# Ceph storage for openstack in a security context

- Institution: CERN
- Department: Ceph Project
- Speaker: Etienne Chabrerie
- Year: 2019
- Language: English
- Source: [CERN](https://videos.cern.ch/record/3002356)
- Licence: [CERN](http://copyright.web.cern.ch)
- Who can watch: Teens profiles and older (sources give no ratings; placed by Invisible Network from the source's own words)

"Minister of the Interior" (France) has implemented a cloud for internal customers in a complex security environment. Our specific activity requires to have a scalable, reliable, and highly available storage with moderate operating expenses. A private Openstack Cloud has been deployed 2 years ago, and more and more internal customers are interested in using it, consequently increasing the cpu, memory and storage usages. So far, SAN storage was used for instances volumes, and scalability was complicated. Swift object storage was also hard to extend with this implementation.

Our objective was to implement more scalable storage system with higher performance for the MI cloud along with getting a better monitoring. To achieve this, 2 types of ceph clusters were defined: - one for block storage dedicated for openstack instances - one for object storage with 2 services: swift and s3 An automated deployment method has been designed with cobbler, ansible, salt, jenkins. The Support team is in charge of the system's commissioning and maintaining in operational condition

To conclude, the ceph solution provides a full compability with openstack, and offers s3 service (like amazon s3). For robust high-availability, the described architecture works also on a multi-site environment with asynchronous replication, which we are using today..

0:00:00 Slide 1

0:01:20 Slide 2

0:02:20 Slide 3

0:03:19 Slide 4

0:03:54 Slide 5

0:05:16 Slide 6

0:06:26 Slide 7

0:07:17 Slide 8

0:08:25 Slide 9

0:09:18 Slide 10

0:11:08 Slide 11

0:13:23 Slide 12

## Lectures

1. [Ceph storage for openstack in a security context](https://invisiblenetwork.ai/learn/cern/3002356/45969cc8c473), 14 min (CERN's player)