Diablo is an OpenStack distribution that includes enhanced versions of several core services. It features improved integration of Keystone for authentication, expanded support for hypervisors like KVM and Xen in Nova, Ceph and Sheepdog/Gluster block storage options in Swift, image service upgrades in Glance, and network virtualization functionality in Quantum/Melange. The dashboard has also been integrated and provides administrative and customer views.

1. Introduction to Diablo

2. DIABLO!

3. The “REAL Diablo Release
”
Architecture
Hypervisors
Nova
Swift/Storage(LunR)
Glance
Quantum / Melange
Dashboard
Keystone

4. Diablo Architecture
Keystone Glance – Imaging
Token Based Auth Svc. Service
Image
LunR – Block
API Server Storage
EBS style block storage
OpenStack API Nova -
EC2 /S3 API Compute
Basic Scheduler
Dynamic Hypervisor
Manager
Power State Manager
Quantum -
Multi-Hypervisor Manager
Network
Router
IP Manager
Dashboard - UI
User / Admin Interface Swift – Object
Storage
Proxy Server
Object Server
Container Server
4 Confidential

5. Hypervisors
LXC OpenVZ

6. Diablo – Nova Enhancements
Key Features:
•
Keystone Integration
•
Better KVM/QEMU Integration
•
Better Xen Integration
•
Nova Block Volumes
•
Dashboard Enabled
•
Event Notification
•
Distributed Scheduler
•
System Usage
•
Virtual Storage Arrays
•
Boot with Volume
•
Global Firewall Rules

7. Diablo – Swift/Storage Enhancements
Key Features:
•
Keystone Integration
•
Dashboard Enabled
•
Improved client IP logging
•
Auto-account creation
•
Multi-cluster container sync
•
Option for replication
•
Ceph
•
Sheepdog
•
Gluster

8. Diablo- Glance
Use: IaaS virtual machine image repository for provisioning base level or configured VMs
Key Features
Configured to use standard command line and configuration option processing, making use of paste-
deploy configuration
Registry database is under version control, with migration files allowing upgrade and downgrade of the
registry database.
Versatile combination of "disk format" and "container format" fields, allowing more than just EC2-style
image formats to be stored in the registry
New command line tool that allows user to interact with Image Service -- add and update images and
image attributes, see public images, delete images, etc.
Support for checksumming images added to the server to verify image integrity
Extensive logging functionality to both the API and Registry servers, including the ability to configure
logging separately from other options using Python's standard logging module configuration files
A functional test suite that starts and stops actual Glance servers and executes commands against
those servers from the new command line client as well as a curl client

9. Quantum / Melange
Physical Constraints
802.1Q
QnQ / MLAG
Security Constraints
Layer 2 has no knowledge of identity– rely on switch/port config

10. Dashboard
Integrated with Keystone
Pluggable
Recently added as Top Level Project
Admin view / Customer View
Concept of Role
Confidential

11. Keystone
Primary point of entry for every permissible
openstack operation
Pluggable
Starting out as Auth-N and Auth-Z (token based)
Confidential

12. Questions?
Confidential