Get in Touch

Course Outline

1. Introduction to OpenStack

  • Historical context of cloud computing and OpenStack development
  • Core cloud capabilities
  • Cloud deployment models
    • Private, public, and hybrid environments
    • On-premises infrastructure, Infrastructure-as-a-Service (IaaS), Platform-as-a-Service (PaaS), Software-as-a-Service (SaaS)
  • Implementation of public and private clouds using OpenStack for government and enterprise applications
  • Open source and commercial OpenStack distributions available for federal use
  • Deployment architectures supported by OpenStack
  • The OpenStack ecosystem
    • Core project modules
    • Foundational supporting tools
    • System integrations
  • OpenStack project lifecycle management
  • Certification standards for OpenStack professionals
  • Configuration of the OpenStack laboratory environment (Virtual Machine) for this training module

2. Hands-on OpenStack administration workshop

  • Familiarization with OpenStack architecture
    • Primary components: Keystone, Glance, Nova, Neutron, Cinder, Swift, and Heat
    • Methods for interacting with the OpenStack cloud environment
    • OpenStack daemon processes and API communication workflows
  • Keystone - Identity management service
    • Structure of domains, projects, users, and roles
    • Configuration of the Keystone service catalog and endpoints
    • Creation and management of domains, groups, projects, users, and roles
    • Validation of Keystone service functionality
  • Glance - Image service
    • Image characteristics: properties, metadata, format, and container types
    • Procedures for uploading and downloading images
    • Protocols for sharing images across projects
    • Configuration of quotas for the image service
    • Validation of Glance service operations
  • Neutron - Networking infrastructure
    • Primary Neutron network resource types
    • Configuration of tenant networks and subnets
    • Management of security groups and associated rules
    • East-West routing configurations
    • Network namespace implementation
    • Configuration of external and provider networks
    • North-South routing configurations
    • Management of floating IP addresses
    • Allocation and management of network quotas
    • Foundational network troubleshooting techniques (including namespace inspection and tcpdump analysis)
    • Monitoring of networking resource limits
    • Validation of Neutron service functionality
  • Nova - Compute service
    • Interfaces connecting to hypervisors
    • SSH keypair management procedures
    • Configuration of instance flavors
    • Specification of instance parameters
    • Procedures for creating virtual instances
    • Verification of instantiated resources
    • Implementation of disk snapshots
    • General instance lifecycle management
    • Assignment of floating IP addresses to instances
    • Access to interactive consoles and retrieval of console logs
    • Assignment of security groups to running instances
    • Configuration of compute resource quotas
    • Retrieval of statistical data from the Nova service
    • Implementation of the Placement API and Nova Cells v2 architecture
    • Validation of Nova service functionality
  • Cinder - Block storage service
    • Configuration of volume parameters
    • Procedures for creating block volumes
    • Ongoing management of volume resources
    • Attachment of volumes to active Nova instances
    • Management of volume snapshot data
    • Creation and management of volume backups
    • Restoration of data from backups
    • Configuration of storage quotas
    • Integration of new storage backends
    • Configuration of LVM, storage array, and Ceph storage backends
    • Implementation of Ceph within the OpenStack environment
    • Validation of Cinder service functionality
  • Swift - Object storage service
    • Architecture and operational processes of Swift components
    • Management of containers and stored objects
    • Configuration of Access Control Lists (ACLs)
    • Configuration of object expiration policies
    • Understanding the Ring architecture and storage policies
    • Monitoring of available storage capacity
    • Establishment of service quotas
    • Validation of Swift service functionality
  • Heat - Orchestration engine
    • Structure and components of Heat Orchestration Templates (HOT)
    • Procedures for creating Heat stacks
    • Verification of deployed Heat stacks
    • Methods for updating existing Heat stacks
    • Validation of Heat service functionality
  • Foundational troubleshooting methodologies
    • Analysis of system log files
    • Implementation of centralized logging systems
    • Debugging of OpenStack client command queries
    • Administration of the OpenStack database layer
    • Procedures for backing up OpenStack configurations and data
    • Analysis of compute node health status
    • Investigation of instance states and errors
    • Analysis of the AMQP message broker (RabbitMQ)
    • Management of metadata services
    • Standardized approach to diagnosing OpenStack incidents
    • Troubleshooting network connectivity issues
    • Troubleshooting network performance bottlenecks
    • Instance data backup and recovery procedures

3. Advanced Topics

  • Hardware infrastructure considerations and capacity planning
    • Compute hardware specifications
    • Network architecture design
    • Storage architecture design
    • Flavor sizing optimization
    • Resource overcommitment strategies
  • Highly Available (HA) control plane implementation
    • HA configurations for OpenStack services
    • Implementation of HA database clusters
    • Implementation of HA message queues
  • Cloud partitioning and scheduler filter logic
    • Rationale and implementation methods for cloud partitions (host aggregates)
    • Configuration of Nova scheduler filters
  • Workload migration strategies
    • Cold and live migration techniques
    • Optimization of live migration processes
    • Utilization of the Watcher project for optimization
  • In-depth OpenStack networking (SDN) (Duration: 2-3 hours)
    • Network type definitions (local, flat, VLAN, VXLAN, GRE)
    • Neutron plugin configurations
      • Linux Bridge agent
      • Open vSwitch agent
    • Distributed Virtual Router (DVR) implementation
    • Load Balancing as a Service (LBaaS) and Octavia project integration
    • Virtual Private Network as a Service (VPNaaS)
  • Cloud monitoring and telemetry frameworks
    • Ceilometer service implementation
    • Integration with external monitoring tools
  • Advanced cloud and hypervisor capabilities
    • CPU pinning and NUMA architecture support
    • SR-IOV (Single Root I/O Virtualization) implementation
  • Cloud-init processes and image customization
    • Utilization of the Metadata Service for instance initialization
  • Block storage backend options
    • LVM (Logical Volume Manager) configuration
    • Ceph RBD (RADOS Block Device) implementation
    • Integration with physical storage appliances
    • Storage network design considerations
  • OpenStack upgrade methodologies
    • Standard upgrade strategies and procedural guidelines
    • Implementation of zero-downtime upgrade processes
  • Bare-metal provisioning using OpenStack
    • Utilization of the Ironic module
    • Concepts of undercloud and overcloud environments
  • Strategic direction and future developments for OpenStack in government applications

Requirements

  • Fundamental proficiency in Linux system administration
  • Essential understanding of core networking concepts
  • Foundational awareness of cloud computing principles, as required for government operations
 28 Hours

Number of participants


Price per participant

Testimonials (1)

Upcoming Courses

Related Categories