Sign In Start Free Trial

Book Overview & Buying
Table Of Contents
Feedback & Rating

Production Ready OpenStack - Recipes for Successful Environments

By : Arthur Berezin

3.5 (2)

Production Ready OpenStack - Recipes for Successful Environments

3.5 (2)

By: Arthur Berezin

Overview of this book

OpenStack is the most popular open source cloud platform used by organizations building internal private clouds and by public cloud providers. OpenStack is designed in a fully distributed architecture to provide Infrastructure as a Service, allowing us to maintain a massively scalable cloud infrastructure. OpenStack is developed by a vibrant community of open source developers who come from the largest software companies in the world. The book provides a comprehensive and practical guide to the multiple uses cases and configurations that OpenStack supports. This book simplifies the learning process by guiding you through how to install OpenStack in a single controller configuration. The book goes deeper into deploying OpenStack in a highly available configuration. You'll then configure Keystone Identity Services using LDAP, Active Directory, or the MySQL identity provider and configure a caching layer and SSL. After that, you will configure storage back-end providers for Glance and Cinder, which will include Ceph, NFS, Swift, and local storage. Then you will configure the Neutron networking service with provider network VLANs, and tenant network VXLAN and GRE. Also, you will configure Nova's Hypervisor with KVM, and QEMU emulation, and you will configure Nova's scheduler filters and weights. Finally, you will configure Horizon to use Apache HTTPD and SSL, and you will customize the dashboard's appearance.

Preface

Preface

What this book covers

What you need for this book

Who this book is for

Conventions

Reader feedback

Customer support

Free Chapter

1. Introduction to OpenStack and its Deployment Using Packages

1. Introduction to OpenStack and its Deployment Using Packages

Introduction

Configuring hosts prerequisites

Installing MariaDB database

Installing RabbitMQ

Installing Keystone – Identity service

Generating and configuring tokens PKIs

Installing Glance – images service

Installing Nova – Compute service

Installing Neutron – networking service

Configuring Neutron network node

Configuring compute node for Neutron

Installing Horizon – web user interface dashboard

2. Deploying OpenStack Using Staypuft OpenStack Installer

2. Deploying OpenStack Using Staypuft OpenStack Installer

Introduction

Setting up the environment

Installing Staypuft packages

Discovering hosts for provisioning

Creating a new OpenStack deployment

Configuring a network

Allocating hosts to roles

Configuring host networking

Deploying OpenStack

3. Deploying Highly Available OpenStack

3. Deploying Highly Available OpenStack

Introduction

Installing Pacemaker

Installing HAProxy

Configuring Galera cluster for MariaDB

Installing RabbitMQ with mirrored queues

Configuring highly available OpenStack services

4. Keystone Identity Service

4. Keystone Identity Service

Introduction

Configuring Keystone with the MariaDB backend

Generating and configuring tokens PKIs

Configuring Keystone with Microsoft Active Directory and LDAP

Configuring Keystone caching with Memcached

Securing Keystone with SSL

5. Glance Image Service

5. Glance Image Service

Introduction

Configuring Glance with the local file backend

Configuring Glance with the NFS backend

Configuring Glance with the Swift backend

Configuring Glance with the Ceph backend

Configuring Glance image caching

Configuring the Glance image size limit and storage quota

6. Cinder Block Storage Service

6. Cinder Block Storage Service

Introduction

Configuring Cinder with the logical volume management backend driver

Configuring Cinder with the Ceph RADOS block device backend driver

Configuring Cinder with the Network File System (NFS) backend driver

Configuring Cinder with the Ceph RBD backup driver

Configuring Cinder with multiple backends

Configuring Cinder scheduler filters and weighers

7. Neutron Networking Service

7. Neutron Networking Service

Introduction

Configuring Neutron VLAN provider network with ML2 and LinuxBridge

Configuring Neutron VXLAN and GRE tenant networks using Open vSwitch

Configuring the L3 agent with Open vSwitch

Configuring the DHCP service agent

Configuring LoadBalancer as a service

Configuring Firewall as a Service

8. Nova-Compute Service

8. Nova-Compute Service

Introduction

Configuring Nova Hypervisors

Configuring Nova-compute with KVM Hypervisor

Configuring Nova-compute with a QEMU Hypervisor emulation

Configuring Nova scheduler filters

Configuring Nova host aggregates

Configuring Nova host aggregates filters

Configuring Nova scheduler weights

9. Horizon Dashboard Service

9. Horizon Dashboard Service

Introduction

Securing Horizon with Secure Socket Layer

Configuring Horizon caching with memcached

Customizing Horizon dashboard appearance

Index

Index

Customer Reviews

3.5 (2)

5 star

50%

4 star

0

3 star

0

2 star

50%

1 star

0

Installing RabbitMQ

OpenStack uses a message broker for components to inner communicate. Red Hat-based operating systems (for example, RHEL, CentOS, and Fedora) can run RabbitMQ or QPID message brokers. Both provide roughly similar performance, but as RabbitMQ is more widely used message broker with OpenStack, we are going use it as a message broker for our OpenStack environment.

How to do it...

Install RabbitMQ from the yum repository:
Run the following commands on the controller node!
```
 [root@controller ~]# yum install rabbitmq-server -y
```
RabbitMQ is written in erlang and will probably bring some erlang dependency packages along.
To start the RabbitMQ Linux services, start a service named rabbitmq-server:
```
[root@controller ~]# systemctl start rabbitmq-server.service
```

Now enable it, to make sure that it starts on a system reboot:

[root@controller ~]# systemctl enable rabbitmq-server.service

There's more...

RabbitMQ maintains its own user accounts and passwords. By default, the user name guest is created with the default password guest. As it is a major security concern to keep default password, we should change this password. We can use the command rabbitmqctl to change guest's account password:

[root@controller ~]# rabbitmqctl change_password guest guest_password
Changing password for user "guest" ...
...done.

We need to allow other services to be able to access the message broker over the firewall using firewall-cmd command:

[root@controller ~]# firewall-cmd --add-port=5672/tcp --permanent
success

Search

Your notes and bookmarks