Learn · CERN

Talk14 min

Ceph storage for openstack in a security context

Etienne Chabrerie · CERN

Watch At CERN

About

"Minister of the Interior" (France) has implemented a cloud for internal customers in a complex security environment. Our specific activity requires to have a scalable, reliable, and highly available storage with moderate operating expenses. A private Openstack Cloud has been deployed 2 years ago, and more and more internal customers are interested in using it, consequently increasing the cpu, memory and storage usages. So far, SAN storage was used for instances volumes, and scalability was complicated. Swift object storage was also hard to extend with this implementation.

Our objective was to implement more scalable storage system with higher performance for the MI cloud along with getting a better monitoring. To achieve this, 2 types of ceph clusters were defined: - one for block storage dedicated for openstack instances - one for object storage with 2 services: swift and s3 An automated deployment method has been designed with cobbler, ansible, salt, jenkins. The Support team is in charge of the system's commissioning and maintaining in operational condition

To conclude, the ceph solution provides a full compability with openstack, and offers s3 service (like amazon s3). For robust high-availability, the described architecture works also on a multi-site environment with asynchronous replication, which we are using today..

0:00:00 Slide 1

0:01:20 Slide 2

0:02:20 Slide 3

0:03:19 Slide 4

0:03:54 Slide 5

0:05:16 Slide 6

0:06:26 Slide 7

0:07:17 Slide 8

0:08:25 Slide 9

The talk

  1. Ceph storage for openstack in a security context 2019-09-17 · 14 min · CERN's player

Credits and licence

Institution
CERN
Department
Ceph Project
Speaker
Etienne Chabrerie
Year
2019
Language
English
Source
CERN
Licence
CERN, as CERN states it. CERN's terms
Attribution
© CERN. CERN provides its audiovisual media free of charge for educational and informational use, credited to CERN; this lecture is shown in CERN's own player.
Who can watch
CERN gives no rating. Invisible Network shows it to Teens profiles and older, judged from what the source says about it. How courses are placed