Get in Touch
 Duration 21 hours

Course Outline

1. Introduction to OpenStack

  • Evolution of cloud technologies and the origin of OpenStack
  • Defining characteristics of cloud infrastructure
  • Cloud deployment models
    • Private, public, and hybrid cloud environments
    • On-premise, IaaS, PaaS, and SaaS architectures
  • Implementing public and private cloud solutions utilizing OpenStack
  • Distribution of OpenStack across open-source and commercial platforms
  • Standard deployment architectures for OpenStack
  • The OpenStack ecosystem
    • Core functional modules
    • Foundational tools and technologies
    • Third-party integrations and interfaces
  • The operational lifecycle of an OpenStack platform
  • Certification standards and proficiency verification
  • Provisioned laboratory environment (VM) for instructional purposes

2. Practical Management of OpenStack Clouds

  • Fundamentals of OpenStack Architecture
    • Key components: Keystone, Glance, Nova, Neutron, Cinder, and Heat
    • Methods of interaction with the cloud infrastructure
    • Service daemons and API communication workflows
  • Keystone - Identity and Access Management Service
    • Configuration of domains, projects, user accounts, and role assignments
    • Service catalog management and endpoint definitions
    • Configuration of CLI clients via openrc and clouds.yaml files
    • Provisioning of user accounts and project resources
  • Glance - Image Management Service
    • Adaptation of virtual machine images for cloud deployment
    • Image attributes: properties, metadata, formats, and containers
    • Procedures for image ingestion and retrieval
  • Neutron - Network Virtualization and Management
    • Architectural overview of the Neutron service
    • ML2 plugin implementation for Neutron
    • Classification of basic Neutron network resources
    • Networking configuration at the Compute Node level
    • Administration of tenant networks and subnetting
    • Implementation of East-West routing logic
    • Management of external and provider network connections
    • Configuration of North-South routing paths
    • Provisioning and management of floating IP addresses
    • Regulation of security groups and rule sets
    • Anti-spoofing measures via port security mechanisms
    • Enforcement of network resource quotas
    • Validation and verification of Neutron services
  • Nova - Compute Orchestration Service
    • Internal architecture of Nova
    • Interface protocols for hypervisor management
    • Management of SSH key pairs
    • Definition and administration of instance flavors
    • Configuration of instance parameters
    • Procedures for instance creation
    • Ongoing instance lifecycle management
    • Assignment of floating IP addresses to instances
    • Access to interactive consoles and console logs
    • Application of security groups to instances
    • Retrieval of instance metadata via namespace access
    • Network traffic analysis using tcpdump on instance interfaces
    • Execution of live-migration for virtual machines
  • Cinder - Block Storage Provisioning
    • Configuration of storage volume parameters
    • Procedures for volume creation
    • Administration of storage volumes
    • Attachment of volumes to Nova instances

3. Advanced Analysis of Neutron and the OVN Backend

  • Architectural framework of OVN
  • Core components of the OVN stack
  • Comparative analysis: ML2 with OVN versus the OvS driver
  • Top-down methodology for OVN networking
    • OpenStack logic implemented in the Neutron database
    • Northbound database structure
    • Southbound database structure
    • Logical datapath pipelines
    • Definition of logical flows
    • Translation into OpenFlow flows
  • Mapping Neutron networks to OVN logical switches
    • Classification and types of logical ports
    • Configuration of switching flows
  • Mapping Neutron routers to OVN logical routers
    • Types of Network Address Translation (NAT)
    • Configuration of routing flows
  • Integration of Neutron subnets with native DHCP services
    • Analysis of DHCP flow behavior
  • Implementation of security groups within OVN
    • Use of Access Control Lists (ACLs) and Port Groups
    • Configuration of security group specific flows
    • Enforcement of port security in the OVN context
  • Summary of OVN Northbound table configurations
  • Data flow pathways within OVN
    • Sequence: Neutron DB, OVN NB/SB Databases, and OpenFlow at OvS
  • Tracing of logical network flows
    • Definition and use of microflows
    • Level 2 (L2) packet tracing
    • Level 3 (L3) packet tracing
    • Tracing of DHCP transactions
  • Physical flow analysis using OpenFlow
    • Lifecycle of VM-originated packets in the physical network
  • Physical network packet tracing
    • Simulated tracing of hypothetical packets
    • Analysis of real-world packet behavior
  • Inspection of Open vSwitch database contents and network resources

Requirements

  • Proficiency in fundamental networking principles
  • Foundational understanding of cloud computing paradigms
  • Practical experience in the administration of Linux operating systems

Number of participants


Price per participant

Testimonials (1)

Upcoming Courses

Related Categories