Get in Touch

Course Outline

1. Introduction to OpenStack

  • Historical context of cloud computing and OpenStack

  • Core cloud capabilities

  • Cloud deployment models

    • Private, public, and hybrid configurations
    • On-premise environments, Infrastructure as a Service (IaaS), Platform as a Service (PaaS), and Software as a Service (SaaS)
  • OpenStack-based public and private cloud implementations

  • Open source and commercial OpenStack distributions for government use

  • OpenStack deployment architectures

  • OpenStack ecosystem overview

    • Core modules
    • Foundational tools and utilities
    • System integrations
  • OpenStack lifecycle management
  • OpenStack certification pathways

  • Course lab environment (Virtual Machine) for for government training purposes

2. Hands-on OpenStack Administration Workshop

  • Familiarization with OpenStack architecture

    • Key components: Keystone, Glance, Nova, Neutron, Cinder, Swift, and Heat
    • Interaction protocols for the OpenStack cloud interface
    • OpenStack daemon operations and API communication workflows
  • Keystone: Identity and Access Management Service

    • Keystone architectural framework
    • Authentication mechanisms and supported backends
    • Token types and lifecycle management
    • Authorization controls in OpenStack: roles and oslo.policy enforcement
    • Keystone resources: domains, projects, and users
    • Configuration of CLI clients via openrc and clouds.yaml files
    • OpenStack service catalog management
    • Procedures for adding new OpenStack services
    • OpenStack quota enforcement systems
  • Glance: Image Management Service

    • Cloud-optimized image standards
    • Image attributes: properties, metadata, formats, and container types
    • Procedures for uploading and downloading images
    • Image sharing protocols
    • Glance image storage backends
    • Protected image configurations
    • Management of image service quotas
    • Verification and validation of Glance services

  • Neutron: Networking Infrastructure

    • Architecture overview and core Neutron services
    • The ML2 plugin framework
    • Analysis of compute node networking architecture
    • Networking concepts and tools utilized by Neutron
    • Primary Neutron network resource types
    • Management of tenant networks and subnets
    • Security group and rule administration
    • East-West traffic routing
    • Network namespace management
    • Administration of external/provider networks
    • North-South traffic routing
    • Floating IP address management
    • Role-based access control (RBAC) in Neutron
    • Network quota management
    • SDN and NFV internals: iptables, ip route, and Open vSwitch (OVS)
    • Basic network troubleshooting techniques (namespaces, tcpdump, etc.)
    • Network quota enforcement

    • Verification and validation of Neutron services
  • Nova: Compute Service

    • Hypervisor interfaces and integration
    • Keypair management procedures
    • Flavor configuration and management
    • Flavors and CPU topology mapping
    • Instance parameter configurations
    • Virtual machine instance creation procedures
    • Verification of instantiated instances
    • Snapshot creation and management
    • Instance lifecycle management

    • Instance resizing operations
    • Floating IP assignment procedures
    • Interactive console and log access
    • Security group assignment for instances
    • Internals of security groups and port-security features (iptables)
    • L3 router operational internals
    • Compute quota management

    • Retrieving statistics from Nova
    • Placement API and Nova Cells v2 architecture
    • Instance scheduling via Placement API
    • Placement API client command operations

    • Verification and validation of Nova services
  • Cinder: Block Storage Service

    • Volume parameter specifications
    • Volume creation procedures
    • Volume management operations

    • Attaching volumes to Nova instances
    • Snapshot management for volumes
    • Backup management for volumes

    • Internal mechanisms of Cinder snapshots and backups
    • Inter-project volume transfer procedures
    • Backup restoration procedures
    • Volume quota management

    • Addition of new storage backends
    • Quality of Service (QoS) policies in Cinder

    • LVM, storage array, and Ceph storage backends
    • Ceph integration within OpenStack
    • Integration of Ceph with Cinder for for government deployments

    • Best practices for Ceph deployment operations
    • Verification and validation of Cinder services
  • Barbican: Key Management Service
    • Barbican architectural design

    • Secure storage of passphrases
    • Generation and storage of symmetric encryption keys

    • Mechanisms for volume encryption
    • Configuration of Cinder storage types for volume encryption

    • L limitations regarding volume encryption
    • Storage and management of X.509 certificate bundles

  • Swift: Object Storage Service
    • Swift components and operational processes
    • Management of containers and objects

    • Access control list (ACL) management

    • Configuration of object expiration policies
    • The Ring architecture and storage policy definitions
    • Monitoring of available storage capacity

    • Quota configuration procedures

    • Verification and validation of Swift services
  • Heat: Orchestration Service

    • Heat Orchestration Template (HOT) structure and components
    • Creation of Heat stacks

    • Verification of Heat stack deployments

    • Updating existing Heat stacks

    • Verification and validation of Heat services
  • Fundamental Troubleshooting Techniques
    • Analysis of system log files

    • Implementation of centralized logging solutions
    • Debugging of OpenStack client queries

    • Administration of the OpenStack database

    • Data extraction from service databases
    • OpenStack system backup procedures

    • Status analysis of compute nodes

    • Status analysis of virtual instances

    • Troubleshooting instances at the compute node level (libvirt)
    • Analysis of AMQP broker status (RabbitMQ)

    • RabbitMQ troubleshooting procedures

    • Configuration and management of metadata services
    • General methodologies for diagnosing OpenStack issues
    • Troubleshooting network connectivity problems

    • Troubleshooting network performance issues

    • Instance backup and recovery procedures

2. Advanced Topics

  • Octavia: Load Balancing-as-a-Service

    • Architectural overview

    • Object structures and request flow dynamics
    • Octavia flavor configurations

    • Octavia Availability Zone management

    • HTTP load balancer creation procedures

    • TCP load balancer creation procedures

    • HTTPS passthrough load balancer creation procedures

    • Listeners, pools, and health monitor configurations
    • Layer 7 load balancing implementation in Octavia
    • Amphora image construction

    • Load balancer failover mechanisms

    • Networking and monitoring specifications
    • Troubleshooting Octavia components

  • Hardware Considerations and Capacity Planning

    • Compute hardware requirements

    • Network design principles
    • Storage design principles
    • Flavor sizing guidelines

    • Resource overcommitment strategies
  • High Availability (HA) Control Plane

    • HA implementation in OpenStack services

    • High availability database configurations

    • High availability message queue configurations

    • Active-Active versus Active-Passive deployment models
    • Multi-region deployment architectures

  • Cloud Partitioning and Scheduler Filters

    • Rationale and implementation of cloud partitions (host-aggregates)
    • Nova scheduler filter configurations

    • Analysis of filter source code
  • Workload Migration Procedures
    • Cold and live migration techniques
    • Tuning of live migration parameters

    • Migration exercises and troubleshooting
  • Policies and Authorization in OpenStack

    • oslo.policy framework implementation

    • Creation of new roles with corresponding policy files
    • Verification of API access for specific users

  • Advanced OpenStack Networking (SDN) (2-3 hours)
    • Network types: local, flat, VLAN, VXLAN, and GRE
    • Detailed network flow and architecture in various Neutron deployments
      • East-West traffic patterns in tenant networks

      • North-South traffic patterns in tenant networks

      • Traffic handling in provider-only deployments
    • Neutron plugin types
      • Linux Bridge
      • Open vSwitch
    • OVS troubleshooting and exercises for for government networking environments
    • Troubleshooting security groups using iptables and tcpdump
    • Port-security adjustments and virtual IP (vIP) management
    • Distributed Virtual Routers (DVR)

    • LBaaS + Octavia integration project

    • VPNaaS implementation
  • OpenStack Monitoring and Telemetry

    • Ceilometer service overview

    • External monitoring integration
  • Advanced Cloud and Hypervisor Features

    • CPU pinning and NUMA architecture
    • SR-IOV implementation
  • Cloud-init and Image Customization

    • Metadata Service configuration

    • Data retrieval from the metadata service
  • Block Storage Backends

    • LVM configurations
    • Ceph RBD configurations
    • Physical appliance integration
    • Storage network design considerations
  • OpenStack Upgrade Procedures

    • Upgrade strategies and procedural steps
    • Zero-downtime upgrade methodologies

  • Bare-Metal Provisioning with OpenStack

    • Ironic module functionality

    • Undercloud and overcloud architectural concepts
  • Practical exercises on troubleshooting OpenStack clusters for for government operations

  • Example examination tasks and assessments

  • Future developments and roadmap for OpenStack

Requirements

  • Fundamental capabilities in Linux system management
  • Foundational understanding of networking principles
  • Essential familiarity with cloud computing architectures for government operations
 35 Hours

Number of participants


Price per participant

Testimonials (1)

Upcoming Courses

Related Categories