CloudStack for Java User Group


Published on

Enhanced introduction to CloudStack for the Geneva Java User Group. Includes Apache processes, DevCloud use cases, opportunities for Java developers and 4.0 release testing procedure.

Published in: Technology
  • Be the first to comment

No Downloads
Total views
On SlideShare
From Embeds
Number of Embeds
Embeds 0
No embeds

No notes for slide
  • As vms get created and destroyed, CloudStack has to ensure the configuration of the host-based firewalls (iptables) is consistent with the security group rules programmed by the cloud user
  • CloudStack for Java User Group

    1. 1. Apache CloudStack Sebastien Goasguen GenevaJUG, Oct 30th Geneve, Suisse
    2. 2. Info• Apache incubator project••• #cloudstack on• @cloudstack on Twitter•• contributions and feedback, Join the fun !
    3. 3. A bit of History• Original company VMOPs (2008) – Founded by Sheng Liang former lead dev on JVM• Open source (GPLv3) as CloudStack• Acquired by Citrix (July 2011)• Relicensed under ASL v2 April 3, 2012• Accepted as Apache Incubating Project April 16, 2012• First Apache (ACS 4.0) release expected Sept 26th
    4. 4. Apache Software Foundation
    5. 5. Apache Process• 100% community driven• New ideas, decisions only taken on mailing lists. Votes taken by community• Project led by Project Management Committee (PMC): – –• Non committers get invited as committers: –
    6. 6. Apache Processes
    7. 7. First Release almost out• Apache CloudStack 4.0• Check out the testing procedure: – -40-test-procedure.html• Or watch my amazing screencast: –
    8. 8. Contributions from outside Citrix Examples: Sungard: Announced that 6 developers were joining the Apache project Schuberg Philis: Big contribution in building/packaging and Nicira support Go Daddy: Early proto of Maven building Caringo: Support for own object store
    9. 9. CloudStack and Citrix • CloudPlatform powered by CloudStack • Feature parity, moving to CloudStack being upstream • Enterprise support • Enterprise training • Main contributor to Apache CloudStack, up to now
    10. 10. Why make it Open Source ?• Large partner ecosystem needed a way to integrate quickly• Users drive adoption in early markets – providing shortest path to adoption is open source• Open source communities are driving integrations and standards• Faster time to market, short feedback loop from user community• Enterprise ready and wanted an open source solution for customers to develop on.
    11. 11. What Does it do ?• Open source Infrastructure as a Service (IaaS) platform.• Data Center orchestrator• Hypervisor agnostic (with addition of bare metal provisioning)• Support complex enterprise networking (e.g Firewall, load balancer, VPN, VPC…)• Multi-tenant
    12. 12. Other OSS IaaS Players
    13. 13. A Very Flexible IaaS PlatformCompute HypervisorStorage Block & Object Primary Storage Secondary StorageNetwork Network & Network Services
    14. 14. Architecture / Language• Java application• Tomcat6, Axis2, Maven build + ant – Ant going away in 4.1• Moving towards a plugin architecture – Cocoon ? Spring ?• Collaboration Conference, Nov 30th -Dec 2nd –
    15. 15. Build and Run in 4.1• git clone https://git-wip- or-cloudstack.git• mvn clean• mvn install• mvn –P developer –pl developer –Ddeploydb• mvn –pl :cloud-client-ui jetty:run
    16. 16. Cloud Interactions OVM Cluster Primary Storage Ap i Xen vcenter vcenter Monitoring Primary CS API Clu I ste AP vSphere Cluster Storage r M n ter End End gm vCe t User UI User UI Primary XS Cluster Storage Admin Admin Clustered Clustered CloudStack XAPI UI UI CloudStack Domain Domain CS Admin & CloudStack CloudStack CloudStack CloudStack End-user API Primary Admin Admin UI UI Management Management JSON KVM Cluster Storage Server Server NetConf Juniper SRXCloud user Nitro API{API client (Fog/etc)} VNC JSON ec2 API JSON Netscaler Cloud user Console Console Console {ec2 API client } ProxyConsole VM Proxy VM Proxy VM Proxy VM NFS MySQL MySQL Server Sec. Storage Sec. Storage NFS NFS {Proxied} SSH Sec. VM Storage Sec. Storage VM Ajax Ajax HTTPS VM VM Console Console Router VM Router VM HTTP (Template Download) Router VM Router VM HTTP (Template Copy) Router VM Router VM Cloud user HTTP (Swift)
    17. 17. Terminology Zone: Availability zone, aka Regions. Could be worldwide. Different data centers Pods: Racks or aisles in a data center Clusters: Group of machines with a common type of Hypervisor Host: A Single server Primary Storage: Shared storage across a cluster Secondary Storage: Shared storage in a single Zone
    18. 18. Storage• Primary Storage: – Anything that can be mounted on the node of a cluster. – Cluster LVM…iSCSI… – Holds disk images of running VMs – Support for CEPH with KVM hypervisors• Secondary Storage: – Available across the zone – Holds snapshots and templates (image repo) – Can use Openstack swift or any object store (Gluster FS…) – New support for Caringo• Can use NFS for both to start• Storage Abstraction refactoring underway
    19. 19. Networking• Extremely flexible to: – Provide isolation with VLANs – Provide isolation at L3 with shared L2 (scalability) – Support hardware devices that exposes API – Deployed on existing networking infrastructure – Support new networking paradigm (SDN) • Support for Nicira Virtual P • Extensive use of Open VSwitch
    20. 20. Physical Network Operations Users Admin and Cloud API CloudStack Mgmt Server Cluster Router MySQL Load Balancer Availability Zone L3 Core Switch Access LayerSwitches … Secondary Servers Storage … … … … Pod 1 Pod 2 Pod 3 Pod NSlide from Chiradeep Vittal,
    21. 21. Layer-2 Guest Virtual Network CS Virtual Router provides Network Services External Devices provide Network Services Network Hardware exposing API can be controlled Guest Virtual Network Guest Virtual Network VLAN 100 VLAN 100Public PublicNetwork/Inter Network/Internet Guest net Guest Guest Guest Private IP VM 11 Public IP VM 11 VM VM Gateway Juniper JuniperPublic IP 1 SRX SRX address65.37.141.11 CS Firewall Firewall CS Guest Guest Guest Guest Virtual Virtual VM 22 VM VM 22 VM Router Router Public IP Private IP DHCP, DNS 65.37.141. NetScaler NetScaler NAT Guest 112 Load Guest Guest Load Guest Load Balancing VM 33 Blancer VM 33 VM Blancer VM VPN Guest Guest Guest Guest VM 44 VM VM 44 VM CS CS DHCP, Virtual Virtual Router Router DNSSlide from Chiradeep Vittal,
    22. 22. L3 isolation• To go beyond the limitation of VLANs (4096 vlans per switch)• Move to L3 isolation – Shared L2 – Manage one firewall per VM• Potential use of GRE tunnels to create single L2 overlay• GRE in tech preview for site to site VPN.
    23. 23. L3 isolation with distributed firewalls Tenant Public IP address 1 VM 1Internet Pod 1 L2 Tenant Switch 2 VM 1 Tenant 1 VM 2 L3 Core Pod 2 L2 Switch … Tenant 2 VM 2 Load Pod 3 L2 Balancer Switch Tenant 2 VM 3 … Tenant 1 VM 3 Tenant 1 VM 4 Slide from Chiradeep Vittal
    24. 24. A customizable GUI AJAX + API
    25. 25. A very extensive API
    26. 26. API• Not really REST• A set of methods available over http(s)• Unauthenticated on integration port• Authenticated on 8080 using Access and Secret Key• Python/Ruby clients available• Internal Marvin client• CLI under development• Other clouds client support the API
    27. 27. Making API callsCan be authenticated or not.HTTP call.User Keys can be generated via the GUIBase url: http://<manager-host>:8080/client/api?….def make_request(requests, secretKey): request = zip(requests.keys(), requests.values()) request.sort(key=lambda x: str.lower(x[0])) requestUrl = "&".join(["=".join([r[0], urllib.quote_plus(str(r[1]))]) for r in request]) hashStr = "&".join(["=".join([str.lower(r[0]),str.lower(urllib.quote_plus(str(r[1]))).replace("+", "%20")]) for r in request]) sig = urllib.quote_plus(base64.encodestring(, hashStr,hashlib.sha1).digest()).strip()) print "Signature: %s"%sig requestUrl += "&signature=%s"%sig print requestUrlif __name__ == __main__: requests = { "apiKey": "BRZ5j4E8O4di2MZWnQsYBLThCrTGO-LGeZaMjsnvelkHuY5P8FdTnluNZTDQhCUy-wqeJzk8EAc_NbcZxTF_FA", "response" : "json", "command" : "listZones" } secretKey = "bFlx2llt3OmM4AiHzfwV1ZbuJ5tsv6hAx6IeM32CkM-obCA77BRwBr3_yQ0bO1-kdZyfD3-lY6khsXCx18n3Mw" make_request(requests, secretKey)
    28. 28. EC2 /S3 compatibility• Significant development work happening to make Cloudstack highly compatible with EC2 /S3 API.• +support+in+CloudStack• dstack-ec2-configuration• Euca tools, boto etc…should work with cloudstack.
    29. 29. Enabling EC2 and S3• Via the GUI• Via API call on integration API port 8096 http://localhost:8096/client/api? command=updateConfiguration&name=enable.s3.api&value=true http://localhost:8096/client/api? command=updateConfiguration&name=enable.ec2.api&value=true
    30. 30. Highly Scalable• See: – 12819428 – From Alex Huang. 10k “resources” managed per Mgt server. 30k resources with 30k VM in simulation.• Management server can be setup in a multi- node configuration with a load-balancer and replicated MySQL.
    31. 31. SandBox: DevCloud• A Virtual box appliance packaged to provide a working CloudStack environment.• Aimed at developers but has other use cases: – Xen PV hosts gives nested virtualization – Local EC2/S3 Cloud on your laptop – Networking experiments ?• Cloud
    32. 32. DevCloud: self-containedCloudStack runs in the appliance
    33. 33. Testing “4.0” code in DevCloud• Deploy new CloudStack code in self-contained DevCloud:• mvn –P deps• ant rdeploy• ant rdeploydb – Wipes database of mgt server, you will need to reconfigure the “data center”• ant rdebug
    34. 34. DevCloud: as HostRun CloudStack on local machineUse DevCloud to setup hosts
    35. 35. DevCloud to test 4.1 branch• mvn -P developer clean• mvn -P developer install• mvn -P developer -pl developer –Ddeploydb• mvn -P developer -pl tools/devcloud – Ddeploydb• mvn -pl :cloud-client-ui jetty:runConfigure infrastructure:• mvn -P developer,deploysvr -pl tools/devcloud -Ddeploysvr
    36. 36. Testing Framework –for the PyUG  [environment]• Marvin is a Python dns= mshost= based framework to run tests against a [cloudstack] private.gateway= CloudStack install private.pod.startip= private.pod.endip=• Could be used as a private.netmask= public.gateway= simulator of a public.vlan.startip= datacenter public.vlan.endip= public.netmask=• Used to configure an hypervisor=XenServer host= infrastructure on a mgt host.password=password #storage pools server primary.pool=nfs:// rt/home/automation/sadhu/primary secondary.pool=nfs:// port/home/automation/sadhu/secondary
    37. 37. Opportunities for Java developers• Improve Maven build• Move to Spring framework• True REST API• Plugin framework with better componentization – Cocoon ?• Junit tests• Support for Hadoop as storage backend• …
    38. 38. Info• Apache incubator project•• #cloudstack on• @cloudstack on Twitter•• contributions and feedback, Join the fun !