Addressing Issues of Risk, and Governance in OpenStack without sacrificing Agility Audience: Intermediate Topic: Public & Hybrid Clouds Abstract: OpenStack has rapidly moved beyond the “science project” label that many of its detractors’ use, but for many stakeholders there are still many uncertainties around governance, compliance, data security and data retention. These issues are the biggest inhibitors to adoption of any cloud technology and left unanswered will slow down the adoption of OpenStack, particularly within government and highly regulated industries such as healthcare. In this presentation NetApp outlines a hybrid approach that leverages the best of open-source and next generation technologies within an OpenStack deployment, as well as a way of unifying data management across OpenStack, HyperScale public cloud and traditional Enterprise architecture that addresses these questions while providing a solid platform for rapid innovation. Speaker Bio: John Martin, NetApp John Martin is NetApp’s Director of Strategy and Technology, working as part of the Office of the CTO. Based in Sydney, John is responsible for developing and advocating NetApp’s flash portfolio across the APAC region. John is one of the driving forces behind NetApp’s continued expansion into flash and works closely with field sales, the channel and alliance technology partners to provide innovative solutions that solve customer business challenges. While John is NetApp’s flash champion, he continues to provide technology insights and market intelligence to trends that impacts both NetApp and its customers. Prior to his current role, John was NetApp’s ANZ’s principal technologist for over six years and has over 20 years experience working in the IT industry. John joined NetApp in 2006 as a systems engineer. Prior to this, he was a principal of GRID IT, where he built relationships with a variety of major storage vendors while also helping to start two storage-related businesses. At GRID IT, John was involved in senior pre-sales, consulting and training for Legato, Veritas, and StorageTek. In his spare time, John enjoys singing, writing and cooking. He also spends time researching modernist and post modernist philosophy, ancient history, social justice and global development. OpenStack Australia Day Government - Canberra 2016 https://events.aptira.com/openstack-australia-day-canberra-2016/

1. Addressing issues of Risk, and
Governance in Openstack without
sacrificing agility.
​OpenStack Australia
​John Martin
​Director of Strategy and Technology
​November 2016
© 2016 NetApp, Inc. All rights reserved. --- NETAPP CONFIDENTIAL ---1

2. 50% of the Fortune 100 Deploy OpenStack
So why do enterprises choose OpenStack?
© 2016 NetApp, Inc. All rights reserved. --- NETAPP CONFIDENTIAL ---2
Chart is sourced from the OpenStack User Survey – April 2016

3. The Top 3 Issues - Effective use of Data and IT Transformation
© 2015 NetApp, Inc. All rights reserved. NetApp Confidential – Limited Use3
Timeliness of
access [CxO]
Cost-effectiveness
[CIO]
Securing our data
[CIO]

4. 2016+2015 - 20162014 - 2015Prior-to-2014
NetApp-IT An evolutionary approach to OpenStack
4 © 2016 NetApp, Inc. All rights reserved. NetApp Confidential – Limited Use Only
Private and
Public Clouds
Hybrid Cloud
Virtualization and
Consolidation
Key
Initiatives
Data Fabric
Deployment Self-Service
w/ Unified
Service
Catalogue
Hybrid IaaS
w/ CDF
PaaS
Cloud Aware
Application
Architectures
DevOps
with CI/CD
ITaaS
Private
Cloud
Deployment
Blueprints
and Service
Automation
HW Standards
DC Consolidation
Virtualization
Build Standards
Tools Strategy
Component
Automation
Public Cloud
Consumption
Shadow-IT
IaaS
Strategy
Cloud
Adoption
and DC
Strategy
IT Transformation
It’s a journey

5. NetApp Private Cloud OpenStack Architecture
5 © 2016 NetApp, Inc. All rights reserved. NetApp Confidential – Limited Use Only
Integration, Modules and Roadmap
q Roadmap Modules
q Manila
q Neutron
q Heat
Cloud Management Platform
(Templates, Blueprint, Chargeback, Entitlements etc.)
Self-Service Portal
Chef, Ansible, cloud_init, CMDB etc.
§ FlexPod®: Cisco ACI,
UCS, ONTAP, RHEL
OSP
§ Software Defined
Stack
§ Secure multi-tenancy
§ Modular and scalable
§ Availability zones with
Geo-Diversity
§ VMware & KVM

6. § Full control of corporate data
§ Data privacy and compliancy
§ No-vendor lock-ins
§ Rich enterprise features
§ Standardization across clouds
§ Complete data management
§ Lower TCO
DataFabric - Solving Storage and Data Management Challenges
6 © 2016 NetApp, Inc. All rights reserved. NetApp Confidential – Limited Use Only
OpenStack as Part of a Hybrid Cloud
On-Prem Storage
US - East NPC
<2 ms
Latency
AWS - EAST Azure - EAST
Multi-Site
AltaVault®
Private WAN
NetApp
DataFabric
Archiving
NPC - EAST
NetApp Private Storage (NPS)
US - East Colo Provider
SnapMirror® / SnapVault®
~ 30X
compression
~ 75%
gain

7. TIME YOUR BUSINESS
DESIGN
Initial size (GB or IOPS)
INSTALLATION OPERATING
GB and IOPS required
Account Creation
SCALING
GB and IOPS needed
UPGRADEDESIGN
Initial size (GB or IOPS)
Anticipated growth
over lifecycle of array
IOPS required lifetime of
product
Node size selection
RAID type, RAID grouping
Drive type (FC, NL, Flash)
Drive quantities and ratio
Cache requirements
Drive Sparing
Aggregate/CPG
MetaLUN and Bin file layout
INSTALLATION
Bin File/RAID Layout
Aggregate/MetaLUN creation
Snapshot spare spacing
Vol0/quorum drive layout
Aggregate snapshot
frequency
Snapshot growth limits
OPERATING
GB and IOPS required
Account Creation
Host to HBA assignment
and tracking
Host initiator count limits
RAID type required
Primary Control Node
assignment
IOPS limitation concerns
Snapshot growth policy
Thin Provisioning (or not)
Aggregate/CPG assignment
40% CPU limit considerations
SCALING
GB and IOPS needed
Drive Shelves required
Power/floor space restrictions
Control node limitations
(CPU storage)
UPGRADE
HBA compatibility list
CPU utilization on control
nodes
Maintenance window
Mitigate risk during node
outage
§ “WATERFALL” RISK MITIGATION IN INFRASTRUCTURE
Element OS | A U T O M A T E D M A N A G E M E N T

8. Reducing risks with agile procurement and deployment
§ Reduce risks via just in time
purchasing in small increments
§ Hardware, Capacity Based and Software Only Options
§ Improve efficiency with non-disruptive
reallocation of resources
§ Eliminate manual provisioning
processes
§ Guaranteed compatibility between
all SolidFire storage nodes
© 2016 NetApp, Inc. All rights reserved.8
Performance
Capacity
58TB
200,000 IOPS
78TB
250,000 IOPS
98TB
300,000 IOPS
138TB
400,000 IOPS
Future-proof
your storage
investment
Eliminate
storage migrations
and forklift upgrades
Never wait
3 years for
an upgrade

9. Boot Storm
SolidFire QoS Eliminates
of traditional performance
related storage problems – ESG 2015
93%
Automatic Service Level Conformance via Policy Guarantees
© 2016 NetApp, Inc. All rights reserved.9

10. Automation reducing costs and risks through proven repeatability
A fully automated next gen datacenter is critical to
delivering greater strategic value to the business
§ Native REST-based API
§ Deep integration with management and
orchestration platforms
§ Support development of user-facing storage controls
§ Reduce risk of human error and associated with
complex administrative tasks
§ Enables rapid deployment of applications and services
© 2016 NetApp, Inc. All rights reserved.10
“SolidFire Automation helps lower
operating expenses by up to
– ESG 2015
67%

11. Cluster wide RAID-less data protection
ü No single points of failure
ü Automatic self-healing –
restores redundancy after failure
ü Maintains all QoS settings
regardless of failure condition
ü Non-disruptive hardware and
software upgrades
ü Faster recovery as you scale out
ü Reduced risk exposure
ü Automated generational upgrades
A
C
D
J
B
F
G
J
D
E
H
B
A
F
I
EH
I
G
C
J
A
D
I
“Carrier Class” Data Reliability via Self Healing High Availability
© 2016 NetApp, Inc. All rights reserved.11
Drive rebuilds = <10 minutes | Node rebuilds = <60 minutes
SolidFire Helix™ PERFORMANCE CAPACITY

12. A
C
J
B
F
G
D
E
H
B
F
I
EH
G
C
J
A
D
I
C
G
B I
J
“Carrier Class” Data Reliability via Self Healing High Availability
© 2016 NetApp, Inc. All rights reserved.12
PERFORMANCE CAPACITY
Drive rebuilds = <10 minutes | Node rebuilds = <60 minutes
Cluster wide RAID-less data protection
ü No single points of failure
ü Automatic self-healing –
restores redundancy after failure
ü Maintains all QoS settings
regardless of failure condition
ü Non-disruptive hardware and
software upgrades
ü Faster recovery as you scale out
ü Reduced risk exposure
ü Automated generational upgrades
SolidFire Helix™

13. § Physical Security
§ 256-bit encryption-at-rest
§ Replication
§ Synchronous / asynchronous
§ Logical Security
§ Snapshots and clones
§ Integrated cloud backup
§ Secure multi-tenancy
§ Compliance and Monitoring
§ Cloud-based monitoring
§ Comprehensive logging
Security and Governance Features
§ Budget Conformance
§ Dedupe and compression
§ JIT Purchasing models
§ Appliance
§ Software only.
§ Investment Protection
§ Simultaneous multiprotocol support
§ Deep integrations
§ VMware, OpenStack, CloudStack
Provided at no additional costs
© 2016 NetApp, Inc. All rights reserved.13

14. © 2016 NetApp, Inc. All rights reserved.14
Thank you

15. Private Cloud Governance and Risk
Governance
• Management at Scale
• Budget
• Legislative Requirements
• Data Retention
• Privacy
Risk
• Scalability
• Reliability
• Multi-Tenancy
• Noisy Neighbors
• Vendor Lock-in
• Rapid Technology Obsolecense
© 2016 NetApp, Inc. All rights reserved. --- NETAPP CONFIDENTIAL ---15