openstack notes

Conventions

node = host, vm or physical machine

Overview

Example architecture

Controller node

The controller node runs the Identity service, Image service, management portions of Compute, management portion of Networking, various Networking agents, and the dashboard. It also includes supporting services such as an SQL database, message queue, and NTP.

Compute node

The compute node runs the hypervisor portion of Compute that operates instances. By default, Compute uses the KVM hypervisor. The compute node also runs a Networking service agent that connects instances to virtual networks and provides firewalling services to instances via security groups.

Block Storage node (optional)

The optional Block Storage node contains the disks that the Block Storage service provisions for instances.

Object Storage node (optional)

The optional Object Storage node contain the disks that the Object Storage service uses for storing accounts, containers, and objects.

Networking

Provider networks (option 1)

simplest setup with primarily layer-2 (bridging/switching) services and VLAN segmentation of networks. Essentially, it bridges virtual networks to physical networks and relies on physical network infrastructure for layer-3 (routing) services.

Option 2: Self-service networks

The self-service networks option augments the provider networks option with layer-3 (routing) services that enable self-service networks using overlay segmentation methods such as VXLAN. Essentially, it routes virtual networks to physical networks using NAT.

Environment

Security OpenStack services support various security methods including password, policy, and encryption.

host networking

The example architectures assume use of the following networks:

• Management on 10.0.0.0/24 with gateway 10.0.0.1

This network requires a gateway to provide Internet access to all nodes for administrative purposes such as package installation, security updates, DNS, and NTP.

• Public on 203.0.113.0/24 with gateway 203.0.113.1
• This network requires a gateway to provide Internet access to instances in your OpenStack environment.