Course Outline
1. Introduction to OpenStack
-
Historical development of cloud computing and OpenStack
-
Defining characteristics of cloud infrastructure
-
Deployment models for cloud services
-
Private, public, and hybrid architectures
-
On-premise deployments, IaaS, PaaS, and SaaS
-
-
Implementing public and private cloud environments using OpenStack
-
Comparison of open source versus commercial OpenStack distributions
-
Strategic approaches to OpenStack deployment
-
The OpenStack ecosystem structure
-
Core modules
-
Foundational tooling
-
External integrations
-
-
The operational lifecycle of OpenStack
-
OpenStack certification requirements
-
Virtual machine (VM) laboratory setup for this course
2. Practical OpenStack administration workshop
-
Familiarization with the OpenStack platform
-
Core OpenStack components (Keystone, Glance, Nova, Neutron, Cinder, Swift, Heat)
-
Interaction mechanisms with the OpenStack cloud environment
-
OpenStack daemons and API communication workflows
-
-
Keystone - Identity management service
-
Keystone architectural design
-
Authentication protocols and supported backends
-
Token classifications and management strategies
-
Authorization frameworks in OpenStack, including roles and oslo.policy
-
Keystone resource structures: domains, projects, and users
-
Configuration of CLI clients via openrc and clouds.yaml
-
The OpenStack service catalog
-
Registering new OpenStack services
-
The OpenStack quota management system
-
-
Glance - Image service
-
Cloud-optimized image standards
-
Image attributes (properties, metadata, format, container)
-
Procedures for uploading and retrieving images
-
Image sharing protocols
-
Glance image storage repositories
-
Management of protected images
-
Establishing quotas for the image service
-
Validation of Glance service functionality
-
-
Neutron - Networking
-
Architectural overview and Neutron services
-
The ML2 plugin architecture
-
Networking analysis on compute nodes
-
Concepts and tools utilized by Neutron
-
Foundational Neutron network resource types
-
Administration of tenant networks and subnets
-
Management of security groups and associated rules
-
East-West routing configurations
-
Network namespaces
-
Management of external and provider networks
-
North-South routing implementations
-
Management of Floating IPs
-
Role-based access control within Neutron
-
Management of network resource quotas
-
Internals of SDN and NFV (iptables, ip route, OVS)
-
Foundational network diagnostics (namespaces, tcpdump, etc.)
-
Networking quota enforcement
-
Validation of Neutron service operations
-
-
Nova - Compute service
-
Hypervisor interfaces
-
Key pair administration
-
Flavor management processes
-
Flavors and CPU topology alignment
-
Instance configuration parameters
-
Instance creation procedures
-
Verification of instantiated instances
-
Snapshot creation and management
-
General instance administration
-
Provisioning and allocation of floating IPs
-
Interactive console access and console logs
-
Assignment of security groups
-
Internal mechanisms of security groups and port-security features (iptables)
-
Internal structure of L3 routers
-
Compute resource quotas
-
Retrieval of statistical data from Nova
-
Placement API and Nova Cells v2 architecture
-
Placement API and instance scheduling algorithms
-
Placement API client command sets
-
Validation of Nova service integrity
-
-
Cinder - Block Storage
-
Volume configuration parameters
-
Volume creation procedures
-
Volume administration
-
Attaching volumes to Nova instances
-
Management of volume snapshots
-
Management of volume backups
-
Internal mechanics of Cinder snapshots and backups
-
Transfer of volumes across projects
-
Backup restoration procedures
-
Administration of volume quotas
-
Integration of new storage backends
-
Quality of Service (QoS) in Cinder
-
LVM, storage arrays, and Ceph storage backends
-
Ceph integration within OpenStack
-
Integration of Ceph and Cinder components
-
Best practices for Ceph deployment
-
Validation of Cinder service performance
-
-
Barbican - Key Management Service
-
Barbican architectural framework
-
Storage of passphrases
-
Generation and storage of symmetric encryption keys
-
Volume encryption mechanisms
-
Configuration of Cinder storage types for volume encryption
-
Operational limitations of volume encryption
-
Storage of X.509 certificate bundles
-
-
Swift - Object Storage
-
Swift components and process workflows
-
Administration of containers and objects
-
Management of access control lists
-
Configuration of object expiration policies
-
The Ring architecture and storage policies
-
Monitoring of available storage capacity
-
Establishment of storage quotas
-
Validation of Swift service integrity
-
-
Heat - Orchestration
-
Heat Orchestration Template structure and components
-
Creation of Heat stacks
-
Verification of Heat stack integrity
-
Updating existing Heat stacks
-
Validation of Heat service operations
-
-
Foundational troubleshooting techniques
-
Log file analysis
-
Centralized logging implementation
-
Debugging of OpenStack client queries
-
Management of OpenStack databases
-
Extraction of data from service databases
-
OpenStack backup procedures
-
Analysis of compute node status
-
Analysis of instance status
-
Troubleshooting instances at the compute node level (libvirt)
-
Analysis of AMQP broker (RabbitMQ) status
-
RabbitMQ specific troubleshooting
-
Metadata services inspection
-
General diagnostic methodologies for OpenStack issues
-
Diagnosis of network connectivity problems
-
Analysis of network performance issues
-
Instance backup and recovery operations
-
2. Advanced Topics
-
Octavia - Load Balancing-as-a-service
-
Architectural design
-
Object structures and request processing flow
-
Octavia flavor configurations
-
Octavia Availability Zones
-
Creation of HTTP load balancers
-
Creation of TCP load balancers
-
Creation of HTTPS passthrough load balancers
-
Configuration of Listeners, Pools, and Health Monitors
-
Layer 7 load balancing in Octavia
-
Construction of the Amphora image
-
Load Balancer Failover mechanisms
-
Networking and Monitoring specifications
-
Troubleshooting Octavia operations
-
-
Hardware considerations and capacity planning
-
Compute hardware requirements
-
Network architecture design
-
Storage architecture design
-
Flavor sizing strategies
-
Resource overcommitment management
-
-
Highly Available control plane
-
HA implementation in OpenStack services
-
High Availability database configuration
-
High Availability message queue setup
-
Active-Active versus Active-Passive deployment models
-
Multi-region deployment strategies
-
-
Cloud partitioning and scheduler filters
-
Rationale and methodology for implementing cloud partitions (host-aggregates)
-
Nova scheduler filter configurations
-
Analysis of filter source code
-
-
Workload migration strategies
-
Cold and live migration procedures
-
Optimization of live migration parameters
-
Migration exercises and troubleshooting
-
-
Policies and authorization in OpenStack
-
Oslo.policy framework
-
Creation of new roles using policy files
-
Verification of API access for specific users
-
-
Advanced OpenStack networking (SDN) (2-3 hours)
-
Network types (local, flat, vlan, vxlan, gre)
-
Detailed network flow and architecture in various Neutron deployments
-
East-West traffic within tenant networks
-
North-South traffic within tenant networks
-
Traffic handling in provider-only deployments
-
-
Neutron plugin options
- Linux Bridge
- Open vSwitch
-
OVS troubleshooting and practical exercises
-
Troubleshooting security groups (iptables, tcpdump)
-
Port-security adjustments and virtual IP management
-
Distributed Virtual Routers
-
LBaaS and the Octavia project
-
VPNaaS implementation
-
-
OpenStack monitoring and telemetry
-
Ceilometer service integration
-
External monitoring solutions
-
-
Advanced cloud and hypervisor features
-
CPU pinning and NUMA architecture
-
SR-IOV implementation
-
-
Cloud-init and image customization
-
Metadata Service utilization
-
Retrieval of information from the metadata service
-
-
Block storage backends
-
LVM configuration
-
Ceph RBD integration
-
Physical storage appliances
-
Storage network considerations
-
-
Upgrading OpenStack
-
Upgrade strategies and procedural guidelines
-
Zero-downtime upgrade methodologies
-
-
Bare-metal provisioning with OpenStack
-
Ironic module functionality
-
Undercloud and overcloud concepts
-
-
Various exercises on troubleshooting OpenStack clusters
-
Example examination tasks
-
Future development of OpenStack
Requirements
- Basic Linux administration skills
- Basic networking knowledge
- Basic understanding of cloud computing paradigms
Testimonials (1)
communication, knowledge from experience, solve problems,