Presentation By:
Roozbeh Shafiee
Winter 2016
IRAN OpenStack Users Group
MASTERING
OPENSTACK
(Episode 13)
Network Design
IRAN Community| OpenStack.ir
Agenda:
• IP Address Planning
• Iran OpenStack Community
OpenStack Network Design
IRAN Community| OpenStack.ir
OpenStack Network Design
In Memoriam Ian Murdock
With a heavy heart we mourn the passing of
Ian Murdock, stalwart proponent of Free Open
Source Software, Father, Son, and the 'ian' in
Debian.
Iran OpenStack Community
IRAN Community| OpenStack.ir
IP Address Planning
OpenStack Network Design
IRAN Community| OpenStack.ir
IP Address Planning
An IP address plan might be broken down into the following sections:
• Subnet router
• Control services public interfaces
• Object Storage cluster internal communications
• Compute and storage communications
• Out of band remote management
• In-band remote management
• Spare space for future growth
OpenStack Network Design
IRAN Community| OpenStack.ir
Subnet Router
Packets leaving the subnet go via this address, which could be a dedicated router 

or a nova-network service.
OpenStack Network Design
IRAN Community| OpenStack.ir
Control Services Public Interfaces
Public access to swift-proxy, nova-api, glance-api, and horizon come to these 

addresses, which could be on one side of a load balancer or pointing at individual 

machines.
OpenStack Network Design
IRAN Community| OpenStack.ir
Object Storage Cluster Internal Communications
Traffic among object/account/container servers and between these and the proxy

server’s internal interface uses this private network.
OpenStack Network Design
IRAN Community| OpenStack.ir
Compute and Storage Communications
If ephemeral or block storage is external to the compute node, this network is used.
OpenStack Network Design
IRAN Community| OpenStack.ir
Out of Band Remote Management
If a dedicated remote access controller chip is included in servers, often these are 

on a separate network.
OpenStack Network Design
IRAN Community| OpenStack.ir
In-Band Remote Management
Often, an extra (such as 1 GB) interface on compute or storage nodes is used for 

system administrators or monitoring tools to access the host instead of going 

through the public interface.
OpenStack Network Design
IRAN Community| OpenStack.ir
Spare space For Future Growth
Adding more public-facing control services or guest instance IPs should always 

be part of your plan.
OpenStack Network Design
IRAN Community| OpenStack.ir
Iran OpenStack Community
OpenStack Network Design
IRAN Community| OpenStack.ir
Stay in Touch and Join Us:
• Home Page: OpenStack.ir
• Meetup Page: Meetup.com/Iran-OpenStack
• Mailing List: OpenStack-ir@Lists.OpenStack.org
• Twitter: @OpenStackIR , #OpenStackIRAN
• IRC Channel on FreeNode: #OpenStack-ir
OpenStack Network Design
Roozbeh Shafiee
Iran OpenStack Community Manager
Roozbeh@OpenStack.ir
OpenStack.ir
Thank You
We need to work together to build a better community

Mastering OpenStack - Episode 13 - Network Design

  • 1.
    Presentation By: Roozbeh Shafiee Winter2016 IRAN OpenStack Users Group MASTERING OPENSTACK (Episode 13) Network Design
  • 2.
    IRAN Community| OpenStack.ir Agenda: •IP Address Planning • Iran OpenStack Community OpenStack Network Design
  • 3.
    IRAN Community| OpenStack.ir OpenStackNetwork Design In Memoriam Ian Murdock With a heavy heart we mourn the passing of Ian Murdock, stalwart proponent of Free Open Source Software, Father, Son, and the 'ian' in Debian. Iran OpenStack Community
  • 4.
    IRAN Community| OpenStack.ir IPAddress Planning OpenStack Network Design
  • 5.
    IRAN Community| OpenStack.ir IPAddress Planning An IP address plan might be broken down into the following sections: • Subnet router • Control services public interfaces • Object Storage cluster internal communications • Compute and storage communications • Out of band remote management • In-band remote management • Spare space for future growth OpenStack Network Design
  • 6.
    IRAN Community| OpenStack.ir SubnetRouter Packets leaving the subnet go via this address, which could be a dedicated router 
 or a nova-network service. OpenStack Network Design
  • 7.
    IRAN Community| OpenStack.ir ControlServices Public Interfaces Public access to swift-proxy, nova-api, glance-api, and horizon come to these 
 addresses, which could be on one side of a load balancer or pointing at individual 
 machines. OpenStack Network Design
  • 8.
    IRAN Community| OpenStack.ir ObjectStorage Cluster Internal Communications Traffic among object/account/container servers and between these and the proxy
 server’s internal interface uses this private network. OpenStack Network Design
  • 9.
    IRAN Community| OpenStack.ir Computeand Storage Communications If ephemeral or block storage is external to the compute node, this network is used. OpenStack Network Design
  • 10.
    IRAN Community| OpenStack.ir Outof Band Remote Management If a dedicated remote access controller chip is included in servers, often these are 
 on a separate network. OpenStack Network Design
  • 11.
    IRAN Community| OpenStack.ir In-BandRemote Management Often, an extra (such as 1 GB) interface on compute or storage nodes is used for 
 system administrators or monitoring tools to access the host instead of going 
 through the public interface. OpenStack Network Design
  • 12.
    IRAN Community| OpenStack.ir Sparespace For Future Growth Adding more public-facing control services or guest instance IPs should always 
 be part of your plan. OpenStack Network Design
  • 13.
    IRAN Community| OpenStack.ir IranOpenStack Community OpenStack Network Design
  • 14.
    IRAN Community| OpenStack.ir Stayin Touch and Join Us: • Home Page: OpenStack.ir • Meetup Page: Meetup.com/Iran-OpenStack • Mailing List: OpenStack-ir@Lists.OpenStack.org • Twitter: @OpenStackIR , #OpenStackIRAN • IRC Channel on FreeNode: #OpenStack-ir OpenStack Network Design
  • 15.
    Roozbeh Shafiee Iran OpenStackCommunity Manager Roozbeh@OpenStack.ir OpenStack.ir Thank You We need to work together to build a better community