The document discusses designing CloudStack clouds, including determining requirements, designing the network and storage architecture, choosing hypervisors, defining accounts and domains, and testing the cloud design. It emphasizes that cloud design is an iterative process and recommends designing for future needs while building for current requirements.
2. Cloud Architect & ShapeBlue CTO
www.shapeblue.com @CloudStackGuru
Specialise in….
Designing & Building Clouds based on Apache CloudStack / Citrix
CloudPlatform
Developing CloudStack training
Blogging and sharing CloudStack knowledge
Involved with CloudStack before donation to Apache
Designed Clouds for Cloudera ,SunGard, Ascenty, BskyB, Trader Media,
M5 Hosting, Team Cymru, Interoute, University of Pennsylvania.…
CloudStack Committer
About Me
3. About ShapeBlue
“ShapeBlue are expert builders of public &
private clouds. They are the leading global
Apache CloudStack / CloudPlatform
integrator & consultancy”
www.shapeblue.com @CloudStackGuru
13. Hypervisor Choice
Hypervisor Selection and Decisions in CloudStack by Tim Mackey
http://open.citrix.com/cloud-computing-vids/video/latest/hypervisor-selection-
and-decisions-in-cloudstack-by-tim-mackey.html
www.shapeblue.com @CloudStackGuru
Existing Skills
Feature Comparison
Zone Type, Snapshots, VXLAN, IPv6, SDN, VPC, PVLAN, Storage
Licensing Costs
Supportability
Traditional Server vs Blades
More than one – Hypervisor Agnostic
14. Heavily influenced by Requirements,
www.shapeblue.com @CloudStackGuru
Scale, and Zone modes
Is often the driver for other
technology choices
Avoid Single Points of Failure
Keep it simple
Networking
15. Zone Networking Modes
‘One size sits fits all’ may not be the best approach
Each Zone can be a different Network Type
www.shapeblue.com @CloudStackGuru
Basic
Basic + Security Groups
Basic + Security Groups + EIP / ELB
Advanced
Advanced + Security Groups
16. Hypervisor Networking
www.shapeblue.com @CloudStackGuru
How many NICs
10GB / 1GB
Bonding / Multipath
Converged
Traffic Allocations
Management
Guest
Public
Storage
High Bandwidth Services
17. Storage
Primary Storage
Local
Lack of HA
Shared
NFS
iSCSI
Fibre Channel
Performance is critical,
IOPS are king
www.shapeblue.com @CloudStackGuru
19. www.shapeblue.com @CloudStackGuru
Resource Allocation
All Public
Some Public, Some Dedicated
All Dedicated
Reseller Model
Account/Domain Relationship
1-to-1
1-to-many
Domains and Accounts
20. Allocate resources to VMs
www.shapeblue.com @CloudStackGuru
CPU
RAM
Storage Performance
Tagging
Cost associated with them
Public or Private (linked to Domains)
Keep them realistic
Service Offerings
21. Templates & ISOs
www.shapeblue.com @CloudStackGuru
Pre-Defined VM images
Base OS, or fully installed Apps
Licensing (RHEL, Windows)
Self Build via ISOS
Allow user generated Public?
Allow user upload / download?
Lifecycle Management
22. Testing
Define test and acceptance criteria
Develop test plans (manual UI and scripted API)
Run tests to confirm initial build is good
Use tests for testing future upgrades and expansions
www.shapeblue.com @CloudStackGuru
23. Add on Services
Managed Services
www.shapeblue.com @CloudStackGuru
Billing
Object Storage
VM Monitoring
Backup
Anti Virus
24. Management Farm
CloudStack Management
www.shapeblue.com @CloudStackGuru
SQL DB
LDAP
DNS
Load Balancers
Portal
Billing
Monitoring
3rd Party Services
Automation
Admin
vCenter
25. DC2 Software Management Farm
Primary Storage Network (iSCSI or NFS) Secondary Storage Network (NFS)
Example Logical Network Diagram Dual Zone
Ver Date Description Issuer/ Reviewer
www.shapeblue.com @CloudStackGuru
DC1 Software Management Farm
CS Management Servers
CS MySql Servers
NetScaler VPXs
CM Automation Server
Deployment Server
Amysta App Server
Amysta MySQL Server
Management Network
Management Hosts
Compute Hosts
Guest Networks
(Multiple VLANs)
Public Networks
(Multiple VLANs)
Secondary Storage Network (NFS) Primary Storage Network (iSCSI or NFS)
Secondary Primary
DC1 Compute
Management VMs
Storage Network
CS Management Servers
CS MySql Servers
NetScaler VPXs
CM Automation Server
Deployment Server
Amysta App Server
Amysta MySQL Server
Core
Network
Management Hosts
Management VMs
Storage Network
Guest Networks Compute Hosts
(Multiple VLANs)
Public Networks
(Multiple VLANs)
Primary Secondary
Users Portal Access
WWW WWW
WWW
Tennant 1 Tennant 2 Tennant 3
Tennant 1 Tennant 2 Tennant 3
Private Cloud Tennant VMs on Compute in either DC1 or DC2
Each Network is isolated via VLANs or SDN technologies.
Public Cloud Tennant
VMs on Compute in
either DC1 or DC2
Each Tennant has an Isolated Network
protected by Virtual Router/Firewall.
Each Network is isolated via VLANs or
SDN technologies.
Virtual Routers Public Networks are
connected directly to the Internet
enabling users to have full control of
Firewall & Load Balancing features.
DC2 Compute
Public Network(s)
Virtual Routers
Guest Networks
Guest VMs
Management Network
Client access to Portal is
Global Load Balanced by
Citrix NetScaler VPXs
running on Management
Farm using One-Arm
Configurations
Firewall functionality
should be provided by
existing Firewalls running
in HA Pair
Direct Access to Virtual Routers
1.0 15/08/13 1st releas e G Higginbottom / G Sirett
Network
Diagram
26. Just the one Cloud?
www.shapeblue.com @CloudStackGuru
Production
Very Strict Configuration Management
Pre-Production
Same design as Production
Smaller, but with all key components
Strict Configuration Management
Testing
Probably gets rebuilt every few months
