Reimagining OpenStack*

Transcription

1 Reimagining OpenStack* Kristen Accardi *Other names and brands may be claimed as the property of others. 1

2 "Evaluators of OpenStack believe that complexity and difficulty of deployment are decreasing, while users of OpenStack are more likely to rate that complexity and difficulty of deployment are increasing," -- 2

3 Along with a lack of operational tools, other challenges identified in the OpenStack survey included security concerns. Just over one-quarter of respondents cited an inadequate security framework while 23 percent flagged the lack of operational tools as the biggest challenges posed by OpenStack

4 85% of users are currently paying for support. Maturation is not happening fast enough -- 4

5 5

6 Today, Intel is investing in and around OpenStack* to make it higher performing and easier to deploy *Other names and brands may be claimed as the property of others. 6

7 The data speaks to a multi-modal future 7

8 If we created OpenStack* today, what would it look like? *Other names and brands may be claimed as the property of others. 8

9 Workload agnostic Fully secure Highly scalable Continuous integration Ease of deployment 9

10 ciao! (Cloud Integrated Advanced Orchestrator) 10

11 Architecture comparison OpenStack* OpenStack CLI Keystone (Identity Services) Users & Front end ciao WebUI Nova/Cinder/Glance API subset Nova/Magnum/Ironic/Neutron API s Nova VM Scheduling Magnum Container Scheduling Ironic Bare Metal Scheduling ciao CLI Keystone Horizon WebUI ciao ciao controller ciao scheduler Control plane Container VM VM Nova H/W Glance OS Disk Images VM Nova+Magnum H/W Cinder User Data Disks Nova Networking Bare Metal App Ironic H/W Swift Object Storage Neutron Networking Container Container VM Bare Metal App Ciao Launcher Ciao Launcher Ciao Launcher Ciao Launcher H/W H/W H/W H/W VM Compute resources Storage Networking VM ciao image (cephfs) ciao storage (ceph) ciao networking *Other names and brands may be claimed as the property of others. 11

12 12

13 Highly scalable Push/pull scheduler Fair scheduling (for now) Distributed decision making Asynchronous IPC Stateless components START/STOP DELETE Controller STATS Scheduler READY STATS START/STOP DELETE Launcher Launcher 13

14 Launcher Workload agnostic All instances are equal Hypervisor abstraction L2 connectivity qemu GRE Tunnel Tenant CNCI Launcher *Other names and brands may be claimed as the property of others. Networking Node Launcher qemu Docker VM Ctr Tenant bridge Docker* qemu Docker Ctr Compute Node Tenant bridge Compute Node 14

15 CLI UI Architected for security SSNTP (TLS) internally HTTPS externally Enforced tenant segregation SSNTP HTTPS Controller Scheduler Launcher Launcher Keystone Launcher Launcher 15

16 16

17 Persistent data & image storage via Ceph/Cephfs Controller Image Service Scheduler Node Cephx Ceph/Cephfs Cluster Node 17

18 Continuous deployment / continuous integration Designed for update Updating is not the exception Stateless components Golang static binaries 18

19 Ease of deployment Minimal/zero config Certificates generated and deployed in/from one central place SSNTP certificates information Simple protocol to propagate cluster configuration Controller CONFIGURE [configuration] Configuration backend Scheduler CONFIGURE [configuration] CONNECT CONNECTED [configuration] Launcher 19

20 Implements Integrates with Nova Keystone Nova-Network+ Ceph/Cephfs Simple and integrated Simple scheduling Simple networking Simple topology Simple asynchronous IPC Magnum Kuryr Horizon Cinder Glance 20

21 Contributing to ciao 100% Go Simple, minimal processes Open communication Unique opportunity to influence the cloud ecosystem 21

22 Next steps Storage: Image and Block storage OpenStack compatibility (APIs) Bare metal support Networking (public IP support, Performance, multiple CNCIs, security groups, tunnel encryption, OVS) HA/Resilience Scheduling improvements (capability based, affinity, estimations...) Distributed Tracing Benchmark/performance characterization 22

23 ciao: Getting involved Start Here! Check us out on github! IRC: #ciao-project on Freenode Mailing list: 23

24 Legal notices and disclaimers Intel technologies features and benefits depend on system configuration and may require enabled hardware, software or service activation. Learn more at intel.com, or from the OEM or retailer. No computer system can be absolutely secure. Tests document performance of components on a particular test, in specific systems. Differences in hardware, software, or configuration will affect actual performance. Consult other sources of information to evaluate performance as you consider your purchase. For more complete information about performance and benchmark results, visit Intel, the Intel logo and others are trademarks of Intel Corporation in the U.S. and/or other countries. *Other names and brands may be claimed as the property of others Intel Corporation. 24