What We Like About Apache CloudStack? - Manageability - Compatibility - Security - Reliablity - Rapid deployment - Flexible access policies Contact us to get more cloud service: https://tuchacloud.com/ https://tucha.ua/

2. About Tucha
Here I’ll be telling something about our company
(started as an ISP in 2005), our cloud experience
(back in 2012 we were the first who started to
provide IaaS in Ukraine), our cloud’s volume (several
hundreds of virtual machines), our adherence to OSS
ideology and so on.
It would be amazing to have it illustrated somehow :)

3. What We Like About Apache CloudStack?
Manageability
• unified management portal;
• browser-compatible VNC-interface;
• powerful API.
Compatibility
• hypervisors: KVM, LXC, XEN, VMWare, Hyper-V;
• storages: any filesystems, including clustered filesystems that could be accessed by a shared-
mountpoint GlusterFS, Ceph, NFS, SMB, GFS2, OCFS2.
Security
• encrypted networking (IPSec, HTTPS);
• firewalls and load-balancers (internal VR, NetScaler, F5, FortiGate, pfSense and other beasts);
• open source ideology.
https://cloudstack.apache.org/

4. What Else We Like About Apache CloudStack?
Reliablity
• clusterisation, live migration;
• high-availability, affinity groups;
• volume and VM snapshots.
Rapid deployment
• ISO-images and templates;
• OS preferences for the host;
• host and storage tags, which can be used in the service and storage offerings.
Flexible access policies
• domains, accounts, users;
• resouce limits;
• LDAP support.
https://cloudstack.apache.org/

5. Protozan ACS Cluster

6. Physical Server #1 Physical Server #2
db1.acs.tucha.cloud db2.acs.tucha.cloud
aux1.acs.tucha.cloud aux2.acs.tucha.cloud
fw1.acs.tucha.cloud fw2.acs.tucha.cloud
m1.acs.tucha.cloud m2.acs.tucha.cloud
LDAP, DNS Master-Slave replication
172.23.4.224/24
172.23.4.225/24
172.23.0.2/28
172.23.0.18/28
172.23.0.34/28
172.23.0.1/28
172.23.0.17/28
172.23.0.33/28
Virtualization Cluster
172.23.32.0/22 (management network)
172.23.36.0/22 (secondary storage network)
Internet
6.6.6.13/24 – Internet gateway
172.23.0.14/28 – management network s gateway
172.23.0.30/28 – database network s gateway
172.23.0.46/28 – auxiliary network s gateway
172.23.35.254/22 – host management network s gateway
172.23.39.254/22 – host storage networ s gateway
172.23.4.1/24 – HAproxy: ACS management cluster
172.23.4.2/24 – HAproxy: MySQL cluster
172.23.4.3/24 – HAproxy: LDAP cluster
heartbeat + HAproxy
MySQL Master-Master replication
db3.acs.tucha.cloud
172.23.0.19/28
MySQL Master-Slave replication
I’ve Heard You Like Clouds, so…

7. IPv4 Addressing Plan
172.23.0.0/16 - acs.tucha.cloud zone
172.23.0.0/21 - - core group
172.23.0.0/28 - - - management servers
172.23.0.16/28 - - - database servers
172.23.0.32/28 - - - auxiliary servers
172.23.0.48/28 - - - monitoring servers
172.23.4.0/24 - - - routing servers
172.23.4.0/27 - - - - load balancers
172.23.4.224/27 - - - - inter-node communications
172.23.32.0/21 - - p1.acs.tucha.cloud pod
172.23.32.0/22 - - - managment network
172.23.32.0/26 - - - - hosts of c1.p1.acs.tucha.cloud
172.23.32.64/26 - - - - hosts of c2.p1.acs.tucha.cloud
172.23.32.128/26 - - - - hosts of c3.p1.acs.tucha.cloud
172.23.35.240/28 - - - - system instances
172.23.36.0/22 - - - storage network
172.23.36.0/26 - - - - hosts of c1.p1.acs.tucha.cloud
172.23.36.64/26 - - - - hosts of c2.p1.acs.tucha.cloud
172.23.36.128/26 - - - - hosts of c3.p1.acs.tucha.cloud
172.23.39.224/28 - - - - secondary storages
172.23.39.240/28 - - - - system instances

8. Load Balancer’s Network Interfaces
heartbeat + HAproxy
eth0: 6.6.6.13/24 – Internet gateway
eth1: 172.23.0.14/28 – ACS management cluster
eth2: 172.23.0.30/28 – MySQL cluster
eth3: 172.23.0.46/28 – auxiliary servers cluster
eth4: 172.23.35.254/22 – virtualization cluster
eth5: 172.23.39.254/22 – stroage cluster
eth6: 172.23.4.254/24 – heartbeat network

9. Virtualization Cluster
Storage ClusterVirtualization Cluster
GlusterFS, CEPH, NFS,
anything else :)

10. Things to Get Done and Checked
Naming, IPv4 and VLAN assignment plans
Networks, virtual machines, security policies
Auxiliary services (DHCP, LDAP, NTP and others)
MySQL servers (cross-replication, failover cluster)
Apache CloudStack management servers
Load Balncers (heartbeat, haproxy, iptables)
Stats collecting and states monitoring suites
Backup automation, disaster decovery plan
Crash tests, performance measurement and stuff :)

11. monkeyman.tucha.ua