The document discusses OpenStack deployment and operations solutions. It summarizes an open source project that aims to make OpenStack deployment easier, more reliable and flexible through the use of Ansible for automation and containers. Key points are that the project is based on years of experience operating OpenStack clouds, is opinionated based on best practices, and focuses on simplifying deployment and operations tasks through automation.

1. 1© 2011 Cisco and/or its affiliates. All rights reserved.
Daneyon Hansen
Software Engineer
March 18, 2015

2. © 2011 Cisco and/or its affiliates. All rights reserved. 2
• Because deploying OpenStack for production is still:
1. Difficult
2. Error prone
3. Unreliable
4. Inflexible
5. One of the biggest barriers to adoption

3. © 2011 Cisco and/or its affiliates. All rights reserved. 3
• Proven
Based on RackSpace’s experience in building and operating
OpenStack clouds, public and private
• Mindset of an operator
• I personally have felt the pain
• Limited mature solutions
• A new approach to solving a problem
• Recent generalization of project

4. © 2011 Cisco and/or its affiliates. All rights reserved. 4
• An open source project
• Great community support
• Deployment automation, config management &
orchestration using Ansible
• Containerized services
• Scalable logging
• Deployment and Ops
• Reliable deployments

5. © 2011 Cisco and/or its affiliates. All rights reserved. 5
• Deployment flexibility
• Production-style networking design
• Solid documentation
• Solid release management
• HA
• Well tested- CICD, Gating, etc..
• 6 cores from RAX

6. © 2011 Cisco and/or its affiliates. All rights reserved. 6
• Nearly every config has been tweaked
• No patched code
• Memcached and Apache2 for Keystone
• Https/Memcached/Galera for Horizon
• Kernel params (Neutron block writes, file desc, mem
size)
• Only where it makes sense

7. © 2011 Cisco and/or its affiliates. All rights reserved. 7
• Neutron L3 Agent HA
• Dynamic inventory management
• Random password generator
• Heat template

8. © 2011 Cisco and/or its affiliates. All rights reserved. 8
• Simple
Easy to learn
Yaml-based
• Scales up/down
• Agentless
Nothing to install on remote
hosts
Push-based
• Secure transport using
SSH
• Idempotent
• Thin abstraction layer

9. © 2011 Cisco and/or its affiliates. All rights reserved. 9
• Automated
• Uses familiar tools and techniques
• NIC Bonding
• AT&T tool for Neutron L3 Agent HA
• Includes ongoing ops
• HAProxy is a SPOF and not containerized
• Well tested

10. © 2011 Cisco and/or its affiliates. All rights reserved. 10
• GPLv3 license
• Ansible creator stepped on toes

11. © 2011 Cisco and/or its affiliates. All rights reserved. 11
• LXC
• Easy to use:
lxc-ls, lxc-attach
• Simple functionality:
provide isolation on a shared OS
• Supports multiple processes
within a container
• Container Affinity
• Common base image
• Ansible drives container
config
• Supports LVM backend
• Not all services are
containerized
• Auto start/restart of
containers

12. © 2011 Cisco and/or its affiliates. All rights reserved. 13

13. © 2011 Cisco and/or its affiliates. All rights reserved. 14
• Networks for host management, container management,
storage, Neutron overlay and floating-ip’s
• Not all are mandatory
• NIC bonding support
• Physical network <> Linux Bridge <> Container ethX
• Network namespaces for container networking isolation
• Host networking setup is manual
BP for automating setup using the debops.ifupdown galaxy role

14. © 2011 Cisco and/or its affiliates. All rights reserved. 15
• Uses ML2 and Linux Bridge
• VXLAN tenant networking
• L3/DHCP/Meta/Metering/LB agents run in a shared container
• Must share namespace
• DVR in Juno branch, but for experimentation only.
• No plans for support in Kilo due to OVS requirement. Happy with
HA tool solution.

15. © 2011 Cisco and/or its affiliates. All rights reserved. 17
• Cinder for Block
LVM and NetApp backend support
Multi-backend support
• Swift or RAX Cloud Files for Object
• NFS with NetApp Cinder backend
• Support for multiple AZ’s
• No Ceph support (roadmap). Ceph has an Ansible playbook
• Support for network segmentation of storage traffic

16. © 2011 Cisco and/or its affiliates. All rights reserved. 18
• Leverages openstack-infra for CICD
• Gating
Lint check
Commit checks- AIO for integration testing
Includes Tempest tests
External CI on real multi-node
• Spec testing within Ansible playbooks
Can be improved

17. © 2011 Cisco and/or its affiliates. All rights reserved. 19

18. © 2011 Cisco and/or its affiliates. All rights reserved. 20
http://youtu.be/P8bAXNUkl1I

19. © 2011 Cisco and/or its affiliates. All rights reserved. 21

20. Thank you.