Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
1. Introduction to OpenStack
- Historical context of cloud computing and OpenStack
- Core cloud capabilities
- Cloud service models
- Private, public, and hybrid architectures
- On-premise infrastructure; Infrastructure as a Service (IaaS), Platform as a Service (PaaS), Software as a Service (SaaS)
- OpenStack-based private and public cloud deployment strategies for government environments
- Open source versus commercial OpenStack distributions suitable for federal agencies
- Operational deployment models within the OpenStack framework
- The OpenStack ecosystem
- Core modules and services
- Foundational underlying tools
- System integrations and interoperability
- The OpenStack software development and release lifecycle
- Professional certification pathways for OpenStack practitioners serving the public sector
- Virtual machine lab environment for training purposes
2. Management of OpenStack cloud in practice
- Familiarization with OpenStack
- Primary components (Keystone, Glance, Nova, Neutron, Cinder, Heat)
- Methods for interacting with the OpenStack platform
- OpenStack daemon processes and API communication protocols
- Keystone - Identity Management Service
- Organization of domains, projects, users, and roles
- Service catalog and endpoint definitions
- Configuration of CLI clients using openrc and clouds.yaml files
- Procedures for user and project creation
- Glance - Image service
- Cloud-optimized image standards
- Image attributes (properties, metadata, formats, container types)
- Operations for uploading and downloading images
- Neutron - Networking
- Architectural overview of Neutron
- ML2 plugins utilized in Neutron configurations
- Fundamental network resource types within Neutron
- Network configuration at the Compute Node level
- Administration of tenant networks and subnets
- East-West traffic routing
- Management of external and provider networks
- North-South traffic routing
- Administration of Floating IPs
- Configuration of security groups and associated rules
- Port security mechanisms to prevent MAC spoofing
- Implementation of networking quotas
- Validation and verification of Neutron services
- Nova - Compute service
- Architectural structure of Nova
- Hypervisor interface compatibility
- Management of keypairs
- Flavor profile administration
- Instance configuration parameters
- Procedures for instance creation
- Instance lifecycle management
- Assignment of Floating IPs
- Accessing interactive consoles and console logs
- Assignment of security groups to instances
- Retrieving instance data via the metadata namespace
- Troubleshooting instance interfaces using tcpdump
- Performing live migration of virtual machines
- Cinder - Block Storage
- Volume configuration parameters
- Creation of storage volumes
- Volume administration
- Attachment of volumes to Nova instances
3. Deep-dive into Neutron and it’s OVN backend
- Architecture of Open Virtual Networking (OVN)
- Core components of OVN
- Comparison of ML2 drivers: OVN versus Open vSwitch (OvS)
- Data flow analysis in OVN networking
- OpenStack logical representation within the Neutron database
- Northbound database operations
- Southbound database operations
- Logical datapath processing pipelines
- Logical flow definitions
- OpenFlow rule configurations
- Mapping Neutron networks to OVN logical switches
- Types and configuration of logical ports
- Layer 2 switching flow mechanisms
- Mapping Neutron routers to OVN logical routers
- NAT implementation types
- Routing flow definitions
- Neutron subnets and native DHCP services
- DHCP flow processing
- Implementation of security groups within OVN
- Access Control Lists (ACLs) and Port Groups
- Security group flow generation
- Port security enforcement in OVN
- Overview of OVN Northbound database tables
- Data propagation pathways in OVN
- Interactions between Neutron DB, OVN NB/SB databases, and OpenFlow agents
- Logical flow analysis
- Definition of microflows
- Layer 2 packet tracing
- Layer 3 packet tracing
- DHCP packet tracing
- Physical layer flows using OpenFlow
- End-to-end lifecycle of VM-originated packets in the physical network
- Physical packet tracing
- Simulation and tracing of hypothetical packets
- Real-time tracing of active packets
- Examination of Open vSwitch database entries and system resources
Requirements
- A demonstrated proficiency in network infrastructure principles
- Familiarity with core concepts of the cloud computing model
- Hands-on experience managing and administering Linux-based operating systems for government entities
21 Hours
Testimonials (1)
communication, knowledge from experience, solve problems,