马哥2018linux高端运维顶级云计算就业课booksopenstackfolsom mee tup intro

1、OpenStackOverviewMirantis,Inc.What is OpenStack?Open source software for buildingprivate and public cloudsOpenStack capabilitiesVMs on demandprovisioningsnapshottingVolumesNetworks Multi-tenancyquotas for different usersuser can be associated with multipletenantsObject storage for VM images andarbit

2、raryfilesOpenStack HistoryJuly 2010 - InitialannouncementOctober 2010 - AustinReleaseFebruary 2011 - BexarReleaseApril 2011 - CactusReleaseOctober 2011 - DiabloReleaseApril 2012 - EssexReleaseOctober 2012 - Folsom ReleaseApril 2013 - GrizzlyReleaseOpenStack ProjectsNova (Compute)Glance (Image Servic

3、e) Swift (Object Store) Keystone (auth) Horizon (Dashboard)Quantum (Network) formerly nova-networkCinder (Block Storage) formerlynova-volumeOpenStack Projects: RelationshipOpenStack: Deployment Topologyone to one relationship with each deployment instance.storage clusterstoragestoragestorage nodenod

4、enodestoragestoragestorage nodenodenodecompute clustercomputecomputecompute nodenodenodecomputecomputecompute nodenodenodecontrol clusterHorizonKeystoneQuantumGlanceCloud Ctrl.Cinder (nova)OpenStack Projects: Detailed View (Essex)HorizonCLIKeystoneGlancenova: Cloud Controllernova-apiendpointglance-a

5、piglance-registryschedulernova: Computenova-dbnova-networknova-computeSwiftque uenova-volumehypervisorproxy-serverobject storeShared StorageStill part of novaHorizonCLIKeystoneGlancenova: Cloud Controllernova-apiendpointglance-apiglance-registryschedulernova: Computenova-dbnova-networknova-computeSw

6、iftque uenova-volumehypervisorproxy-serverobject storeShared StorageKeystonekeystone serverkeystone-dbUI: horizon or CLInovacompute nodeHypervisornova: Conmovpau- te computecontrollerqueu enova-apiQuantumquantum serverV Mschedulernova-dbNetworkquantum-dbquantum pluginblock storage nodeGlanceCinderqu

7、eu eendpointglance-apiSwiftproxy-serverobject storeglance-registryschedulerstoragecinder-volglance dbcinder-dbOpenStack Projects: Communication TypesHTTP AMQP SQLnatv. API iSCSIUI: horizon or CLIKeystonekeystone serverkeyston e-dbnovacompute nodeHypervisornova:controllernova-apinova-queu eCcoommppuu

8、teteQuantum quantum serverV Mschedulernova-dbNetworkquantum- dbquantum plugin/agtblock storage nodeGlanceglance-apiCinderqueu ecinder-apistorageSwiftschedulerglance-registrycinder-volnetwork nodedhcp xy-serverglance dbobject storecinder- dbrouter/gwUse Case: provisioning aVMInitial StateTena

9、nt is created, provisioning quota is available, user has an access to Horizon/CLIUI: horizon or CLIKeystonekeystone serverkeyston e-dbnovacompute nodeHypervisornova:controllernova-apinova-queu eCcoommppuuteteQuantum quantum serverV Mschedulernova-dbNetworkquantum- dbquantum plugin/agtblock storage n

10、odeGlanceglance-apiCinderqueu ecinder-apistorageSwiftschedulerglance-registrycinder-volnetwork nodedhcp xy-serverglance dbobject storecinder- dbrouter/gwStep 1: Request VM Provisioning via UI/CLIUser specifies VM params: name, flavor, keys, etc. and hits Create buttonUI: horizon or CLIKeysto

11、nekeystone serverkeyston e-dbnovacompute nodeHypervisornova:controllernova-apinova-queu eCcoommppuuteteQuantum quantum serverV Mschedulernova-dbNetworkquantum- dbquantum plugin/agtblock storage nodeGlanceglance-apiCinderqueu ecinder-apistorageSwiftschedulerglance-registrycinder-volnetwork nodedhcp s

12、xy-serverglance dbobject storecinder- dbrouter/gwStep1: Request Provisioningvia UI/CLIFrom UIa.b.c.Login to HorizonSpecify params of VM in Create VM form Hit Create buttonUnder the hooda.b.Form params are converted to POST dataCreate request initiate HTTP POST request to back- endTo Keystone

13、if auth token is not cachedTo nova-api if auth token hasnt expired yetHorizonThe OpenStack Dashboard (Horizon)provides a baseline user interface formanaging OpenStack services.Step 2: Validate Auth DataHorizon sends HTTP request to Keystone. Auth info is specified in HTTP headers.UI: horizon or CLIK

14、eystonekeystone serverkeyston e-dbnovacompute nodeHypervisornova:controllernova-apinova-queu eCcoommppuuteteQuantum quantum serverV Mschedulernova-dbNetworkquantum- dbquantum plugin/agtblock storage nodeGlanceglance-apiCinderqueu ecinder-apistorageSwiftschedulerglance-registrycinder-volnetwork noded

15、hcp xy-serverglance dbobject storecinder- dbrouter/gwKeystoneKeystone is an OpenStack project thatprovides Identity, Token, Catalog and Policy services for use specifically byprojects in the OpenStack family.Keystone ArchitectureKeystone:authflowStep 2: Validate Auth DataKeystone sends tempo

16、rary token back to Horizon via HTTP.UI: horizon or CLIKeystonekeystone serverkeyston e-dbnovacompute nodeHypervisornova:controllernova-apinova-queu eCcoommppuuteteQuantum quantum serverV Mschedulernova-dbNetworkquantum- dbquantum plugin/agtblock storage nodeGlanceglance-apiCinderqueu ecinder-apistor

17、ageSwiftschedulerglance-registrycinder-volnetwork nodedhcp xy-serverglance dbobject storecinder- dbrouter/gwStep 3: Send APIrequesttonova-apiHorizon sends POST request to nova- api (signed with given token).UI: horizon or CLIKeystonekeystone serverkeyston e-dbnovacompute nodeHypervisornova:c

18、ontrollernova-apinova-queu eCcoommppuuteteQuantum quantum serverV Mschedulernova-dbNetworkquantum- dbquantum plugin/agtblock storage nodeGlanceglance-apiCinderqueu ecinder-apistorageSwiftschedulerglance-registrycinder-volnetwork nodedhcp xy-serverglance dbobject storecinder- dbrouter/gwStep

19、4: Validate API Tokennova-api sends HTTP request to validate API token to Keystone.UI: horizon or CLIKeystonekeystone serverkeyston e-dbnovacompute nodeHypervisornova:controllernova-apinova-queu eCcoommppuuteteQuantum quantum serverV Mschedulernova-dbNetworkquantum- dbquantum plugin/agtblock storage

20、 nodeGlanceglance-apiCinderqueu ecinder-apistorageSwiftschedulerglance-registrycinder-volnetwork nodedhcp xy-serverglance dbobject storecinder- dbrouter/gwStep 4: Validate API TokenKeystone validates API token and sends HTTP response with token acceptance/rejection info.UI: horizon or CLIKey

21、stonekeystone serverkeyston e-dbnovacompute nodeHypervisornova:controllernova-apinova-queu eCcoommppuuteteQuantum quantum serverV Mschedulernova-dbNetworkquantum- dbquantum plugin/agtblock storage nodeGlanceglance-apiCinderqueu ecinder-apistorageSwiftschedulerglance-registrycinder-volnetwork nodedhc

22、p xy-serverglance dbobject storecinder- dbrouter/gwStep 5: Process API requestnova-api parses request and validates it by fetching data from nova-db. If the request is valid, it saves initia db entry about VM to the database.UI: horizon or CLIKeystonekeystone serverkeyston e-dbnovacompute no

23、deHypervisornova:controllernova-apinova-queu eCcoommppuuteteQuantum quantum serverV Mschedulernova-dbNetworkquantum- dbquantum plugin/agtblock storage nodeGlanceglance-apiCinderqueu ecinder-apistorageSwiftschedulerglance-registrycinder-volnetwork nodedhcp xy-serverglance dbobject storecinder

24、- dbrouter/gwnova-apinova-api is a RESTful API web servicewhich is used to interact with novanova-api clientsnova databasenova database stores current state ofall objects in compute cluster.Step6:Publishprovisioningrequesttoqueuenova-api makes rpc.call to scheduler. It publishes a short message to s

25、cheduler queue with VM info.UI: horizon or CLIKeystonekeystone serverkeyston e-dbnovacompute nodeHypervisornova:controllernova-apinova-queu eCcoommppuuteteQuantum quantum serverV Mschedulernova-dbNetworkquantum- dbquantum plugin/agtblock storage nodeGlanceglance-apiCinderqueu ecinder-apistorageSwift

26、schedulerglance-registrycinder-volnetwork nodedhcp xy-serverglance dbobject storecinder- dbrouter/gwStep6:Pickupprovisioningrequestscheduler picks up the message from MQ.UI: horizon or CLIKeystonekeystone serverkeyston e-dbnovacompute nodeHypervisornova:controllernova-apinova-queu eCcoommppu

27、uteteQuantum quantum serverV Mschedulernova-dbNetworkquantum- dbquantum plugin/agtblock storage nodeGlanceglance-apiCinderqueu ecinder-apistorageSwiftschedulerglance-registrycinder-volnetwork nodedhcp xy-serverglance dbcinder- dbobject storerouter/gwMessage queueMessage queue is a unified wa

28、yforcollaboration between novacomponents.Step 7: Schedule provisioningScheduler fetches information about the whole cluster from database and based on this info selects the most applicable compute host.UI: horizon or CLIKeystonekeystone serverkeyston e-dbnovacompute nodeHypervisornova:controllernova

29、-apinova-queu eCcoommppuuteteQuantum quantum serverV Mschedulernova-dbNetworkquantum- dbquantum plugin/agtblock storage nodeGlanceglance-apiCinderqueu ecinder-apistorageSwiftschedulerglance-registrycinder-volnetwork nodedhcp xy-serverglance dbobject storecinder- dbrouter/gwnova-schedulernova

30、-scheduler is a daemon, whichdetermines, on which compute hostthe request should run.nova-scheduler: available schedulersSchedulerDescriptionChancePicks a host that is up at randomSimplePicks a host that is up and has the fewest running instancesFilterPicks the best-suited host which satisfies selec

31、ted filterMultiA scheduler that holds multiple sub- schedulersStep 8: Start VMprovisioningon compute nodeScheduler publishes message to the compute queue (based on host ID) and triggers VM provisioningUI: horizon or CLIKeystonekeystone serverkeyston e-dbnovacompute nodeHypervisornova:controllernova-

32、apinova-queu eCcoommppuuteteQuantum quantum serverV Mschedulernova-dbNetworkquantum- dbquantum plugin/agtblock storage nodeGlanceglance-apiCinderqueu ecinder-apistorageSwiftschedulerglance-registrycinder-volnetwork nodedhcp xy-serverglance dbobject storecinder- dbrouter/gwStep 9: Start VMren

33、dering via hypervisornova-compute fetches information about VM from DB, creates a command to hypervisor and delegates VM rendering to hypervisor.UI: horizon or CLIKeystonekeystone serverkeyston e-dbnovacompute nodeHypervisornova:controllernova-apinova-queu eCcoommppuuteteQuantum quantum serverV Msch

34、edulernova-dbNetworkquantum- dbquantum plugin/agtblock storage nodeGlanceglance-apiCinderqueu ecinder-apistorageSwiftschedulerglance-registrycinder-volnetwork nodedhcp xy-serverglance dbobject storecinder- dbrouter/gwnova-computenova-compute is a worker daemon,which primarily creates and ter

35、minates VMs via hypervisor API.nova-compute driversnova-computeXCPVMWareHyperVLPARlibvirtVMVMVMVMKVMXenQemuLXCVMVMVMVMVMVMVMVMVMVMVMVMStep 10: Configurenetworknova-compute makes a call to quantum-api to provision network for the instanceUI: horizon or CLIKeystonekeystone serverkeyston e-dbnovacomput

36、e nodeHypervisornova:controllernova-apinova-queu eCcoommppuuteteQuantum quantum serverV Mschedulernova-dbNetworkquantum- dbquantum plugin/agtblock storage nodeGlanceglance-apiCinderqueu ecinder-apistorageSwiftschedulerglance-registrycinder-volnetwork nodedhcp serv.router/gwproxy-serverglance dbobjec

37、t storecinder- dbStep 11: configure networkquantum configures IP, gateway, L2 connectivityUI: horizon or CLIKeystonekeystone serverkeyston e-dbnovacompute nodeHypervisornova:controllernova-apinova-queu eCcoommppuuteteQuantum quantum serverV Mschedulernova-dbNetworkquantum- dbquantum plugin/agtblock

38、storage nodeGlanceglance-apiCinderqueu ecinder-apistorageSwiftschedulerglance-registrycinder-volnetwork nodedhcp xy-serverglance dbobject storecinder- dbrouter/gwStep 12: Request volume attachmentIt is assumed a volume is already created. Nova-compute contacts cinder to get volume data.UI: h

39、orizon or CLIKeystonekeystone serverkeyston e-dbnovacompute nodeHypervisornova:controllernova-apinova-queu eCcoommppuuteteQuantum quantum serverV Mschedulernova-dbNetworkquantum- dbquantum plugin/agtblock storage nodestorageGlanceglance-apiCinderqueu ecinder-apiSwiftschedulerglance-registrycinder-vo

40、lproxy-serverglance dbobject storecinder- dbStep 12: Request volume attachmentNova-compute sets up iSCSI initiator & instructs the hypervisor to mount iSCSI vol. as a new block deviceUI: horizon or CLIKeystonekeystone serverkeyston e-dbnovacompute nodeHypervisornova:controllernova-apinova-queu eCcoo

41、mmppuuteteQuantum quantum serverV Mschedulernova-dbNetworkquantum- dbquantum plugin/agtblock storage nodestorageGlanceglance-apiCinderqueu ecinder-apiSwiftschedulerglance-registrycinder-volproxy-serverglance dbobject storecinder- dbStep 12: Request volume attachmentiSCSI communication beginsUI: hori

42、zon or CLIKeystonekeystone serverkeyston e-dbnovacompute nodeHypervisornova:controllernova-apinova-queu eCcoommppuuteteQuantum quantum serverV Mschedulernova-dbNetworkquantum- dbquantum plugin/agtblock storage nodeGlanceglance-apiCinderqueu ecinder-apistorageSwiftschedulerglance-registrycinder-volne

43、twork nodedhcp xy-serverglance dbobject storecinder- dbrouter/gwcinderblock storageas-a-servicecinder architectureStep 13: Request VM Image from Glancenova-compute requests VM image from Glance via Image IDUI: horizon or CLIKeystonekeystone serverkeyston e-dbnovacompute nodeHypervisornova:co

44、ntrollernova-apinova-queu eCcoommppuuteteQuantum quantum serverV Mschedulernova-dbNetworkquantum- dbquantum plugin/agtblock storage nodeGlanceglance-apiCinderqueu ecinder-apistorageSwiftschedulerglance-registrycinder-volnetwork nodedhcp xy-serverglance dbobject storecinder- dbrouter/gwGlanceThe Glance project provides services