Course Outline
1. Introduction to OpenStack - 2h
⦿ Evolution of cloud computing and OpenStack
⦿ Core cloud capabilities
⦿ Cloud deployment models
⦁ private, public, hybrid
⦁ on-premise, IaaS, PaaS, SaaS
⦿ Public and private cloud implementations utilizing OpenStack
⦿ Open source and commercial OpenStack distributions
⦿ OpenStack deployment architectures
⦿ The OpenStack ecosystem
⦁ Service modules
⦁ Foundational tools
⦁ Integration points
⦿ The OpenStack lifecycle
⦿ OpenStack certification pathways
⦿ Course-specific OpenStack lab (VM)
2. Practical OpenStack Administration Workshop
⦿ Exploring OpenStack ~0.5h
⦁ OpenStack component overview (Keystone, Glance, Nova, Neutron, Cinder, Swift, Heat)
⦁ Interacting with the OpenStack cloud
⦁ OpenStack daemons and API communication protocols
⦿ Keystone - Identity Management Service ~1h
⦁ Keystone architectural design
⦁ Authentication mechanisms and supported backends
⦁ Token types and management strategies
⦁ Authorization in OpenStack - roles and oslo.policy implementation
⦁ Keystone entities - domains, projects, users
⦁ Configuring CLI clients via Openrc and clouds.yaml
⦁ The OpenStack service catalog
⦁ Registering new OpenStack services
⦁ OpenStack quota systems
⦿ Glance - Image Service ~1.5h
⦁ Cloud-optimized image formats
⦁ Image attributes (properties, metadata, format, container type)
⦁ Uploading and downloading images
⦁ Image sharing capabilities
⦁ Glance image storage backends
⦁ Securing images
⦁ Managing image service quotas
⦁ Validating Glance services
⦿ Neutron - Networking ~2-3h
⦁ Architecture and Neutron service functions
⦁ The ML2 plugin
⦁ Network analysis on compute nodes
⦁ Networking concepts and tools utilized by Neutron
⦁ Fundamental Neutron network resource types
⦁ Configuring tenant networks and subnets
⦁ Configuring security groups and rules
⦁ East-West routing
⦁ Network namespaces
⦁ Configuring external/provider networks
⦁ North-South routing
⦁ Managing Floating IPs
⦁ Configuring network quotas
⦁ Fundamental network troubleshooting (namespaces, tcpdump, etc.)
⦁ Network quotas
⦁ Validating Neutron services
⦿ Nova - Compute Service ~2-3h
⦁ Interfaces to hypervisors
⦁ Key pair management
⦁ Flavor management
⦁ Flavors and CPU topology
⦁ Instance parameter configuration
⦁ Provisioning instances
⦁ Validating spawned instances
⦁ Creating snapshots
⦁ Instance lifecycle management
⦁ Resizing instances
⦁ Assigning Floating IPs
⦁ Console access and log retrieval
⦁ Assigning security groups
⦁ Compute quotas
⦁ Retrieving Nova statistics
⦁ Placement API and Nova Cells v2
⦁ Placement API and instance scheduling
⦁ Placement API client commands
⦁ Validating Nova services
⦿ Cinder - Block Storage ~2-3h
⦁ Volume parameters
⦁ Creating volumes
⦁ Managing volumes
⦁ Attaching volumes to Nova instances
⦁ Managing volume snapshots
⦁ Managing volume backups
⦁ Underlying mechanisms of snapshots and backups in Cinder
⦁ Transferring volumes between projects
⦁ Restoring backups
⦁ Managing volume quotas
⦁ Integrating new storage backends
⦁ QoS (limits) in Cinder
⦁ LVM, storage arrays, and Ceph storage backends
⦁ Integrating Ceph within OpenStack
⦁ Integrating Ceph with Cinder
⦁ Best practices for Ceph deployments
⦁ Validating Cinder services
⦿ Barbican - Key Management Service - ~2h
⦁ Barbican architecture
⦁ Storing passphrases
⦁ Generating and storing symmetric encryption keys
⦁ Volume encryption mechanisms
⦁ Configuring Cinder storage types for volume encryption
⦁ Limitations of volume encryption
⦁ Storing X.509 certificate bundles
⦿ Swift - Object Storage (focused review for the COA exam) <1h
⦁ Swift components and processes
⦁ Managing containers and objects
⦁ Managing access control lists
⦁ Configuring object expiration
⦁ The Ring and storage policies
⦁ Monitoring available storage capacity
⦁ Configuring quotas
⦁ Validating Swift services
⦿ Octavia - Load Balancing-as-a-Service ~2-3h
⦁ Architecture
⦁ Object structure and request flow
⦁ Octavia flavors
⦁ Octavia Availability Zones
⦁ Creating HTTP load balancers
⦁ Creating TCP load balancers
⦁ Creating HTTPS passthrough load balancers
⦁ Listeners, Pools, and Health Monitors
⦁ Layer 7 load balancing in Octavia
⦁ Building the Amphora image
⦁ LB Failover
⦁ Networking and monitoring details
⦁ Troubleshooting Octavia
⦿ Heat - Orchestration ~1-2h
⦁ Heat Orchestration Template (HOT) and its components
⦁ Creating Heat stacks
⦁ Validating Heat stacks
⦁ Updating Heat stacks
⦁ Validating Heat services
⦿ Basic Troubleshooting ~2h
⦁ Analyzing log files
⦁ Centralized logging strategies
⦁ Debugging OpenStack client queries
⦁ Managing the OpenStack database
⦁ Backing up OpenStack
⦁ Analyzing compute node status
⦁ Analyzing instance status
⦁ Analyzing the AMQP broker (RabbitMQ)
⦁ Metadata services
⦁ General approaches to diagnosing OpenStack issues
⦁ Troubleshooting network problems
⦁ Troubleshooting network performance
⦁ Instance backup and recovery
3. Advanced Topics
⦿ Hardware considerations and capacity planning ~2h
⦁ Compute hardware
⦁ Network design
⦁ Storage design
⦁ Flavor sizing
⦁ Resource overcommitment
⦿ Role system - Authorization in OpenStack ~2h
⦁ Creating new roles as member role extensions
⦁ policy.yaml - API call authorization
⦿ Highly Available control plane ~1h
⦁ HA in OpenStack services
⦁ HA database
⦁ HA message queue
⦿ Cloud partitioning and scheduler filters ~1h
⦁ Rationale and implementation of cloud partitions (host-aggregates)
⦁ Nova scheduler filters
⦿ Workload migration ~1h
⦁ Cold and live migration
⦁ Tuning live migration
⦿ OpenStack monitoring and telemetry <1h
⦁ Ceilometer service
⦁ External monitoring
⦿ Advanced cloud/hypervisor features <1h
⦁ CPU pinning / NUMA architecture
⦁ SR-IOV
⦿ Cloud-init and image customization <1h
⦁ Metadata Service
⦿ Block storage backends <1h
⦁ LVM
⦁ Ceph RBD
⦁ Physical appliances
⦁ Storage network considerations
⦿ Upgrading OpenStack <1h
⦁ Upgrade strategies and procedures
⦁ Zero-downtime upgrade
⦿ Bare-metal provisioning with OpenStack <1h
⦁ Ironic module
⦁ Undercloud and overcloud concepts
⦿ The future of OpenStack
4. Deep-dive into Neutron and OVN backend - ~6-8h
⦿ OVN architecture
⦿ OVN components
⦿ ML2 - OVN vs OvS driver comparison
⦿ Top-down OVN networking approach
⦁ OpenStack logic (Neutron database)
⦁ Northbound database
⦁ Southbound database
⦁ Logical datapath pipelines
⦁ Logical flows
⦁ OpenFlow flows
⦿ Neutron network and OVN logical switch
⦁ Logical ports and their types
⦁ Switching flows
⦿ Neutron router and OVN logical router
⦁ NAT types
⦁ Routing flows
⦿ Neutron subnet and native DHCP
⦁ DHCP flows
⦿ Security groups in OVN
⦁ ACLs and Port Groups
⦁ Security group flows
⦁ Port security in OVN
⦿ Summary of OVN Northbound tables
⦿ Information flow in OVN
⦁ Neutron DB, OVN NB and SB DB, OpenFlow at OvS
⦿ Logical flow tracing
⦁ Defining microflows
⦁ L2 tracing
⦁ L3 tracing
⦁ DHCP tracing
⦿ Physical flows - OpenFlow
⦁ Physical live-cycle of VM-originated packets
⦿ Physical tracing
⦁ Tracing for hypothetical packets
⦁ Tracing for real packets
⦿ Displaying Open vSwitch database and resources
Testimonials (3)
I found new things.
Cristian
Course - OpenStack Security
communication, knowledge from experience, solve problems,
Marcin Walewski - Intel Technology Poland Sp. z o.o.
Course - OpenStack Bootcamp
The varied topics