2. SPARC Virtual Users Group 10/20/16
3rd Thursday Tech Talks
Calls on the 3rd Thursday of
each month
Technical agenda with topics
of broad interest
Recording available
Details at:
index.cfm?PKWebId=0x bf0
Oracle Confidential – Highly Restricted

3. Oracle OpenStack for Oracle Solaris Quickstart
Engineered for Cloud
This slide deck covers the enhancements that we’ve made in Oracle Solaris to provide a comprehensive and compelling cloud platform. In particular, it covers the integration of the OpenStack cloud controller open source software infrastructure. This slide deck has been updated for the OpenStack Juno release included in Oracle Solaris.
Nick Papadonis, Principal Software Engineer
Scott Dickson, Principal Sales Engineer
October 2016

4. This is a Safe Harbor Front slide, one of two Safe Harbor Statement slides included in this template.
One of the Safe Harbor slides must be used if your presentation covers material affected by Oracle’s Revenue Recognition Policy
To learn more about this policy,
For internal communication, Safe Harbor Statements are not required. However, there is an applicable disclaimer (Exhibit E) that should be used, found in the Oracle Revenue Recognition Policy for Future Product Communications. Copy and paste this link into a web browser, to find out more information.  
For all external communications such as press release, roadmaps, PowerPoint presentations, Safe Harbor Statements are required. You can refer to the link mentioned above to find out additional information/disclaimers required depending on your audience.

5. Virtualized Data Center Resources
What is OpenStack?
Open source cloud framework
Generic solution for IaaS, PaaS, and SaaS
Combines compute, network, and storage resources
Multiple services provide functionality
Services exposed through RESTful APIs
Self-service dashboard (website)
Single Management Pane
So what is OpenStack? OpenStack was a project that started between Rackspace and NASA back in 2010, when the two companies joined efforts to co-develop cloud software they had both developed in house. OpenStack is open source software built using Python, and provides the foundation for Infrastructure as a Service, Platform as a Service, and Software as a Service. Since those early years, it’s become the fastest growing open source project, with 1000’s of commercial and individual contributors spread across the globe. OpenStack combines compute, network, and storage resources at a higher level, accessible through a web portal with a single management pane, allowing administrators to manage a variety of storage devices and hypervisors. Additionally, all cloud services are exposed with a series of RESTful APIs, allowing developers and administrators to easily connect to and expand the capability of the platform.
You can read more about OpenStack at VM VM VM
Virtualized Data Center Resources

6. Heat/Glance Murano/Trove
Oracle OpenStack for Oracle Solaris
Built into the Infrastructure
Horizon
Centralized Cloud Management
Many of our customers have been building their own home-grown cloud solution for a long time. In fact we’ve also been building the technology in Oracle Solaris to do a lot of this already. Unlike other virtualization solutions such as Linux KVM or Xen, when you provision Oracle Solaris Zones, the container like technology included in Oracle Solaris, you automatically get provisioned some storage through ZFS and networking. We’ve taken this experience of building cloud solutions, and brought this to our integration of OpenStack.
Oracle Solaris Zones provide zero overhead virtualization. In essence, they allow a series of virtual environments with a single shared kernel instance, making them highly efficient. We’ve extended this capability in Oracle Solaris 11.2 to also provide a level of isolation and independence with separate kernel instances called kernel zones. This allows administrators an additional level of flexibility when hosting in a multi-tenant environment in that you can have different kernel levels side by side. Combined with Zones over shared storage and dynamic zone reconfiguration, kernel zones greatly enhance the capabilities for virtualization with no compromises.
OpenStack has been integrated with Oracle Solaris virtual networking capabilities. A new feature called Elastic Virtual Switch provides an easy way of centralized virtual switching across multiple VMs in a cloud environment. Each VM when provisioned is plumbed with a virtual network interface and virtual switch. This ensures that VMs are easy to migrate as required. Combined with other networking capabilities including VxLAN, also new to Oracle Solaris 11.2, Oracle Solaris 11 has a comprehensive set of networking technologies to allow administrators to manage complex networking topologies in the cloud. These are the foundations that we’ve built on for our work with Oracle Solaris
Oracle Solaris ZFS file system has been at the heart of data management for a long time, and is the heart of data management in OpenStack also. With integrated file system and volume management, and a wide array of data services such as snapshots and clones, data encryption, data deduplication, software RAID, shadow migration, we take advantage of this mission critical data management framework within OpenStack. VMs can be rapidly provisioned thanks to snapshot and cloning. Data can be secured through encryption. Coupled with read-only VM environments, data is protected at rest and in motion.
The final integration is with a new archive format called Unified Archives. Unified Archives provide the ability to snapshot bare-metal and virtualized environments within a single archive for redeployment, either as clones within a cloud environment, or for system backup and disaster recovery. Unified Archives are completely portable. Administrators can rapidly deploy these archives using p2v, v2v, and v2p transforms. Unified Archives are the basis of Glance, the image management and deployment repository within OpenStack.
Zones, Kernel Zones
Containers, Type-2, and Type-1 Virtualization
Nova / Ironic
Self-Service Compute and Bare Metal
ZFS File system
Built in compression, encryption and deduplication
Cinder/Swift
Cloud Scale storage
Unified Archives
Fast, flexible cloning and disaster recovery
Heat/Glance Murano/Trove
Platform as a Service
Neutron
Software Defined Networking
Elastic vSwitch and Open vSwitch
Application defined SDN and interoperability

7. Simplified OpenStack Architecture

8. OpenStack Kilo in Oracle Solaris 11.3
OS. Virtualization. SDN. OpenStack. Complete.
Engineered for security and compliance
Minimal privileges for cloud services
Lock down infrastructure with immutability
Assured reliability and scale
Automatic service restart and node dependencies
Guaranteed data integrity
Seamless upgrade, instant roll-back
SPARC, x86, Virtualized and Bare Metal Environments
In Oracle Solaris 11.2 and onwards we have included a complete OpenStack based distribution, including all the core services. This integration has been an engineered effort ensuring that all the OpenStack services are tightly integrated into the technology foundations of Oracle Solaris – so we get all the advantages of the #1 enterprise platform in a cloud environment. We’ve written Solaris drivers for Nova to integrate with Oracle Solaris Zones, Neutron to integrate with Oracle Solaris network virtualization including Elastic Virtual Switch, and Cinder to integrate with the ZFS integrated file system and volume manager. We ensure that all OpenStack services run with minimal privileges and that they can be locked down with Oracle Solaris Immutable Zones if necessary. Furthermore, all services are integrated into the Service Management Framework (SMF) to ensure we get service reliability including automatic service restart and node dependency management.

9. OpenStack Nova Compute – Zones and Kernel Zones
High-density virtual environments – ideal for multi-tenant cloud
Implemented with Oracle Solaris Zones
Zero-overhead virtualization
Kernel zones allow independent patch levels
Isolated IP stacks and name spaces
Fully portable with Unified Archives
VM lockdown with Immutable Zones
11.3
Oracle Solaris Zones are used for OpenStack compute. They provide excellent environments for application workloads and are fast and easy to provision in a cloud environment. What’s more, Oracle Solaris Zones are extremely efficient with very low overhead, meaning that they are good candidates for increasing VM density on a given node.
In environments where multiple kernel levels are desired, kernel zones can be utilized to host different Solaris versions on the same physical machine. Kernel zones are ideal for many enterprise-size deployments where different patch levels may be desired on the same machine, or where legacy applications will be running in the cloud.
11.2 SRU 1
Nova Compute Node

10. OpenStack Cinder/Swift Data Management – ZFS
Production ready data management, no compromises
ZFS is foundation for Cinder and Swift
iSCSI or FC LUN provisioning
Leverage integrated data services including snapshots, compression and encryption
These data services are completely transparent to the guests
Integrated OpenStack support for ZFS SA
Drivers available for FS1
Virtual Environments
The ZFS file system is at the heart of our integration with the block and object services in OpenStack. This gives us a highly reliable data management foundation with a number of integrated data services that you don’t have to pay extra for. Our primary block storage mechanism takes advantage of Oracle Solaris Zones over shared storage, where block storage can be provisioned over iSCSI or fibre channel.
Additionally, support for OpenStack on the ZFSSA has been added in recent releases. You can now use the ZFSSA as backend storage support for Cinder using iSCSI. Support for an NFS Cinder driver, and Manila (NFS as a Service) is available in the upstream community, merged into the Kilo release.
ISCSI LUN
Cinder Volume

11. Security in Solaris OpenStack
Services allocated minimum required privileges to limit damage from a compromised service
Secure migration of VMs, including live migration of kernel zones
Launch VMs as immutable zones
Solaris compliance tool can be used to create compliant “golden image”
Non-global zones can’t be live migrated, but they can be migrated securely.
The Solaris compliance tool can be used once by a cloud administrator to build an image that meets the organization’s compliance requirements. This image can then be uploaded into glance for use as the base VM image, ensuring that all deployed VMs meet the organization’s compliance standards. The compliance tool allows users to test the global zone or a kernel zone/non-global zone against either a pre-configured profile included with Solaris (such as PCI-DSS) or a custom-built profile tailored to the customer’s needs.

12. Reliability and Scale in Solaris OpenStack
Tested and signed package group
Service management facility (SMF) automatically restarts all services and node dependencies
Seamless upgrade and rollback using boot environments
Near zero-overhead virtualization
Normally, working with OpenStack requires getting files from the upstream repository and packaging them yourself. Various vendors market distributions that have already packaged the files, but Solaris OpenStack is uniquely integrated into the operating system for smooth installation.
OpenStack has been fully integrated into the service management facility (SMF) so that all OpenStack services operate as one or more SMF services. SMF services recover from power interruptions – including restarting any other services necessary for an interrupted service – and provide detailed logs to aid in diagnosing erroneous behavior.
Whenever OpenStack (or another major package) is updated in Solaris, a boot environment is created. Boot environments allow for easy rollback should any unexpected behavior take place.
Elastic Virtual Switch allows for enterprise-grade scaling network topologies that allow numerous virtual machines to communicate securely across the same physical layers.
ZFS is the world’s most scalable file system, and also transparently compresses data to reduce the footprint needed by private clouds.
Solaris’s near zero-overhead virtualization ensures that compute resources are spent running the workloads users wish to run, not on administrative processes.

13. OpenStack – Complicated?
“The OpenStack Mission: To produce the ubiquitous Open Source Cloud Computing platform that will meet the needs of public and private clouds regardless of size, by being simple to implement and massively scalable.”
Over 4300 possible tunables
Over 500 set in standard config
“You keep using that word. I do not think it means what you think it means

15. OpenStack Bring-Up Script
Designed to support OpenStack testing and POC exercises
Offered as open source, unsupported code; Apache license.
Supports OpenStack Kilo and Solaris 11.3 SRU9+
Supports Single-Node and Multi-Node deployments
Includes basic documentation
storage/solaris11/downloads/openstack-kilo-bringup html

16. OpenStack Kilo Bring-Up Script - Demo

17. Getting Started OpenStack on Oracle Solaris Discussion
OpenStack on Oracle Solaris resources
OpenStack on Oracle Solaris Discussion
Oracle Solaris on Oracle Technology Network
storage/solaris11/technologies/openstack html
Source Code
userland/sources/gate/show/components/openstack
To get more information about OpenStack on Oracle Solaris you can see these resources. We have a discussion list available through java.net that connects you directly to the engineers developing OpenStack on Oracle Solaris. Additionally, we have the Oracle Technology Network that contains many different resources – how to guides, screencasts, presentations, cheat sheets, hands on labs, whitepapers, data sheets, interviews, etc. This includes technical information for OpenStack, along with the location in which to download the OpenStack Unified Archive.
NOTE: For Oracle employees, take a look at our internal resources and mailing lists:
- solaris.us.oracle.com -
For more information about OpenStack on Oracle Solaris (Senior Engineering Manager) or (Product Manager)

18. More Information oracle.com/solaris @ORCL_Solaris
Oracle Solaris resources
oracle.com/solaris
@ORCL_Solaris
facebook.com/oraclesolaris
Oracle Solaris Insider
blogs.oracle.com/solaris
youtube.com/oraclesolaris
To get more information we provide a number of links. We’re on all the usual social media channels – Facebook, Twitter, LinkedIn, YouTube and Blogs.