100 year expires token We fixed it so that any tokens can be used for each components.
16. # Now Feature Singapore Tokyo SanJose User/tenant User/tenant ݱ ࡏ Keystone API API  Management Keystone API API  Management Keystone API User/tenant DB Replication DB Replication Nova Neutron Glance Cinder Nova-compute Nova Neutron Glance Cinder Nova-compute Nova Neutron Glance Cinder Nova-compute Token Token Token Tokyo SanJose Singapore User/tenant token User/tenant token API  Management Keystone API API  Management Keystone API API  Management Keystone API User/tenant token DB Replication DB Replication Nova Neutron Glance Cinder Nova-compute Nova Neutron Glance Cinder Nova-compute Nova Neutron Glance Cinder Nova-compute
17. # Replication design Singapore Region Keystone DB(S) MariaDB Galera Cluster Keystone DB(M) Keystone DB(S) MariaDB Galera Cluster Keystone DB(M) Keystone DB(S) MariaDB Galera Cluster Keystone DB(M) Tokyo Region SanJose Region MariaDB Replication MariaDB Replication
18. Tokyo Keystone API Keystone API Keystone API OpenStack Keystone User/tenant New Region Token Nova Neutron Glance Cinder OpenStack Component Cluster OpenStack Component VM Template OpenStack Component VM Template Token Nova Neutron Glance Cinder OpenStack Component Cluster SanJose Region Token Nova Neutron Glance Cinder OpenStack Component Cluster User/tenant Tokyo Region Token Nova Neutron Glance Cinder OpenStack Component Cluster Keystone User/tenant User/tenant Singapore Region # How to add new region Keystone Keystone Keystone
19. # Multi Region can provide... Tokyo Region Glance /var/lib/glance/images/{tenant-id}/example.qcow2 qcow2 image Symbolic Link http://glance.conoha.io/{uuid}/example.qcow2 Web Share Sanjose Region Glance Glance image download qcow2 image /var/lib/glance/images/{tenant-id}/example.qcow2
20. # Feature plans Tokyo User/tenant API  Management Keystone API Token Singapore OpenStack Cluster Customer Base Create/Delete user API  Management Keystone Nova-Compute on VM Tokyo User/tenant API  Management Keystone API Token Tokyo OpenStack Cluster API  Management Keystone Nova-Compute on VM Tokyo User/tenant API  Management Keystone API Token Sanjose OpenStack Cluster API  Management Keystone Nova-Compute on VM KeystoneDB KeystoneDB Sync All Keystone Sync All Keystone KeystoneDB Personal VM Personal VM Personal VM GMO PaaS GMO PaaS GMO PaaS Customer Base Customer Base Create/Delete user Create/Delete user
21. 21 0QFO4UBDL "VUIFOUJDBUJPO
    JO
    +VOP 7
    LFZTUPOF
    EPNBJOT
22. 22 *O
    $POP)B
    8F
    BEEFE
    UXP
    BEEJUJPOBM
    GFBUVSFT – %PNBJO
    4USVDUVSF
    
    "QQMJDBUJPO
    UP
    NVMUJMPDBUJPO
    SFHJPO
    TUSVDUVSF – 
    %PNBJO
    
    
    0&.
    TFSWJDF
    PS
    1SPEVDU
    TFSWJDF – %PNBJO
    PO
    "1*
    WBMJEBUJPO
    XSBQQFS
    QSPYZ
    .VMUJ-PDBUJPO
    SFHJPO
    BOE
    EPNBJO
    TUSVDUVSFT
23. 23 8IZ
24. 24 Swift  cluster (.0
    *OUFSOFU
    *OD
    714
    BOE
    $MPVE
    TFSWJDFT 0OBNBFDPN 714
    
    
    IUUQXXXPOBNBFTFSWFSDPN 'PSDVT
    HMPCBM
    *1T
    QSPWJEFE
    CZ
    TJNQMF
    OPWBOFUXPSL UFOUFO 714
     IUUQXXXUFOUFOWO 4IBSF
    PG
    044
    CZ
    (SPVQ
    DPNQBOJFT
    JO
    7JFUOBN $POP)B 714
    
    
    IUUQXXXDPOPIBKQ 'PSDVT
    2VBOUBN /FVUSPO
    PWFSMBZ
    UFOBOU
    OFUXPSL (.0
    "QQT$MPVE 
    
    IUUQDMPVEHNPKQ 0QFO4UBDL )BWBOB
    CBTFE
    TU SFHJPO &OUFSQSJTF
    HSBEF
    *BB4 XJUI
    CMPDL
    TUPSBHF
    PCKFDU
    TUPSBHF
    -#BB4 BOE
    CBSFNFUBM DPNQVUF
    XBT
    QSPWJEFE 0OBNBFDPN $MPVE
     IUUQXXXPOBNBFDMPVEDPN 'PSDVT
    -PX
    QSJDF
    7.
    JOTUBODFT
    CBSFNFUBM DPNQVUF
    BOE
    PCKFDU
    TUPSBHF $POP)B $MPVE
     IUUQXXXDPOPIBKQ 'PSDVT
    .-
    WYMBO PWFSMBZ
    -#BB4
    CMPDL
    TUPSBHF
    
    %/4BB4 %FTJHOBUF BOE
    PSJHJOBM
    TFSWJDFT
    CZ
    LFZTUPOF
    BVUI OpenStack Diablo on  CentOS 6.x Nova Keystone Glance Nova  network Shared  codes Quantam OpenStack Glizzly on  Ubuntu  12.04 Nova Keystone Glance OpenStack Havana on  CentOS 6.x Keystone Glance Cinder Swift Swift Shared  cluster Shared  codes Keystone Glance Neutron Nova Swift Baremetal compute Nova Ceilometer Baremetal compute Neutron LBaaS ovs +  gre tunnel  overlay Ceilometer Designate Swift OpenStack Juno on  CentOS 7.x Nova Keystone Glance Cinder Ceilometer Neutron LBaaS (.0
    "QQT$MPVE 
    
    IUUQDMPVEHNPKQ OE SFHJPO
    CZ
    0QFO4UBDL +VOP
    CBTFE
    &OUFSQSJTF
    HSBEF
    *BB4 XJUI
    )JHI
    *014
    *SPOJD
    $PNQVUF
    BOE
    /FVUSPO
    -#BB4 Upgrade   Juno GSLB Swift Keystone Glance Cinder Ceilometer Nova Neutron Ironic LBaaS
25. 25 • 5IF
    DPTU
    UP
    PQFSBUF
    .VMUJ
    WFSTJPO
    0QFOTUBDL IBWF
    JODSFBTFE • *U
    JT
    EJGGJDVMU
    UP
    VQHSBEF
    PS
    BEE
    OFX
    GFBUVSFT è .BOBHJOH
    NVMUJQMF
    TJUFT
    PG
    0QFO4UBDL JT
    B
    IFBEBDIF 8IBU`T
    UIF
    QSPCMFNT
    BCPVOU .VMUJ$MVTUFS
27. 5IF
    NFBOJOH
    PG
    UIF
    XPSE • %PNBJO • ,FZTUPOF
    EPNBJO • 8JUI
    W
    "1*
    TFSWJDF
    PVS
    DMPVE • 
    %/4
    %PNBJO • -PDBUJPO • %JGGFSFOU
    HFPHSBQIJD
    MPDBUJPOT
    PO
    UIF
    &BSUI • 64 4BO
    +PTF
    
    +1 5PLZP
    
    4( 4JOHBQPSF • 3FHJPO • 0QFO4UBDL SFHJPO • -PDBUJPO
    
    3FHJPO • $BO
    TFUVQ
    VQ
    NVMUJQMF
    3FHJPO JO
    POF
    -PDBUJPO
28. $POP)B
    CBTFE
    PO
    0QFO4UBDL +VOP
    *BB4
    • .VMUJQMF
    SFHJPO
    PQFOTUBDL DMVTUFS • 5PLZP
    
    4JOHBQPSF 
    4BO
    +PTF • 
    BOE
    TP
    PO • 'VMM
    44%
    TUPSBHF • .VMUJQMF
    LFZTUPOF
    TFSWJDF
    EPNBJO
    TVQQPSU • $POP)B BOE
    /FYU
    TFSWJDF
    OPX
    JO
    EFWFMPQNFOU
    
    0&.
    FUD • -#
    BT
    B
    4FSWJDF
    -74%43
    PSJHJOBM • %/4
    BT
    B
    TFSWJDF
    
    0QFO4UBDL %FTJHOBUF • 0QFO4UBDL "1*
    BOE
    BEEJUJPOBM
    3&45GVM "1* • .VMUJQMF
    -BOHVBHFT
    XFC
    QBOFM
    TVQQPSU • +BQBOFTF
    
    $POP)B
    
    &OHMJTI
    ,PSFBO
    .BOEBSJO
    $IJOFTF
29. 29 $POP)B
    CBTFE
    PO
    0QFO4UBDL +VOP
    4BB4 • 0SJHJOBM
    TIBSFE
    TFSWJDFT 1BB44BB4
    CZ
    LFZTUPOF
    BVUI – &NBJM
    IPTUJOH
    BT
    B
    TFSWJDF – %BUBCBTF
    IPTUJOH
    BT
    B
    TFSWJDF – 4IBSFE
    XFC
    IPTUJOH $1BOFM
    BT
    B
    TFSWJDF – 8PSEQSFTT IPTUJOH
    BT
    B
    TFSWJDF è PO
    0QFO4UBDL 8JUI
    EPNBJO
    TVQQPSU
30. 30 • 
    0QFO4UBDL %FTJHO
    QBUUFSO
    
    
    4FSWJDF – &OUFSQSJTF
    HSBEF
    XIJDI
    JT
    BQQSPQSJBUF
    GPS
    UIF
    QSJDF • /FUXPSL
    EFWJDF
    --#
    #SPDBEF
    "%9
    WT
    -74%43
    • 4UPSBHF
    %FWJDF
    CSPDL
    )11"3
    /FU"QQ
    WT
    4%4 [GT
    – /FUXPSL
    NPEFMT
    /"5
    'MBU
    FUD • .--JOVY#SJEHF
    WT
    .-PWT • 8F
    BSF
    PQFSBUJOH
    TFWFSBM
    0QFO4UBDL
    DMVTUFS
    GPS
    EJGGFSFOU
    QSPEVDT – *U
    IBT
    B
    PQUJNJ[FE
    GPS
    FBDI
    QSPEVDUT 3FBTPO
    PG
    
    0QFO4UBDL
    
    
    *BB4
    1SPEVDU
31. 31 • 0QFO4UBDL – *OUFHSBUJPO
    PG
    0QFO4UBDL
    DMVTUFS – 8JUI
    UIF
    OFXMZ
    BGGPSEBCMF
    44%
    5IF
    TUPSBHF
    EFWJDF
    CFDPNFT
    NPSF
    IJHIQFSGPSNBODF
    XJUI
    MPXFS
    DPTUT – 8JUI
    .-
    OFVUSPO
    TVQQPSU
    .VMUJ
    OFUXPSL
    NPEFM
    XJMM
    CF
    BWBJMBCMF – *U
    JT
    QPTTJCMF
    UP
    EFWFMPQ
    PVS
    QSPEVDUT
    GPS
    FBDI
    DPVOUSZ
    XJUI
    .VMUJ3FHJPO
    TVQQPSU
    BOE
    .VMUJ-PDBUJPO TVQQPSU è 8F
    DBO
    JOUFHSBUF
    PVS
    0QFO4UBDL
    DMVTUFS (SPX
    PVU
    PG
    
    0QFO4UBDL
    
    
    *BB4
    1SPEVDU
32. 32 • %P
    OPU
    XBOU
    UP
    VTF
    ,FZTUPOF
    7
    "1* – .BOZ
    DMJFOUT
    EPFT
    OPU
    TVQQPSU
    JU • .JOJNBM
    ,FZTUPOF NPEJGJDBUJPO • .VMUJ
    EPNBJOTDPQF
    TUSVDUVSFE • $PNNPO
    DMPVE
    SFTPVSDF – $PNQVUF
    4UPSBHF
    /FUXPSL
    %/4
    1BB4 • *OEFQFOEFOU
    *UFNT
    GMBWPS
    WPMVNF
    UZQF
    
    JNBHFT – $PNQBUJCMF
    EPNBJO
    TDPQF
    BOE
    %PNBJOT
    XJUI
    7
    "1*
    PO
    0QFO4UBDL
    +VOP .VMUJ
    %PNBJO
    LFZTUPOF
33. 33 • 8F
    VTF
    BOE
    DVTUPNJ[F
    UIF
    DPEF
    UIBU
    JT
    JO
    +VOP
    ,FZTUPOF
    W
    EPNBJO – &OBCMF
    %PNBJO
    *%
    GPS
    +VOP
    ,FZTUPOF
    7
    "1* • 4BB4
    JNQMFNFOUBUJPO
    XJUI
    QZUIPOLFZTUPOFDMJFOU
    – 1SPDFTT
    SFMBUFE
    %PNBJO
    *%
    BOE
    %BUB
    JNQMFNFOUBUJPO è%PNBJO
    *%
    GSPN
    UPLFO
    "1* 6TFS
    1045
    WUPLFO "ENJO TFSWJDF 
    (&5
    WUPLFO\JE^ +VOP
    ,FZTUPOF
    7
    "1*
    
    %PFT
    OPU
    TVQQPSU
    %PNBJOT
34. 34 %PNBJOT
    BOE
    VTFS
    QSFGJY
    OBNFTQBDF ,FZTUPOF
    XSBQQFS
    QSPYZ
    BU
    EPNBJO
    TQFDJGJD
    LFZTUPOF
    FOEQPJOU Domain Product Prefix name  space gnc ConoHa gnc zjp JP  OEM-­‐1 zjp zsg SG  OEM-­‐ 1 zsg ...  ...   OEM-­‐n ...  ... &YQ
    VTFS
    HOD *NBHF
    OBNF
    HOD@DFOUPT
35. 35 "EEJOH
    EPNBJO OE 
    DMPVE[DPN 8F
    SFMFBTFE
    OE TFSWJDF
    PO
    TBNF
    +VOP
    JOGSB
    
    d
36. 36 Keystone DB user/tenant token Geographic endpoints Default  domain (Admin  only) (services_auth_url) ConoHa public  API gncu72074485   …. ConoHa web  panel  API gncu72074485   …. Openstack Component nova cinder neutron glance glance ConoHa Dashboard gncu-­‐vpsadmin Sync  (region  – region) Admin  &   Internal   endpoint Z.Com domain (admin_auth_url) Public  endpint Z.Com domain (user_auth_url) ※openstack original   Endpoint Admin  &  Internal   Endpoint gnc domain (user_auth_url) Public  Endpoint gnc domain (admin_auth_url) ConoHa domain（gnc） Z.Com domain "EEJOH
    EPNBJO OE 
    DMPVE[DPN BOE
    $POP)B FOEQJOU z.com public  API zjpu82073435   ….
37. 37 .VMUJ%PNBJOT
    BOE
    .VMUJFOEQPJOU %JGFSSFOU
    "1*
    FOEQPJOUT
    JO
    B
    TFQBSBUF
    %PNBJO
38. 38 &OEQPJOU
    DPOGJHVSBUJPO
    PO
    LFZTUPOF
39. 39 0QFO4UBDL TFSWJDF
    DPOQPOFOUT BOE
    %PNBJOT
    DPOGJHVSBUJPO
    XJUI
    .VMUJ -PDBUJPO
40. 40 è %PNBJO
    TQFDJGJD
    *UFNT
    
    /POF • /FVUSPO
    .-
    VTJOH
    NVMUJQMF
    /FUXPSL
    QMVHJOT – PWT79-"/.-
    
    GPS
    *BB4 TFSWJDF – -JOVY#SJEHF.-
    
    GPS
    1BB44BB4 • -#BB4
    -74%43
    ESJWFS
    PSJHJOBM – 8JUIPVU
    EFQFOE
    PO
    EPNBJO
    DPOGJH • 1VCMJD
    OFUXPSL
    DPOGJH – 8JUIPVU
    EFQFOE
    PO
    EPNBJO
    DPOGJH – 'MBU
    /FUXPSL
    NPEFM
    CZ
    'JY*1
    XJUIPVU
    GMPBUJOH
    *1 /FVUSPO
    
    /FUXPSLJOH
    
41. 41 è %PNBJO
    TQFDJGJD
    *UFNT
    
    /PU
    SFRVJSFE – 40"
    SFDPSE – /4
    SFDPSE • %JGGFSFOU
    [POFT
    JT
    SFHJTUFE
    UP
    %/4
    Example) Domain “gnc”: conoha.io [n-gohko@corpscan01~]$ dig +short plastic-machine.red ns ns-a3.conoha.io. ns-a1.conoha.io. ns-a2.conoha.io. [n-gohko@corpscan01~]$ dig +short plastic-machine.red soa ns-a1.conoha.io. postmaster.example.org. 1441328665 3600 600 86400 3600 %FTJHOBUF
    
    %/4
    
42. 42 è %PNBJO
    TQFDJGJD
    
    "MM
    JUFNT • 8F
    NBLF
    B
    DIBOHF
    UP
    $FJMPNFUFS
    UP
    SFDPSE
    %PNBJO*% – "WBJMBCMF
    HSPVQJOH
    RVFSZ
    XJUI
    %PNBJO
    *%
    DPMVNO – *OTFSU
    UIF
    QBZNFOU
    EBUB
    JOUP
    CBDLFOE
    TZTUFN $FJMPNFUFS
    
    .FUFSJOH
    
43. 43 è %PNBJO
    TQFDJGJD
    
    /POF • 4FQBSBUFE
    TXJGUQSPYZ
    FWFSZ
    EPNBJO 4XJGU
    
    0CKFDU
    4UPSBHF
    
44. 44 è%PNBJO
    TQFDJGJD
    JUFNT
    – 1VCMJD
    JNBHFT • 6TFST
    DBO
    TFF
    UIF
    JNBHF
    UIBU
    CFMPOH
    UP
    EFGBVMU
    EPNBJO
    PS
    UIFJS
    EPNBJO • -JTU
    PG
    "1*
    
    (&5
    WJNBHFT – %FGBVMU
    %PNBJO
    
    TIBSFE
    QVCMJD
    JNBHF
    B – %PNBJO HOD
    [KQ
    FUD
    
    %PNBJO
    TQFDJGJD
    QVCMJD
    JNBHF
    C
    
    B • 3FDPSE
    %PNBJO
    *%
    JOUP
    UIF
    NFUB
    EBUB
    PG
    QVCMJD
    *NBHF è -JTU
    PQFSBUJPO
    XBT
    DVTUPNJ[FE
    CZ
    "1*
    XSBQQFS
    QSPYZ (MBODF
    
    *NBHF
    TFSWJDF
    Public  images  (a) Domain  Public  images  (b)
45. 45 è%PNBJO
    TQFDJGJD
    JUFNT – 3FHJTU
    QVCMJD
    GMBWPS
    MJTUT
    GPS
    FBDI
    EPNBJOT "1*
    8SBQQFS
    QSPYZ
    GJMUFST
    JUFNT
    CZ
    OBNF
    TQBDF
    PG
    EPNBJOT è 5IF
    EPNBJO
    VTFS
    DBO
    HFU
    GMBWPST
    UIBU
    CFMPOH
    UP
    UIFJS
    EPNBJO
    GJMUFSFE
    CZ
    XSBQQFS
    QSPYZ /PWB
    
    $PNQVUF
    
46. 46 è%PNBJO
    TQFDJGJD – 7PMVNF
    UZQF
    GPS
    FBDI
    EPNBJOT %PNBJO
    VTFS
    DBO
    HFU
    7PMVNF
    UZQF
    UIBU
    CFMPOH
    UP
    UIFJS
    EPNBJO – *U
    JT
    QPTTJCMF
    UP
    EJTQMBZ
    UIF
    EJGGFSFOU
    2P42VPUB
    PG
    WPMVNF
    UZQF è*U
    JT
    QPTTJCFM
    UP
    TFMM
    UIF
    WPMVNF
    UZQF
    GPS
    FBDI
    EPNBJO /FYFOUB4UPS [GT ESJWFS $JOEFS
    
    #MPDL
    TUPSBHF
47. 47 $JOEFS
    
    /FYFOUB4UPS5. [GT ESJWFS &WFSZ
    SFHJPO
    IBT
    /FYFOUB4UPS [GT TUPSBHFT
48. 48 è%PNBJO
    TQFDJGJD
    JUFNT – SaaS service endpoint (SMTP/POP/IMAP/DB/CPanel) • Mail hosting service • Database hosting service • Web(Cpanel) hosting service • Wordpress hosting service – Domain specific: none Request for KeyStone Admin endpoint(ex. GET /v2.0/token/{tokenid}) need to access the Domain side endpoint 0SJHJOBM
    TPGUXBSF
    BT
    B
    TFSWJDF
    
    VTJOH
    LFZTUPOF
    BVUI
49. 49 4VNNBSZ
    0QFO4UBDL "VUI
    JO
    +VOP LFZTUPOF
    7
    "1*
    EPNBJOT
50. 50 )PX
    BCPVU
    EPNBJO
    
    8IBU
    JT
    EPNBJO %JGJOJUJPO • $POUBJOFS
    PG
    QSPKFDU • PXOFS
    BOE
    NFNCFS
    JO
    UIF
    EPNBJO • %PNBJO
    PXOFS
    DBO
    NBOBHF
    VTFST
    HSPVQT
    BOE
    SPMFT
    JO
    UIFJS
    EPNBJO
51. 51 .PUJWBUJPO • $SFBUF
    TDPQF
    JO
    UIF
    EPNBJO – 4DPQFE
    JUFNT • 'MBWPS • *NBHFT • 7PMVNF
    UZQF – 4IBSFE
    JUFNT • 1VCMJD
    /FUXPSLT • )ZQFSWJTPS • *NBHFT
    %FGBVMU
    EPNBJO • 6TJOH
    ,FZTUPOF
    "1*
    W
52. 52 Keystone DB regionTYO1 OSA1 SIN1 SJC1 %PNBJO
    
    QSPEVDU
    EPNBJO SaaS IaaS SaaS IaaS SaaS IaaS SaaS IaaS user/tenant user/tenant user/tenant token token token sync sync Geographic endpoints ConoHa keystonea pi ConoHa keystone   api ConoHa keystone   api JP (auth_url) SG (auth_url) US (auth_url) ConoHa
53. 53 Keystone DB regionTYO1 OSA1 SIN1 SJC1 SaaS IaaS SaaS IaaS SaaS IaaS SaaS IaaS user/tenant user/tenant user/tenant token token token sync sync Geographic endpoints ConoHa keystonea pi ConoHa keystone   api ConoHa keystone   api JP (auth_url) SG (auth_url) US (auth_url) ConoHa JP  OEM-­‐1 JP  OEM-­‐1 keystonea pi JP  OEM-­1 (auth_url) %PNBJO
    
    QSPEVDU
    EPNBJOT
54. 54 %PNBJO
    
    QSPEVDU
    EPNBJOT Keystone DB regionTYO1 OSA1 SIN1 SJC1 SaaS IaaS SaaS IaaS SaaS IaaS SaaS IaaS user/tenant user/tenant user/tenant token token token sync sync Geographic endpoints ConoHa keystonea pi ConoHa keystone   api ConoHa keystone   api JP (auth_url) SG (auth_url) US (auth_url) ConoHa JP  OEM-­‐1 SaaS  only  OEM-­‐2 SaaS  only  OEM-­‐2 SaaS  only  OEM-­‐2 SaaS  only  OEM-­‐2 JP  OEM-­‐1 keystonea pi JP  OEM-­1 (auth_url) SaaS  only   OEM-­‐2 keystonea pi SaaS  only   OEM-­‐2 keystonea pi SaaS  only   OEM-­‐2 keystonea pi SaaS  only OEM-­2 (auth_url) SaaS  only OEM-­2 (auth_url) SaaS  only OEM-­2 (auth_url)
55. 55 Keystone DB regionTYO1 OSA1 paas vps paas vps user/tenant token Geographic endpoints JP ConoHa keystonea pi nova ▲api ･db ･scheduler ・novncproxy ・conductor ConoHa client 1）token  get 2）return  token ＆ Endpint list 3）req:  create  VM 4）return:  vm created ＆generate  VM  ID z.com keystonea pi (auth_url) (auth_url)
56. 56 Keystone DB regionTYO1 OSA1 user/tenant token Geographic endpoints ConoHa keystonea pi ConoHa Client Z.com Client Z.com keystonea pi 1）token  GET 2）return ＆エンドポイントリスト 3）VM作成の要求 4）VM作成＆VMのID発行 JP (auth_url) (auth_url) paas vps paas vps nova ▲api ･db ･scheduler ・novncproxy ・conductor nova ▲api ･db ･scheduler ・novncproxy ・conductor
57. 57 • 8F
    IBWF
    CFFO
    PQFSBUJPO
    UIF
    TFSWJDF
    
    *O
    UIF
    .VMUJ-PDBUJPO
    
    UP
    CVJME
    B
    .VMUJ3FHJPO
    FOWJSPONFOU • *O
    PSEFS
    UP
    CFUUFS
    UBLF
    BEWBOUBHF
    PG
    UIF
    -PDBUJPO
    BOE
    3FHJPO
    
    XF
    BQQMZ
    UIF
    DPODFQU
    PG
    %PNBJO
    UP
    NBLF
    UIF
    FOEQPJOU
    BOE
    UIF
    "1*
    XSBQQFS
    QSPYZ • EPNBJO@JE 
    YYY@EPNBJO@JE • ESJWFS
    
    LFZTUPOFDBUBMPHCBDLFOETUFNQMBUFE$BUBMPH • UFNQMBUF@GJMFFUDLFZTUPOFEFGBVMU@DBUBMPHUFNQMBUFT • "/%
    XSBQQFS QIQ SPVUFS
    QSPHSBNT 8F
    VTF
    JU
    UP
    DVTUPNJ[F
    BT
    NVMUJQMF
    *BB4
    J 'JOBMMZ
58. 'JO
59. T49 GMO Internet, Inc.
60. 60 'JO *OGPSNBUJPO MARKET PLACE booth: T49 GMO Internet Inc.