6. Instance Management | OpenStack Essentials

Sign In Start Free Trial

Book Overview & Buying
Table Of Contents
Feedback & Rating

OpenStack Essentials

By : Dan Radez

4.2 (14)

OpenStack Essentials

4.2 (14)

By: Dan Radez

Overview of this book

If you need to get started with OpenStack or want to learn more, then this book is your perfect companion. If you're comfortable with the Linux command line, you'll gain confidence in using OpenStack.

Preface

Preface

What this book covers

What you need for this book

Who this book is for

Conventions

Reader feedback

Customer support

Free Chapter

1. Architecture and Component Overview

1. Architecture and Component Overview

OpenStack architecture

Dashboard

Keystone

Glance

Neutron

Nova

Cinder

Swift

Ceilometer

Heat

Summary

2. RDO Installation

2. RDO Installation

Installing RDO using Packstack

Summary

3. Identity Management

3. Identity Management

Services and endpoints

Interacting with Keystone in the dashboard

Endpoints in the dashboard

Summary

4. Image Management

4. Image Management

Glance as a registry of images

Using the web interface

Building an image

Summary

5. Network Management

5. Network Management

Networking and Neutron

Open vSwitch configuration

Creating a network

Web interface management

External network access

Web interface external network setup

Summary

6. Instance Management

6. Instance Management

Managing flavors

Managing key pairs

Launching an instance

Managing floating IP addresses

Managing security groups

Communicating with the instance

Launching an instance using the web interface

Summary

7. Block Storage

7. Block Storage

Use case

Creating and using block storage

Attaching the block storage to an instance

Managing Cinder volumes in the web interface

Backing storage

Summary

8. Object Storage

8. Object Storage

Use case

Architecture of a Swift cluster

Creating and using object storage

Object file management in the web interface

Using object storage on an instance

Ring files

Summary

9. Telemetry

9. Telemetry

Understanding the data store

Definitions of Ceilometer's configuration terms

Graphing the data

Summary

10. Orchestration

10. Orchestration

About orchestration

Writing templates

Launching a stack

Autoscaling instances with Heat

LBaaS setup

Web interface

Summary

11. Scaling Horizontally

11. Scaling Horizontally

Scaling compute nodes

Installing more control and networking

Scaling control and network services

Load-balancing keystone

Glance load balancing

Scaling other services

High availability

Highly available database and message bus

Summary

12. Monitoring

12. Monitoring

Monitoring defined

Installing Nagios

Monitoring methods

Non-OpenStack service checks

Monitoring control services

Monitoring network services

Monitoring compute services

Summary

13. Troubleshooting

13. Troubleshooting

The debug command line option

Tail the server logs

Troubleshooting Keystone and authentication

Troubleshooting Glance image management

Troubleshooting Neutron networking

Troubleshooting Nova launching instances

Troubleshooting post-boot metadata

Troubleshooting console access

Troubleshooting Cinder block storage

Troubleshooting Swift object storage

Troubleshooting Ceilometer Telemetry

Troubleshooting Heat orchestration

Getting more help

Summary

Index

Index

Customer Reviews

4.2 (14)

5 star

64.3%

4 star

14.3%

3 star

0

2 star

21.4%

1 star

0

Managing security groups

At this point, you may think that you should be able to connect to your instance. Not quite yet. There is a layer of security built into OpenStack called security groups. Security groups are tenant-level firewalls. You can define multiple security groups; you can even assign multiple security groups to a running instance. A security group named default is created for each tenant when the tenant is created. Let's list that default group:

control# neutron security-group-list

To see the rules defined in a security group, list the rules. This command lists all the rules in the tenant. If you want to see the rules for a specific security group, you'll have to filter out the security group you are interested in; grep is a good tool for this. Here are the commands to accomplish this:

control# neutron security-group-rule-list
control# neutron security-group-rule-list | grep sec_group_name

As illustrated, the default rules added to the default security group are pretty basic...

Search

Your notes and bookmarks