OpenStack modules

Implementation pages for individual OpenStack services beyond core compute and storage: networking with OVN, load balancing, bare metal, Kubernetes clusters, object and shared file storage, and key management.

OpenStack Neutron networking with OVN

Designing tenant networking on the Neutron OVN driver: distributed routing, DHCP and DNS without the classic L3, DHCP and OVS agents, security groups, provider networks and the operational changes for teams moving from ML2/OVS.

OpenStack Octavia load balancing implementation

Rolling out load balancing as a service with Octavia: amphora images and flavors, TLS termination with certificates in Barbican, health monitoring, and how its dependencies on Nova, Neutron and Glance shape capacity planning.

OpenStack Ironic bare metal provisioning

Provisioning physical servers through Ironic with PXE and IPMI, either inside an OpenStack cloud or as a standalone service: hardware enrollment, cleaning, networking and when bare metal instances beat virtual machines.

OpenStack Magnum Kubernetes clusters

Offering self-service Kubernetes clusters on OpenStack with Magnum: cluster templates, Heat-driven deployment on VMs or bare metal, Keystone, Neutron and Cinder integration, and the lifecycle work of upgrading clusters.

OpenStack Swift object storage

Deploying Swift as an eventually consistent object store: ring design, replication versus erasure coding, the s3api middleware for S3-compatible clients, and when Ceph RADOS Gateway is the better choice.

OpenStack Manila shared file systems

Providing shared file systems as a service with Manila: back-end drivers, share networks and access rules, and how Kubernetes workloads consume shares through the Manila CSI plugin.

OpenStack Barbican key manager

Running Barbican for secrets and key management in OpenStack: storing keys and certificates, encrypted Cinder volumes, Octavia TLS certificates, secret store back ends and access policy.

Talk to our team.

Tell us what you're working on, whether it's a deployment, an audit, a security test or a cyber range. You'll speak with an engineer who can help you scope it.

  • 30-minute call: free, with no obligation.
  • NDA on request: we can sign before you share details.
  • Clear next steps: a scope and plan after the call.