Get in Touch

Course Outline

1. Introduction to OpenStack

  • Historical context of cloud computing and OpenStack
  • Core cloud capabilities
  • Cloud service models
    • Private, public, and hybrid architectures
    • On-premise infrastructure; Infrastructure as a Service (IaaS), Platform as a Service (PaaS), Software as a Service (SaaS)
  • OpenStack-based private and public cloud deployment strategies for government environments
  • Open source versus commercial OpenStack distributions suitable for federal agencies
  • Operational deployment models within the OpenStack framework
  • The OpenStack ecosystem
    • Core modules and services
    • Foundational underlying tools
    • System integrations and interoperability
  • The OpenStack software development and release lifecycle
  • Professional certification pathways for OpenStack practitioners serving the public sector
  • Virtual machine lab environment for training purposes

2. Management of OpenStack cloud in practice

  • Familiarization with OpenStack
    • Primary components (Keystone, Glance, Nova, Neutron, Cinder, Heat)
    • Methods for interacting with the OpenStack platform
    • OpenStack daemon processes and API communication protocols
  • Keystone - Identity Management Service
    • Organization of domains, projects, users, and roles
    • Service catalog and endpoint definitions
    • Configuration of CLI clients using openrc and clouds.yaml files
    • Procedures for user and project creation
  • Glance - Image service
    • Cloud-optimized image standards
    • Image attributes (properties, metadata, formats, container types)
    • Operations for uploading and downloading images
  • Neutron - Networking
    • Architectural overview of Neutron
    • ML2 plugins utilized in Neutron configurations
    • Fundamental network resource types within Neutron
    • Network configuration at the Compute Node level
    • Administration of tenant networks and subnets
    • East-West traffic routing
    • Management of external and provider networks
    • North-South traffic routing
    • Administration of Floating IPs
    • Configuration of security groups and associated rules
    • Port security mechanisms to prevent MAC spoofing
    • Implementation of networking quotas
    • Validation and verification of Neutron services
  • Nova - Compute service
    • Architectural structure of Nova
    • Hypervisor interface compatibility
    • Management of keypairs
    • Flavor profile administration
    • Instance configuration parameters
    • Procedures for instance creation
    • Instance lifecycle management
    • Assignment of Floating IPs
    • Accessing interactive consoles and console logs
    • Assignment of security groups to instances
    • Retrieving instance data via the metadata namespace
    • Troubleshooting instance interfaces using tcpdump
    • Performing live migration of virtual machines
  • Cinder - Block Storage
    • Volume configuration parameters
    • Creation of storage volumes
    • Volume administration
    • Attachment of volumes to Nova instances

3. Deep-dive into Neutron and it’s OVN backend

  • Architecture of Open Virtual Networking (OVN)
  • Core components of OVN
  • Comparison of ML2 drivers: OVN versus Open vSwitch (OvS)
  • Data flow analysis in OVN networking
    • OpenStack logical representation within the Neutron database
    • Northbound database operations
    • Southbound database operations
    • Logical datapath processing pipelines
    • Logical flow definitions
    • OpenFlow rule configurations
  • Mapping Neutron networks to OVN logical switches
    • Types and configuration of logical ports
    • Layer 2 switching flow mechanisms
  • Mapping Neutron routers to OVN logical routers
    • NAT implementation types
    • Routing flow definitions
  • Neutron subnets and native DHCP services
    • DHCP flow processing
  • Implementation of security groups within OVN
    • Access Control Lists (ACLs) and Port Groups
    • Security group flow generation
    • Port security enforcement in OVN
  • Overview of OVN Northbound database tables
  • Data propagation pathways in OVN
    • Interactions between Neutron DB, OVN NB/SB databases, and OpenFlow agents
  • Logical flow analysis
    • Definition of microflows
    • Layer 2 packet tracing
    • Layer 3 packet tracing
    • DHCP packet tracing
  • Physical layer flows using OpenFlow
    • End-to-end lifecycle of VM-originated packets in the physical network
  • Physical packet tracing
    • Simulation and tracing of hypothetical packets
    • Real-time tracing of active packets
  • Examination of Open vSwitch database entries and system resources

Requirements

  • A demonstrated proficiency in network infrastructure principles
  • Familiarity with core concepts of the cloud computing model
  • Hands-on experience managing and administering Linux-based operating systems for government entities
 21 Hours

Number of participants


Price per participant

Testimonials (1)

Upcoming Courses

Related Categories