Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Features
Speaker Deck
PRO
Sign in
Sign up for free
Search
Search
Cloudstack design decisions
Search
Pierre-Yves Ritschard
June 10, 2014
Technology
110
0
Share
Embed
Copy iframe code
Copy JS code
Copy link
Start on current slide
Cloudstack design decisions
Cloud operations at scale
Pierre-Yves Ritschard
June 10, 2014
More Decks by Pierre-Yves Ritschard
See All by Pierre-Yves Ritschard
Meetup Camptocamp: Exoscale SKS
pyr
0
590
The (long) road to Kubernetes
pyr
0
350
From vertical to horizontal: The challenges of scalability in the cloud
pyr
0
100
Change Management at Scale
pyr
0
160
5 years of Clojure
pyr
2
1.1k
Taming Jenkins
pyr
0
80
Init: then and now
pyr
1
240
Billing the Cloud
pyr
0
340
From Vertical to Horizontal
pyr
2
170
Other Decks in Technology
See All in Technology
なぜ私たちのSREプラクティスはなかなか機能しないのか 〜システムより先に組織を見る〜 / Why our SRE practices aren't really working
vtryo
2
2.7k
Road to SRE NEXTの今までとこれから
hiroyaonoe
0
220
プライバシー保護の理論と実践
lycorptech_jp
PRO
1
250
グローバルチームと挑むプロダクト開発
sansantech
PRO
1
160
CSに"SLO"は要らない、経営層に"99.9%"は伝わらない - SREを全社に"翻訳"する3原則
cscengineer
PRO
1
3.6k
どうして今サーバーサイドKotlinを選択したのか
nealle
0
210
Keeping applications secure by evolving OAuth 2.0 and OpenID Connect
ahus1
PRO
1
150
AIに「使われる」時代のSaaS戦略 〜既存WebAPIのMCPサーバー化における開発ノウハウ〜
ekispert_api
0
300
AIで政治は変わるのか? — 中高生と考えたAI時代の民主主義(東海高校サタデープログラム)
eitarosuda
0
400
オブザーバビリティ、本当に活用できてる? 〜API連携×生成AIで成熟度を自動評価〜
dmmsre
1
2.2k
Baseline対応のDOMの型定義を作った
uhyo
3
720
Terraform共通モジュールをチーム横断で“変えられる”運用へ ― リリースと適用の分離
kekke_n
1
1.9k
Featured
See All Featured
HU Berlin: Industrial-Strength Natural Language Processing with spaCy and Prodigy
inesmontani
PRO
0
440
The agentic SEO stack - context over prompts
schlessera
0
840
The AI Revolution Will Not Be Monopolized: How open-source beats economies of scale, even for LLMs
inesmontani
PRO
3
3.6k
Making the Leap to Tech Lead
cromwellryan
135
10k
The Anti-SEO Checklist Checklist. Pubcon Cyber Week
ryanjones
0
180
Design of three-dimensional binary manipulators for pick-and-place task avoiding obstacles (IECON2024)
konakalab
0
480
The Cost Of JavaScript in 2023
addyosmani
55
10k
SEOcharity - Dark patterns in SEO and UX: How to avoid them and build a more ethical web
sarafernandez
0
220
Building the Perfect Custom Keyboard
takai
2
810
How to build a perfect <img>
jonoalderson
1
5.8k
ピンチをチャンスに:未来をつくるプロダクトロードマップ #pmconf2020
aki_iinuma
128
56k
CoffeeScript is Beautiful & I Never Want to Write Plain JavaScript Again
sstephenson
162
16k
Transcript
CLOUDSTACK DESIGN DECISIONS CLOUD OPERATIONS AT SCALE
SHORT BIO Pierre-Yves Ritschard CTO @ exoscale - The safe
home for your cloud applications Open Source Developer - pithos, cyanite, riemann, collectd, openbsd Architect of several cloud platforms - paper.li Recovering Operations Engineer
Simple and efficient cloud hosting platform Full compatibility with automation
tools Hosted in a safe jurisdiction
CLOUD BUILDING BLOCKS service infrastructure software people
SERVICE SIMPLICITY AND SCALABILITY Cloudstack based Basic networking Local storage
KVM hypervisor: SmartOS inspired
CLOUDSTACK Great extensibility, easy to plug into.
BASIC NETWORKING One IP per VM. Security groups are hypervisor
controlled layer 2 firewall rules. Provides all the flexibility of a traditionnal firewall, completely API controlled.
LOCAL STORAGE Fast I/O, persistent disks.
KVM HYPERVISOR Best in class hypervisor. Diskless and netboot approach.
Avoids resource waste, facilitates upgrades.
INFRASTRUCTURE THE GOOD CITIZEN CONTRACT Configuration management Visibility Build factory
Remote execution
THE GOOD CITIZEN CONTRACT new machines have roles role defines
converged configuration as sum of components each component has an expected normal state and reports it no local intervention needed
CONFIGURATION MANAGEMENT code is a great way to define infrastructure
ensures homogeneity ability to iterate fast great source of change tracking avoids fear of change
OVER 3000 COMMITS
CONFIGURATION MANAGEMENT: PUPPET battle tested tool simple declarative DSL to
express configuration fits our component approach well
VISIBILITY FROM THE MAP TO THE TERRITORY logs metrics alerts
WHY FOCUS ON VISIBILITY distributed systems with lots of moving
parts, high node volatility
LOGS all application and system logs sent over the wire
logstash disects and extracts metadata elasticsearch indexes for easy retrieval simple correlation
None
METRICS all application and system metrics sent over the wire
by collectd graphite's carbon aggregates and produces appropriate roll- ups if it moves, graph it. if it doesn't, graph it if it starts moving.
None
ALERTS unbounded stream of log and metric data passive approach
bodes well with node volatility riemann takes decisions based on stream content ability to extract meaningful information
BUILD FACTORY continuous integration package repositories
CONTINUOUS INTEGRATION over 60 build jobs ties into our code
hosting platform handled by jenkins
PACKAGE REPOSITORIES generates valid and signed Debian repositories ensures fast
upgrades simplifies configuration management
REMOTE EXECUTION a simple pubsub system recurrent commands stored as
scenarios command line, HTTP and IRC interaction
A SIMPLE PUBSUB SYSTEM each node runs an agent responsible
for carrying out commands. commands are sent to groups of nodes (by predicates such as role).
RECURRENT COMMANDS STORED AS SCENARIOS intricate workflows can be expressed
through a simple DSL
COMMAND LINE, HTTP AND IRC INTERACTION most of our production
environment can be controlled through our chatroom
SOFTWARE FILLING IN THE GAPS Customer management Real-time metering and
billing Integrated console A few other things
CUSTOMER MANAGEMENT Keeping track of our users Support services (ticket
management, coupons, emails)
REAL-TIME METERING AND BILLING can't be tied to a cloudstack
only solution cloudstack emits useful data ties into our customer management
INTEGRATED CONSOLE integrated experience across our services hides complexity and
cloudstack specifics exposes exoscale specific features
None
A FEW OTHER THINGS pithos cyanite fleet collectd add-ons
PEOPLE EFFICIENT WORK. QUIET NIGHTS Small SRE team Avoiding deploy
anxiety
SMALL SRE TEAM Our platform must be simple to operate,
additional moving parts must provide business value or help operations
AVOIDING DEPLOY ANXIETY Our software and infrastructure helps ensure we
have good tools to ensure quiet nights and easily caught errors
LOOKING BACK Cloudstack is a solid foundation for a IAAS
platform There's a bit more to it than just installing cloudstack Building a sustainable and scalable platform on top of cloudstack is possible
QUESTIONS ?