Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Sign up for free
Menu
Search
Features
All features
Private URLs
Password Protection
Custom URLS
Scheduled publishing
Remove Branding
Restrict embedding
Deck Collections
Notes
Features
All features
Private URLs
Password Protection
Custom URLS
Scheduled publishing
Remove Branding
Restrict embedding
Deck Collections
Notes
Explore
Featured decks
Featured speakers
Programming
Technology
Storyboards
Explore
Featured decks
Featured speakers
Programming
Technology
Storyboards
Pricing
Search
Sign in
Sign up for free
Cloudstack design decisions
Search
Pierre-Yves Ritschard
June 10, 2014
Technology
110
0
Share
Embed
Copy iframe code
Copy JS code
Copy link
Start on current slide
Cloudstack design decisions
Cloud operations at scale
Pierre-Yves Ritschard
June 10, 2014
More Decks by Pierre-Yves Ritschard
See All by Pierre-Yves Ritschard
Meetup Camptocamp: Exoscale SKS
pyr
0
610
The (long) road to Kubernetes
pyr
0
350
From vertical to horizontal: The challenges of scalability in the cloud
pyr
0
110
Change Management at Scale
pyr
0
170
5 years of Clojure
pyr
2
1.1k
Taming Jenkins
pyr
0
90
Init: then and now
pyr
1
250
Billing the Cloud
pyr
0
350
From Vertical to Horizontal
pyr
2
180
Other Decks in Technology
See All in Technology
SQL文一行も書けない人事がCortexもろもろを使って人事業務を楽にしてみる
ponponmikankan
1
210
omasushiというライブラリを作った
polidog
PRO
0
190
ASTを使って影響範囲を特定する
nealle
0
140
Amazon S3 Tablesに全部任せてみた結果——コンパクション/スナップショット管理は本当に手放せるか
shigeruoda
1
460
DEFCON34-Write-up_HYCu-MYCu
daikiokazaki
0
140
Podは生きているのにGoだけが落ちる:GOGCとGOMEMLIMITで追うInvisible OOM Killの謎
tkc66buzz
1
500
2026-09-10 【Snowflake World Tour Tokyo 2026】dbt Core と Snowflake で実現する多層的なデータガバナンス / Multi-Layered Data Governance Powered by dbt Core and Snowflake
civitaspo
0
310
AI時代のAPI品質を支えるガードレール / API Guardrails for API quality in the AI era
yokawasa
1
210
AI-DLCって実際どう? 〜聞きたいこと全部聞いてみる〜
news_it_enj
0
260
module Synths; end
asonas
1
130
WAF 運用改善の承認サイクル/SRE_BizReach_MIXI_1
visional_engineering_and_design
2
420
プロダクト思考 × 基盤思考を AIで実現する Compound Engineering
tkc66buzz
1
310
Featured
See All Featured
So, you think you're a good person
axbom
PRO
2
2.1k
Chasing Engaging Ingredients in Design
codingconduct
0
300
Become a Pro
speakerdeck
PRO
31
6.2k
I Don’t Have Time: Getting Over the Fear to Launch Your Podcast
jcasabona
35
2.8k
New Earth Scene 8
popppiees
3
2.5k
Amusing Abliteration
ianozsvald
1
290
Groundhog Day: Seeking Process in Gaming for Health
codingconduct
0
340
How to train your dragon (web standard)
notwaldorf
97
6.8k
Designing for Timeless Needs
cassininazir
1
470
Into the Great Unknown - MozCon
thekraken
41
2.7k
Intergalactic Javascript Robots from Outer Space
tanoku
273
27k
The Success of Rails: Ensuring Growth for the Next 100 Years
eileencodes
47
8.3k
Transcript
CLOUDSTACK DESIGN DECISIONS CLOUD OPERATIONS AT SCALE
SHORT BIO Pierre-Yves Ritschard CTO @ exoscale - The safe
home for your cloud applications Open Source Developer - pithos, cyanite, riemann, collectd, openbsd Architect of several cloud platforms - paper.li Recovering Operations Engineer
Simple and efficient cloud hosting platform Full compatibility with automation
tools Hosted in a safe jurisdiction
CLOUD BUILDING BLOCKS service infrastructure software people
SERVICE SIMPLICITY AND SCALABILITY Cloudstack based Basic networking Local storage
KVM hypervisor: SmartOS inspired
CLOUDSTACK Great extensibility, easy to plug into.
BASIC NETWORKING One IP per VM. Security groups are hypervisor
controlled layer 2 firewall rules. Provides all the flexibility of a traditionnal firewall, completely API controlled.
LOCAL STORAGE Fast I/O, persistent disks.
KVM HYPERVISOR Best in class hypervisor. Diskless and netboot approach.
Avoids resource waste, facilitates upgrades.
INFRASTRUCTURE THE GOOD CITIZEN CONTRACT Configuration management Visibility Build factory
Remote execution
THE GOOD CITIZEN CONTRACT new machines have roles role defines
converged configuration as sum of components each component has an expected normal state and reports it no local intervention needed
CONFIGURATION MANAGEMENT code is a great way to define infrastructure
ensures homogeneity ability to iterate fast great source of change tracking avoids fear of change
OVER 3000 COMMITS
CONFIGURATION MANAGEMENT: PUPPET battle tested tool simple declarative DSL to
express configuration fits our component approach well
VISIBILITY FROM THE MAP TO THE TERRITORY logs metrics alerts
WHY FOCUS ON VISIBILITY distributed systems with lots of moving
parts, high node volatility
LOGS all application and system logs sent over the wire
logstash disects and extracts metadata elasticsearch indexes for easy retrieval simple correlation
None
METRICS all application and system metrics sent over the wire
by collectd graphite's carbon aggregates and produces appropriate roll- ups if it moves, graph it. if it doesn't, graph it if it starts moving.
None
ALERTS unbounded stream of log and metric data passive approach
bodes well with node volatility riemann takes decisions based on stream content ability to extract meaningful information
BUILD FACTORY continuous integration package repositories
CONTINUOUS INTEGRATION over 60 build jobs ties into our code
hosting platform handled by jenkins
PACKAGE REPOSITORIES generates valid and signed Debian repositories ensures fast
upgrades simplifies configuration management
REMOTE EXECUTION a simple pubsub system recurrent commands stored as
scenarios command line, HTTP and IRC interaction
A SIMPLE PUBSUB SYSTEM each node runs an agent responsible
for carrying out commands. commands are sent to groups of nodes (by predicates such as role).
RECURRENT COMMANDS STORED AS SCENARIOS intricate workflows can be expressed
through a simple DSL
COMMAND LINE, HTTP AND IRC INTERACTION most of our production
environment can be controlled through our chatroom
SOFTWARE FILLING IN THE GAPS Customer management Real-time metering and
billing Integrated console A few other things
CUSTOMER MANAGEMENT Keeping track of our users Support services (ticket
management, coupons, emails)
REAL-TIME METERING AND BILLING can't be tied to a cloudstack
only solution cloudstack emits useful data ties into our customer management
INTEGRATED CONSOLE integrated experience across our services hides complexity and
cloudstack specifics exposes exoscale specific features
None
A FEW OTHER THINGS pithos cyanite fleet collectd add-ons
PEOPLE EFFICIENT WORK. QUIET NIGHTS Small SRE team Avoiding deploy
anxiety
SMALL SRE TEAM Our platform must be simple to operate,
additional moving parts must provide business value or help operations
AVOIDING DEPLOY ANXIETY Our software and infrastructure helps ensure we
have good tools to ensure quiet nights and easily caught errors
LOOKING BACK Cloudstack is a solid foundation for a IAAS
platform There's a bit more to it than just installing cloudstack Building a sustainable and scalable platform on top of cloudstack is possible
QUESTIONS ?