說(shuō)明講稿培訓(xùn)nova

ControlstheIaaS(InfrastructureasService)ControlstheIaaS(InfrastructureasService)cloudcomputingProvidesastandardRESTinterfacefromwhichtobootVMs,operateonVMs,bootstrapVMonfirstboot,etc.Builtonashared–nothing,messagingbasedDeferredcallbacksgetwhenaresponseisreceived,insteadputtingcomponentsinawaitstatewhiletheywaitforaresponseSupportsmultipleSupportsmulti-Kernel-basedVirtualQuickLinuxContainers(throughUserKernel-basedVirtualQuickLinuxContainers(throughUserModeESX/ESXi4.1update1andXen,CitrixXenServerandXenCloudPlatformVirtualizationsolutionforAIX,IBMiandLinuxonIBMPOWERionsphysicalhardwareviaIroniceAuthentication/LinuxeAuthentication/LinuxAvirtualmachine(VM)orbaremetalAvirtualmachine(VM)orbaremetalsystemontowhichanOScanbeinstalled.Anavailablehardwareconfigurationforaserver.Eachflavorspecifiesacombinationofdiskspace,memorycapacityandpriorityforCPUtime.AcollectionoffilesusedtocreateorrebuildaSoftreboot,theoperatingsystemissignaledtorestart,whichallowsforagracefulshutdownofallprocesses.HardrebootsimplyrestartstheRemovesalldataontheserverandreplacesitwiththespecifiedimage.TheserverIDandIPaddressesremaintheConvertsanexistingservertoadifferentPartsofNovafunctionshasbeenportedtoseperateservices,PartsofNovafunctionshasbeenportedtoseperateservices,suchasKeystone,Neutron,Glance,andCinder.SomeofthatfunctionalitystillexistsinNova,howevertoreduceconfusionandrecognizethedirectionwhereOpenStackisheadedwewilldiscussthatfunctionalitywithinthestandaloneservicesandnothowtheycanbeutilizedwithinofmakescommandandcontrolofofmakescommandandcontroloftheComputeprogrammaticallyavailabletoSupportstheOpenStackAPI,AmazonEC2andanAdminAPI,viaport8774nova-compute:setsupandmanagesnova-database:storagesinformationforallofnovanova-conductor:aRPCthatdecouplescomputeandthedatabasewiththeadvantagesincreasingperfomance,databasesecurity,andallowingupdatestodatabaseschemawithrequiringanova-computeupgradeQueue:providesacentralhubforpassingmessagesbetweenofnova-scheduler:responsiblefordeterminingwhichcomputenodehostshouldlaunchofnova-scheduler:responsiblefordeterminingwhichcomputenodehostshouldlaunchanimageinstance.novaobjectstore:providesanS3interfaceforregisteringimagesontotheGlance.Itisprimarilyusedforinstallationsthatneedtosupporteuca2ools.nova-cert:managesx509certificates.nova-consoleauthauthorizesuser'stokensthevncproxy,whichisallowsuserstoaccessinstancesthroughVNC(notshown):providesaproxyaccessingrunninginstancesthroughaconnection.Itsupportsbrowser-basednovnc(1ofAfterinstanceisComputeNode(withavailablevCPM,memory,andlocaldiskmputeNode(1ofAfterinstanceisComputeNode(withavailablevCPM,memory,andlocaldiskmputeNodeavailablevCPM,ry,andlocaldisk(volumestore)withpredefined(imagewith(volumestore)withpredefined………1n1nEphemeralImageImage(2of1generateand3nova-apiwith2IPIalltoschedulernschedulingler]oncomputenode(2of1generateand3nova-apiwith2IPIalltoschedulernschedulingler]oncomputenodemutentrl4mute7lne85omalltoallocatessociatewithas96ResponsiblefordeterminingwhichResponsiblefordeterminingwhichComputenode,fromthosethatarelaunchanimage?ConfigurablethroughavarietyofUsesaspecifiedschedulingalgorithmstomakehosteconfigured,bydefaulttoeconfigured,bydefaulttousetheFilterSelectsarandomhostfromthoseGeneratealistofpre-pickedschedulerslots.Whenuserrequesthitsscheduler,attemptstopickcacheddecisionfirstSelectshostthatbestmeetsthespecifiedfiltercriteriaExampleRamFilter-filtershostsbytheirRAM.OnlyhostswithsufficientRAMExampleRamFilter-filtershostsbytheirRAM.OnlyhostswithsufficientRAMtohosttheinstancearepassed.DifferentHostFilter-allowstheinstanceonadifferenthostfromasetofinstances.AvailabilityZoneFilter-filtershostsbyExampleRAMWeigher-weightbasedonavailableRAMonthecomputenode.Thelargestweightwins.Ifthemultiplierisnegative,thehostwithleastRAMavailablewillwin.DiskWeigher-Hostsareweightedandsortedbyfreediskspacewiththelargestweightwinning.Ifthemultiplierisnegative,thehostwithlessdiskspaceavailablewillwin.esoverallatingeachagainstasetostsisorderedghtedllerLOSP7llerLOSP7Director(TrippleO)，PackStackforpet,Chef,Juju,WebUIWebUIommandcreatesan<instanceommandcreatesan<instance--<flavor細(xì)Verifiestheinstance細(xì)Verifiestheinstancecreatedanda3c8-3398-470c-b5ab- IInstanceFromIInstanceFromtheESCloudSelectyourSelecttheInstancesClicktheinstancefromtheconsoletabdthen++++|+++|||+||++|+++611-945e-|+|+||+|++ca8b4-eae3-41c2-a46b-++++++|||+|+|+|+++611-945e-addc0b73455a|+|+|+|+|++-|-|-++||-----++++-Taskdthen++++|+++|||+||++|+++611-945e-|+|+||+|++ca8b4-eae3-41c2-a46b-++++++|||+|+|+|+++611-945e-addc0b73455a|+|+|+|+|++-|-|-++||-----++++-TaskSpecificrSSHaccesstotoSpecificrSSHaccesstotoprovidesecureSSHlogintoarunningtogenerateapublicandprivatekeykeytotheuserisaddedtotheauthorized_keysfileoftheloginaccountaspartoftheinitialbooteyisstoredsothatitcanbeinjectedinto-r-rityacollectionofnetworkaccessrityacollectionofnetworkaccesslesthatgetappliedtotheincomingpacketsforthegressfilteringusingiptablesesthesourceIP/network,protocoltype,destinationportsetsaredefaultsecuritygroupifnothingisspecifiedlt,blockseverything(hasnorules)tygroupscanbespecifiedcreationofanareappliedonthecomputeheDashboardorpossibletoaddorremoverulesandrulesareautomaticallyenforcedconfigsecurityconfigsecurityeshemthe3DefaultAllthetrafficoriginatedbytheinstances(outboundtraffic)isAllinboundtrafficfromoutsidethedefaultsecuritygroupispCLI作示t+++|||+|++0-8348-||SSHtrafficfrom192.168.1.1ispermittedtotheinstanceAnyICMPtrafficfrom----------------------+---------+-------------my-default-server-----t-ispermittedtothe+|+||++-|+||++-|pCLI作示t+++|||+|++0-8348-||SSHtrafficfrom192.168.1.1ispermittedtotheinstanceAnyICMPtrafficfrom----------------------+---------+-------------my-default-server-----t-ispermittedtothe+|+||++-|+||++-||-||++-cirros-0.3.1-x86_64---1--net-id=63fab3f3-2705-4e2c-9bf0--SecuritycanbeassignedtoinstanceasitisgeupgeuprulestotheIPtothe決決見(jiàn)問(wèn)題