OpenNebula 5.0 Highlights - Rubén S. Montero
3 likes1,623 views
OpenNebula 5.0 includes improvements to the user interface, virtual networking with security groups and virtual routers, storage with Ceph integration and a marketplace, and virtualization capabilities. It focuses on evolution, maintaining compatibility, and improving usability. Key highlights include security groups for defining network access control lists, virtual routers for connecting virtual networks, and an integrated marketplace for sharing virtual appliance images across OpenNebula zones using drivers like S3 storage.
![Southbound Interface
Three-phase setup
● pre, post and clean right before, after VM boot and shutdown
● It considers live-migrations
OpenNebula Network Drivers
OpenvSwtich VMware DSwtich
Linux Bridge
802.1Q Flat
Security Group*
iptables rules
VXLAN ebtables Flat VLAN Flat Dynamic
NFV Virtual Router*
* [Virtual Router] New in 5.0!
* [Security Group] Propagate updates to running VMs](https://image.slidesharecdn.com/5-160225134837/85/OpenNebula-5-0-Highlights-Ruben-S-Montero-7-320.jpg)
OpenNebula 5.0 Highlights - Rubén S. Montero
- 1. OpenNebula 5.0 Highlights Ruben S. Montero OpenNebula Chief Architect Techday Kuala Lumpur Malaysia, 17 February 2016
- 2. The Road to 5.0 ● Evolution result after 8 years + ~80 releases. ● 5.x series goal ○ Keep project vision and KISS adherence ○ Improve usability and refine current feature set ○ As much as possible, don’t break compatibility ○ Less used components to the add-on catalog
- 3. Some Highlights... ● User Interface ○ Improve input fields & views in Sunstone ● Virtual Network: ○ Security groups ○ Virtual routers* ● Storage ○ Ceph as system Datastore & tunning ○ Integrated Marketplace* ○ Better LVM backend and new iSCSI ● Virtualization ○ Make possible more operations across VM states ○ Guest-Context improvements * Discussed in this talk
- 4. OpenNebula Network Model: View Hyper. Hyper. Hyper. Hyper. Virtual Network VM VM VM VM Datacenter Network ● Leaf-Spine switched or routed backbone ● Not controlled by OpenNebula ● Usually just few TOR switches Virtual switches Virtual Network
- 5. OpenNebula Network Model: “built-in SDN” Provide a central point to define, consume and set up Virtual Networks for Virtual Machines XML-RPC API OpenNebula daemon Infrastructure Drivers Northbound Interface ● Virtual Network abstract management ● Lease addresses to VMs ● Reserve addresses for users or groups Network Stack Southbound Interface ● Uniform interface to interface network elements ● Specialized for VM Networking
- 6. Northbound Interface Logical Attributes Addresses Space (multiple, disjoint ranges) ● IPv4 ● IPv6 (Global & ULA) ● Ethernet - MAC addresses Security Groups ● Managed as a separate entity ● Inbound & Outbound, TCP/UDP/ICMP Custom Tags Configuration & Physical Attributes ● Network specific (e.g. BRIDGE, VLAN_ID) ● VM Context (e.g. DNS, GATEWAY) VirtualNetworkDefinition
- 7. Southbound Interface Three-phase setup ● pre, post and clean right before, after VM boot and shutdown ● It considers live-migrations OpenNebula Network Drivers OpenvSwtich VMware DSwtich Linux Bridge 802.1Q Flat Security Group* iptables rules VXLAN ebtables Flat VLAN Flat Dynamic NFV Virtual Router* * [Virtual Router] New in 5.0! * [Security Group] Propagate updates to running VMs
- 8. Virtual Routers Demonstration Virtual Router Virtual Router Virtual Router VR cluster Virtual NetworkVirtual Network ● Alpine Linux ● Link any VLAN network ● HA configuration ● Support for reconfiguration ● First class management entity ● Sunstone specialized views ● New CLI for vrouters ● Can be configured per VDC * * Future plans to expose an OpenFlow interface to be controlled by SDN
- 9. ● Share as less as possible ● Tolerate big lattencies ● Reduce coupling by sharing just: User & Auth information ● Federation of identities Federation: Overview Multimaster replication Shared tables across zones Sunstone OpenNebula Infrastructure XML-RPC API OpenNebula Infrastructure XML-RPC API DBDB
- 10. º º Federation: Marketplace oned export image S3 - http Datastores * * Market storage (optional) º oned Datastores download image S3 - http external marketplaces download to desktop Marketplace zone zone How can we share zone contents?
- 11. Federation: Marketplace Demonstration ● Totally integrated, multiple uses cases, e.g. ○ Setup market for some groups ○ Set access control to appliances ● 5.0 shipped with two backends ○ Web server, using http transport to move images ○ S3 object store through Ceph S3 gateway ○ Public OpenNebula marketplace (client-only) ● Follows OpenNebula architecture: ○ Datastore specific operations ○ MarketPlace specific drivers ● Future plans to add more external drivers
- 12. THANKS! Techday Kuala Lumpur Malaysia, 17 February 2016