52
RED HAT ENTERPRISE LINUX OPENSTACK PLATFORM Product Overview Donny Davis Solution Architect

RED HAT ENTERPRISE LINUX OPENSTACK PLATFORMfiles.meetup.com/18251150/160402-RHEL-OSP7.pdfRED HAT ENTERPRISE LINUX OPENSTACK PLATFORM Product Overview Donny Davis Solution Architect

  • Upload
    others

  • View
    96

  • Download
    0

Embed Size (px)

Citation preview

RED HAT ENTERPRISE LINUX OPENSTACK PLATFORM

Product Overview

Donny DavisSolution Architect

IT Operations is Being Challenged By New Demands

Application demands are becoming more complex

IMMEDIATE PERVASIVE AWARE

CLOUD MOBILE INTERNET OF THINGS

BIG DATA AUTOMATION ABSTRACTION

These New Demands Are Forcing a Shift in Application Design

Application requirements are becoming more diverse

Existing infrastructure is not designed to do this!● Data has become too large

● We're producing vast amounts of data, exponentially!● Way past the ability of traditional systems & applications● Scaling UP no longer works. Scaling OUT is a necessity

● Service requests are too large ● More and more client devices coming online

● Mobile phones, tablets, etc.● Much harder to maintain service to customers

● Traditional applications and infrastructure were not written to cope with this level of demand

IT Operations Must Adapt

What is OpenStack?

• Modular architecture• Designed to easily scale out• Based on (growing) set of core services

Cloud Infrastructure for Cloud Workloads

OpenStack meets the needs of new “scale-out” applications● Brings public cloud-like capabilities into your datacenter● Provides massive on-demand (scale-out) capacity

1,000's 10,000's 100k's of VMs→ →

● Removes vendor lock-in● Open source provides high-degree of flexibility to customize and

interoperate● Community development = higher “feature velocity”

● Features and functions you need, faster to market over proprietary software

● Greater automation, resource provisioning, and scaling

Why OpenStack?

Am I Ready for OpenStack?TRADITIONAL: SCALE UP

(RHEV)CLOUD: SCALE OUT

(OpenStack)MIXED/HYBRID

Big stateful VM Small stateless VMs Combination of traditional scale-up and cloud scale-out

workloads.

For example: Database may be hosted on traditional

workloads, web front-end and logic layers on cloud

workloads.

1 Application 1 VM→ 1 Application Many VMs→

Lifecycle in years Lifecycle hours to months

Scale up (VM gets bigger) Scale out (add VMs)

Not designed to tolerate failure of VM, so you need features

that keep VMs up

If a VM dies, application kills it and creates a new one, app

stays up

Application SLA requires enterprise virtualization

features (migration, HA, etc.) to keep applications available

Application SLA requires adding/removing VM instances to application cloud to maintain

application availability

Traditional and Virtualvs

Cloud Workloads

Cloud requires new application architecture

TRADITIONAL APPS

CLOUD WORKLOADS

Not built-in fault tolerant

Scale up

Stateful

Monolithic

Life cycled measured in

years

Recover on error

Application fault tolerant

Scale out

Stateless

Modular

Agile development

Replace on error

Better Performing Workloads Application Scale Up Vs Scale Out

Move application to a more powerful server

Move VM to better infrastructure (Network, CPU, RAM)

Increase the number of VM instances that are running the application and load balance

16GB 8CPU192GB 32CPU

SCA

LE

OU

TSC

ALE

UP

Cloud Workload Candidates

● Bad Candidates:● High disk usage (I/O) requirements● Need for low network latency● Hardware requirements

● Good Candidates:● Unpredictable service loads● Easily scaled out (not up) web applications● Occasional workloads (monthly, quarterly, etc.)

Why Red Hat?

OpenStack: Framework for the Cloud

• Needs to access x86 hardware resources

• Needs an operating environment, hypervisor, services

• Leverages existing code libraries for functionality

Red Hat Enterprise Linux OpenStack Platform

• It is dependent on the underlying Linux

• Optimized and co-engineered with Red Hat Enterprise Linux

A typical OpenStack cloud is made up of at least 9 core services + plugins to interact with 3rd party systems

● These services run on top of a Linux distribution with a complex set of user space integration dependencies

● OpenStack cannot be productized as a stand alone layer

● A supported, stable platform requires integration and testing of each of the components

“If your Windows virtual machine hosted by a KVM hypervisor running on an IBM blade, connecting to an EMC storage array through an Emulex HBA has issues with storage corruption, who do you call?”

Red Hat

Supported Guests

OpenStack

KVM

RHEL

Hardware

The Importance of Integration with Linux

• Virtualization – guest performance, reliability and Windows

• Security - SELinux enforcing guest isolation

• Network – SDN/OVS performance optimized

• Storage – vendor plugins, performance, thin provisioning

• Ecosystem – certification of hardware, storage and networks

LinuxKernel

Security Enhanced Linux (SELinux)

KVM Network Stack

Device Drivers

Red Hat

Supported Guests

OpenStack

KVM

RHEL

Hardware

Red Hat Enterprise LinuxOptimized Enablers for OpenStack

RHEL OpenStack Platform Director● API driven deployment of RHEL OpenStack Platform● Uses best practices and reference architectures from the field● Based on upstream OpenStack deployment program – TripleO● Enables Pacemaker driven HA across Control plane● Tightly integrates with Red Hat Ceph Storage as a storage backend● Supported partner hardware integration (Ironic)

● Cisco UCS, Dell, Intel, HP, Fujitsu, SeaMicro, and Open CloudServer

● Supported partner service integration (new for v7)● Cisco Nexus 1000v (networking)● Netapp Data ONTAP (Cinder storage)

● APIs for deployment and management● CLI operations● Ready state configuration for selected hardware (RAID, BIOS,

Network)● Automatically selects appropriate nodes from hardware inventory● Ability to validate installation post deployment using Tempest● Automatic HA configuration using Pacemaker● Scaling - add compute and storage capacity● Ceph server deployment and configuration support for storage

backends● Ability to hook to existing Ceph deployments [7.1]● External hardware load balancer support [7.1]

Director: Built for the Enterprise

● Minor releases every 2 months● Accelerated release cycle● Shorter feedback loop from field to implementation● Faster delivery of enhanced version containing bug fixes, new

features, partner integrations● Point releases won't carry changes that require core changes

(e.g. change of db schemas)● Major releases every 6 months

● Includes core OpenStack service updates and director changes

Director: Accelerated Lifecycle

● Core compute service comprised of compute node and distributed controllers to manage scheduling

● Native OpenStack API and Amazon EC2 compatible API

● Manages server resources, including CPU, memory, disk, and network

● Provides role based access control (RBAC) and security grouping to restrict access to resources

● Integrated with dashboard and RHEL OpenStack Platform director

● Bare-metal provisioning provides a solution for the “bare metal to tenant”● Hadoop on bare metal within

OpenStack● Hyperscale and High performance

computing (HPC) clusters● Database hosting for virtual machine

sensitive applications● Used by the director for re-

provisioning of system resources● NFV specific functionality

● vCPU pinning● Large pages● vCPU, RAM, and I/O device NUMA

awareness

RHEL OpenStack Platform 7Compute

● Core OpenStack networking service provides flexible architecture to meet application needs

● manages IP addresses, allowing for dedicated static, DHCP, or floating IPs

● Pluggable architecture provides network flexibility

● Deploy a software-defined networking (SDN) datacenter allowing massive multi-tenancy

● Support for port-security with ML2/OVS● Allow to disable/enable security-

groups (and default anti-spoofing rules) per Neutron port

● Required by network functions implemented in a VM

● Full IPv6 support● Support for multiple IPv6 prefixes on a

network● IPv6 external router connectivity

● Load Balancing as a Service ● Including support for SSL/TLS

termination

RHEL OpenStack Platform 7Networking

● NFS & POSIX Backup– Cinder backup supports

NFS/POSIX supplied data repositories as backup target

● Enhanced iSCSI multipath support– Cinder can return multiple iSCSI

paths information so that the connector can attach volumes even when the primary path is down

● Private Volume Types – Allows to restrict Cinder volume

types to selected users

RHEL OpenStack Platform 7 Block Storage

● Provides persistent block (volume) level storage device

● Manages the creation, attaching, and detaching of block devices to servers

● Full integration with compute nodes and the dashboard for easy management

● Offers flexible support for external storage solutions

● Uses Red Hat Ceph Storage as default block storage solution

● Incremental snapshot and management capabilities help simplify backup and restore process

● Supports composite tokens & service accounts for two levels of permission

● Replication for global distributed cluster

● By reducing the amount of data transfer between regions

● Fully integrated into RHEL OpenStack Platform director for configuration and management purposes

RHEL OpenStack Platform 7Object Storage

● Provides massively scalable and distributed object storage system, capable of storing petabytes of data● Distributed system provides

greater scalability, redundancy, and long-term availability

● Ideal for static data, such as VM images, photo's, email, etc

● Designed to scale in clusters horizontally

● Native API and Amazon S3 compatible

● Convert imported images on-the-fly while importing an image ● Supports qcow2/raw formats

● Add software metadata definitions and specify information about images● Integrated with dashboard

● Metadata extraction allows introspection of images for more granular control and monitoring

● Disable images after import to check for contaminations/viruses

RHEL OpenStack Platform 7Image Storage

● Core OpenStack image storage service for disk and server images, snapshots, and backups

● Store and catalog an unlimited number of backups

● Built on a flexible REST API backend● Supports base templates from which

users can launch new instances● Users can choose from available

images, or create their own from existing servers

● Cinder HA via Ceph● Ensure Cinder volumes remain

available if one or multiple nodes, hosting the Cinder services or volumes

● Support over subscription in thin provisioning ● The Cinder scheduler is aware of

thin provisioning/data reduction provided by the Ceph backend

● Offload RBD copy_volume_to_image function ● Expedites the volume data copy

speed

RHEL OpenStack Platform 7Ceph Integration

● RHEL OpenStack Platform director now sets Red Hat Ceph Storage as the default block storage solution

• Monitor nodes are collocated with controllers nodes

● Red Hat Ceph Storage 1.3 integration during installation

• Red Hat Ceph Storage clients• Red Hat Ceph Storage Server1

(new)

1Red Hat Ceph Storage entitlement and subscription sold separately

● Supports identity federation for authentication against external identity providers● Supports SAML

● Supports web single sign on authentication via a web browser with an existing IdP, through a Single Sign-On page

● Cloud Auditing Data Federation (CADF)● Adds ability to audit Keystone

create, update,delete operations in CADF standard

RHEL OpenStack Platform 7Identity

● Provides common identity and authorization framework across the stack

● Manages all users, tenants, and roles● Maintains a pluggable backend for

integration with common backend directory services, like LDAP, SQL, PAM, etc.

● Supports username, password, and tokens

● Support for hierarchical multi-tenancy ownership and management of projects and quotas

RHEL OpenStack Platform 7IaaS+ Shared Services

● Monitoring (Ceilometer)● Aggregates usage and performance data across all services● Provides visibility and metrics of resource usage and availability

● Data Processing (Sahara)● Provisioning and management of Hadoop clusters and elastic data

processing on bare metal OpenStack● Certified for Hortonworks, with Cloudera certification in progress

● Orchestration (Heat)● A template-driven service built on API backend to describe and

automate the deployment of infrastructure● Supports compute, storage, and networking configurations, as well as

automation of post-deployment provisioning

RHEL OpenStack Platform 7Hypervisor Support

Red Hat Enterprise Virtualization Hypervisor*Red Hat Enterprise Linux KVM

● Lightweight / small footprint● Less overhead● Smaller attack surface

● Cost effective● Closer to operating system DNA● Provides massive scale-out capabilities● Maximum benefit with virtualized Linux

VMware vSphere*vCenter Driver

● Co-exist with existing infrastructure assets

● Provides a seamless path to future migration to OpenStack

● Uses NSX1 plugin for Neutron

1NSX is only supported in production environments, per VMware's support requirements

*ESXi driver not supported

RHEL OpenStack Platform 7

● Red Hat Enterprise Linux 3

● Red Hat Enterprise Linux 4

● Red Hat Enterprise Linux 5

● Red Hat Enterprise Linux 6

● Red Hat Enterprise Linux 7

● Red Hat Enterprise Linux Atomic Host

*32 and 64 bit for all versions of RHEL

● Windows XP SP3+1

● Windows 73

● Windows 83

Microsoft SVVP Certified● Windows Server 2003 SP2+3

● Windows Server 20083

● Windows Server 2008 R22

● Windows Server 20122

1 32 bit only2 64 bit only3 32 and 64 bit

● SUSE Linux Enterprise Server 10

● SUSE Linux Enterprise Server 11

*32 and 64 bit for all versions

RHEL OpenStack Platform 7 Virtual Guest Support

Largest OpenStack Partner Ecosystem

OEMs, IHVs, and ISVs

System Integrators

Channel Partners

Cloud Service ProvidersManaged Service Providers

• Over 350+ members since launch in April 2013• Over 900 certified solutions in partner Marketplace• Over 4,000 RHEL certified compute servers• Over 13,000 applications available on RHEL

● Training● RH318 Red Hat Enterprise Virtualization Administration ● CL210 Red Hat OpenStack Administration● CL220R Red Hat CloudForms Administration

● Certification● Red Hat Certified Virtualization Administrator (RHCVA)● Red Hat Certificate of Expertise in OpenStack IaaS

● Consulting● Advanced identity management for OpenStack● Red Hat Consulting Discovery Session: Cloud Strategy● Red Hat Consulting Assessment: Infrastructure-as-a-Service● Red Hat Consulting Smart Start: Infrastructure-as-a-Service● Red Hat Consulting Guided Transition: Cloud Management

Red Hat Cloud Services

What's Coming?

RHEL OpenStack Platform 7 Tech Preview

*Tech Preview features are subject to change in GA release

Tech PreviewTroveOpenStack Database-as-a-Service

• Provides scalable and reliable cloud database as a service provisioning functionality

• Supports relational and non-relational database engines

• Native OpenStack Heat templates (incl. “hot” template)

• Provision and manage multiple database instances as needed

• API supports JSON and XML to provision and manage instances

*Tech Preview features are subject to change in GA release

OpenStack DNS as a Service● Provide massively scalable domain name system services● Built on REST API for domain/record management● Supports multi-tenancy● Integrated with Keystone for authentication● Framework in place for future integration with Nova and Neutron

notifications (for auto-generated records)

Tech PreviewDesignate

*Tech Preview features are subject to change in GA release

*Tech Preview features are subject to change in GA release

File share service● An open, standard API for file system provisioning and management● Designed to provide a multi-tenant, secure file share as a service

across OpenStack compute instances● Vendor neutral API for provisioning and attaching filesystem-based

storage such as NFS, CIFS, GlusterFS and other network filesystems

Example use cases● Run legacy enterprise

applications on OpenStack● Improve IT responsiveness by

providing self-service share management

● Cross-tenant sharing of data

Tech PreviewManila

*Future release features are subject to change and are not committed to any specific release or date

Future TechnologiesContainers

Focused on supporting two use cases● Deploying OpenStack itself● Deploying container workloads on top of OpenStack

● Primary project focus and involvement● Project “Kolla” for OpenStack deployment● Heat-kubernetes for deploying RHEL Atomic on OpenStack and configuring

a Kubernetes cluster for user workloads● Kubernetes integration with OpenStack infrastructure services

● e.g. Networking and Storage● Kubernetes cloud provider plug-in for OpenStack

Community Contributions...

20.09%10.37%

18.78%

11.31%

22.46%

29.99%

4.36% 25.62%8.82%

24.23%

82.91%

Nova Horizon Heat Neutron CeilometerSahara Cinder Swift Glance IronicTripleO-heat-temps

Source:http://activity.openstack.org/dash/browser/scm-companies.html?release=kilo http://stackalytics.com/?release=kilo&company=red%20hat

Overall commits per company (aggregated)

Red Hat total community contributions (projects)

0

500

1000

1500

2000

2500

3000

3500

4000Red Hat

HP

IBM

Mirantis

Rackspace

Yahoo!

OpenStack Foundation

NEC

Cisco

Red Hat Community ContributionsTop Contributor to Kilo Release

With Red Hat's near 20 year history in open source, we have the experience and resources to:

● Support production-ready customers globally● Drive new features● Influence strategy and direction of project● Enable partner collaboration

● Wide ranging participation in OpenStack projects, contrasts with most vendors who are more narrowly focused

● All of these efforts allows us to create a production-ready distribution with ecosystem, enterprise lifecycle, and support that customers expect from Red Hat

Red Hat's OpenStack LeadershipWhy these statistics matter?

Integrated Cloud Solutions...

Red Hat Cloud InfrastructureDelivering an open private cloud

Open Hybrid CloudCloudForms adds heterogeneous capacity

Red Hat Cloud Suite for ApplicationsIntegrated DevOps Platform for the enterprise

IaaS PaaS Management

How are Customers Deploying It?

All the value of community OpenStack and...● Enterprise hardened code● Co-engineered and integrated with Red Hat Enterprise Linux ● Integrated deployment, orchestration, & management tools● World-class global production-level support● Worlds largest OpenStack partner ecosystem● OpenStack training, certification, and professional services● Integrated with a trusted & proven solution stack

● Red Hat Enterprise Linux● Red Hat CloudForms ● Red Hat Enterprise Virtualization● Red Hat Storage (Ceph and Gluster)● OpenShift by Red Hat (PaaS)

Why RHEL OpenStack Platform?

Customer Example

● Red Hat Enterprise Linux

● Red Hat Enterprise Linux

OpenStack Platform

● OpenShift Enterprise by Red Hat

● Red Hat CloudForms

● Red Hat Consulting

“FICO has reduced time to value for

developing analytic solutions by up to

70%...”

-Tony McGivern, CIO, FICO

● Runs FICO analytic cloud in hybrid mode, using OpenShift Enterprise and OpenShift online

● Runs all OpenShift on Red Hat Enterprise Linux OpenStack Platform

● Leverages CloudForms for hybrid operations management

Customer Example

“Red Hat is an open source and OpenStack leader and its enterprise-class cloud solutions are widely

used in the market... ...it strongly supports our strategy to smoothly transition proven carrier-grade core software

applications to NFV OpenStack cloud environments.“

- Michael Clever, Sr VP of Core at Nokia Networks

● Using Red Hat Enterprise Linux OpenStack platform to enable efficient operation of the Nokia virtualized core network functions and management systems

● Moving “Liquid Core” application suite from existing hardware and software stack stack to a fully software-defined networking (SDN) solution

● Red Hat Enterprise Linux

OpenStack Platform

● Red Hat Enterprise Linux

Customer Example“As we expand our computing resources, more of the infrastructure will reside on Red Hat Enterprise Linux OpenStack Platform as the resource governing framework. Red Hat will be a huge part of our growth.“

- CHUCK GILBERT, TECHNICAL DIRECTOR FOR ADVANCED CYBERINFRASTRUCTURE

● Red Hat Enterprise Linux

OpenStack Platform

● Red Hat Enterprise Linux

● Red Hat CloudForms

● Red Hat Satellite

● Red Hat Training

● Runs private cloud for world-class research team

● Required greater responsiveness and infrastructure agility for on-demand computing requirements

● Resulting solution has minimized infrastructure downtime

Individual product for easy integration into your infrastructure● Standalone product● Good for experienced enterprise

customers● Consider optional consulting and

services for integration expertise

How Can I Get It?Offering choice based on your needs...

Purchase as fully integrated, turn-key cloud solution● Integrated with trusted software

stack● Red Hat Enterprise Linux● Red Hat Enterprise

Virtualization● Red Hat Satellite

THANK YOU

plus.google.com/+RedHat

linkedin.com/company/red-hat

youtube.com/user/RedHatVideos

facebook.com/redhatinc

twitter.com/RedHatNews