OpenStack Bootcamp Training
Level
IntermediateDuration
28h / 4 daysDate
Individually arrangedPrice
Individually arrangedOpenStack Bootcamp Training
OpenStack is an open-source platform used for building cloud computing environments. With this system, we can build a fully functional private or public cloud on our own infrastructure. This ecosystem allows managing the entire set of components used in clouds, such as user access management, cloud resource images, block, file, and object storage, as well as virtualized networking and its functions at different layers. Most importantly, OpenStack enables the management of compute resources – from physical servers, through the most popular virtual machines, to container clusters or single containers. Additionally, OpenStack provides many higher-layer services such as databases, load balancers, telemetry, or DNS services delivered in the “as a Service” model.
What will you learn?
- Gain an in-depth understanding of OpenStack architecture.
- Learn to manage virtual resources such as VMs and storage volumes.
- Build virtual networks with routers and secure access to resources.
- Understand how virtualization of compute and networking is implemented at the OS level.
- Learn cloud monitoring principles and troubleshooting techniques.
- Secure cloud environments and infrastructure against unauthorized access.
Who is this training for?
System administrators who want to learn how to manage the OpenStack platform from an administrator or user perspective.-
Developers building interfaces and services on top of OpenStack.
-
Architects looking to select the optimal configuration for OpenStack deployments.
-
Candidates preparing for the Certified OpenStack Administrator certification.
-
Network administrators who want to understand network virtualization and software-defined networking in cloud environments.
-
Security specialists interested in the nuances of distributed cloud infrastructure security.
Training Program
-
Introduction to OpenStack
- History of the cloud and OpenStack
- Cloud features
- Cloud models: private, public, hybrid; on-premise, IaaS, PaaS, SaaS
- Public and private cloud deployments based on OpenStack
- Open source and commercial OpenStack distributions
- OpenStack deployment models
-
OpenStack ecosystem
- Modules
- Underlying tools
- Integrations
- OpenStack lifecycle
- OpenStack certification
- OpenStack lab (VM) for this course
-
Getting to Know OpenStack
- OpenStack components: Keystone, Glance, Nova, Neutron, Cinder, Swift, Heat
- Interaction with the OpenStack cloud
- OpenStack daemons and API communication flow
-
Keystone – Identity Management Service
- Keystone architecture
- Authentication and available backends
- Token types and token management
- Authorization in OpenStack – roles and oslo.policy
- Keystone resources: domains, projects, users
- openrc and clouds.yaml – CLI client configuration
- OpenStack service catalog
- Adding new OpenStack service
- Quota system in OpenStack
-
Glance – Image Service
- Images adjusted to the cloud
- Image features: properties, metadata, format, container
- Uploading and downloading images
- Sharing images
- Glance image stores
- Protected images
- Managing quotas for the image service
- Verification of Glance services
-
Neutron – Networking
- Architecture and Neutron services
- The ML2 plugin
- Networking in the compute node – analysis
- Networking concepts and tools used by Neutron
- Basic Neutron network resource types
- Managing tenant networks and subnets
- Managing security groups and rules
- East-West routing
- Network namespaces
- Managing external/provider networks
- North-South routing
- Floating IP management
- Network quotas
- Basic network troubleshooting (namespaces, tcpdump, etc.)
- Verification of Neutron services
-
Nova – Compute Service
- Interfaces to hypervisors
- Keypair management
- Flavour management
- Flavors and CPU topology
- Instance parameters
- Creating and managing instances
- Verification of spawned instances
- Snapshotting
- Resizing instances
- Assigning floating IPs
- Interactive console and console logs
- Security groups assignment
- Internals of security groups and port security (iptables)
- Internals of L3 routers
- Compute quotas
- Statistics from Nova
- Placement API and Nova Cells v2
- Instance scheduling with Placement API
- Verification of Nova services
-
Cinder – Block Storage
- Volume parameters
- Creating and managing volumes
- Attaching volumes to Nova instances
- Managing snapshots and backups
- Transferring volumes between projects
- Restoring backups
- Volume quotas
- QoS in Cinder
- LVM, storage array, and Ceph backends
- Ceph integration with Cinder
- Good practices for Ceph deployments
- Verification of Cinder services
-
Barbican – Key Management Service
- Barbican architecture
- Storing passphrases and encryption keys
- Volume encryption mechanisms and limitations
- Configuring encrypted Cinder volumes
- Storing X.509 certificate bundles
-
Swift – Object Storage
- Swift components and processes
- Managing containers and objects
- Access control lists (ACLs)
- Object expiration
- The Ring and storage policies
- Monitoring storage capacity
- Quotas
- Verification of Swift services
-
Heat – Orchestration
- Heat Orchestration Templates (HOT)
- Creating and updating stacks
- Verification of Heat stacks and services
-
Octavia – Load Balancing as a Service
- Architecture and request flow
- Flavors and availability zones
- HTTP, TCP, and HTTPS passthrough load balancers
- Listeners, pools, and health monitors
- Layer 7 load balancing
- Amphora image creation
- Failover, networking, and monitoring
- Troubleshooting Octavia
-
Troubleshooting and Operations
- Analyzing logs and centralized logging
- Debugging OpenStack client queries
- Database management and backups
- Analyzing compute and instance status
- RabbitMQ diagnostics
- Metadata services
- Network and performance troubleshooting
- Instance backup and recovery
-
Advanced Architecture and Operations
- Hardware considerations and capacity planning
- HA control plane and message queue
- Cloud partitioning and Nova scheduler filters
- Cold and live migrations, Watcher project
- Advanced SDN networking (Linux Bridge, OVS, DVR, VPNaaS)
- Monitoring and telemetry (Ceilometer, external tools)
- Advanced hypervisor features: CPU pinning, NUMA, SR-IOV
- Cloud-init and image customization
-
Upgrades, Bare Metal, and the Future
- Upgrade strategies and zero-downtime upgrades
- Bare-metal provisioning with Ironic
- Undercloud and overcloud concepts
- Future of OpenStack
