Course Outline
1. Introduction to OpenStack
-
Historical context of cloud computing and OpenStack
-
Core cloud capabilities
-
Cloud deployment models
-
Private, public, and hybrid configurations
-
On-premise environments, Infrastructure as a Service (IaaS), Platform as a Service (PaaS), and Software as a Service (SaaS)
-
-
OpenStack-based public and private cloud implementations
-
Open source and commercial OpenStack distributions for government use
-
OpenStack deployment architectures
-
OpenStack ecosystem overview
-
Core modules
-
Foundational tools and utilities
-
System integrations
-
-
OpenStack lifecycle management
-
OpenStack certification pathways
-
Course lab environment (Virtual Machine) for for government training purposes
2. Hands-on OpenStack Administration Workshop
-
Familiarization with OpenStack architecture
-
Key components: Keystone, Glance, Nova, Neutron, Cinder, Swift, and Heat
-
Interaction protocols for the OpenStack cloud interface
-
OpenStack daemon operations and API communication workflows
-
-
Keystone: Identity and Access Management Service
-
Keystone architectural framework
-
Authentication mechanisms and supported backends
-
Token types and lifecycle management
-
Authorization controls in OpenStack: roles and oslo.policy enforcement
-
Keystone resources: domains, projects, and users
-
Configuration of CLI clients via openrc and clouds.yaml files
-
OpenStack service catalog management
-
Procedures for adding new OpenStack services
-
OpenStack quota enforcement systems
-
-
Glance: Image Management Service
-
Cloud-optimized image standards
-
Image attributes: properties, metadata, formats, and container types
-
Procedures for uploading and downloading images
-
Image sharing protocols
-
Glance image storage backends
-
Protected image configurations
-
Management of image service quotas
-
Verification and validation of Glance services
-
-
Neutron: Networking Infrastructure
-
Architecture overview and core Neutron services
-
The ML2 plugin framework
-
Analysis of compute node networking architecture
-
Networking concepts and tools utilized by Neutron
-
Primary Neutron network resource types
-
Management of tenant networks and subnets
-
Security group and rule administration
-
East-West traffic routing
-
Network namespace management
-
Administration of external/provider networks
-
North-South traffic routing
-
Floating IP address management
-
Role-based access control (RBAC) in Neutron
-
Network quota management
-
SDN and NFV internals: iptables, ip route, and Open vSwitch (OVS)
-
Basic network troubleshooting techniques (namespaces, tcpdump, etc.)
-
Network quota enforcement
-
Verification and validation of Neutron services
-
-
Nova: Compute Service
-
Hypervisor interfaces and integration
-
Keypair management procedures
-
Flavor configuration and management
-
Flavors and CPU topology mapping
-
Instance parameter configurations
-
Virtual machine instance creation procedures
-
Verification of instantiated instances
-
Snapshot creation and management
-
Instance lifecycle management
-
Instance resizing operations
-
Floating IP assignment procedures
-
Interactive console and log access
-
Security group assignment for instances
-
Internals of security groups and port-security features (iptables)
-
L3 router operational internals
-
Compute quota management
-
Retrieving statistics from Nova
-
Placement API and Nova Cells v2 architecture
-
Instance scheduling via Placement API
-
Placement API client command operations
-
Verification and validation of Nova services
-
-
Cinder: Block Storage Service
-
Volume parameter specifications
-
Volume creation procedures
-
Volume management operations
-
Attaching volumes to Nova instances
-
Snapshot management for volumes
-
Backup management for volumes
-
Internal mechanisms of Cinder snapshots and backups
-
Inter-project volume transfer procedures
-
Backup restoration procedures
-
Volume quota management
-
Addition of new storage backends
-
Quality of Service (QoS) policies in Cinder
-
LVM, storage array, and Ceph storage backends
-
Ceph integration within OpenStack
-
Integration of Ceph with Cinder for for government deployments
-
Best practices for Ceph deployment operations
-
Verification and validation of Cinder services
-
-
Barbican: Key Management Service
-
Barbican architectural design
-
Secure storage of passphrases
-
Generation and storage of symmetric encryption keys
-
Mechanisms for volume encryption
-
Configuration of Cinder storage types for volume encryption
-
L limitations regarding volume encryption
-
Storage and management of X.509 certificate bundles
-
-
Swift: Object Storage Service
-
Swift components and operational processes
-
Management of containers and objects
-
Access control list (ACL) management
-
Configuration of object expiration policies
-
The Ring architecture and storage policy definitions
-
Monitoring of available storage capacity
-
Quota configuration procedures
-
Verification and validation of Swift services
-
-
Heat: Orchestration Service
-
Heat Orchestration Template (HOT) structure and components
-
Creation of Heat stacks
-
Verification of Heat stack deployments
-
Updating existing Heat stacks
-
Verification and validation of Heat services
-
-
Fundamental Troubleshooting Techniques
-
Analysis of system log files
-
Implementation of centralized logging solutions
-
Debugging of OpenStack client queries
-
Administration of the OpenStack database
-
Data extraction from service databases
-
OpenStack system backup procedures
-
Status analysis of compute nodes
-
Status analysis of virtual instances
-
Troubleshooting instances at the compute node level (libvirt)
-
Analysis of AMQP broker status (RabbitMQ)
-
RabbitMQ troubleshooting procedures
-
Configuration and management of metadata services
-
General methodologies for diagnosing OpenStack issues
-
Troubleshooting network connectivity problems
-
Troubleshooting network performance issues
-
Instance backup and recovery procedures
-
2. Advanced Topics
-
Octavia: Load Balancing-as-a-Service
-
Architectural overview
-
Object structures and request flow dynamics
-
Octavia flavor configurations
-
Octavia Availability Zone management
-
HTTP load balancer creation procedures
-
TCP load balancer creation procedures
-
HTTPS passthrough load balancer creation procedures
-
Listeners, pools, and health monitor configurations
-
Layer 7 load balancing implementation in Octavia
-
Amphora image construction
-
Load balancer failover mechanisms
-
Networking and monitoring specifications
Troubleshooting Octavia components
-
-
Hardware Considerations and Capacity Planning
-
Compute hardware requirements
-
Network design principles
-
Storage design principles
-
Flavor sizing guidelines
-
Resource overcommitment strategies
-
-
High Availability (HA) Control Plane
-
HA implementation in OpenStack services
-
High availability database configurations
-
High availability message queue configurations
-
Active-Active versus Active-Passive deployment models
-
Multi-region deployment architectures
-
-
Cloud Partitioning and Scheduler Filters
-
Rationale and implementation of cloud partitions (host-aggregates)
-
Nova scheduler filter configurations
-
Analysis of filter source code
-
-
Workload Migration Procedures
-
Cold and live migration techniques
-
Tuning of live migration parameters
-
Migration exercises and troubleshooting
-
-
Policies and Authorization in OpenStack
-
oslo.policy framework implementation
-
Creation of new roles with corresponding policy files
-
Verification of API access for specific users
-
-
Advanced OpenStack Networking (SDN) (2-3 hours)
-
Network types: local, flat, VLAN, VXLAN, and GRE
-
Detailed network flow and architecture in various Neutron deployments
-
East-West traffic patterns in tenant networks
-
North-South traffic patterns in tenant networks
-
Traffic handling in provider-only deployments
-
-
Neutron plugin types
- Linux Bridge
- Open vSwitch
-
OVS troubleshooting and exercises for for government networking environments
-
Troubleshooting security groups using iptables and tcpdump
-
Port-security adjustments and virtual IP (vIP) management
-
Distributed Virtual Routers (DVR)
-
LBaaS + Octavia integration project
-
VPNaaS implementation
-
-
OpenStack Monitoring and Telemetry
-
Ceilometer service overview
-
External monitoring integration
-
-
Advanced Cloud and Hypervisor Features
-
CPU pinning and NUMA architecture
-
SR-IOV implementation
-
-
Cloud-init and Image Customization
-
Metadata Service configuration
-
Data retrieval from the metadata service
-
-
Block Storage Backends
-
LVM configurations
-
Ceph RBD configurations
-
Physical appliance integration
-
Storage network design considerations
-
-
OpenStack Upgrade Procedures
-
Upgrade strategies and procedural steps
-
Zero-downtime upgrade methodologies
-
-
Bare-Metal Provisioning with OpenStack
-
Ironic module functionality
-
Undercloud and overcloud architectural concepts
-
-
Practical exercises on troubleshooting OpenStack clusters for for government operations
-
Example examination tasks and assessments
-
Future developments and roadmap for OpenStack
Requirements
- Fundamental capabilities in Linux system management
- Foundational understanding of networking principles
- Essential familiarity with cloud computing architectures for government operations
Testimonials (1)
communication, knowledge from experience, solve problems,