OpenStack云管理员指南

需积分: 9 118 浏览量更新于2024-07-22 收藏 4.65MB PDF 举报

"Openstack admin-guide-cloud" OpenStack Cloud Administrator Guide 是一份专为管理与解决OpenStack云环境问题的开放源代码软件指南。该指南涵盖了OpenStack的几个关键版本，包括Juno、Icehouse和Havana发布版。OpenStack基金会版权所有，并在Apache License 2.0的许可下发布，这意味着该软件可以自由使用，但需遵守许可证中的条款。 Apache License 2.0是一个宽松的开源软件许可证，允许用户在符合许可证条件下自由地使用、修改、复制、分发和/或商业化OpenStack软件，但同时也明确指出软件是“按原样”提供的，不提供任何明示或暗示的保修。 OpenStack Cloud Administrator Guide的主要目标是帮助云管理员有效地管理和维护OpenStack云平台。内容可能包括但不限于以下方面： 1. **系统部署**：指导如何规划、配置和安装OpenStack的基础架构组件，如计算（Nova）、网络（Neutron）、对象存储（Swift）和块存储（Cinder）等。 2. **运营管理**：涉及云资源的日常管理，如虚拟机生命周期管理（创建、更新、删除），网络配置，存储管理以及监控和性能优化。 3. **故障排查**：提供识别和解决OpenStack组件问题的方法，包括日志分析、错误调试和性能瓶颈诊断。 4. **安全与合规**：涵盖OpenStack云的安全策略，如身份认证与授权（Keystone）、网络隔离、数据保护以及合规性检查。 5. **扩展与集成**：介绍如何集成第三方工具和服务，如与现有目录服务、备份解决方案和自动化工具的对接。 6. **更新与升级**：说明如何从一个OpenStack版本平滑过渡到另一个新版本，确保服务的连续性和数据的完整性。 7. **最佳实践**：提供在特定场景下运行OpenStack的最佳策略，包括高可用性设置、容量规划和性能调优。 8. **API与CLI使用**：讲解如何利用OpenStack的API和命令行接口（CLI）进行自动化操作和自定义开发。此文档还遵循了Creative Commons Attribution Share Alike 3.0许可证，意味着任何人都可以自由地分享和适应内容，但必须给予原始作者署名，并且如果对内容进行了改编，也需要以相同方式分享。通过OpenStack Cloud Administrator Guide，管理员能够深入了解OpenStack的各个组件，掌握其工作原理，从而更高效地运维大规模的OpenStack云环境。

Cloud Administrator Guide January 7, 2015 current

Console interface

nova-consoleauth daemon Authorizes tokens for users that console proxies pro-

vide. See nova-novncproxy and nova-xvpn-

vcproxy. This service must be running for console prox-

ies to work. You can run proxies of either type against a

single nova-consoleauth service in a cluster configu-

ration. For information, see About nova-consoleauth.

nova-novncproxy daemon Provides a proxy for accessing running instances

through a VNC connection. Supports browser-based

novnc clients.

nova-spicehtml5proxy dae-

mon

Provides a proxy for accessing running instances

through a SPICE connection. Supports browser-based

HTML5 client.

nova-xvpnvncproxy daemon Provides a proxy for accessing running instances

through a VNC connection. Supports an OpenStack-spe-

cific Java client.

nova-cert daemon x509 certificates.

In Debian, a unique nova-consoleproxy package provides the nova-novncproxy, no-

va-spicehtml5proxy, and nova-xvpvncproxy packages. To select packages, edit the /etc/

default/nova-consoleproxy file or use the debconf interface. You can also manually

edit the /etc/default/nova-consoleproxy file, and stop and start the console dae-

mons.

Image management (EC2 scenario)

nova-objectstore daemon An S3 interface for registering images with the Open-

Stack Image Service. Used primarily for installations that

must support euca2ools. The euca2ools tools talk to

nova-objectstore in S3 language, and nova-ob-

jectstore translates S3 requests into Image Service

requests.

euca2ools client A set of command-line interpreter commands for man-

aging cloud resources. Although it is not an OpenStack

module, you can configure nova-api to support this

EC2 interface. For more information, see the Eucalyptus

3.4 Documentation.

Command-line clients and other interfaces

nova client Enables users to submit commands as a tenant administrator or end user.

Other components

The queue A central hub for passing messages between daemons. Usually imple-

mented with RabbitMQ, but can be implemented with an AMQP mes-

sage queue, such as Apache Qpid or Zero MQ.

Cloud Administrator Guide January 7, 2015 current

Storage concepts

The OpenStack stack uses the following storage types:

Table1.2.Storage types

On-instance / ephemeral Block storage (cinder) Object Storage (swift)

Runs operating systems and provides

scratch space

Used for adding additional persistent

storage to a virtual machine (VM)

Used for storing virtual machine im-

ages and data

Persists until VM is terminated Persists until deleted Persists until deleted

Access associated with a VM Access associated with a VM Available from anywhere

Implemented as a filesystem underly-

ing OpenStack Compute

Mounted via OpenStack Block Stor-

age controlled protocol (for example,

iSCSI)

REST API

Administrator configures size setting,

based on flavors

Sizings based on need Easily scalable for future growth

Example: 10GB first disk, 30GB/core

second disk

Example: 1TB "extra hard drive" Example: 10s of TBs of data set stor-

age

You should note that:

• You cannot use OpenStack Object Storage like a traditional hard drive. The Object Stor-

age relaxes some of the constraints of a POSIX-style file system to get other gains. You

can access the objects through an API which uses HTTP. Subsequently you don't have to

provide atomic operations (that is, relying on eventual consistency), you can scale a stor-

age system easily and avoid a central point of failure.

• The OpenStack Image Service is used to manage the virtual machine images in an Open-

Stack cluster, not store them. It provides an abstraction to different methods for storage -

a bridge to the storage, not the storage itself.

• The OpenStack Object Storage can function on its own. The Object Storage (swift) prod-

uct can be used independently of the Compute (nova) product.

Command-line clients and other interfaces

swift client Enables users to submit commands to the REST API through a

command-line client authorized as either a admin user, reseller

user, or swift user.

swift-init Script that initializes the building of the ring file, takes dae-

mon names as parameter and offers commands. Docu-

mented in http://docs.openstack.org/developer/swift/

admin_guide.html#managing-services.

swift-recon

swift-ring-builder Storage ring build and rebalance utility. Document-

ed in http://docs.openstack.org/developer/swift/

admin_guide.html#managing-the-rings.

Cloud Administrator Guide January 7, 2015 current

OpenStack Object Storage

The OpenStack Object Storage is a multi-tenant object storage system. It is highly scalable

and can manage large amounts of unstructured data at low cost through a RESTful HTTP

API.

It includes the following components:

Proxy servers (swift-proxy-

server)

Accepts OpenStack Object Storage API and raw HTTP

requests to upload files, modify metadata, and create

containers. It also serves file or container listings to web

browsers. To improve performance, the proxy server

can use an optional cache that is usually deployed with

memcache.

Account servers (swift-ac-

count-server)

Manages accounts defined with Object Storage.

Container servers (swift-

container-server)

Manages the mapping of containers or folders, within

Object Storage.

Object servers (swift-ob-

ject-server)

Manages actual objects,such as files, on the storage

nodes.

Various periodic processes Performs housekeeping tasks on the large data store.

The replication services ensure consistency and availabil-

ity through the cluster. Other periodic processes include

auditors, updaters, and reapers.

WSGI middleware Handles authentication and is usually OpenStack Identi-

ty.

OpenStack Block Storage

The OpenStack Block Storage service (cinder) adds persistent storage to a virtual machine.

Block Storage provides an infrastructure for managing volumes, and interacts with Open-

Stack Compute to provide volumes for instances. The service also enables management of

volume snapshots, and volume types.

The Block Storage service consists of the following components:

cinder-api Accepts API requests, and routes them to the cin-

der-volume for action.

cinder-volume Interacts directly with the Block Storage service, and

processes such as the cinder-scheduler. It also in-

teracts with these processes through a message queue.

The cinder-volume service responds to read

and write requests sent to the Block Storage service to

maintain state. It can interact with a variety of storage

providers through a driver architecture.

剩余331页未读，继续阅读

aaaaaaxxxxxxxxx

粉丝: 0
资源: 13

OpenStack云管理员指南

OpenStack云灵活部署方案：利用openstack-yaml-infra实现多样化架构

OpenStack Nova-Network详解：NAT、VLAN与DHCP配置

OpenStack Nova-Compute源码剖析

openstack-install-guide-apt

Openstack-starter-guide

openstack-install-guide

openstack-install-guide-apt-juno

openstack-install-guide-yum-kilo

openstack-install-guide-yum-icehouse

最新资源