For most organizations with a large computing footprint, it's not a matter of if you'll need a private cloud - it's when, and what kind. One of the most mature and widely deployed options is Apache CloudStack, a robust, turnkey cloud that includes everything you need to set up a private, public, or hybrid cloud. We'll cover Apache CloudStack from API to UI, and a little of everything in between.
Session on CloudStack, intended for new users to CloudStack, provides an overview to varied audience levels information on usages, use cases, deployment and its architecture.
This presentation is the introduction to the monthly CloudStack.org demonstration. The presentation details the latest features in the CloudStack open source project as well as project news. To attend a future presentation, with live demo and Q&A visit:
http://www.slideshare.net/cloudstack/introduction-to-cloudstack-12590733
Session on CloudStack, intended for new users to CloudStack, provides an overview to varied audience levels information on usages, use cases, deployment and its architecture.
This presentation is the introduction to the monthly CloudStack.org demonstration. The presentation details the latest features in the CloudStack open source project as well as project news. To attend a future presentation, with live demo and Q&A visit:
http://www.slideshare.net/cloudstack/introduction-to-cloudstack-12590733
Build clouds the way some of the world’s biggest public and private clouds are built—using CloudStack. This 60-minute webinar with the Cloudstack team will help you gain a better understanding of the CloudStack architecture and feature set.
CloudStack, the world's leading open-source cloud infrastructure platform, was recently donated to the Apache Foundation, and is now an incubated Apache project. Ewan Mellor, Director of Engineering in the Citrix Cloud Platforms Group will describe the CloudStack project and explain why Xen is the pre-eminent hypervisor in public clouds today. He will describe the changes coming in CloudStack in the next 12 months, and how they are going to change the way that Xen is consumed in public and private clouds next year.
My talk from BACD http://buildacloud.org workshop in Ghent, Belgium
All videos can be viewed at: http://www.youtube.com/playlist?list=PLb899uhkHRoZZefRW5XmCb8QBcRO7o74E
This is an introductory talk for the workshop, it introduces CloudStack and the community at the Apache Software Foundation, it presents the basic layers of the Cloud IaaS, PaaS, and SaaS and shows how the CloudStack ecosystem addresses all layers. It presents the basic features of cloudstack, networking with a focus on SDN (Software Defined Networking) , storage with a focus on large scale object store (Ceph), a use case with Spotify, a PaaS with Karafe and fuse Fabric, the API using deltacloud which provides the CIMI standard interface and an application integration using the CloudStack API with Activeeon.
This is the perfect complement to the videos on youtube and serves as a introduction to CloudStack.
Introduction to Apache CloudStack by David Nalleybuildacloud
Apache CloudStack is a mature, easy to deploy IaaS platform. That doesn't mean that it can be done without thought or preparation. Learn how CloudStack can be most efficiently deployed, and the problems to avoid in the process.
About David Nalley
David is a recovering sysadmin with a decade of experience. He’s a committer on the Apache CloudStack (incubating) project, a contributor to the Fedora Project and the Vice President of Infrastructure at the Apache Software Foundation.
Building clouds with apache cloudstack apache roadshow 2018ShapeBlue
Talk given at Apache Roadshow, FOSS Backstage, Berlin, June 2018
Apache CloudStack is open source software designed to deploy and manage large networks of virtual machines, as a highly available, highly scalable Infrastructure as a Service (IaaS) cloud computing platform. This talk will give an introduction to the technology, its history and its architecture. It will look common use-cases (and some real production deployments) that are seen across both public and private cloud infrastructures and where CloudStack can be completed by other open source technologies.
The talk will also compare and contrast Apache Cloudstack with other IaaS platforms and why he thinks that the technology, combined with the Apache governance model will see CloudStack become the de-facto open source cloud platform. He will run a live demo of the software and talk about ways that people can get involved in the Apache CloudStack project.
Decisions behind hypervisor selection in CloudStack 4.3Tim Mackey
As presented at the 2014 CloudStack Collaboration Conference in Denver (CCCNA14), this deck covers the matrix of functions and features within each supported hypervisor in CloudStack 4.3. This deck forms an excellent reference document for those seeking to provide multi-hypervisor support within their Apache CloudStack based cloud, and for those seeking to determine which feature elements are supported by a given hypervisor.
Build clouds the way some of the world’s biggest public and private clouds are built—using CloudStack. This 60-minute webinar with the Cloudstack team will help you gain a better understanding of the CloudStack architecture and feature set.
CloudStack, the world's leading open-source cloud infrastructure platform, was recently donated to the Apache Foundation, and is now an incubated Apache project. Ewan Mellor, Director of Engineering in the Citrix Cloud Platforms Group will describe the CloudStack project and explain why Xen is the pre-eminent hypervisor in public clouds today. He will describe the changes coming in CloudStack in the next 12 months, and how they are going to change the way that Xen is consumed in public and private clouds next year.
My talk from BACD http://buildacloud.org workshop in Ghent, Belgium
All videos can be viewed at: http://www.youtube.com/playlist?list=PLb899uhkHRoZZefRW5XmCb8QBcRO7o74E
This is an introductory talk for the workshop, it introduces CloudStack and the community at the Apache Software Foundation, it presents the basic layers of the Cloud IaaS, PaaS, and SaaS and shows how the CloudStack ecosystem addresses all layers. It presents the basic features of cloudstack, networking with a focus on SDN (Software Defined Networking) , storage with a focus on large scale object store (Ceph), a use case with Spotify, a PaaS with Karafe and fuse Fabric, the API using deltacloud which provides the CIMI standard interface and an application integration using the CloudStack API with Activeeon.
This is the perfect complement to the videos on youtube and serves as a introduction to CloudStack.
Introduction to Apache CloudStack by David Nalleybuildacloud
Apache CloudStack is a mature, easy to deploy IaaS platform. That doesn't mean that it can be done without thought or preparation. Learn how CloudStack can be most efficiently deployed, and the problems to avoid in the process.
About David Nalley
David is a recovering sysadmin with a decade of experience. He’s a committer on the Apache CloudStack (incubating) project, a contributor to the Fedora Project and the Vice President of Infrastructure at the Apache Software Foundation.
Building clouds with apache cloudstack apache roadshow 2018ShapeBlue
Talk given at Apache Roadshow, FOSS Backstage, Berlin, June 2018
Apache CloudStack is open source software designed to deploy and manage large networks of virtual machines, as a highly available, highly scalable Infrastructure as a Service (IaaS) cloud computing platform. This talk will give an introduction to the technology, its history and its architecture. It will look common use-cases (and some real production deployments) that are seen across both public and private cloud infrastructures and where CloudStack can be completed by other open source technologies.
The talk will also compare and contrast Apache Cloudstack with other IaaS platforms and why he thinks that the technology, combined with the Apache governance model will see CloudStack become the de-facto open source cloud platform. He will run a live demo of the software and talk about ways that people can get involved in the Apache CloudStack project.
Decisions behind hypervisor selection in CloudStack 4.3Tim Mackey
As presented at the 2014 CloudStack Collaboration Conference in Denver (CCCNA14), this deck covers the matrix of functions and features within each supported hypervisor in CloudStack 4.3. This deck forms an excellent reference document for those seeking to provide multi-hypervisor support within their Apache CloudStack based cloud, and for those seeking to determine which feature elements are supported by a given hypervisor.
Many high tech business leaders are now competing in the IoT (Internet of Things) smart home market by providing innovative products/services such as Samsung SmartThings and Apple HomeKit. Patent information can provide insights regarding the state of the art of the IoT innovations for smart home applications such as home automation, energy/utility management, home security, lighting system and safety monitoring (e.g., hazard detecting, elderly care). Thus, one can identify the potential further innovation R&D areas (“white space”) that can lead to new products/services development through the patent analysis.
Samsung patent application US20150169659 illustrates a system for generating a user lifelog by recognizing user activities from data acquired by a sensor, analyzing the recognized activities, and generating activity patterns. Samsung patent application US 20140192229 illustrates a system for determining emotion of a user who uses content and adding the emotion to content.Future smartphone will provide 3D holographic projections. Future smartphone will record, replay and transfer the digitized information of the sight, hearing, touch, smell and taste senses.
Patents are the good information resources for obtaining IoT business ideas. Followings are some examples of the IoT patents that provide potential business cases based on the IoT applications: smart office building, smart utility meter, smart home/building temperature control, smart transportation, connected car, smart manufacturing using 3D printer and smart healthcare.
BiLogica tai jauna ir ambicinga kompanija, vykdanti savo veiklą verslo analitikos srityje. Kompaniją sudaro patirę bankinėje ir informacinių technologijų srityse specialistai, turintys verslo analitikos, atskaitomybės bei duomenų saugyklų technologijų kompetencijas. Nuolat tobulėjantis kolektyvas užtikrins pažangių technologijų optimalų panaudojimą.
Mūsų paslaugos:
- Konsultavimas BI srityje
- Verslo reikalavimų analizė ir specifikacijų paruošimas
- BI sprendimų sukūrimas ir diegimas
- Sukurtų sprendimų vystymas ir palaikymas
1. New Patent Development Opportunity Analysis
2. New Patent Preparation & Prosecution Strategy
3. Strategic Patent Development Exploiting Existing Patents
A study and practice of OpenStack release Kilo HA deployment. The Kilo document has some errors, and it's hardly find a detailed document to describe how to deploy a HA cloud based on Kilo release. Hope this slides can provide some clues.
Software Defined Networking is seeing a lot of momentum these days. With server virtualization solving the virtual machines problem, and large scale object storage solving the distributed storage challenge, SDN is seen as key in virtual networking.
In this talk we don't try to define SDN but rather dive straight into what in our opinion is the core enabled of SDN: the virtual switch OVS.
OVS can help manage VLAN for guest network isolation, it can re-route any traffic at L2-L4 by keeping forwarding tables controlled by a remote controller (Openfow controller). We show these few OVS capabilities and highlight how they are used in CloudStack and Xen.
Xen Summit presentation of CloudStack and Software Defined Networks. OpenVswitch is the default bridge in Xen and supported in XenServer and Xen Cloud Platform
PPTV is using CloudStack 3.0.2 in its production environment. Currently there are more than 150 hosts, and migrate their apps to cloud everyday (10 host per day). At the end of 2013, there will be more than 1000 hosts in a CloudStack environment.
Introduction to CloudStack: How to Deploy and Manage Infrastructure-as-a-Serv...cloud-diva
Build clouds the way some of the worlds largest public and private clouds are built--using CloudStack. This presentation is from the June 18th iteration of a monthly series offered by the CloudStack community team. It will give you a better understanding of the overall CloudStack architecture and feature set.
XenServer Virtualization In Cloud EnvironmentsTim Mackey
= As presented at the CloudStack Silicon Valley Meetup in September 2015. =
XenServer is a virtualization platform which has been deployed in a variety of industries and to support a multitude of workloads. In this session we discuss some of the components which make it valuable not just for traditional server and desktop virtualization, but also within "the cloud". This includes discussion of VM density, network scalability, containers (such as Docker) and GPU virtualization. We end with coverage of how XenServer templates are represented within Apache CloudStack.
Presentation of OpenStack survey to Internet Research Lab at National Taiwan University, Taiwan. OpenStack framework and architecture overview. (ppt slide for download.) Materials collected from various resources, not originally produced by the author.
Briefly explained Nova, Swift, Glance, Keystone, and Quantum.
Linux Containers(LXC) allow running multiple isolated Linux instances (containers) on the same host.
Containers share the same kernel with anything else that is running on it, but can be constrained to only use a defined amount of resources such as CPU, memory or I/O.
A container is a way to isolate a group of processes from the others on a running Linux system.
A simple setup to build a private or public cloud.
A cloud at the IaaS layer is simply a cluster of hypervisors with some added storage infrastructure and software to orchestrate everything. In this presentation we show some straightfoward DELL hardware that could be purchased to build a single rack as the basic for a private or public cloud. It totals $100k and coupled with open source software: cloudstack, ceph, glusterfs, nfs etc is the basis for your cloud.
You will get a AWS compatible cloud in no-time and with limited acquisition cost.
"In the beginning there was RPM, and it was good." Certainly, Linux packaging has solved many of the problems involved in shipping software, from creation to consumption and maintenance. As software development and deployment have evolved, however, new pain points have cropped up that have not been solved by traditional packaging tools.
Are containers the answer? They may be able to solve many of the current problems, but they also introduce a new set of issues and ignore important lessons from the evolution of distribution-level packaging.
In the beginning there was RPM (and Debian packages) and it was good. Certainly, Linux packaging has solved many problems and pain points for system admins and developers over the years -- but as software development and deployment have evolved, new pain points have cropped up that have not been solved by traditional packaging.
In this talk, Joe Brockmeier will run through some of the problems that admins and developers have run into, and some of the solutions that organizations should be looking at to solve their issues with developing and deploying software. This includes Software Collections, Docker containers, OStree and rpm-ostree, Platform-as-a-Service, and more.
Elevating Tactical DDD Patterns Through Object CalisthenicsDorra BARTAGUIZ
After immersing yourself in the blue book and its red counterpart, attending DDD-focused conferences, and applying tactical patterns, you're left with a crucial question: How do I ensure my design is effective? Tactical patterns within Domain-Driven Design (DDD) serve as guiding principles for creating clear and manageable domain models. However, achieving success with these patterns requires additional guidance. Interestingly, we've observed that a set of constraints initially designed for training purposes remarkably aligns with effective pattern implementation, offering a more ‘mechanical’ approach. Let's explore together how Object Calisthenics can elevate the design of your tactical DDD patterns, offering concrete help for those venturing into DDD for the first time!
GDG Cloud Southlake #33: Boule & Rebala: Effective AppSec in SDLC using Deplo...James Anderson
Effective Application Security in Software Delivery lifecycle using Deployment Firewall and DBOM
The modern software delivery process (or the CI/CD process) includes many tools, distributed teams, open-source code, and cloud platforms. Constant focus on speed to release software to market, along with the traditional slow and manual security checks has caused gaps in continuous security as an important piece in the software supply chain. Today organizations feel more susceptible to external and internal cyber threats due to the vast attack surface in their applications supply chain and the lack of end-to-end governance and risk management.
The software team must secure its software delivery process to avoid vulnerability and security breaches. This needs to be achieved with existing tool chains and without extensive rework of the delivery processes. This talk will present strategies and techniques for providing visibility into the true risk of the existing vulnerabilities, preventing the introduction of security issues in the software, resolving vulnerabilities in production environments quickly, and capturing the deployment bill of materials (DBOM).
Speakers:
Bob Boule
Robert Boule is a technology enthusiast with PASSION for technology and making things work along with a knack for helping others understand how things work. He comes with around 20 years of solution engineering experience in application security, software continuous delivery, and SaaS platforms. He is known for his dynamic presentations in CI/CD and application security integrated in software delivery lifecycle.
Gopinath Rebala
Gopinath Rebala is the CTO of OpsMx, where he has overall responsibility for the machine learning and data processing architectures for Secure Software Delivery. Gopi also has a strong connection with our customers, leading design and architecture for strategic implementations. Gopi is a frequent speaker and well-known leader in continuous delivery and integrating security into software delivery.
Encryption in Microsoft 365 - ExpertsLive Netherlands 2024Albert Hoitingh
In this session I delve into the encryption technology used in Microsoft 365 and Microsoft Purview. Including the concepts of Customer Key and Double Key Encryption.
Securing your Kubernetes cluster_ a step-by-step guide to success !KatiaHIMEUR1
Today, after several years of existence, an extremely active community and an ultra-dynamic ecosystem, Kubernetes has established itself as the de facto standard in container orchestration. Thanks to a wide range of managed services, it has never been so easy to set up a ready-to-use Kubernetes cluster.
However, this ease of use means that the subject of security in Kubernetes is often left for later, or even neglected. This exposes companies to significant risks.
In this talk, I'll show you step-by-step how to secure your Kubernetes cluster for greater peace of mind and reliability.
Generating a custom Ruby SDK for your web service or Rails API using Smithyg2nightmarescribd
Have you ever wanted a Ruby client API to communicate with your web service? Smithy is a protocol-agnostic language for defining services and SDKs. Smithy Ruby is an implementation of Smithy that generates a Ruby SDK using a Smithy model. In this talk, we will explore Smithy and Smithy Ruby to learn how to generate custom feature-rich SDKs that can communicate with any web service, such as a Rails JSON API.
GraphRAG is All You need? LLM & Knowledge GraphGuy Korland
Guy Korland, CEO and Co-founder of FalkorDB, will review two articles on the integration of language models with knowledge graphs.
1. Unifying Large Language Models and Knowledge Graphs: A Roadmap.
https://arxiv.org/abs/2306.08302
2. Microsoft Research's GraphRAG paper and a review paper on various uses of knowledge graphs:
https://www.microsoft.com/en-us/research/blog/graphrag-unlocking-llm-discovery-on-narrative-private-data/
Software Delivery At the Speed of AI: Inflectra Invests In AI-Powered QualityInflectra
In this insightful webinar, Inflectra explores how artificial intelligence (AI) is transforming software development and testing. Discover how AI-powered tools are revolutionizing every stage of the software development lifecycle (SDLC), from design and prototyping to testing, deployment, and monitoring.
Learn about:
• The Future of Testing: How AI is shifting testing towards verification, analysis, and higher-level skills, while reducing repetitive tasks.
• Test Automation: How AI-powered test case generation, optimization, and self-healing tests are making testing more efficient and effective.
• Visual Testing: Explore the emerging capabilities of AI in visual testing and how it's set to revolutionize UI verification.
• Inflectra's AI Solutions: See demonstrations of Inflectra's cutting-edge AI tools like the ChatGPT plugin and Azure Open AI platform, designed to streamline your testing process.
Whether you're a developer, tester, or QA professional, this webinar will give you valuable insights into how AI is shaping the future of software delivery.
Essentials of Automations: Optimizing FME Workflows with ParametersSafe Software
Are you looking to streamline your workflows and boost your projects’ efficiency? Do you find yourself searching for ways to add flexibility and control over your FME workflows? If so, you’re in the right place.
Join us for an insightful dive into the world of FME parameters, a critical element in optimizing workflow efficiency. This webinar marks the beginning of our three-part “Essentials of Automation” series. This first webinar is designed to equip you with the knowledge and skills to utilize parameters effectively: enhancing the flexibility, maintainability, and user control of your FME projects.
Here’s what you’ll gain:
- Essentials of FME Parameters: Understand the pivotal role of parameters, including Reader/Writer, Transformer, User, and FME Flow categories. Discover how they are the key to unlocking automation and optimization within your workflows.
- Practical Applications in FME Form: Delve into key user parameter types including choice, connections, and file URLs. Allow users to control how a workflow runs, making your workflows more reusable. Learn to import values and deliver the best user experience for your workflows while enhancing accuracy.
- Optimization Strategies in FME Flow: Explore the creation and strategic deployment of parameters in FME Flow, including the use of deployment and geometry parameters, to maximize workflow efficiency.
- Pro Tips for Success: Gain insights on parameterizing connections and leveraging new features like Conditional Visibility for clarity and simplicity.
We’ll wrap up with a glimpse into future webinars, followed by a Q&A session to address your specific questions surrounding this topic.
Don’t miss this opportunity to elevate your FME expertise and drive your projects to new heights of efficiency.
3. What This Talk is About
• What a Cloud Is and Challenges for IaaS
• History and Overview of CloudStack
• CloudStack’s Features and Capabilities
• 60 minutes (maybe more)
4. Five Six Characteristics of Clouds
• On-Demand Self-Service
• Broad Network Access
• Resource Pooling
• Rapid Elasticity
• Measured Service
• API Access
5. Cloud Service Models
USER CLOUD a.k.a. SOFTWARE AS A SERVICE
Single application, multi-tenancy, network-based, one-to-many delivery of
applications, all users have same access to features.
Examples: Salesforce.com, Google Docs, Red Hat Network/RHEL
DEVELOPMENT CLOUD a.k.a. PLATFORM-AS-A-SERVICE
Application developer model, Application deployed to an elastic service that
autoscales, low administrative overhead. No concept of virtual machines or
operating system. Code it and deploy it.
Examples: VMware CloudFoundry, Google AppEngine, Windows Azure,
Rackspace Sites, Red Hat OpenShift, Active State Stackato, Appfog
SYSTEMS CLOUD a.k.a INFRASTRUCTURE-AS-A-SERVICE
Servers and storage are made available in a scalable way over a network.
Examples: EC2,Rackspace CloudFiles, OpenStack, CloudStack,
Eucalyptus, OpenNebula
9. What is Apache CloudStack?
Apache CloudStack is an open source IaaS
that supports multiple hypervisors, high
availability, complex
networking, firewall, load balancer, and VPN
configurations in a multi-tenant environment.
10. Specifically…
CloudStack is a set of applications that:
• Provides separation between tenants
• Handle allocating compute resources (inc.
custom allocators)
• Let users provision compute resources
• Manages High Availability
• Massively scalable (thousands of nodes)
• Resource usage accounting
11. CloudStack History
• CloudStack began as VMOps (2008) later became
Cloud.com.
• Cloud.com released as CloudStack under GPLv3
(May 2010)
• Cloud.com acquired by Citrix (July 2011)
• Entirely open source (August 2011)
• Relicensed & proposed to Apache (April 3, 2012)
• Accepted as incubating project (April 16, 2012)
• First release (4.0.0-incubating) (November 6,
2012)
• First minor release (4.0.1-incubating) (February
12, 2013)
12. CloudStack UI
• Reference Implementation of the API
• Built with HTML 4, CSS, and jQuery
• Uses Java Server Pages for localization
• Three types of customizations
– Minor (logo, minor CSS)
– Major (adding/changing tabs, additional links)
– Rewrite using API
16. Hypervisor Support
• KVM
• XenServer
• Xen Cloud Platform
• VMware via vCenter
• Bare Metal via IPMI
17. CloudStack Terminology
• Zone: Availability zone, aka
Regions. Could be
worldwide. Different data
centers
• Pods: Racks or aisles in a
data center
• Clusters: Group of
machines with a common
type of Hypervisor
• Host: A Single server
• Primary Storage: Shared
storage across a cluster
• Secondary Storage:
Shared storage in a single
Zone
18. CloudStack Architecture
Internet Hypervisor is the basic unit
CloudStack
Management of scale.
Server
Zone 1 Cluster consists of one ore
more hosts of same
L3 core hypervisor
All hosts in cluster have
Pod 1 Access Layer Pod N access to shared (primary)
Secondary storage
…. Storage
Cluster N Pod is one or more clusters,
usually with L2 switches.
…. Availability Zone has one or
more pods, has access to
Cluster 1 secondary storage.
Host 1 One or more zones
Primary represent cloud
Storage
Host 2
19. CloudStack Storage
• Primary Storage:
– Anything that can be mounted on the node of a cluster.
– Cluster LVM…iSCSI…
– Holds disk images of running VMs
– Support for CEPH with KVM hypervisors
• Secondary Storage:
– Available across the zone
– Holds snapshots and templates (image repo)
– Can use OpenStack swift or any object store (Gluster FS…)
– New support for Caringo
• Can use NFS for both to start
• Storage abstraction refactoring underway in 4.1.0 and 4.2.0
20. Networking
• Extremely flexible to:
– Provide isolation with VLANs
– Provide isolation at L3 with shared L2 (scalability)
– Support hardware devices that exposes API
– Deployed on existing networking infrastructure
– Support new networking paradigm (SDN)
• Support for Nicira Virtual P
• Extensive use of Open VSwitch
21. Management Server
• UI/API bits are stateless (state is stored in
a MySQL database)
• All UI functionality is available as an API
call
• Restful API
– Unauthenticated API on 8096 for localhost
(disabled by default)
– Authenticated on port 8080
– Responses in XML or JSON
22. Highly Scalable
• Up to 10K resources managed per
management server node
• Internal testing w/software simulators
shows up to 30K physical resources and
30K VMs managed by 4 management
server nodes.
• Real production deployments of tens of
thousands of resources
• See Alex Huang’s presentation:
http://is.gd/alexh_scale
23. CloudStack Allocation
• How are VMs placed, storage
allocated, etc.?
• CloudStack has several defaults
– First fit
– Fill first
– Disperse
• Don’t like those? Create your own!
• Allows over-provsioning
• OS Preference
24. High Availability
• RFMTTR – “really fast mean time to
recovery.”
• CloudStack is not (alone) a magical HA
solution.
• Watches HA-enabled VMs to ensure
they’re up, and that the hypervisor it’s on
is up. Will restart on another if the
hypervisor goes down.
• Redundant router.
25. Load Balancing
• Uses HA Proxy
• CloudStack supports load-balancing for
distributing traffic to its instances
• Choose between round-robin, source, or
least connections
• Choose stickiness policy
(source, lbcookie, appcookie)
26. Snapshots
• CloudStack allows you to take snapshots
manually or set up recurring snapshots.
• Snapshots can be managed automagically
(keep N number) and manually (delete
snapshot manually).
• Can be turned into templates or volumes
to be used by other instances.
28. CloudStack Networking Types
• CloudStack offers Basic and Advanced
Networking
– Basic: Easy, can only be one physical network
• Every host, system VM, and guest instance has a
unique IP
– Advanced: Allows multiple physical networks
• Each account has a public IP, assigned to virtual
router, guest IP range (e.g. 10.0.1.10/24), and
VLAN ID for the isolated guest network
• Guests communicate via their own dedicated
VLAN
29. CloudStack Networks
• Management Network: Used by hypervisors
and management server to communicate
• Private Network: Default network for system
VMs (virtual router, secondary storage
VM, console proxy VM)
• Public Network: Public-facing (e.g. the
Internet)
• Guest Network: Network VMs are provisioned
on
• Link-local Network: Network used for
communication between hypervisor and
system VMs. (RFC 3927)
30. Security Groups
• Traditional isolation has been via VLAN
• VLANs provide isolation, but at the cost of
scaling
– Standard limit is 4,096 VLANs
– Hardware that supports upper limit is
expensive
– What happens with 4,097?
• Amazon and others use Layer 3 isolation
(Security Groups)
31. Security Groups
• Assumes a quasi-trusted Layer 2 network
• Filtering/isolation happens at the bridge
level (think ebtables)
• Deny by default
32. Accounts, Domains, and Projects
• CloudStack has a top-level domain called
ROOT
• You can create sub-domains
• You can create 3 types of
accounts, admins, domain-admins, or users
• Projects can be used to hold resources for
time-limited projects
• Supports LDAP integration
• CloudStack’s account system is very simple –
don’t make it more complicated!
33. Usage Accounting
• Provides stats that can be used for billing
(but is not a billing solution)
• Usage stats show: VM count, CPU
usage, disk allocation and use, network
usage over time.
• Integration howtos for importing to
Excel, Ubersmith, Amysta, and Cloud
Portal.
34. APIs
• Root Admin, Domain Admin, User
• Set of methods available over HTTP(S)
• Authenticated on 8080 w/Keys
• Unauthenticated on 8096 (off by default)
• Python + Ruby clients available
35.
36. AWS EC2 and S3 Compatibility
• Includes an EC2/S3 compatibility layer
• See:
– http://wiki.cloudstack.org/display/RelOps/EC2+AP
I+support+in+CloudStack
– http://www.slideshare.net/sebastiengoasguen/clo
udstack-ec2-configuration
• Euca Tools, Boto, etc. should work with
CloudStack
37. CloudMonkey
• New ASF CloudStack CLI
• Python code, built using Marvin
• https://cwiki.apache.org/CLOUDSTACK/cl
oudstack-cloudmonkey-cli.html
• Available from CloudStack source or pypi:
– http://pypi.python.org/pypi/cloudmonkey/
39. DevCloud
• DevCloud is a VirtualBox image w/nested virt.
• Grab the DevCloud image from:
http://wiki.cloudstack.org/display/COMM/DevCloud
• Log in via the GUI:
http://localhost:8080/client
• SSH to DevCloud:
ssh -p 2222 root@localhost
Username: admin Password: password
• DevCloud KVM – effort to run DevCloud on a KVM
host
40. CloudStack Runbook
• Minimal install (1 server)
• Written by David Nalley w/fixes from the
community
• http://people.apache.org/~ke4qqq/runbook
/
• Focuses on CentOS w/KVM – other
runbooks in process for Ubuntu w/Xen or
KVM.
41. Get Involved
• Main Site: CloudStack.org
• IRC: #cloudstack and #cloudstack-dev
• Follow @cloudstack on Twitter
• Lots of Presos:
http://slideshare.net/cloudstack
• Mailing Lists:
http://cloudstack.org/discuss/mailing-
lists.html
User-driven solutions to real problemsLower barrier to participationLarger user base of users helping users Aggressive release cycles stay current with the state-of-the-artChoice of infrastructureControl of data and securityAvoid lock-inOpen data, open standards, open APIs
A user can belong to only one Account, .ie. the same User cannot belong to multiple Accounts.Whenever creating an account at any domain level it can be of two types - Admin or user. If account == Admin then he will be domain admin of that domain and if created with type=user he will be a regular account under that domain.Admin created at ROOT level is called ROOT admin and since ROOT is the top domain he has privileges to act on all the resources.Username is unique in a Domain across Accounts in that Domain. The same username can exist in other domains, including subdomains.Account name is unique in a domain. The same Account name can exist in other domains, including subdomains.Domain name can repeat as long as the full pathname from ROOT is unique. For ex, you can have ROOT/d1, as well as ROOT/foo/d1, and ROOT/bar/d1.Resources belong to an Account, not individual users in that account. Billing, resource limits etc are maintained by Account, not usernames.CloudStack allows to create 3 different types of accounts --> admin/domain-admin or user account. All the roles (admin, domain admins and user) are attached at account level.Under the account all the users have the same privileges. There are no role based users in one account.We can have multiple admins for the same domain.All the domains get created under the ROOT domain.