SlideShare uma empresa Scribd logo
1 de 23
Baixar para ler offline
Presentation By:
Roozbeh Shafiee
Winter 2015
IRAN OpenStack Users Group
MASTERING
OPENSTACK
(Episode 12)
Network Design
IRAN Community| OpenStack.ir
Agenda:
• Management Network
• Manage IP Addressing
• IP Address Planning
• Iran OpenStack Community
OpenStack Network Design
IRAN Community| OpenStack.ir
Network Design
OpenStack Network Design
IRAN Community| OpenStack.ir
Perquisites before network design
Before beginning, you must plan the number of IP addresses that you need for both 

your guest instances as well as management infrastructure.
Additionally, you must research and discuss cloud network connectivity through 

proxy servers and firewalls.
Today, we will give some examples of network implementations to consider and 

provide information about some of the network layouts that OpenStack uses. 

Finally, we have some brief notes on the networking services that are essential for 

stable operation.
OpenStack Network Design
IRAN Community| OpenStack.ir
Management Network
OpenStack Network Design
IRAN Community| OpenStack.ir
Management Network
A management network (a separate network for use by your cloud operators) 

typically consists of a separate switch and separate NICs (network interface cards), 

and is a recommended option.
This segregation prevents system administration and the monitoring of system 

access from being disrupted by traffic generated by guests.
OpenStack Network Design
IRAN Community| OpenStack.ir
Management Network
Using a virtual local area network (VLAN) works well for these scenarios because it 

provides a method for creating multiple virtual networks on a physical network.
Consider creating other private networks for communication between internal 

components of OpenStack, such as the message queue and OpenStack Compute.
OpenStack Network Design
IRAN Community| OpenStack.ir
Manage IP Addressing
OpenStack Network Design
IRAN Community| OpenStack.ir
Manage IP Addressing
There are two main types of IP addresses for guest virtual machines:
• Fixed IPs
• Floating IPs
Each instance has a private, Fixed IP address and can also have a public, or Floating 

IP address. Private IP addresses are used for communication between instances, 

and public addresses are used for communication with networks outside the 

cloud, including the Internet.
OpenStack Network Design
IRAN Community| OpenStack.ir
Manage IP Addressing
When you launch an instance, it is automatically assigned a private IP address that 

stays the same until you explicitly terminate the instance. Rebooting an instance 

has no effect on the private IP address.



A pool of floating IP addresses, configured by the cloud administrator, is available 

in OpenStack Compute.
OpenStack Network Design
IRAN Community| OpenStack.ir
Manage IP Addressing
Fixed IP addresses are required, whereas it is possible to run OpenStack without 

floating IPs. 



One of the most common use cases for floating IPs is to provide public IP addresses 

to a private cloud, where there are a limited number of IP addresses available. 



Another is for a public cloud user to have a static IP address that can be reassigned 

when an instance is upgraded or moved.
OpenStack Network Design
IRAN Community| OpenStack.ir
IP Address Planning
OpenStack Network Design
IRAN Community| OpenStack.ir
IP Address Planning
An IP address plan might be broken down into the following sections:
• Subnet router
• Control services public interfaces
• Object Storage cluster internal communications
• Compute and storage communications
• Out of band remote management
• In-band remote management
• Spare space for future growth
OpenStack Network Design
IRAN Community| OpenStack.ir
Subnet Router
Packets leaving the subnet go via this address, which could be a dedicated router 

or a nova-network service.
OpenStack Network Design
IRAN Community| OpenStack.ir
Control Services Public Interfaces
Public access to swift-proxy, nova-api, glance-api, and horizon come to these 

addresses, which could be on one side of a load balancer or pointing at individual 

machines.
OpenStack Network Design
IRAN Community| OpenStack.ir
Object Storage Cluster Internal Communications
Traffic among object/account/container servers and between these and the proxy

server’s internal interface uses this private network.
OpenStack Network Design
IRAN Community| OpenStack.ir
Compute and Storage Communications
If ephemeral or block storage is external to the compute node, this network is used.
OpenStack Network Design
IRAN Community| OpenStack.ir
Out of Band Remote Management
If a dedicated remote access controller chip is included in servers, often these are 

on a separate network.
OpenStack Network Design
IRAN Community| OpenStack.ir
In-Band Remote Management
Often, an extra (such as 1 GB) interface on compute or storage nodes is used for 

system administrators or monitoring tools to access the host instead of going 

through the public interface.
OpenStack Network Design
IRAN Community| OpenStack.ir
Spare space For Future Growth
Adding more public-facing control services or guest instance IPs should always 

be part of your plan.
OpenStack Network Design
IRAN Community| OpenStack.ir
Iran OpenStack Community
OpenStack Network Design
IRAN Community| OpenStack.ir
Stay in Touch and Join Us:
• Home Page: OpenStack.ir
• Meetup Page: Meetup.com/Iran-OpenStack
• Mailing List: OpenStack-ir@Lists.OpenStack.org
• Twitter: @OpenStackIR , #OpenStackIRAN
• IRC Channel on FreeNode: #OpenStack-ir
OpenStack Network Design
Roozbeh Shafiee
Iran OpenStack Community Manager
Roozbeh@OpenStack.ir
OpenStack.ir
Thank You
We need to work together to build a better community

Mais conteúdo relacionado

Mais procurados

Mastering OpenStack - Episode 03 - Simple Architectures
Mastering OpenStack - Episode 03 - Simple ArchitecturesMastering OpenStack - Episode 03 - Simple Architectures
Mastering OpenStack - Episode 03 - Simple ArchitecturesRoozbeh Shafiee
 
Mastering OpenStack - Episode 11 - Scaling Out
Mastering OpenStack - Episode 11 - Scaling OutMastering OpenStack - Episode 11 - Scaling Out
Mastering OpenStack - Episode 11 - Scaling OutRoozbeh Shafiee
 
Mastering OpenStack - Episode 01 - Simple Architectures
Mastering OpenStack - Episode 01 - Simple ArchitecturesMastering OpenStack - Episode 01 - Simple Architectures
Mastering OpenStack - Episode 01 - Simple ArchitecturesRoozbeh Shafiee
 
Mastering OpenStack - Episode 08 - Storage Decisions
Mastering OpenStack - Episode 08 - Storage DecisionsMastering OpenStack - Episode 08 - Storage Decisions
Mastering OpenStack - Episode 08 - Storage DecisionsRoozbeh Shafiee
 
Mastering OpenStack - Episode 10 - Storage Decisions
Mastering OpenStack - Episode 10 - Storage DecisionsMastering OpenStack - Episode 10 - Storage Decisions
Mastering OpenStack - Episode 10 - Storage DecisionsRoozbeh Shafiee
 
Cloud Infrastructure Migration
Cloud Infrastructure MigrationCloud Infrastructure Migration
Cloud Infrastructure MigrationRoozbeh Shafiee
 
Mastering OpenStack - Episode 02 - Simple Architectures
Mastering OpenStack - Episode 02 - Simple ArchitecturesMastering OpenStack - Episode 02 - Simple Architectures
Mastering OpenStack - Episode 02 - Simple ArchitecturesRoozbeh Shafiee
 
OpenStack-Ansible Project Update
OpenStack-Ansible Project UpdateOpenStack-Ansible Project Update
OpenStack-Ansible Project UpdateJesse Pretorius
 
Openstack devops challenges
Openstack devops challenges Openstack devops challenges
Openstack devops challenges openstackindia
 
OpenStack Deployment in the Enterprise
OpenStack Deployment in the Enterprise OpenStack Deployment in the Enterprise
OpenStack Deployment in the Enterprise Cisco Canada
 
Red Hat OpenStack Deployment
Red Hat OpenStack DeploymentRed Hat OpenStack Deployment
Red Hat OpenStack DeploymentMichael Solberg
 
OpenStack Explained: Learn OpenStack architecture and the secret of a success...
OpenStack Explained: Learn OpenStack architecture and the secret of a success...OpenStack Explained: Learn OpenStack architecture and the secret of a success...
OpenStack Explained: Learn OpenStack architecture and the secret of a success...Giuseppe Paterno'
 
Role of sdn controllers in open stack
Role of sdn controllers in open stackRole of sdn controllers in open stack
Role of sdn controllers in open stackopenstackindia
 
Enhancing OpenStack FWaaS for real world application
Enhancing OpenStack FWaaS for real world applicationEnhancing OpenStack FWaaS for real world application
Enhancing OpenStack FWaaS for real world applicationopenstackindia
 
RedHat OpenStack Platform Overview
RedHat OpenStack Platform OverviewRedHat OpenStack Platform Overview
RedHat OpenStack Platform Overviewindevlab
 
Cloud Computing Open Stack Compute Node
Cloud Computing Open Stack Compute NodeCloud Computing Open Stack Compute Node
Cloud Computing Open Stack Compute NodePalak Sood
 

Mais procurados (20)

Mastering OpenStack - Episode 03 - Simple Architectures
Mastering OpenStack - Episode 03 - Simple ArchitecturesMastering OpenStack - Episode 03 - Simple Architectures
Mastering OpenStack - Episode 03 - Simple Architectures
 
Mastering OpenStack - Episode 11 - Scaling Out
Mastering OpenStack - Episode 11 - Scaling OutMastering OpenStack - Episode 11 - Scaling Out
Mastering OpenStack - Episode 11 - Scaling Out
 
Mastering OpenStack - Episode 01 - Simple Architectures
Mastering OpenStack - Episode 01 - Simple ArchitecturesMastering OpenStack - Episode 01 - Simple Architectures
Mastering OpenStack - Episode 01 - Simple Architectures
 
Mastering OpenStack - Episode 08 - Storage Decisions
Mastering OpenStack - Episode 08 - Storage DecisionsMastering OpenStack - Episode 08 - Storage Decisions
Mastering OpenStack - Episode 08 - Storage Decisions
 
Mastering OpenStack - Episode 10 - Storage Decisions
Mastering OpenStack - Episode 10 - Storage DecisionsMastering OpenStack - Episode 10 - Storage Decisions
Mastering OpenStack - Episode 10 - Storage Decisions
 
Cloud Infrastructure Migration
Cloud Infrastructure MigrationCloud Infrastructure Migration
Cloud Infrastructure Migration
 
Mastering OpenStack - Episode 02 - Simple Architectures
Mastering OpenStack - Episode 02 - Simple ArchitecturesMastering OpenStack - Episode 02 - Simple Architectures
Mastering OpenStack - Episode 02 - Simple Architectures
 
OpenStack-Ansible Project Update
OpenStack-Ansible Project UpdateOpenStack-Ansible Project Update
OpenStack-Ansible Project Update
 
Openstack devops challenges
Openstack devops challenges Openstack devops challenges
Openstack devops challenges
 
OpenStack Deployment in the Enterprise
OpenStack Deployment in the Enterprise OpenStack Deployment in the Enterprise
OpenStack Deployment in the Enterprise
 
Red Hat OpenStack Deployment
Red Hat OpenStack DeploymentRed Hat OpenStack Deployment
Red Hat OpenStack Deployment
 
Cloud Foundation
Cloud FoundationCloud Foundation
Cloud Foundation
 
Iran OpenStack Community
Iran OpenStack CommunityIran OpenStack Community
Iran OpenStack Community
 
OpenStack Explained: Learn OpenStack architecture and the secret of a success...
OpenStack Explained: Learn OpenStack architecture and the secret of a success...OpenStack Explained: Learn OpenStack architecture and the secret of a success...
OpenStack Explained: Learn OpenStack architecture and the secret of a success...
 
Role of sdn controllers in open stack
Role of sdn controllers in open stackRole of sdn controllers in open stack
Role of sdn controllers in open stack
 
Enhancing OpenStack FWaaS for real world application
Enhancing OpenStack FWaaS for real world applicationEnhancing OpenStack FWaaS for real world application
Enhancing OpenStack FWaaS for real world application
 
Tricircle overview
Tricircle overviewTricircle overview
Tricircle overview
 
What's new OpenStack kilo
What's new OpenStack kiloWhat's new OpenStack kilo
What's new OpenStack kilo
 
RedHat OpenStack Platform Overview
RedHat OpenStack Platform OverviewRedHat OpenStack Platform Overview
RedHat OpenStack Platform Overview
 
Cloud Computing Open Stack Compute Node
Cloud Computing Open Stack Compute NodeCloud Computing Open Stack Compute Node
Cloud Computing Open Stack Compute Node
 

Semelhante a Mastering OpenStack - Episode 12 - Network Design

Introduction to openstack
Introduction to openstackIntroduction to openstack
Introduction to openstackYaniv Zadka
 
Introduction to Open stack - An Overview
Introduction to Open stack - An Overview Introduction to Open stack - An Overview
Introduction to Open stack - An Overview SpringPeople
 
OpenStack as an Infrastructure
OpenStack as an InfrastructureOpenStack as an Infrastructure
OpenStack as an InfrastructureRoozbeh Shafiee
 
Unlock Your Cloud Potential with Mirantis OpenStack & Cumulus Linux
Unlock Your Cloud Potential with Mirantis OpenStack & Cumulus LinuxUnlock Your Cloud Potential with Mirantis OpenStack & Cumulus Linux
Unlock Your Cloud Potential with Mirantis OpenStack & Cumulus LinuxCumulus Networks
 
Mirantis OpenStack and Cumulus Linux Webinar
Mirantis OpenStack and Cumulus Linux WebinarMirantis OpenStack and Cumulus Linux Webinar
Mirantis OpenStack and Cumulus Linux WebinarKamesh Pemmaraju
 
Hands-on Lab: Test Drive Your OpenStack Network
Hands-on Lab: Test Drive Your OpenStack NetworkHands-on Lab: Test Drive Your OpenStack Network
Hands-on Lab: Test Drive Your OpenStack NetworkPLUMgrid
 
Cloud Architect Alliance #15: Openstack
Cloud Architect Alliance #15: OpenstackCloud Architect Alliance #15: Openstack
Cloud Architect Alliance #15: OpenstackMicrosoft
 
The Future of SDN in CloudStack by Chiradeep Vittal
The Future of SDN in CloudStack by Chiradeep VittalThe Future of SDN in CloudStack by Chiradeep Vittal
The Future of SDN in CloudStack by Chiradeep Vittalbuildacloud
 
tack Deployment in the Enterprise
tack Deployment in the Enterprisetack Deployment in the Enterprise
tack Deployment in the EnterpriseCisco Canada
 
Open stack and sdn hands-on and demo
Open stack and sdn hands-on and demoOpen stack and sdn hands-on and demo
Open stack and sdn hands-on and demoKyohei Moriyama
 
OpenStack and OpenDaylight Workshop: ONUG Spring 2014
OpenStack and OpenDaylight Workshop: ONUG Spring 2014OpenStack and OpenDaylight Workshop: ONUG Spring 2014
OpenStack and OpenDaylight Workshop: ONUG Spring 2014mestery
 
As a Service: Cloud Foundry on OpenStack - Lessons Learnt
As a Service: Cloud Foundry on OpenStack - Lessons LearntAs a Service: Cloud Foundry on OpenStack - Lessons Learnt
As a Service: Cloud Foundry on OpenStack - Lessons LearntAnimesh Singh
 
Open stack
Open stackOpen stack
Open stacksvm
 
what is OpenStack ? a breif documantation
what is OpenStack ? a breif documantationwhat is OpenStack ? a breif documantation
what is OpenStack ? a breif documantationmoeincanada007
 
Openstack_administration
Openstack_administrationOpenstack_administration
Openstack_administrationAshish Sharma
 
Ccna rse chp9 nat fo i_pv4
Ccna rse chp9 nat fo i_pv4Ccna rse chp9 nat fo i_pv4
Ccna rse chp9 nat fo i_pv4newbie2019
 
NaaS in OpenStack - CloudCamp Moscow
NaaS in OpenStack - CloudCamp MoscowNaaS in OpenStack - CloudCamp Moscow
NaaS in OpenStack - CloudCamp MoscowIlya Alekseyev
 
OpenStack for devops environment
OpenStack for devops environment OpenStack for devops environment
OpenStack for devops environment Orgad Kimchi
 
OpenStack Infrastructure at any Scale - Simple is BEST!? - - OpenStack最新情報セミ...
OpenStack Infrastructure at any Scale - Simple is BEST!? -  - OpenStack最新情報セミ...OpenStack Infrastructure at any Scale - Simple is BEST!? -  - OpenStack最新情報セミ...
OpenStack Infrastructure at any Scale - Simple is BEST!? - - OpenStack最新情報セミ...VirtualTech Japan Inc.
 

Semelhante a Mastering OpenStack - Episode 12 - Network Design (20)

Introduction to openstack
Introduction to openstackIntroduction to openstack
Introduction to openstack
 
Introduction to Open stack - An Overview
Introduction to Open stack - An Overview Introduction to Open stack - An Overview
Introduction to Open stack - An Overview
 
OpenStack as an Infrastructure
OpenStack as an InfrastructureOpenStack as an Infrastructure
OpenStack as an Infrastructure
 
Unlock Your Cloud Potential with Mirantis OpenStack & Cumulus Linux
Unlock Your Cloud Potential with Mirantis OpenStack & Cumulus LinuxUnlock Your Cloud Potential with Mirantis OpenStack & Cumulus Linux
Unlock Your Cloud Potential with Mirantis OpenStack & Cumulus Linux
 
Mirantis OpenStack and Cumulus Linux Webinar
Mirantis OpenStack and Cumulus Linux WebinarMirantis OpenStack and Cumulus Linux Webinar
Mirantis OpenStack and Cumulus Linux Webinar
 
Hands-on Lab: Test Drive Your OpenStack Network
Hands-on Lab: Test Drive Your OpenStack NetworkHands-on Lab: Test Drive Your OpenStack Network
Hands-on Lab: Test Drive Your OpenStack Network
 
Cloud Architect Alliance #15: Openstack
Cloud Architect Alliance #15: OpenstackCloud Architect Alliance #15: Openstack
Cloud Architect Alliance #15: Openstack
 
The Future of SDN in CloudStack by Chiradeep Vittal
The Future of SDN in CloudStack by Chiradeep VittalThe Future of SDN in CloudStack by Chiradeep Vittal
The Future of SDN in CloudStack by Chiradeep Vittal
 
tack Deployment in the Enterprise
tack Deployment in the Enterprisetack Deployment in the Enterprise
tack Deployment in the Enterprise
 
Open stack and sdn hands-on and demo
Open stack and sdn hands-on and demoOpen stack and sdn hands-on and demo
Open stack and sdn hands-on and demo
 
Openstack: starter level
Openstack: starter levelOpenstack: starter level
Openstack: starter level
 
OpenStack and OpenDaylight Workshop: ONUG Spring 2014
OpenStack and OpenDaylight Workshop: ONUG Spring 2014OpenStack and OpenDaylight Workshop: ONUG Spring 2014
OpenStack and OpenDaylight Workshop: ONUG Spring 2014
 
As a Service: Cloud Foundry on OpenStack - Lessons Learnt
As a Service: Cloud Foundry on OpenStack - Lessons LearntAs a Service: Cloud Foundry on OpenStack - Lessons Learnt
As a Service: Cloud Foundry on OpenStack - Lessons Learnt
 
Open stack
Open stackOpen stack
Open stack
 
what is OpenStack ? a breif documantation
what is OpenStack ? a breif documantationwhat is OpenStack ? a breif documantation
what is OpenStack ? a breif documantation
 
Openstack_administration
Openstack_administrationOpenstack_administration
Openstack_administration
 
Ccna rse chp9 nat fo i_pv4
Ccna rse chp9 nat fo i_pv4Ccna rse chp9 nat fo i_pv4
Ccna rse chp9 nat fo i_pv4
 
NaaS in OpenStack - CloudCamp Moscow
NaaS in OpenStack - CloudCamp MoscowNaaS in OpenStack - CloudCamp Moscow
NaaS in OpenStack - CloudCamp Moscow
 
OpenStack for devops environment
OpenStack for devops environment OpenStack for devops environment
OpenStack for devops environment
 
OpenStack Infrastructure at any Scale - Simple is BEST!? - - OpenStack最新情報セミ...
OpenStack Infrastructure at any Scale - Simple is BEST!? -  - OpenStack最新情報セミ...OpenStack Infrastructure at any Scale - Simple is BEST!? -  - OpenStack最新情報セミ...
OpenStack Infrastructure at any Scale - Simple is BEST!? - - OpenStack最新情報セミ...
 

Último

Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...
Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...
Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...Miguel Araújo
 
08448380779 Call Girls In Civil Lines Women Seeking Men
08448380779 Call Girls In Civil Lines Women Seeking Men08448380779 Call Girls In Civil Lines Women Seeking Men
08448380779 Call Girls In Civil Lines Women Seeking MenDelhi Call girls
 
08448380779 Call Girls In Greater Kailash - I Women Seeking Men
08448380779 Call Girls In Greater Kailash - I Women Seeking Men08448380779 Call Girls In Greater Kailash - I Women Seeking Men
08448380779 Call Girls In Greater Kailash - I Women Seeking MenDelhi Call girls
 
08448380779 Call Girls In Friends Colony Women Seeking Men
08448380779 Call Girls In Friends Colony Women Seeking Men08448380779 Call Girls In Friends Colony Women Seeking Men
08448380779 Call Girls In Friends Colony Women Seeking MenDelhi Call girls
 
TrustArc Webinar - Stay Ahead of US State Data Privacy Law Developments
TrustArc Webinar - Stay Ahead of US State Data Privacy Law DevelopmentsTrustArc Webinar - Stay Ahead of US State Data Privacy Law Developments
TrustArc Webinar - Stay Ahead of US State Data Privacy Law DevelopmentsTrustArc
 
Breaking the Kubernetes Kill Chain: Host Path Mount
Breaking the Kubernetes Kill Chain: Host Path MountBreaking the Kubernetes Kill Chain: Host Path Mount
Breaking the Kubernetes Kill Chain: Host Path MountPuma Security, LLC
 
From Event to Action: Accelerate Your Decision Making with Real-Time Automation
From Event to Action: Accelerate Your Decision Making with Real-Time AutomationFrom Event to Action: Accelerate Your Decision Making with Real-Time Automation
From Event to Action: Accelerate Your Decision Making with Real-Time AutomationSafe Software
 
The Codex of Business Writing Software for Real-World Solutions 2.pptx
The Codex of Business Writing Software for Real-World Solutions 2.pptxThe Codex of Business Writing Software for Real-World Solutions 2.pptx
The Codex of Business Writing Software for Real-World Solutions 2.pptxMalak Abu Hammad
 
Developing An App To Navigate The Roads of Brazil
Developing An App To Navigate The Roads of BrazilDeveloping An App To Navigate The Roads of Brazil
Developing An App To Navigate The Roads of BrazilV3cube
 
[2024]Digital Global Overview Report 2024 Meltwater.pdf
[2024]Digital Global Overview Report 2024 Meltwater.pdf[2024]Digital Global Overview Report 2024 Meltwater.pdf
[2024]Digital Global Overview Report 2024 Meltwater.pdfhans926745
 
Strategies for Unlocking Knowledge Management in Microsoft 365 in the Copilot...
Strategies for Unlocking Knowledge Management in Microsoft 365 in the Copilot...Strategies for Unlocking Knowledge Management in Microsoft 365 in the Copilot...
Strategies for Unlocking Knowledge Management in Microsoft 365 in the Copilot...Drew Madelung
 
The Role of Taxonomy and Ontology in Semantic Layers - Heather Hedden.pdf
The Role of Taxonomy and Ontology in Semantic Layers - Heather Hedden.pdfThe Role of Taxonomy and Ontology in Semantic Layers - Heather Hedden.pdf
The Role of Taxonomy and Ontology in Semantic Layers - Heather Hedden.pdfEnterprise Knowledge
 
Slack Application Development 101 Slides
Slack Application Development 101 SlidesSlack Application Development 101 Slides
Slack Application Development 101 Slidespraypatel2
 
Kalyanpur ) Call Girls in Lucknow Finest Escorts Service 🍸 8923113531 🎰 Avail...
Kalyanpur ) Call Girls in Lucknow Finest Escorts Service 🍸 8923113531 🎰 Avail...Kalyanpur ) Call Girls in Lucknow Finest Escorts Service 🍸 8923113531 🎰 Avail...
Kalyanpur ) Call Girls in Lucknow Finest Escorts Service 🍸 8923113531 🎰 Avail...gurkirankumar98700
 
Axa Assurance Maroc - Insurer Innovation Award 2024
Axa Assurance Maroc - Insurer Innovation Award 2024Axa Assurance Maroc - Insurer Innovation Award 2024
Axa Assurance Maroc - Insurer Innovation Award 2024The Digital Insurer
 
GenCyber Cyber Security Day Presentation
GenCyber Cyber Security Day PresentationGenCyber Cyber Security Day Presentation
GenCyber Cyber Security Day PresentationMichael W. Hawkins
 
Factors to Consider When Choosing Accounts Payable Services Providers.pptx
Factors to Consider When Choosing Accounts Payable Services Providers.pptxFactors to Consider When Choosing Accounts Payable Services Providers.pptx
Factors to Consider When Choosing Accounts Payable Services Providers.pptxKatpro Technologies
 
WhatsApp 9892124323 ✓Call Girls In Kalyan ( Mumbai ) secure service
WhatsApp 9892124323 ✓Call Girls In Kalyan ( Mumbai ) secure serviceWhatsApp 9892124323 ✓Call Girls In Kalyan ( Mumbai ) secure service
WhatsApp 9892124323 ✓Call Girls In Kalyan ( Mumbai ) secure servicePooja Nehwal
 
08448380779 Call Girls In Diplomatic Enclave Women Seeking Men
08448380779 Call Girls In Diplomatic Enclave Women Seeking Men08448380779 Call Girls In Diplomatic Enclave Women Seeking Men
08448380779 Call Girls In Diplomatic Enclave Women Seeking MenDelhi Call girls
 
Finology Group – Insurtech Innovation Award 2024
Finology Group – Insurtech Innovation Award 2024Finology Group – Insurtech Innovation Award 2024
Finology Group – Insurtech Innovation Award 2024The Digital Insurer
 

Último (20)

Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...
Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...
Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...
 
08448380779 Call Girls In Civil Lines Women Seeking Men
08448380779 Call Girls In Civil Lines Women Seeking Men08448380779 Call Girls In Civil Lines Women Seeking Men
08448380779 Call Girls In Civil Lines Women Seeking Men
 
08448380779 Call Girls In Greater Kailash - I Women Seeking Men
08448380779 Call Girls In Greater Kailash - I Women Seeking Men08448380779 Call Girls In Greater Kailash - I Women Seeking Men
08448380779 Call Girls In Greater Kailash - I Women Seeking Men
 
08448380779 Call Girls In Friends Colony Women Seeking Men
08448380779 Call Girls In Friends Colony Women Seeking Men08448380779 Call Girls In Friends Colony Women Seeking Men
08448380779 Call Girls In Friends Colony Women Seeking Men
 
TrustArc Webinar - Stay Ahead of US State Data Privacy Law Developments
TrustArc Webinar - Stay Ahead of US State Data Privacy Law DevelopmentsTrustArc Webinar - Stay Ahead of US State Data Privacy Law Developments
TrustArc Webinar - Stay Ahead of US State Data Privacy Law Developments
 
Breaking the Kubernetes Kill Chain: Host Path Mount
Breaking the Kubernetes Kill Chain: Host Path MountBreaking the Kubernetes Kill Chain: Host Path Mount
Breaking the Kubernetes Kill Chain: Host Path Mount
 
From Event to Action: Accelerate Your Decision Making with Real-Time Automation
From Event to Action: Accelerate Your Decision Making with Real-Time AutomationFrom Event to Action: Accelerate Your Decision Making with Real-Time Automation
From Event to Action: Accelerate Your Decision Making with Real-Time Automation
 
The Codex of Business Writing Software for Real-World Solutions 2.pptx
The Codex of Business Writing Software for Real-World Solutions 2.pptxThe Codex of Business Writing Software for Real-World Solutions 2.pptx
The Codex of Business Writing Software for Real-World Solutions 2.pptx
 
Developing An App To Navigate The Roads of Brazil
Developing An App To Navigate The Roads of BrazilDeveloping An App To Navigate The Roads of Brazil
Developing An App To Navigate The Roads of Brazil
 
[2024]Digital Global Overview Report 2024 Meltwater.pdf
[2024]Digital Global Overview Report 2024 Meltwater.pdf[2024]Digital Global Overview Report 2024 Meltwater.pdf
[2024]Digital Global Overview Report 2024 Meltwater.pdf
 
Strategies for Unlocking Knowledge Management in Microsoft 365 in the Copilot...
Strategies for Unlocking Knowledge Management in Microsoft 365 in the Copilot...Strategies for Unlocking Knowledge Management in Microsoft 365 in the Copilot...
Strategies for Unlocking Knowledge Management in Microsoft 365 in the Copilot...
 
The Role of Taxonomy and Ontology in Semantic Layers - Heather Hedden.pdf
The Role of Taxonomy and Ontology in Semantic Layers - Heather Hedden.pdfThe Role of Taxonomy and Ontology in Semantic Layers - Heather Hedden.pdf
The Role of Taxonomy and Ontology in Semantic Layers - Heather Hedden.pdf
 
Slack Application Development 101 Slides
Slack Application Development 101 SlidesSlack Application Development 101 Slides
Slack Application Development 101 Slides
 
Kalyanpur ) Call Girls in Lucknow Finest Escorts Service 🍸 8923113531 🎰 Avail...
Kalyanpur ) Call Girls in Lucknow Finest Escorts Service 🍸 8923113531 🎰 Avail...Kalyanpur ) Call Girls in Lucknow Finest Escorts Service 🍸 8923113531 🎰 Avail...
Kalyanpur ) Call Girls in Lucknow Finest Escorts Service 🍸 8923113531 🎰 Avail...
 
Axa Assurance Maroc - Insurer Innovation Award 2024
Axa Assurance Maroc - Insurer Innovation Award 2024Axa Assurance Maroc - Insurer Innovation Award 2024
Axa Assurance Maroc - Insurer Innovation Award 2024
 
GenCyber Cyber Security Day Presentation
GenCyber Cyber Security Day PresentationGenCyber Cyber Security Day Presentation
GenCyber Cyber Security Day Presentation
 
Factors to Consider When Choosing Accounts Payable Services Providers.pptx
Factors to Consider When Choosing Accounts Payable Services Providers.pptxFactors to Consider When Choosing Accounts Payable Services Providers.pptx
Factors to Consider When Choosing Accounts Payable Services Providers.pptx
 
WhatsApp 9892124323 ✓Call Girls In Kalyan ( Mumbai ) secure service
WhatsApp 9892124323 ✓Call Girls In Kalyan ( Mumbai ) secure serviceWhatsApp 9892124323 ✓Call Girls In Kalyan ( Mumbai ) secure service
WhatsApp 9892124323 ✓Call Girls In Kalyan ( Mumbai ) secure service
 
08448380779 Call Girls In Diplomatic Enclave Women Seeking Men
08448380779 Call Girls In Diplomatic Enclave Women Seeking Men08448380779 Call Girls In Diplomatic Enclave Women Seeking Men
08448380779 Call Girls In Diplomatic Enclave Women Seeking Men
 
Finology Group – Insurtech Innovation Award 2024
Finology Group – Insurtech Innovation Award 2024Finology Group – Insurtech Innovation Award 2024
Finology Group – Insurtech Innovation Award 2024
 

Mastering OpenStack - Episode 12 - Network Design

  • 1. Presentation By: Roozbeh Shafiee Winter 2015 IRAN OpenStack Users Group MASTERING OPENSTACK (Episode 12) Network Design
  • 2. IRAN Community| OpenStack.ir Agenda: • Management Network • Manage IP Addressing • IP Address Planning • Iran OpenStack Community OpenStack Network Design
  • 3. IRAN Community| OpenStack.ir Network Design OpenStack Network Design
  • 4. IRAN Community| OpenStack.ir Perquisites before network design Before beginning, you must plan the number of IP addresses that you need for both 
 your guest instances as well as management infrastructure. Additionally, you must research and discuss cloud network connectivity through 
 proxy servers and firewalls. Today, we will give some examples of network implementations to consider and 
 provide information about some of the network layouts that OpenStack uses. 
 Finally, we have some brief notes on the networking services that are essential for 
 stable operation. OpenStack Network Design
  • 5. IRAN Community| OpenStack.ir Management Network OpenStack Network Design
  • 6. IRAN Community| OpenStack.ir Management Network A management network (a separate network for use by your cloud operators) 
 typically consists of a separate switch and separate NICs (network interface cards), 
 and is a recommended option. This segregation prevents system administration and the monitoring of system 
 access from being disrupted by traffic generated by guests. OpenStack Network Design
  • 7. IRAN Community| OpenStack.ir Management Network Using a virtual local area network (VLAN) works well for these scenarios because it 
 provides a method for creating multiple virtual networks on a physical network. Consider creating other private networks for communication between internal 
 components of OpenStack, such as the message queue and OpenStack Compute. OpenStack Network Design
  • 8. IRAN Community| OpenStack.ir Manage IP Addressing OpenStack Network Design
  • 9. IRAN Community| OpenStack.ir Manage IP Addressing There are two main types of IP addresses for guest virtual machines: • Fixed IPs • Floating IPs Each instance has a private, Fixed IP address and can also have a public, or Floating 
 IP address. Private IP addresses are used for communication between instances, 
 and public addresses are used for communication with networks outside the 
 cloud, including the Internet. OpenStack Network Design
  • 10. IRAN Community| OpenStack.ir Manage IP Addressing When you launch an instance, it is automatically assigned a private IP address that 
 stays the same until you explicitly terminate the instance. Rebooting an instance 
 has no effect on the private IP address.
 
 A pool of floating IP addresses, configured by the cloud administrator, is available 
 in OpenStack Compute. OpenStack Network Design
  • 11. IRAN Community| OpenStack.ir Manage IP Addressing Fixed IP addresses are required, whereas it is possible to run OpenStack without 
 floating IPs. 
 
 One of the most common use cases for floating IPs is to provide public IP addresses 
 to a private cloud, where there are a limited number of IP addresses available. 
 
 Another is for a public cloud user to have a static IP address that can be reassigned 
 when an instance is upgraded or moved. OpenStack Network Design
  • 12. IRAN Community| OpenStack.ir IP Address Planning OpenStack Network Design
  • 13. IRAN Community| OpenStack.ir IP Address Planning An IP address plan might be broken down into the following sections: • Subnet router • Control services public interfaces • Object Storage cluster internal communications • Compute and storage communications • Out of band remote management • In-band remote management • Spare space for future growth OpenStack Network Design
  • 14. IRAN Community| OpenStack.ir Subnet Router Packets leaving the subnet go via this address, which could be a dedicated router 
 or a nova-network service. OpenStack Network Design
  • 15. IRAN Community| OpenStack.ir Control Services Public Interfaces Public access to swift-proxy, nova-api, glance-api, and horizon come to these 
 addresses, which could be on one side of a load balancer or pointing at individual 
 machines. OpenStack Network Design
  • 16. IRAN Community| OpenStack.ir Object Storage Cluster Internal Communications Traffic among object/account/container servers and between these and the proxy
 server’s internal interface uses this private network. OpenStack Network Design
  • 17. IRAN Community| OpenStack.ir Compute and Storage Communications If ephemeral or block storage is external to the compute node, this network is used. OpenStack Network Design
  • 18. IRAN Community| OpenStack.ir Out of Band Remote Management If a dedicated remote access controller chip is included in servers, often these are 
 on a separate network. OpenStack Network Design
  • 19. IRAN Community| OpenStack.ir In-Band Remote Management Often, an extra (such as 1 GB) interface on compute or storage nodes is used for 
 system administrators or monitoring tools to access the host instead of going 
 through the public interface. OpenStack Network Design
  • 20. IRAN Community| OpenStack.ir Spare space For Future Growth Adding more public-facing control services or guest instance IPs should always 
 be part of your plan. OpenStack Network Design
  • 21. IRAN Community| OpenStack.ir Iran OpenStack Community OpenStack Network Design
  • 22. IRAN Community| OpenStack.ir Stay in Touch and Join Us: • Home Page: OpenStack.ir • Meetup Page: Meetup.com/Iran-OpenStack • Mailing List: OpenStack-ir@Lists.OpenStack.org • Twitter: @OpenStackIR , #OpenStackIRAN • IRC Channel on FreeNode: #OpenStack-ir OpenStack Network Design
  • 23. Roozbeh Shafiee Iran OpenStack Community Manager Roozbeh@OpenStack.ir OpenStack.ir Thank You We need to work together to build a better community