Course Outline
1. Introduction to OpenStack - 2h
• History of the cloud and OpenStack
• Cloud features
• Cloud models
• private, public, hybrid
• on-premise, IaaS, PaaS, SaaS
• Public and private cloud deployments based on OpenStack
• Open source and commercial OpenStack distributions
• OpenStack deployment models
• OpenStack ecosystem
• Modules
• Underlying tools
• Integrations
• OpenStack lifecycle
• OpenStack certification
• OpenStack lab (VM) for this course
2. Hands-on OpenStack administration workshop
• Getting to know OpenStack ~0.5h
• OpenStack components (Keystone, Glance, Nova, Neutron, Cinder, Swift,
Heat)
• Interaction with OpenStack cloud
• OpenStack daemons and API communication flow
• Keystone - Identity management service ~1h
• Keystone architecture
• Authentication and available backends
• Token types and token management
• Authorization in OpenStack - roles and oslo.policy
• Keystone resources - domains, projects, users
• Openrc and clouds.yaml - CLI clients configuration
• OpenStack service catalog
• Adding new OpenStack service
• Quota system in OpenStack
• Glance - Image service ~1.5h
• Images adjusted to the cloud
• Image features (properties, metadata, format, container)
• Uploading and downloading image
• Sharing images
• Glance image stores
• Protected images
• Manage quotas for image service
• Verification of Glance services
• Neutron - Networking ~2-3h
• Architecture and Neutron services
• The ML2 plugin
• Networking in compute node - analysis
• Networking concepts and tools used by Neutron
• Basic Neutron network resource types
• Manage tenant networks, subnets,
• Manage security groups and rules
• East-West routing
• Network namespaces
• Manage external/provider networks
• North-South routing
• Floating IPs management
• Manage network quotas
• Basic network troubleshooting (namespaces, tcpdump, etc.)
• Networking quotas
• Verification of Neutron services
• Nova - Compute service ~2-3h
• Interfaces to hypervisors
• Keypair management
• Flavour management
• Flavors and CPU topology
• Instance parameters
• Creating an instance
• Verification of spawned instances
• Snapshotting
• Instance management
• Resizing instances
• Assigning floating IPs
• Interactive console and console log
• Security groups assignment
• Compute quotas
• Getting statistics from Nova
• Placement API and Nova Cells v2
• Placement API and instance scheduling
• Placement API client commands
• Verification of Nova services
• Cinder - Block Storage ~2-3h
• Volume parameters
• Creating volume
• Manage volume
• Attaching volume to Nova instance
• Managing volume snapshots
• Managing volume backups
• Internals of snapshots and backups in Cinder
• Transferring volumes between projects
• Restoring backups
• Managing volume quotas
• Adding new storage backend
• QoS (limits) in Cinder
• LVM, storage array and Ceph storage backends
• Ceph in OpenStack
• Integrating Ceph and Cinder
• Good practices for Ceph deployments
• Verification of Cinder services
• Barbican - Key Management Service - ~2h
• Barbican architecture
• Storing passphrases
• Generating and storing symmetric encryption keys
• Volume encryption mechanisms
• Configuring Cinder storage type for volume encryption
• Limitations of volume encryption
• Storing X.509 certificate bundles
• Swift - Object Storage (quick screening for the COA exam) <1h
• Swift components and processes
• Managing containers and objects
• Managing access control lists
• Setting up object expiration
• The Ring and storage policies
• Monitoring available storage space
• Setting up quotas
• Verification of Swift services
• Octavia - Load Balancing-as-a-service ~2-3h
• Architecture
• Objects and request flow
• Octavia flavors
• Octavia Availability Zones
• Creating the HTTP load balancer
• Creating the TCP load balancer
• Creating HTTPS passthrough load balancer
• Listeners, Pools and Health Monitors
• Layer 7 load balancing in Octavia
• Building Amphora image
• LB Failover
• Networking and Monitoring details
• Troubleshooting Octavia
• Heat - Orchestration ~1-2h
• Heat Orchestration Template and its components
• Creating Heat stack
• Verification of Heat stack
• Updating Heat stack
• Verification of Heat services
• Basic troubleshooting ~2h
• Analyzing log files
• Centralized logging
• Debugging OpenStack client queries
• Managing OpenStack database
• Backing up OpenStack
• Analyzing compute node status
• Analyzing instance status
• Analyzing AMQP broker (RabbitMQ)
• Metadata services
• General way of diagnosing OpenStack issues
• Troubleshooting network problems
• Troubleshooting network performance
• Instance backup and recovery
3. Advanced Topics
• Hardware considerations and capacity planning ~2h
• Compute hardware
• Network design
• Storage design
• Flavour sizing
• Resource overcommitment
• Role system - authorization in OpenStack ~2h
• Creating new role as member role extension
• policy.yaml - API calls authorization
• Highly Available control plane ~1h
• HA in OpenStack services
• HA database
• HA message queue
• Cloud partitioning and scheduler filters ~1h
• Why and how implement cloud partitions (host-aggregates)
• Nova scheduler filters
• Workload migration ~1h
• Cold and live migration
• Live migration tweaking
• OpenStack monitoring and telemetry <1h
• Ceilometer service
• External monitoring
• Advanced cloud/hypervisor features <1h
• CPU pinning / NUMA architecture
• SR-IOV
• Cloud-init and image customization <1h
• Metadata Service
• Block storage backends <1h
• LVM
• Ceph RBD
• Physical appliances
• Storage network considerations
• Upgrading OpenStack <1h
• Upgrade strategies and procedures
• Zero-downtime upgrade
• Bare-metal provisioning with OpenStack <1h
• Ironic module
• Undercloud and overcloud concepts
• Future of OpenStack
4. Deep-dive into Neutron and OVN backend - ~6-8h
• OVN architecture
• OVN components
• ML2 - OVN vs OvS driver
• Top-down OVN networking
• OpenStack logic (Neutron database)
• Northbound database
• Southbound database
• Logical datapath pipelines
• Logical flows
• OpenFlow flows
• Neutron network and OVN logical switch
• Logical ports and their types
• Switching flows
• Neutron router and OVN logical router
• NAT types
• Routing flows
• Neutron subnet and native DHCP
• DHCP flows
• Security groups in OVN
• ACLs and Port Groups
• Security group flows
• Port security in OVN
• Summary of OVN Northbound tables
• Information flow in OVN
• Neutron DB, OVN NB and SB DB, OpenFlow at OvS
• Logical flow tracing
• Defining microflows
• L2 tracing
• L3 tracing
• DHCP tracing
• Physical flows - OpenFlow
• Physical live-cycle of VM-originated packet
• Physical tracing
• Tracing for hypothetical packets
• Tracing for real packets
• Displaying Open vSwitch database and resources
Testimonials (3)
I found new things.
Cristian
Course - OpenStack Security
communication, knowledge from experience, solve problems,
Marcin Walewski - Intel Technology Poland Sp. z o.o.
Course - OpenStack Bootcamp
The varied topics