OpenStack Mitaka Design Summit

This session will illustrate a new network packet logging mechanism for security-group and FWaaS, and how it benefits the admin and tenant users.

The admin and tenant users of enterprise systems need to audit their network activity or investigate the network packet tracking when they see a problem.  Neutron, however, has no such a feature today.

We are developing a new feature that enables network packet logging for security-group and FWaaS.

This session will explain:

• How to setup and use the logging feature.


• What information to log for auditing and trouble shooting from our experiences on our public cloud.

本セッションでは、私たちがNeutronプロジェクトで開発中の、
ネットワークパケットのログ採取の機能についてご紹介します。

エンタープライズ向けシステムのネットワーク運用では、
運用中にフィルタリングの動作を確認できることや
障害発生時にパケットの流れを調査できることが、必須の要件です。
しかし現在、Neutronには、そのための機能が存在しません。

私たちは、これまでのパブリッククラウド運用の経験に基づいて、
セキュリティグループとFirewall as a Service向けの
新しいログ採取の機能を、Neutronプロジェクトで開発しています。

本セッションでは、以下についてご説明します。
・エンタープライズ向けクラウド運用に必要なログとはどういったものか
クラウド管理者とテナント管理者の双方の視点でご説明します。
・新しいログ採取機能を、Neutronでどのように実現するのか、
実際の開発経験に基づいて、具体的にご説明します。

One of benefits of OpenStack is that various systems can be built by combining each component, such server, storage and network, and tuning the parameters.

Thanks to it, a system corresponding to wide range of workloads can be deployed with a multi-hypervisor configuration, mixing VM and baremetal.

But, the actual usecases are rarely in public, and the know-how to deploy the system like tuning parameters is not enough.
Also, even though users in Enterprise desire to realize a high availability system failing over gracefully, some issues are remaining and we need to solve them.

Based on my actual experience, this session introduces requirements from users for multi-hypervisor system capable of the high availability, the know-how to deploy it, and issues to be solved.
These are examples of topics:

- Configuration for Nova and Neutron in a configuration mixing VM and Baremetal.
- Configuration for Cinder multi backend
- Graceful failover in case of hardware/software failure

OpenStackには、サーバ・ストレージ・ネットワークをはじめとした各コンポーネントを
組み合わせることで、用途にあった多種多様なシステムを構築することができる特徴が
あります。
この特徴により、例えば、仮想化環境と物理環境が混在したマルチハイパバイザ環境を
構築でき、ユーザから期待が大きな幅広いワークロードに対応したシステムを実現できます。

しかし、マルチハイパバイザ環境で本番稼働している事例は殆ど公開されておらず、
パラメタのチューニングノウハウなど、システム構築に必要な情報が不足しています。
また、エンタープライズのユーザが求める、障害時でもサービスを停止させない、高可用な
システムを実現するためには課題を解決する必要があります。

本セッションでは、高い可用性を備えたマルチハイパバイザ環境に対するユーザからの
要望、その構築ノウハウ、解決すべき課題を、以下のトピックを中心に実際の構築経験
を踏まえてご紹介します。

- 仮想/物理環境混在構成でのNova/Neutronの設定
- Cinderのマルチバックエンドの設定
- ハードウェア/ソフトウェア障害時の安全な切り替え

OpenStack has been gradually incorporated into the company.
Monitoring system for OpenStack has become important.
This talk will introduce our monitoring system . It uses OSS products.
This monitoring system can monitor both physical server and virtual machine.
When OpenStack creates a virtual machine, setting of monitoring is automatically incorporated into it.
And our monitoring system has function of collecting and analyzing the openstack logs.

・Monitoring for physical server in OpenStack.
・Monitoring for virtual machine using zabbix in each projects.
・The Log collect and analysis using Fluentd Elasticsearch kibana norikra.

OpenStackが成熟し企業にも取り入れられ始めたことにより、
OpenStackを日々正常に運用するための監視システムが重要な位置を占めています。
しかし、OpenStackの監視に何を使うか、どのように監視するかの方法はまだ確立していません。

今回は、OpenStackがOSS製品なので監視システムも全てOSS製品の組み合わせで、
OpenStackを維持するために必要な監視や、クラウド環境の監視で重要な仮想マシンの増減しても自動的に監視に組み込む機能、また、障害対応時に必要なログ収集解析機能を備えた監視システムを構築したのでご紹介いたします。

・物理マシン監視のためのzabbix
・テナント毎の仮想マシン監視のためのzabbix
・複数のzabbixを一元管理するためのhatohol
・Fluentd Elasticsearch kibana norikraを使ったログ収集解析機能

我々はOpenStack上で大人数・同時・リアルタイムゲーム環境をOpenStack上で簡単に実現するためのゲームプラットフォームを開発しました。このゲーム環境はユーザのプレイ状態に応じて動的にクラウド上のリソースが確保され、常に最適なゲーム環境をOpenStack上で実現します。

オンラインゲームの通信の制御はとても難しい分野の一つです。1つは短時間での通信量の変動がとても大きいこと。そしてその通信が状態（non-stateless）を持っているためです。この場合、HeatやCeilometerを使った単純なWEBのオートスケールでは対応出来ません。これを実現するには、通信やそれを制御するアプリケーションの「状態」と連携してクラウド上のリソースをコントロールする手段が必要になります。しかし、このような技術を簡単に実現する方法はまだありません。

そこで我々はOpenStack上のリソースをプログラムリソースとして制御するための基礎技術RACKと(*1)、オープンなゲームプラットフォームであるMonobit-Engineを組み合わせて(*2)、この問題を解決する新しいゲームプラットフォームソフトウェアを開発しました。

本セッションでは、美しい＆楽しいゲームのデモを交えながら、この裏側を支える仕組みと原理について紹介します。

*1) RACK
https://wiki.openstack.org/wiki/RACK
https://github.com/stackforge/rack

*2) Monobit-Engine
http://www.monobitengine.com/

We successfuly developed a massively multiplayer online and realtime game platform on the OpenStack environment.
This platform archives an optimized gaming environment that dynamically controls openstack's resources by state of the gaming.

It's so hard to handle the online game traffic. Because the amount of traffic changes drastically in a short time, and communications are under a "state"(These are non-stateless).
In such case, we can't adopt a simple auto-scaling method with heat and ceilometer.
In order to solve this problem, we need a way of controlling openstack resources which cooperates with state of communications or applications.
But there was not a way to archive it.

We solved this problem by utilizing two technologies.
First one is RACK, the RACK is a way to control openstack's resources as an actual program resources easily(*1).
The another is Monobit-Engine. It's a free online game platform engine(*2).
We implemented RACK to Monobit-Engine, and they make a best "Gaming as a Service" platform.

In this session, we would like to share the structure and the principle of our "Gaming as a Service" platform while viewing a beautiful and funny gaming demo.

*1) RACK
https://wiki.openstack.org/wiki/RACK
https://github.com/stackforge/rack

*2) Monobit-Engine
http://www.monobitengine.com/

データセンター事業者が低コスト、かつ高性能なプライベートOpenStack環境を提供するためには、以下のような要件が必要です。

- 可能な限りシンプルな構成
- 汎用的なハードウェア
- 迅速なデプロイが可能なツール
- 高集積
- 十分なIO性能とネットワーク帯域

これを実現するために、私たちはハイパーコンバージドインフラとしてのOpenStackをOpenSouceで構成する為の検証を実施しました。

これを実現するためにわれわれが利用したアーキテクチャは以下の通りです。

- Network
- 40G/56G スイッチ ＆ NIC
- VXLAN offload
- DPDK

- Storage
- PCI Express SSD
- Ceph RDMA (Remote Direct Memory Access)

- Deploy
- Ubuntu Juju/MAAS と charm bundle

Many Datacenter providers are looking for proven and open-source hyper converged OpenStack solution so that they can provide simple, low-cost, high-performance and rapid-deployment OpenStack environment. To archive this goal, the followings topics become key considerations.
- Infrastructure should be simple as much as possible.
- Using commodity hardware and open source software.
- Using tool to help rapid and ease of deployment.
- High density.
- Secure performance and network bandwidth.

To address this challengs, in this session we will share the best practices and lesson learns about the idea to use OpenStack as hyper converged infrastructure with high standard technologies.
The key concept of this PoC is to evaluate OpenStack as hyper converged infrastructure with following key technologies.

- Network
- 40G/56G physical network
- DPDK
- VXLAN offload capability

- Storage
- PCI Express SSD
- Ceph RDMA (Remote Direct Memory Access)

- Deploy
- Ubuntu Juju/MAAS and publish charm bundle as executable whitepaper.

NTT West provides fixed communication services (such as fixed-line telephone and FTTH) in 30 prefectures in western Japan.
”FLET'S Hikari" is the name of FTTH service that NTT-West provides.
The services NTT-West provide is required to be "stable" and "high quality".
Our business challenge is the cost(CAPEX/OPEX) reduction.
We, The R&D center at NTT-West works to restructure the data center infrastructure of FLET'S services with virtual infrastructure technologies, aiming for cost reduction.
In order to overcome these challenge, we need to be further advanced our server infrastructure.

We have examined the OpenStack(Kiro)-based server infrastructure with general-purpose IA (Intel Architecture) server from six months ago, and are faced with several problems related to Neutron in our examine.
We will introduce these at our session.

First, we introduce the current situation and the next challenges about our server infrastructure, and the functions and performance requirements that require our next-generation server infrastructure in order to overcome the current challenges.

Second, in terms of functionality.
Our Service works on "dual stack" (IPv4/v6) and we need IPv6 implementation.
IPv4 exhaustion is becoming all the more a serious problem, due to the appearance of container technology and the advance of virtualization.
Neutron should be ready for IPv6 to provide functions such LBaaS and FWaaS.
We need UDP implementation on LBaaS.
LBaaS is not able to handle UDP traffic at the present moment.
There are many UDP-based applications (such as SIP and Radius) in our services.

Last, in terms of performance.
The transmission rate of network nodes is not enough for the SLA of IP-Phone (or fixed-line telephone) services.

For this evaluation and report, we've been cooperating with Canonical, VirtualTech Japan and NTT Software Innovation Center.
We show the details of the above, and expect to make progress on these studies through discussion with developers and contributors.

NTT西日本では日本国内の西日本エリア30府県で固定通信サービスを展開している。フレッツはブロードバンドIPアクセス、映像、電話等のサービスを提供し、そのバックグラウンドで大規模なインフラを運営している。サービスの提供にあたっては安定的かつ高品質なサービス提供が求められる一方、CAPEX/OPEXの削減が経営課題として常に掲げられている。

NTT西日本研究開発センタでは、フレッツサービスを提供するサーバ基盤の抜本的なCAPEX/OPEX削減を目指し、OpenStackに代表されるクラウド基盤技術をベースとしたサーバインフラへの移行に向けて検討を進め、調査・開発用トライアル基盤を構築して検証およびトライアルを開始した。この営みによって、（コミュニティの中では既に認識されている内容ではあるが）当方において主にNeutronの機能・性能面の課題に直面している。本セッションにおいては、これまでの検討ならびに評価によって得られた知見を紹介したい。

まず、NTT西日本におけるサーバ基盤の現状およびそれが抱える課題と、現在の課題を解決するためにOpenStackベースのサーバ基盤へ切り替えるに当たり必要とする機能・性能要件について紹介する。

次に機能面について、当方における喫緊の課題としてIPv6対応が挙げられる。仮想化やコンテナ技術の利用が進む中でIPv4アドレスの枯渇は今後ますます全世界的にも重大な課題であると考えられる。しかしLBaaSやFWaaSなどNeutronの各機能においてはIPv6対応はIPv4と同等に扱えるには至っておらず早期の対応が求められる。また、LBaaSに関して言えば、現状はIPv4においてもUDPは対象外となっているが、通信事業者網ではIP電話やユーザ認証等の機能でSIPやRadiusといったUDP通信が必要不可欠であり、負荷分散制御のUDPへの対応が望まれる。
本セッションでは上記を含めた検討・評価結果について報告する。

最後に性能面では、OVS(L2)およびNeutron(L3)のパケット転送性能が課題である。当方で実施した「コミュニティ版OpenStack(Kilo)＆汎用IAサーバ機＆ToR-SW」のみで構成された（いわゆる３台構成をベースとした）評価環境における性能検証結果を元に性能面における課題を改めて会場において共通認識化するとともに、これらに対する現時点での対策案などについて紹介・議論したい。

本セッションでの課題提起を通じ、Neutronの機能充足に向けてデベロッパ・コントリビュータの方々の協力を得ながらエンドユーザの立場から早期の実現化を推し進めていきたい。

It is said that OpenStack deployment in Japan is lagged behind compared to US. But there are web service companies and providers who has been driving their businesses by leveraging OpenStack for quite some time. In this session, Izumi Miki, an executive editor of IT Media, will talk about past, present and future of OpenStack in Japan, welcoming the guests from Japanese super users, Cyber Agend and DeNA.

What’s ready for production and what’s not? What can you leverage and what should you avoid? One of the top writers will dig into the realities of deployments today in Japan.

OpenStackは日本においてどんな企業でどのように使われているのか、そして、これからどのように普及していくのか、またはしないのか。本講演では、＠ITの三木泉氏が、メディアという立場から俯瞰した日本のOpenStackクラウドの状況、過去～現在～未来、をお話するとともに、すでにOpenStackを使っているユーザーや現在検討中のユーザーをゲストに招いて事例紹介とリアルな声をお届けします。

事例紹介のゲストとしては、動きの速いウェブサービス業界で事業をドライブするITインフラ構築にOpenStackクラウドを活用・検討しているサイバーエージェントとディーエヌエーのリードエンジニアの例をご紹介します。OpenStackを導入した背景、メリット、障害や課題などについてSDNやセキュリティなど、導入時に考慮した技術にも触れながら、「実際のところどうなのか」をお話します。

Are you still evaluating your cloud strategy or determining how to best apply OpenStack in your company? Come hear how businesses are putting OpenStack to work solving real problems. Whether you are a line-of-business professional, solution architect, or a technical thought leader in your company, this session is for you.  OpenStack luminary and private cloud entrepreneur Jesse Proudman will outline the top three ways companies are using OpenStack to transform the way they develop software, provide customers with new forms of value, and differentiate from their competitors. He'll give several specific, real-world examples and talk about the risks and benefits of different OpenStack consumption models. Jesse will wrap all this in a brief overview of the OpenStack project and its history, just to make sure everyone starts out on an equal footing. 

Curious about how to build, run or manage high performing OpenStack cloud infrastructure tailored to meet your needs? In this session, IBM and Blue Box lays out their Cloud Strategy and how it addresses various client use cases for public, dedicated and local cloud infrastructure.  Learn how you can have a worry-free solution on-premises or in an IBM SoftLayer data center that is managed for you. Hear about detailed capabilities that IBM and Blue Box provide that are differentiators in the market.  Also, learn how public cloud is the key to a hybrid scalable cloud solution.  See how IBM's open cloud platform, Bluemix, integrates open technologies to enable client's developing cloud native applications using OpenStack infrastructure.  Domain experts will talk about specific ways IBM helps address your cloud needs.

The landmark partnership between IBM and Apple announced last year set the internet abuzz. The partnership aims to spark true mobile-led business change across the 
enterprise. In this talk, we’ll show you how IBM is using OpenStack, Heat, and DevOps to 
deploy a truly monumental undertaking.   
To fulfill this goal, we needed to redefine how we deliver our software. Leveraging IBM’s unique expertise in OpenStack and DevOps, we turned the “art of the possible” into our new “reality”. In this talk, we’ll tell the story of how we used fullstack application patterns based on OpenStack Heat to provision environments with speed and reliability. You will hear directly from the joint development team how these patterns enabled us to collaborate unimpeded by the traditional road blocks of IT development. As it turns out, our goal to “spark true business change” has 
extended beyond our customers to include IBM itself. 
You will not only hear about the technical solution but see it in action with a demo in the session. 

Hot topics for the community are also hot topics for IBM.  In this session, leaders from both the Keystone and Docker community will combine to talk to you about Federation and Containers.   
IBM’s Keystone Leaders will provide an overview of the latest enhancements to Keystone’s 
Federated Identity Support in Liberty. The presenters, who published a brand new O'Reilly book on Keystone, will also provide a summary of their latest federated identity use cases involving Google identity and WebSphere Liberty. We then discuss future work items and the roadmap that IBM will be taking on their Federated Identity journey.   In the second half of the talk you will learn from IBM's efforts to make an open container 
ecosystem successful as well as where Docker and container technology is heading for enterprises and developers alike.  You'll hear about the two new foundations IBM has helped form around container technology--the Open Container Initiative (OCI) and the Cloud Native Computing Foundation (CNCF)--both help bring an open and level playing field as this hot technology area grows.  We'll share our role in these foundations as a key partner of Docker and community contributor in the upstream Docker community.  You'll also hear about how IBM is applying this open source technology across our platform portfolio and with customers.  IBM has taken the open source Docker as a basis for the Bluemix Container Service and added enterprise capabilities around security and multi-tenancy which will be discussed.  See how integration with DevOps tooling can combine to provide a compelling container service, from 
application development through production.

Technology is enabling a new era of open innovation. What if you could easily harness this technology and transform your business by changing just one thing? That is what Key Information Systems is doing for its customers.  As a premier cloud service provider, Key Information Systems wants to help companies like yours quickly and easily deploy new workloads in the cloud that exceed expectations. And with OpenStack and IBM Power Systems, they can quickly and easily offer companies an open by design cloud infrastructure that goes above and beyond typical performance, giving one client a 48x improvement in runtimes. Come to this session to hear first hand how Clayton Weise, Director of Cloud Services at Key Information Systems, was able to create a unique cloud infrastructure built with open technologies and designed for mission critical applications.

GMO Internet started using OpenStack in 2011for their internal deployment. Through this experience, they deployed OpenStack to start their public cloud services as the following.

• Onamae VPS (Domain Name service) in 2012


• ConoHa (Hosting Service) in 2013- GMO Application Cloud in 2014


• Onamae.com Cloud (IaaS Cloud Server) in 2014


• ConoHa (Renewal for Hosting Service) in 2015

Currently, GMO Internet is using Diablo, Grizzly, Havana, Juno.

In this session, we will explain how GMO Internet deployed OpenStack into our Public Cloud service for “ConoHa” and “GMO Application Cloud”. We will show the technical background, what components of OpenStack is actually used in those services and how those deployment brought the advantage to the service.

• Why we chose OpenStack


• Architecture of ConoHa back end infrastructure


• 2 different deployment of OpenStack for those 2 public cloud services

It’s clear the adoption of OpenStack is continuing at an accelerated pace.  As enterprises are on the journey to adopting OpenStack, they are bringing their own set of legacy requirements and conservative perspectives about their existing enterprise applications.  In this session you will hear directly from two enterprise company speakers.  They will each share their strategy/vision with OpenStack and each company will present a recent project on their journey along with outcomes using IBM Cloud.  Find out why they chose OpenStack, while they discuss technical successes and challenges.  

SAP Chief Product Owner for Cloud Management will speak about the SAP Journey and vision through a technical story about their Landscape Virtualization Management (LVM) product.  In this project they are enabling for OpenStack with adapters written and contributed using an open source model.  You will hear about how they are staying ahead of their client’s preparing to adopt cloud strategies. 

NTT Data, IT Architect will speak about a recent project with a large beverage company in Japan.  In this project they are migrating Enterprise mission critical applications to OpenStack private cloud infrastructure.  In this story you will hear about their journey from selection to deployment for this project using IBM Cloud Orchestrator.  Successes, challenges, and lesson learned will be discussed.

We're delighted to feature key OpenStack technical and business leaders in this panel discussion as they explore the vast space that is OpenStack. Angel Diaz, IBM VP of Cloud Architecture and Technology will host Jesse Proudman , CTO of Blue Box an IBM Company, Moe Abdula, IBM VP of Cloud Foundational Services, and Monty Taylor, Director of OpenStack Innovation as they gaze in to their crystal ball and share with you their insights in to the future of OpenStack.  Angel will challenge 
them to make some predictions about the future based on their deep technical skills and business experience.  It should make for some compelling conversations.