HP has a long history of supporting open source software. It helped start the OpenStack foundation in 2011 to develop an open source cloud computing platform. HP contributes to many OpenStack projects like Nova, Neutron, and Trove. The document discusses some lessons learned from running a public cloud, including the importance of continuous integration, avoiding direct access to production systems, encrypting tenant data, and ensuring code changes are auditable through commit histories. It emphasizes that open source is important for security and that tenant data visibility should be restricted to owners only.

1. Why Open Matters
HP & OpenStack

2. WHO IS
HP?
HP?

3. HP Indemnified
Linux
Against SCO
Against SCO
Against SCO
2003

4. One Linux Server
Every Minute
Today

5. Helps Start the OpenStack
Foundation
Helps Start the OpenStack
Foundation
2011

6. What is this stack
business?

7. L inux
A pache
M ySQL
Perl/PHP/Python

8. Glance
Nova
Swift

9. Glance
Nova
Horizon
Keystone
Swift
Neutron

10. Glance
Nova
Horizon
Keystone
Swif
t
Neutron
BlockStorage
LoadBalancing
Databases
DNS
Metering
Billing
Monitoring
Alarming
Messaging
Automation
Orchestration
Account
maintenance

11. OpenStack is an Ecosystem
(Yes, and this was out of date the moment I hit save).
200+ companies
11964 people
>3000 commits last
month

12. Continuous
Integration
Deployment

13. Daily Patch Volume

14. Accelerated Participation with
Velocity

15. How Does HP
Participate?

17. NovaNova
ContainerContainer
ServiceService
AgentAgentManagerManager
RESTREST
APIAPI
Trove: DBMS as a Service
SQL
REST

18. RESTREST
APIAPI
Libra: Load Balancer as a Service
SQL
NEUTRON
LBAS PoolLBAS Pool
TCP/HTTP
ATLAS

19. And a few others...
• DNSaaS
• Tripelo,The Installer
• Ironic, Servers as a Service
• HEAT, Orchestration as a Service
• Nova, Glance, Swift, Horizon,...

20. Keystone
Nova
SwiftSwift
Trove

21. Keystone Nova
(Private)
Trove
Nova
Keystone

22. Do we learn anything by
running a Public Cloud?

23. Some philosophies
• Continuous Integration is the new normal
• SSH into production considered harmful
• Data security and encryption at the tenant level
• Open Source means audit-ability

24. No SSH, No Shell
“Just run this command and it works”
“The process had to be restarted”
“I just deleted the logs”

25. Humans are sources of
bad entropy.

26. SOC
compliancy
is Good.
is Good.
is Good.

27. Debugging?
• Centralize your logs
• Kick the box from the fleet, never take it back.
• Provide Snapshots

28. Openmatters because
Security Matters

29. Rethink Open Source
Security

30. Tenant Data should
only be visible to the
Owner

31. Copyright is just
one reason
for Commit History
for Commit History
for Commit History

32. Thank You!
blog: http://krow.net
/
twitter: brianaker