This document provides an overview of EWERK, an IT services company based in Germany that has over 600 customers across Europe, with a focus on their experience running OpenShift clusters on Cloudstack. It discusses the challenges of performance, VLAN separation for different customers, and using containers without SDN in Cloudstack, and outlines their hardware, network, storage, and Cloudstack installation configuration.

1. Made by EWERK
Digital Success
Running OpenShift Clusters in
a Cloudstack Environment

2. − Founded in 1995
− Owner-led since the start
− Headquarters in Leipzig, project-
offices in Bayreuth, Berlin, Wolfsburg
and Zurich
> 600
Customers
across the EU
> 200
Employees
87 %
University
graduates
20.000 MD
project
volumes
2017
> 250
Projects a
year
4 International
certifications
3 Data Center
Locations +
different Cloud
Solutions
+ 20 %
Annual
Growth
> 20 Mio. €
Revenue
EWERK in Numbers

3. Energy
Digital transformation in the context of integrated energy. Flexible learning architectures in the context of new habits.
Privacy and data usage in the context of high cost-pressure.Connected Mobility in the context of sustainable solutions.
Knowledge
HealthcareMobility

5. Certified according to
DIN ISO/IEC 9001, 20000-1 & 27001
Outsourcing accoring to
ISAE 3402 Type II
Certified to international standards in IT
security management, quality management
and IT service management
In-depth experience and regular check-ups
Assured highest standards in provision of
digital solutions
International assurance standard for
documentation, reporting and internal
control systems for service providers and
processes
EWERK Outsourcing services are compliant
with client standards and reporting cycles.
Type II: Documentation over a period of
time, assuring dependable management
controls

6. „ We are active contributor of the cloudstack community. We submit
bug fixes, pull requests and our team work one the new Cloudstack
UI (primate) too.

7. Challenges!

8. Challenges
Performance
VLAN separation
Open Source1
2
3
4 Container
different customers, capsulated security, at the moment
no real SDN in Cloudstack
noisy neighborhood, no performance degradation for
VMs and Containers
we love Open Source!
high performance, snapshot functionality for the PV
5 Virtual Machines high performance, snapshot functionality for the
disks

9. What components we use

10. Hardware Seems
Server and Network
Host
- Fujitsu and QCT 1 RU Servers
- 2 Socket with 20 CPU / 40 HT
- 768 GB RAM
- 2x 10Gbit SFP+ Standard Network
- 1x local NVME or SATA DOM
Switches for Leaf and Spine
- Edgecore 10Gbit and 100Gbit

11. Hardware Seems
Storage
Netapp HCI (Solidfire, H500S)
- chassis awareness over 3 datacenter
locations

12. Our Cloudstack installation
Network: OVS (OpenvSwitch, VLAN)
Primary Storgage: Netapp HCI (iSCSI)
Secondary Storage: Active/Passive NFS
KVM (CentOS 7, later 8)1
2
3
4
very close to Github - Master5
MariaDB Galera Cluster as Database Backend
7 Heavy use of VPC features (private gateway, ACL, NAT - redundant on KVM???)
6 Domains, Projects, LDAP integration

13. Network Design Overview
Cloudstack Domain - Projects, VPC Overview Ingress

14. Provisioning Design Overview
PXE Boot with Foreman

15. Storage Design Overview

16. Upcoming Projects!

17. Future, what we are working on?
PR: Backup Provider for Netapp HCI to S3 Storage System
- backup and restore directly from the Cloudstack API
- extend the recurring snapshot functionality like GFS
- extend the old and new UI

18. Sven Vogel
Lead Cloud Solution Architect / Cloudstack PMC
Member
EWERK Group
Brühl 24, D-04109 Leipzig
P +49 341 42649-0
F +49 341 42649-98
s.vogel@ewerk.com