View the Slides
Total Page:16
File Type:pdf, Size:1020Kb
Solaris Engineering Cloud Built on OpenStack on Oracle Solaris Dave Miner Senior Principal SoEware Engineer November 2015 Copyright © 2015, Oracle and/or its affiliates. All rights reserved. | Table of Contents 1 Oracle Solaris Strategy 2 OpenStack on Oracle Solaris 3 Oracle Solaris Engineering Cloud 4 Quesons Copyright © 2015 Oracle and/or its affiliates. All rights reserved. | 3 Safe Harbor Statement The following is intended to outline our general product direcNon. It is intended for informaon purposes only, and may not be incorporated into any contract. It is not a commitment to deliver any material, code, or funcNonality, and should not be relied upon in making purchasing decisions. The development, release, and Nming of any features or funcNonality described for Oracle’s products remains at the sole discreNon of Oracle. Copyright © 2015 Oracle and/or its affiliates. All rights reserved. | 4 Oracle Solaris Strategy • Security, speed, simplicity • One engineering team • Secure to the core • World class SPARC performance • Secure OpenStack IaaS Copyright © 2015 Oracle and/or its affiliates. All rights reserved. | Oracle Solaris 11.3 – Security. Speed. Simplicity. ✓ Secure and Compliant ✓ Simple ✓ Efficient ✓ Open ✓ Affordable YOUR APP Your Enterprise Cloud Copyright © 2015 Oracle and/or its affiliates. All rights reserved. | 6 Protects Hypervisor and Guest Environments • Locked down hypervisor and guests • Stop malware before it gets in • Prevent administrator mistakes • Update and patch but unwritable Firewall by users, applicaons, or hackers # • Simple on/off with ready made Immutable Guest Immutable Guest security levels Oracle Solaris Copyright © 2015 Oracle and/or its affiliates. All rights reserved. | 7 Makes EncrypNon Everywhere Affordable EnD-to-EnD, Always on Cryptography Applicaons • No performance loss Java • AutomaBcally accelerates Java, Oracle Database, OpenSSL, and custom Oracle Database applicaons Operang System • Protecon of data at rest and in moon UliNes • Meet compliance with high performance Storage Disk encrypBon Virtualizaon • Integrates with Oracle Key Manager Firmware No Compromise Copyright © 2015 Oracle and/or its affiliates. All rights reserved. | 8 Much Faster End-To-End EncrypNon M7 Advantage Increases on Highest Security Ciphers Oracle M7 4X Faster vs. 32 cores 83 GB/s X86 Intel X86 E5 v3 18 cores 22 GB/s AES 128-CBC: Popular for Cloud, DB 11X Faster vs. IBM Power8 8 GB/s IBM Power 6 cores Copyright © 2015 Oracle and/or its affiliates. All rights reserved. | 9 Much Faster End-To-End EncrypNon M7 Advantage Increases on Highest Security Ciphers Oracle M7 4X Faster vs. 32 cores 83 GB/s X86 Intel X86 E5 v3 18 cores 22 GB/s AES 128-CBC: Popular for Cloud, DB 11X Faster vs. IBM Power8 8 GB/s IBM Power 6 cores Oracle M7 32 cores 84 GB/s 18X Faster vs. X86 Intel X86 E5 v3 18 cores 4.7 GB/s SHA 512-1024: Important for Banking Opera@ons 32X Faster vs. IBM Power8 8 cores 2.8 GB/s IBM Power Copyright © 2015 Oracle and/or its affiliates. All rights reserved. | 10 Secure OpenStack-Based IaaS, PaaS and DBaaS • Secure Services – Minimum privileges • Data at Rest – ZFS Encrypon • Data in MoNon Zone Zone Zone Zone – Secure Migraon Zone Zone Zone • Applicaon Zone – Read only VM Oracle Solaris Oracle Solaris Oracle Solaris • Network – Data link ProtecNon Copyright © 2015, Oracle and/or its affiliates. All rights reserved. | 11 Simple and Seamless Cloud Updates Havana Juno, Kilo, Liberty Copyright © 2015, Oracle and/or its affiliates. All rights reserved. | 12 What Solaris Brings to OpenStack – Today • One integrated, OpenStack package of all required components, downloadable from a secure repository • Solaris Boot Environments allow seamless updates and roll back • Immutable VMs for mulNtenant data security and zero overhead • Modern, efficient ZFS storage on backend • Fault resilience at all levels • Both SPARC and x86 in one cloud Copyright © 2015 Oracle and/or its affiliates. All rights reserved. | 13 What Solaris Brings to OpenStack – In Progress • Secure live migraon of VMs Shared User Experience • Open Virtual Switch to manage Solaris and Linux nodes • OpenStack installer automacally Solaris configures all services across nodes Solaris Solaris – Integraon and support of Puppet Solaris OpenStack modules • Open Daylight for fully interoperable SDN Copyright © 2015, Oracle and/or its affiliates. All rights reserved. | 14 Oracle OpenStack Database Cloud Global financial anD banking services • Started with Linux but Solaris reached their goals more quickly • Simplified support through end-to- end Oracle OpenStack soluNon: Solari Solari – Oracle DB, compute, networking and s s Oracle storage Compute • Enterprise-class DBaaS Oracle Oracle • Zero overhead virtualizaon ZS-3 ES-1 storage • 10x faster self-provisioning of DBs Copyright © 2015, Oracle and/or its affiliates. All rights reserved. | 15 OpenStack on Oracle Solaris IaaS Global telecommunicaon services • Leverage exisNng infrastructure • Secure live migraon of VMs LDOM LDOM LDOM LDOM LDOM LDOM LDOM LDOM LDOM LDOM LDOM nova nova nova nova nova nova nova nova nova nova nova computcomput computcomputcomput computcomput compute compute comput comput e e e e e e e e e Oracle Solaris CDOM Oracle Solaris CDOM Oracle Solaris CDOM Neutron Neutron Neutron Copyright © 2015, Oracle and/or its affiliates. All rights reserved. | 16 Cloud Ready Data RetenNon Large US Web Technology Provider • Reliable storage for 7 billion images – Scales 50X for growth – Increases capacity to 850 PB • Low cost storage for addiNonal QFS copies required for data protecNon SWIFT – OpenStack SwiE on Solaris 11.2 integraon with Oracle HSM Object Storage SL8500 Copyright © 2015, Oracle and/or its affiliates. All rights reserved. | 17 OpenStack for Solaris Engineering Cloud • OpenStack APIs are de-facto standard for compute, network and storage products • OpenStack integrated into Solaris 11.2 • Started running dev cloud in mid-2014 • Based on iniNal success, building out as primary Solaris development environment for all teams within Oracle Copyright © 2015, Oracle and/or its affiliates. All rights reserved. | 18 General Goals: Phase 1 • Fly our own plane - Build and operate a OpenStack cloud that results in product improvements – Modernize our environment by providing on- demand compute resources – Improve resource uNlizaon through virtual environments • Develop recommendaons and best pracNces for customers implemenNng OpenStack clouds Copyright © 2015, Oracle and/or its affiliates. All rights reserved. | 19 General Goals Past Phase 1 • Fly our own airline – Increase scale to shake out enterprise-level issues – One integrated cloud for all, not separate smaller clouds – Specialized requirements of some groups are opportuniNes to improve the product • Increase Oracle Solaris developer producNvity – Oracle app and DB dev teams get easy access – Includes Solaris 11, Solaris 12, both SPARC and x86 Copyright © 2015, Oracle and/or its affiliates. All rights reserved. | 20 Resource Management and Tenancy Plan • Each user is a tenant and gets 48 GB memory and 400 GB block storage • Users run self-registraon process (currently CLI, eventually BUI) to create tenant, set up quotas • AddiNonal project/consolidaon tenants for long-term usage, created & managed by cloud operaons staff Copyright © 2015, Oracle and/or its affiliates. All rights reserved. | 21 Sizing and Resource Requirements: Phase 1 • Current cloud capacity: 1.8 TB memory, 23 TB storage; 8 compute nodes + 4 infrastructure – HosNng 180 instances, average usage = 8 GB memory + 60 GB block storage • Memory is primary resource limit, can’t over-commit • For a 350 user environment (iniNal design goal): – 32 GB memory for each user => 11.2 TB memory – 24x512 GB compute nodes (50/50 SPARC & x86) – 200 GB block storage for each user => 70 TB block storage – 1 ZS-3 cluster Copyright © 2015, Oracle and/or its affiliates. All rights reserved. | 22 Current Cloud Configuraon openstack-x4-2 controller openstack-x410 nova- node compute openstack-t52-2 openstack- openstack- nova- x4270 x4-2-1 compute cinder- neutron- openstack-t52-1 volume server nova- compute openstack- openstack-t52 ai openstack-LDOM-1 nova- glance node nova- compute Oracle ZS3 compute Copyright © 2015, Oracle and/or its affiliates. All rights reserved. | 23 Overall OpenStack on Solaris Cloud Architecture OpenStack Development Region USA Region SCA BRM Cell Asian Cell(s) Region Other BUR Cell Cells European Region Copyright © 2015, Oracle and/or its affiliates. All rights reserved. | 24 What’s an OpenStack Development Region? • Provide smaller scale region to testbed in advance of main region upgrades • Run as region rather than separate cloud to get experience with regional operaons, leverage centralized Keystone, Glance • Resources generally available and not quota’ed so can handle overflow/burst needs • Goal of implemenNng conNnuous upgrades with nightly builds Copyright © 2015, Oracle and/or its affiliates. All rights reserved. | 25 Building Out Past Phase 1 • Each region/cell requires – Small number of control plane systems; cluster and load balance for HA and scale. Roughly 10% of region resources for control plane – At least 1 ZFS SA cluster – 10+ GbE network infrastructure – Compute nodes for anNcipated workload • Convert exisNng systems and redirect future system purchases for compute nodes • Add Ironic bare metal support for non-virtual uses Copyright © 2015, Oracle and/or its affiliates. All rights reserved. | 26 Operaonal Environment • Deploy nodes automacally using Solaris Automated Installer and Image Packaging System (IPS) •