CON8358 - Building a Private Cloud with OpenStack Oracle’s OpenStack for Oracle Linux and Oracle VM This is a Title Slide with Picture slide ideal for including a picture with a brief title, subtitle and presenter information. To customize this slide with your own picture: Right-click the slide area and choose Format Background from the pop-up menu. From the Fill menu, click Picture and texture fill. Under Insert from: click File. Locate your new picture and click Insert. To copy the Customized Background from Another Presentation on PC Click New Slide from the Home tab's Slides group and select Reuse Slides. Click Browse in the Reuse Slides panel and select Browse Files. Double-click the PowerPoint presentation that contains the background you wish to copy. Check Keep Source Formatting and click the slide that contains the background you want. Click the left-hand slide preview to which you wish to apply the new master layout. Apply New Layout (Important): Right-click any selected slide, point to Layout, and click the slide containing the desired layout from the layout gallery. Delete any unwanted slides or duplicates. To copy the Customized Background from Another Presentation on Mac Click New Slide from the Home tab's Slides group and select Insert Slides from Other Presentation… Navigate to the PowerPoint presentation file that contains the background you wish to copy. Double-click or press Insert. This prompts the Slide Finder dialogue box. Make sure Keep design of original slides is unchecked and click the slide(s) that contains the background you want. Hold Shift key to select multiple slides. Apply New Layout (Important): Click Layout from the Home tab's Slides group, and click the slide containing the desired layout from the layout gallery. Ronen Kofman Director of Product Development Oracle OpenStack September, 2014 Copyright © 2014, Oracle and/or its affiliates. All rights reserved. | Oracle Confidential – Internal/Restricted/Highly Restricted

This is a Safe Harbor Front slide, one of two Safe Harbor Statement slides included in this template. One of the Safe Harbor slides must be used if your presentation covers material affected by Oracle’s Revenue Recognition Policy To learn more about this policy, e-mail: Revrec-americasiebc_us@oracle.com For internal communication, Safe Harbor Statements are not required. However, there is an applicable disclaimer (Exhibit E) that should be used, found in the Oracle Revenue Recognition Policy for Future Product Communications. Copy and paste this link into a web browser, to find out more information.   http://my.oracle.com/site/fin/gfo/GlobalProcesses/cnt452504.pdf For all external communications such as press release, roadmaps, PowerPoint presentations, Safe Harbor Statements are required. You can refer to the link mentioned above to find out additional information/disclaimers required depending on your audience. Oracle Confidential – Internal/Restricted/Highly Restricted

Program Agenda 1 About OpenStack Oracle OpenStack for Oracle Linux OpenStack in the Datacenter - Requirements Design Considerations for OpenStack Summary 2 3 4 5 Oracle Confidential – Internal/Restricted/Highly Restricted

Introduction to OpenStack This slide can also be used as a Q and A slide Oracle Confidential – Internal/Restricted/Highly Restricted

What is OpenStack? OpenStack is an open source, Python based, cloud operating system. It is designed to control large scale, multi tenant cloud deployments OpenStack is built through a set of distributed services which control compute, storage, network, identity management, orchestration, and much more Oracle Confidential – Internal/Restricted/Highly Restricted

OpenStack Momentum Launched in 2010 OpenStack has grown to become one of the largest open source project ever launched. Some numbers from http://www.stackalytics.com/ as of September 2014: Over 200 companies contributed code to date Almost 2700 individuals contributed to OpenStack

Use Cases for OpenStack Today Main use cases: DevOps – important to move content from dev to ops quickly Software development – test environment, ability to bring up and tear down sophisticated topologies and configuration Elasticity/scalability – users who need to burst and gain large scale quickly Batch processing/HPC Web companies – NFV Early Adopters: Small groups Strong IT skills set can “figure stuff out” Fairly simple regulatory environment Oracle Confidential – Internal/Restricted/Highly Restricted

Is OpenStack Ready for Common Enterprise? Oracle Confidential – Internal/Restricted/Highly Restricted

OpenStack in the Datacenter - Requirements This slide can also be used as a Q and A slide Oracle Confidential – Internal/Restricted/Highly Restricted

Main Requirements There are many types of workloads in the datacenter, solution must serve all of them Pets or cattle? Lots of pets, lots of cattle too Portability – environment has to be portable Solution needs to be highly available and reduce/eliminate single points of failure Create an efficient system to allow repeatable and auditable processes Needs to meet corporate security and compliance requirements Ability to charge back the LOBs Support for IPv6 Oracle Confidential – Internal/Restricted/Highly Restricted

Deploying OpenStack Services Compute service Nova Compute Network service Neutron Server Network service Neutron plugin agent OpenStack Dashboard Horizon Compute service Nova Network service Neutron Agents Identity service Keystone Image service Glance Block Storage service Cinder Message Queue Database

Deploying OpenStack Services and Providing HA API node - Endpoint for all calls internal and external Downtime would mean no way to manage the environment, VMs still running fine. Mostly stateless can be protected by redundancy and load balancer Keep keystone separate – more sensitive data Database – Stores all the data for all services can get busy Single point of failure – not recoverable if lost Requires high availability Need to comply with corporate standard for databases Oracle Confidential – Internal/Restricted/Highly Restricted

Deploying OpenStack Services and Providing HA Message Queue All management traffic passes through it Need to have network bandwidth and high availability Network node L3 agent proxies all traffic outside to the public network Performance and bandwidth concerns, high availability concern Multiple Pods/Zones for operational efficiency/availability Oracle Confidential – Internal/Restricted/Highly Restricted

Security Considerations Isolating more sensitive nodes – Database , Keystone Management traffic has to be encrypted – reverse proxy on the server Authentication – connect to corporate LDAP Roles - hierarchical Layer 2 separation inside an operational zone Oracle Confidential – Internal/Restricted/Highly Restricted

Design Considerations - Networking IPv6 is a requirement NAT cannot be used for production environment but is very useful for test/dev Separating control from data path Vlan – don’t want any kind of manual config on the switches. Mechanism drivers in ML2 using Nexus 9k. Routing – Looking to do on real router not linux Oracle Confidential – Internal/Restricted/Highly Restricted

Storage considerations Lot of pets! Really need persistent storage, not ephemeral Size of images Availability Legacy apps configuration is not always possible after install Storage solution ZFSSA with ISCSI Single initiator group needs to be an initiator group for each server ZFS - When attach a volume to an instance the volume is connected to all servers and refresh does not occur on all servers at all times. Storage network is on the side not through Neutron. For application storage all is NFS – connecting the storage to the Neutron public network need to look at Manila NFS security by exporting shares to specific IPs – in case of NAT NFS will be exporting to floating IP need to assure floating IP remains assiciated to a given tenant – policy through policy.json Oracle Confidential – Internal/Restricted/Highly Restricted

Orchestration requirements Better compliance - Accelerating the review process Design on ppt vs coding the policy Auditing that what was built was what was decided on No need for SRs - efficiency Oracle Confidential – Internal/Restricted/Highly Restricted

Oracle Linux OpenStack Distribution This slide can also be used as a Q and A slide Oracle Confidential – Internal/Restricted/Highly Restricted

Summary Oracle Confidential – Internal/Restricted/Highly Restricted

Oracle VM Sessions @ OpenWorld 2014 Oracle VM & Oracle OpenStack for Oracle Linux Session Highlights Monday, Sept 29 10:15 – 11:00 CON8358 – Building a Private Cloud with Oracle OpenStack for Oracle Linux and Oracle VM Intercontinental Hotel, Grand Ballroom B 1:30 – 2:15 GEN8471– Oracle Virtualization Strategy and Roadmap 1:15 – 2:15 HOL9078 – OpenStack: Getting Started with Oracle Linux and Oracle VM Nikko Hotel, Floor 3, Room Nikko1 21

Oracle VM Sessions @ Oracle OpenWorld 2014 Virtualization Sessions Highlights Time Wednesday, Oct. 01 Thursday, Oct. 02 10:15 – 11:00 CON8472 – What's New with Oracle VM Server for x86 and SPARC: A Technical Deep Dive Intercontinental Hotel, Union Square – Floor 3 9:30 – 10:15 CON8355 – Using Oracle VM VirtualBox as your development platform 11:30 – 12:15 CON8356 – Oracle's Next Generation Software Defined Networking (SDN) Platform for Public and Private Clouds 10:45 – 11:30 CON8473 – Oracle Distribution of OpenStack –Making OpenStack an Enterprise Grade Solution 4:45 – 5:30 CON8474 – Software-Defined Networking in a Hybrid, Open Data Center Intercontinental Hotel, Grand Ballroom A 22

Oracle VM Hands-on Labs Monday, Sept 29 Wednesday, Oct. 01 10:15 – 11:15 HOL9079 – Build a Complete HA Oracle VM Infrastructure from Server to App. Nikko Hotel, Floor 2, Room Mendocino I-II HOL9121 – Create Your Own Oracle VM Template to Simplify Your Own Application Deployment Nikko Hotel, Floor 3, Room Nikko 1 1:15 – 2:15 HOL9078 – OpenStack: Getting Started with Oracle Linux and Oracle VM HOL9122: Build a Private DBaaS Cloud with Oracle VM and Oracle Enterprise Manager 12c 23

Oracle VM and Oracle OpenStack for Oracle Linux Demos In the Linux and Virtualization with OpenStack Showcase 3760 – Oracle VM - integrated infrastructure choice for the cloud Oracle Linux and Virtualization with OpenStack Showcase 3767 – OpenStack - Enterprise-grade Cloud with Oracle Linux and Oracle VM 24

Stay Connected Oracle.com/virtualization @ORCL_Virtualize Join our communities, visit our websites for more information Oracle.com/virtualization @ORCL_Virtualize Facebook.com/OracleVirtualization Oracle VM Group Blogs.oracle.com/virtualization Youtube.com/virtualization Focus on Virtualization and OpenStack Download: edelivery.oracle.com/oraclevm Training: education.oracle.com/virtualization

Oracle Confidential – Internal/Restricted/Highly Restricted