Get in Touch
 Duration 35 hours

Course Outline

1. Introduction to OpenStack

  • Historical development of cloud computing and OpenStack

  • Defining characteristics of cloud infrastructure

  • Deployment models for cloud services

    • Private, public, and hybrid architectures
    • On-premise deployments, IaaS, PaaS, and SaaS
  • Implementing public and private cloud environments using OpenStack

  • Comparison of open source versus commercial OpenStack distributions

  • Strategic approaches to OpenStack deployment

  • The OpenStack ecosystem structure

    • Core modules
    • Foundational tooling
    • External integrations
  • The operational lifecycle of OpenStack
  • OpenStack certification requirements

  • Virtual machine (VM) laboratory setup for this course

2. Practical OpenStack administration workshop

  • Familiarization with the OpenStack platform

    • Core OpenStack components (Keystone, Glance, Nova, Neutron, Cinder, Swift, Heat)
    • Interaction mechanisms with the OpenStack cloud environment
    • OpenStack daemons and API communication workflows
  • Keystone - Identity management service

    • Keystone architectural design
    • Authentication protocols and supported backends
    • Token classifications and management strategies
    • Authorization frameworks in OpenStack, including roles and oslo.policy
    • Keystone resource structures: domains, projects, and users
    • Configuration of CLI clients via openrc and clouds.yaml
    • The OpenStack service catalog
    • Registering new OpenStack services
    • The OpenStack quota management system
  • Glance - Image service

    • Cloud-optimized image standards
    • Image attributes (properties, metadata, format, container)
    • Procedures for uploading and retrieving images
    • Image sharing protocols
    • Glance image storage repositories
    • Management of protected images
    • Establishing quotas for the image service
    • Validation of Glance service functionality
  • Neutron - Networking

    • Architectural overview and Neutron services
    • The ML2 plugin architecture
    • Networking analysis on compute nodes
    • Concepts and tools utilized by Neutron
    • Foundational Neutron network resource types
    • Administration of tenant networks and subnets
    • Management of security groups and associated rules
    • East-West routing configurations
    • Network namespaces
    • Management of external and provider networks
    • North-South routing implementations
    • Management of Floating IPs
    • Role-based access control within Neutron
    • Management of network resource quotas
    • Internals of SDN and NFV (iptables, ip route, OVS)
    • Foundational network diagnostics (namespaces, tcpdump, etc.)
    • Networking quota enforcement
    • Validation of Neutron service operations
  • Nova - Compute service

    • Hypervisor interfaces
    • Key pair administration
    • Flavor management processes
    • Flavors and CPU topology alignment
    • Instance configuration parameters
    • Instance creation procedures
    • Verification of instantiated instances
    • Snapshot creation and management
    • General instance administration
    • Provisioning and allocation of floating IPs
    • Interactive console access and console logs
    • Assignment of security groups
    • Internal mechanisms of security groups and port-security features (iptables)
    • Internal structure of L3 routers
    • Compute resource quotas
    • Retrieval of statistical data from Nova
    • Placement API and Nova Cells v2 architecture
    • Placement API and instance scheduling algorithms
    • Placement API client command sets
    • Validation of Nova service integrity
  • Cinder - Block Storage

    • Volume configuration parameters
    • Volume creation procedures
    • Volume administration
    • Attaching volumes to Nova instances
    • Management of volume snapshots
    • Management of volume backups
    • Internal mechanics of Cinder snapshots and backups
    • Transfer of volumes across projects
    • Backup restoration procedures
    • Administration of volume quotas
    • Integration of new storage backends
    • Quality of Service (QoS) in Cinder
    • LVM, storage arrays, and Ceph storage backends
    • Ceph integration within OpenStack
    • Integration of Ceph and Cinder components
    • Best practices for Ceph deployment
    • Validation of Cinder service performance
  • Barbican - Key Management Service
    • Barbican architectural framework
    • Storage of passphrases
    • Generation and storage of symmetric encryption keys
    • Volume encryption mechanisms
    • Configuration of Cinder storage types for volume encryption
    • Operational limitations of volume encryption
    • Storage of X.509 certificate bundles
  • Swift - Object Storage
    • Swift components and process workflows
    • Administration of containers and objects
    • Management of access control lists
    • Configuration of object expiration policies
    • The Ring architecture and storage policies
    • Monitoring of available storage capacity
    • Establishment of storage quotas
    • Validation of Swift service integrity
  • Heat - Orchestration

    • Heat Orchestration Template structure and components
    • Creation of Heat stacks
    • Verification of Heat stack integrity
    • Updating existing Heat stacks
    • Validation of Heat service operations
  • Foundational troubleshooting techniques
    • Log file analysis
    • Centralized logging implementation
    • Debugging of OpenStack client queries
    • Management of OpenStack databases
    • Extraction of data from service databases
    • OpenStack backup procedures
    • Analysis of compute node status
    • Analysis of instance status
    • Troubleshooting instances at the compute node level (libvirt)
    • Analysis of AMQP broker (RabbitMQ) status
    • RabbitMQ specific troubleshooting
    • Metadata services inspection
    • General diagnostic methodologies for OpenStack issues
    • Diagnosis of network connectivity problems
    • Analysis of network performance issues
    • Instance backup and recovery operations

2. Advanced Topics

  • Octavia - Load Balancing-as-a-service

    • Architectural design
    • Object structures and request processing flow
    • Octavia flavor configurations
    • Octavia Availability Zones
    • Creation of HTTP load balancers
    • Creation of TCP load balancers
    • Creation of HTTPS passthrough load balancers
    • Configuration of Listeners, Pools, and Health Monitors
    • Layer 7 load balancing in Octavia
    • Construction of the Amphora image
    • Load Balancer Failover mechanisms
    • Networking and Monitoring specifications
    • Troubleshooting Octavia operations
  • Hardware considerations and capacity planning

    • Compute hardware requirements
    • Network architecture design
    • Storage architecture design
    • Flavor sizing strategies
    • Resource overcommitment management
  • Highly Available control plane

    • HA implementation in OpenStack services
    • High Availability database configuration
    • High Availability message queue setup
    • Active-Active versus Active-Passive deployment models
    • Multi-region deployment strategies
  • Cloud partitioning and scheduler filters

    • Rationale and methodology for implementing cloud partitions (host-aggregates)
    • Nova scheduler filter configurations
    • Analysis of filter source code
  • Workload migration strategies
    • Cold and live migration procedures
    • Optimization of live migration parameters
    • Migration exercises and troubleshooting
  • Policies and authorization in OpenStack

    • Oslo.policy framework
    • Creation of new roles using policy files
    • Verification of API access for specific users
  • Advanced OpenStack networking (SDN) (2-3 hours)
    • Network types (local, flat, vlan, vxlan, gre)
    • Detailed network flow and architecture in various Neutron deployments
      • East-West traffic within tenant networks
      • North-South traffic within tenant networks
      • Traffic handling in provider-only deployments
    • Neutron plugin options
      • Linux Bridge
      • Open vSwitch
    • OVS troubleshooting and practical exercises
    • Troubleshooting security groups (iptables, tcpdump)
    • Port-security adjustments and virtual IP management
    • Distributed Virtual Routers
    • LBaaS and the Octavia project
    • VPNaaS implementation
  • OpenStack monitoring and telemetry

    • Ceilometer service integration
    • External monitoring solutions
  • Advanced cloud and hypervisor features

    • CPU pinning and NUMA architecture
    • SR-IOV implementation
  • Cloud-init and image customization

    • Metadata Service utilization
    • Retrieval of information from the metadata service
  • Block storage backends

    • LVM configuration
    • Ceph RBD integration
    • Physical storage appliances
    • Storage network considerations
  • Upgrading OpenStack

    • Upgrade strategies and procedural guidelines
    • Zero-downtime upgrade methodologies
  • Bare-metal provisioning with OpenStack

    • Ironic module functionality
    • Undercloud and overcloud concepts
  • Various exercises on troubleshooting OpenStack clusters

  • Example examination tasks

  • Future development of OpenStack

Requirements

  • Basic Linux administration skills
  • Basic networking knowledge
  • Basic understanding of cloud computing paradigms

Number of participants


Price per participant

Testimonials (1)

Upcoming Courses

Related Categories