summaryrefslogtreecommitdiffstats
path: root/docs
diff options
context:
space:
mode:
authorRyota MIBU <r-mibu@cq.jp.nec.com>2015-12-11 15:30:46 +0900
committerRyota MIBU <r-mibu@cq.jp.nec.com>2016-02-26 01:53:33 +0900
commite122da864915dfe70927eecdb1a39df24031da37 (patch)
tree3d7c4f364173da0943e1db90581044e2a66b3607 /docs
parent8e3d1f151aa2ba629c9ed4ad61862ac147fff3ec (diff)
docs: updates to use new doc toolchain and fixes
JIRA: MULTISITE-25 Change-Id: If7b711d0c8b6ebf955055bcc7a79c63fbf70d006 Signed-off-by: Ryota MIBU <r-mibu@cq.jp.nec.com>
Diffstat (limited to 'docs')
-rw-r--r--docs/configguide/index.rst30
-rw-r--r--docs/configguide/multisite-configuration-guide.rst16
-rw-r--r--docs/etc/conf.py34
-rw-r--r--docs/etc/opnfv-logo.pngbin2829 -> 0 bytes
-rw-r--r--docs/how-to-use-docs/documentation-example.rst87
-rw-r--r--docs/how-to-use-docs/index.rst30
-rw-r--r--docs/userguide/index.rst28
-rw-r--r--docs/userguide/multisite-admin-user-guide.rst290
8 files changed, 153 insertions, 362 deletions
diff --git a/docs/configguide/index.rst b/docs/configguide/index.rst
index 49b30f1..81c5d15 100644
--- a/docs/configguide/index.rst
+++ b/docs/configguide/index.rst
@@ -1,30 +1,12 @@
-.. OPNFV Release Engineering documentation, created by
- sphinx-quickstart on Tue Jun 9 19:12:31 2015.
- You can adapt this file completely to your liking, but it should at least
- contain the root `toctree` directive.
+.. This work is licensed under a Creative Commons Attribution 4.0 International License.
+.. http://creativecommons.org/licenses/by/4.0
-.. image:: ../etc/opnfv-logo.png
- :height: 40
- :width: 200
- :alt: OPNFV
- :align: left
-
-table of contents
-=======================================
-
-Contents:
+*****************************
+Multisite Configuration Guide
+*****************************
.. toctree::
:numbered:
- :maxdepth: 4
+ :maxdepth: 2
multisite-configuration-guide.rst
-
-Indices and tables
-==================
-
-* :ref:`search`
-
-Revision: _sha1_
-
-Build date: |today|
diff --git a/docs/configguide/multisite-configuration-guide.rst b/docs/configguide/multisite-configuration-guide.rst
index 4a20e83..8e0c190 100644
--- a/docs/configguide/multisite-configuration-guide.rst
+++ b/docs/configguide/multisite-configuration-guide.rst
@@ -1,12 +1,6 @@
-.. two dots create a comment. please leave this logo at the top of each of your rst files.
-.. image:: ../etc/opnfv-logo.png
- :height: 40
- :width: 200
- :alt: OPNFV
- :align: left
-.. these two pipes are to seperate the logo from the first title
-|
-|
+.. This work is licensed under a Creative Commons Attribution 4.0 International License.
+.. http://creativecommons.org/licenses/by/4.0
+
=============================
Multisite configuration guide
=============================
@@ -114,7 +108,3 @@ admin-user-guide.
.. code-block:: bash
region_name = RegionOne
-
-Revision: _sha1_
-
-Build date: |today|
diff --git a/docs/etc/conf.py b/docs/etc/conf.py
deleted file mode 100644
index 0066035..0000000
--- a/docs/etc/conf.py
+++ /dev/null
@@ -1,34 +0,0 @@
-import datetime
-import sys
-import os
-
-try:
- __import__('imp').find_module('sphinx.ext.numfig')
- extensions = ['sphinx.ext.numfig']
-except ImportError:
- # 'pip install sphinx_numfig'
- extensions = ['sphinx_numfig']
-
-# numfig:
-number_figures = True
-figure_caption_prefix = "Fig."
-
-source_suffix = '.rst'
-master_doc = 'index'
-pygments_style = 'sphinx'
-html_use_index = False
-
-pdf_documents = [('index', u'OPNFV', u'OPNFV Project', u'OPNFV')]
-pdf_fit_mode = "shrink"
-pdf_stylesheets = ['sphinx','kerning','a4']
-#latex_domain_indices = False
-#latex_use_modindex = False
-
-latex_elements = {
- 'printindex': '',
-}
-
-project = u'OPNFV: Template documentation config'
-copyright = u'%s, OPNFV' % datetime.date.today().year
-version = u'1.0.0'
-release = u'1.0.0'
diff --git a/docs/etc/opnfv-logo.png b/docs/etc/opnfv-logo.png
deleted file mode 100644
index 1519503..0000000
--- a/docs/etc/opnfv-logo.png
+++ /dev/null
Binary files differ
diff --git a/docs/how-to-use-docs/documentation-example.rst b/docs/how-to-use-docs/documentation-example.rst
deleted file mode 100644
index 24b4c8a..0000000
--- a/docs/how-to-use-docs/documentation-example.rst
+++ /dev/null
@@ -1,87 +0,0 @@
-.. two dots create a comment. please leave this logo at the top of each of your rst files.
-.. image:: ../etc/opnfv-logo.png
- :height: 40
- :width: 200
- :alt: OPNFV
- :align: left
-.. these two pipes are to seperate the logo from the first title
-|
-|
-How to create documentation for your OPNFV project
-==================================================
-
-this is the directory structure of the docs/ directory that can be found in the root of your project directory
-
-.. code-block:: bash
-
- ./etc
- ./etc/opnfv-logo.png
- ./etc/conf.py
- ./how-to-use-docs
- ./how-to-use-docs/documentation-example.rst
- ./how-to-use-docs/index.rst
-
-To create your own documentation, Create any number of directories (depending
-on your need) and place in each of them an index.rst. This index file must
-refence your other rst files.
-
-* Here is an example index.rst
-
-.. code-block:: bash
-
- Example Documentation table of contents
- =======================================
-
- Contents:
-
- .. toctree::
- :numbered:
- :maxdepth: 4
-
- documentation-example.rst
-
- Indices and tables
- ==================
-
- * :ref:`search`
-
- Revision: _sha1_
-
- Build date: |today|
-
-
-The Sphinx Build
-================
-
-When you push documentation changes to gerrit a jenkins job will create html documentation.
-
-* Verify Jobs
-For verify jobs a link to the documentation will show up as a comment in gerrit for you to see the result.
-
-* Merge jobs
-
-Once you are happy with the look of your documentation you can submit the patchset the merge job will
-copy the output of each documentation directory to http://artifacts.opnfv.org/$project/docs/$name_of_your_folder/index.html
-
-Here are some quick examples of how to use rst markup
-
-This is a headline::
-
- here is some code, note that it is indented
-
-links are easy to add: Here is a link to sphinx, the tool that we are using to generate documetation http://sphinx-doc.org/
-
-* Bulleted Items
-
- **this will be bold**
-
-.. code-block:: bash
-
- echo "Heres is a code block with bash syntax highlighting"
-
-
-Leave these at the bottom of each of your documents they are used internally
-
-Revision: _sha1_
-
-Build date: |today|
diff --git a/docs/how-to-use-docs/index.rst b/docs/how-to-use-docs/index.rst
deleted file mode 100644
index 36710b3..0000000
--- a/docs/how-to-use-docs/index.rst
+++ /dev/null
@@ -1,30 +0,0 @@
-.. OPNFV Release Engineering documentation, created by
- sphinx-quickstart on Tue Jun 9 19:12:31 2015.
- You can adapt this file completely to your liking, but it should at least
- contain the root `toctree` directive.
-
-.. image:: ../etc/opnfv-logo.png
- :height: 40
- :width: 200
- :alt: OPNFV
- :align: left
-
-Example Documentation table of contents
-=======================================
-
-Contents:
-
-.. toctree::
- :numbered:
- :maxdepth: 4
-
- documentation-example.rst
-
-Indices and tables
-==================
-
-* :ref:`search`
-
-Revision: _sha1_
-
-Build date: |today|
diff --git a/docs/userguide/index.rst b/docs/userguide/index.rst
index 56b0c59..3eeedcb 100644
--- a/docs/userguide/index.rst
+++ b/docs/userguide/index.rst
@@ -1,30 +1,12 @@
-.. OPNFV Release Engineering documentation, created by
- sphinx-quickstart on Tue Jun 9 19:12:31 2015.
- You can adapt this file completely to your liking, but it should at least
- contain the root `toctree` directive.
+.. This work is licensed under a Creative Commons Attribution 4.0 International License.
+.. http://creativecommons.org/licenses/by/4.0
-.. image:: ../etc/opnfv-logo.png
- :height: 40
- :width: 200
- :alt: OPNFV
- :align: left
-
-table of contents
-=======================================
-
-Contents:
+**************************
+Multisite Admin User Guide
+**************************
.. toctree::
:numbered:
:maxdepth: 4
multisite-admin-user-guide.rst
-
-Indices and tables
-==================
-
-* :ref:`search`
-
-Revision: _sha1_
-
-Build date: |today|
diff --git a/docs/userguide/multisite-admin-user-guide.rst b/docs/userguide/multisite-admin-user-guide.rst
index ed91446..a0e9b58 100644
--- a/docs/userguide/multisite-admin-user-guide.rst
+++ b/docs/userguide/multisite-admin-user-guide.rst
@@ -1,12 +1,6 @@
-.. two dots create a comment. please leave this logo at the top of each of your rst files.
-.. image:: ../etc/opnfv-logo.png
- :height: 40
- :width: 200
- :alt: OPNFV
- :align: left
-.. these two pipes are to seperate the logo from the first title
-|
-|
+.. This work is licensed under a Creative Commons Attribution 4.0 International License.
+.. http://creativecommons.org/licenses/by/4.0
+
==========================
Multisite admin user guide
==========================
@@ -25,9 +19,9 @@ Token Format
There are 3 types of token format supported by OpenStack KeyStone
- **UUID**
- **PKI/PKIZ**
- **FERNET**
+ * **UUID**
+ * **PKI/PKIZ**
+ * **FERNET**
It's very important to understand these token format before we begin the
mutltisite identity service management. Please refer to the OpenStack
@@ -48,10 +42,10 @@ and service credentials to request token validation from Keystone. After the
token is validated by KeyStone, the user is authorized to use the service.
The key considerations for token validation in multisite scenario are:
-* Site level failure: impact on authN and authZ shoulde be as minimal as
- possible
-* Scalable: as more and more sites added, no bottleneck in token validation
-* Amount of inter region traffic: should be kept as little as possible
+ * Site level failure: impact on authN and authZ shoulde be as minimal as
+ possible
+ * Scalable: as more and more sites added, no bottleneck in token validation
+ * Amount of inter region traffic: should be kept as little as possible
Hence, Keystone token validation should preferably be done in the same
region as the service itself.
@@ -60,31 +54,31 @@ The challenge to distribute KeyStone service into each region is the KeyStone
backend. Different token format has different data persisted in the backend.
* UUID: UUID tokens have a fixed size. Tokens are persistently stored and
-create a lot of database traffic, the persistence of token is for the revoke
-purpose. UUID tokens are validated online by Keystone, call to service will
-request keystone for token validation. Keystone can become a
-bottleneck in a large system. Due to this, UUID token type is not suitable
-for use in multi region clouds, no matter the Keystone database
-replicates or not.
+ create a lot of database traffic, the persistence of token is for the revoke
+ purpose. UUID tokens are validated online by Keystone, call to service will
+ request keystone for token validation. Keystone can become a
+ bottleneck in a large system. Due to this, UUID token type is not suitable
+ for use in multi region clouds, no matter the Keystone database
+ replicates or not.
* PKI: Tokens are non persistent cryptographic based tokens and validated
-offline (not by the Keystone service) by Keystone middleware which is part
-of other services such as Nova. Since PKI tokens include endpoint for all
-services in all regions, the token size can become big. There are
-several ways to reduce the token size such as no catalog policy, endpoint
-filter to make a project binding with limited endpoints, and compressed PKI
-token - PKIZ, but the size of token is still unpredictable, making it difficult
-to manage. If catalog is not applied, that means the user can access all
-regions, in some scenario, it's not allowed to do like this. Centralized
-Keystone with PKI token to reduce inter region backend synchronization traffic.
-PKI tokens do produce Keystone traffic for revocation lists.
+ offline (not by the Keystone service) by Keystone middleware which is part
+ of other services such as Nova. Since PKI tokens include endpoint for all
+ services in all regions, the token size can become big. There are
+ several ways to reduce the token size such as no catalog policy, endpoint
+ filter to make a project binding with limited endpoints, and compressed PKI
+ token - PKIZ, but the size of token is still unpredictable, making it difficult
+ to manage. If catalog is not applied, that means the user can access all
+ regions, in some scenario, it's not allowed to do like this. Centralized
+ Keystone with PKI token to reduce inter region backend synchronization traffic.
+ PKI tokens do produce Keystone traffic for revocation lists.
* Fernet: Tokens are non persistent cryptographic based tokens and validated
-online by the Keystone service. Fernet tokens are more lightweight
-than PKI tokens and have a fixed size. Fernet tokens require Keystone
-deployed in a distributed manner, again to avoid inter region traffic. The
-data synchronization cost for the Keystone backend is smaller due to the non-
-persisted token.
+ online by the Keystone service. Fernet tokens are more lightweight
+ than PKI tokens and have a fixed size. Fernet tokens require Keystone
+ deployed in a distributed manner, again to avoid inter region traffic. The
+ data synchronization cost for the Keystone backend is smaller due to the non-
+ persisted token.
Cryptographic tokens bring new (compared to UUID tokens) issues/use-cases
like key rotation, certificate revocation. Key management is out of scope for
@@ -93,77 +87,77 @@ this use case.
Database deployment as the backend for KeyStone service
------------------------------------------------------
- Database replication:
- -Master/slave asynchronous: supported by the database server itself
-(mysql/mariadb etc), works over WAN, it's more scalable. But only master will
-provide write functionality, domain/project/role provisioning.
- -Multi master synchronous: Galera(others like percona), not so scalable,
-for multi-master writing, and need more parameter tunning for WAN latency.It
-can provide the capability for limited multi-sites multi-write
-function for distributed KeyStone service.
- -Symmetrical/asymmetrical: data replicated to all regions or a subset,
-in the latter case it means some regions needs to access Keystone in another
-region.
-
- Database server sharing:
- In an OpenStack controller, normally many databases from different
+Database replication:
+ - Master/slave asynchronous: supported by the database server itself
+ (mysql/mariadb etc), works over WAN, it's more scalable. But only master will
+ provide write functionality, domain/project/role provisioning.
+ - Multi master synchronous: Galera(others like percona), not so scalable,
+ for multi-master writing, and need more parameter tunning for WAN latency.It
+ can provide the capability for limited multi-sites multi-write
+ function for distributed KeyStone service.
+ - Symmetrical/asymmetrical: data replicated to all regions or a subset,
+ in the latter case it means some regions needs to access Keystone in another
+ region.
+
+Database server sharing:
+In an OpenStack controller, normally many databases from different
services are provided from the same database server instance. For HA reasons,
the database server is usually synchronously replicated to a few other nodes
(controllers) to form a cluster. Note that _all_ database are replicated in
this case, for example when Galera sync repl is used.
- Only the Keystone database can be replicated to other sites. Replicating
+Only the Keystone database can be replicated to other sites. Replicating
databases for other services will cause those services to get of out sync and
malfunction.
- Since only the Keystone database is to be sync or replicated to another
+Since only the Keystone database is to be sync or replicated to another
region/site, it's better to deploy Keystone database into its own
database server with extra networking requirement, cluster or replication
configuration. How to support this by installer is out of scope.
- The database server can be shared when async master/slave replication is
+The database server can be shared when async master/slave replication is
used, if global transaction identifiers GTID is enabled.
Deployment options
------------------
-- Distributed KeyStone service with PKI token
+**Distributed KeyStone service with PKI token**
- Deploy KeyStone service in two sites with database replication. If site
+Deploy KeyStone service in two sites with database replication. If site
level failure impact is not considered, then KeyStone service can only be
deployed into one site.
- The PKI token has one great advantage is that the token validation can be
-done locally, without sending token validation request to KeyStone server. The
-drawback of PKI token is
- * the endpoint list size in the token. If a project will be only spread in
- very limited site number(region number), then we can use the endpoint
- filter to reduce the token size, make it workable even a lot of sites
- in the cloud.
- * KeyStone middleware(which is co-located in the service like
- Nova-API/xxx-API) will have to send the request to the KeyStone server
- frequently for the revoke-list, in order to reject some malicious API
- request, for example, a user has to be deactivated, but use an old token
- to access OpenStack service.
-
- For this option, needs to leverage database replication to provide
+The PKI token has one great advantage is that the token validation can be
+done locally, without sending token validation request to KeyStone server.
+The drawback of PKI token is
+the endpoint list size in the token. If a project will be only spread in
+very limited site number(region number), then we can use the endpoint
+filter to reduce the token size, make it workable even a lot of sites
+in the cloud.
+KeyStone middleware(which is co-located in the service like
+Nova-API/xxx-API) will have to send the request to the KeyStone server
+frequently for the revoke-list, in order to reject some malicious API
+request, for example, a user has to be deactivated, but use an old token
+to access OpenStack service.
+
+For this option, needs to leverage database replication to provide
KeyStone Active-Active mode across sites to reduce the impact of site failure.
And the revoke-list request is very frequently asked, so the performance of the
KeyStone server needs also to be taken care.
- Site level keystone load balance is required to provide site level
+Site level keystone load balance is required to provide site level
redundancy, otherwise the KeyStone middleware will not switch request to the
healthy KeyStone server in time.
- And also the cert distribution/revoke to each site / API server for token
+And also the cert distribution/revoke to each site / API server for token
validation is required.
- This option can be used for some scenario where there are very limited
+This option can be used for some scenario where there are very limited
sites, especially if each project only spreads into limited sites ( regions ).
-- Distributed KeyStone service with Fernet token
+**Distributed KeyStone service with Fernet token**
- Fernet token is a very new format, and just introduced recently,the biggest
+Fernet token is a very new format, and just introduced recently,the biggest
gain for this token format is :1) lightweight, size is small to be carried in
the API request, not like PKI token( as the sites increased, the endpoint-list
will grows and the token size is too long to carry in the API request) 2) no
@@ -172,50 +166,50 @@ weight data size (just project, Role, domain, endpoint etc). The drawback for
the Fernet token is that token has to be validated by KeyStone for each API
request.
- This makes that the DB of KeyStone can work as a cluster in multisite (for
+This makes that the DB of KeyStone can work as a cluster in multisite (for
example, using MySQL galera cluster). That means install KeyStone API server in
each site, but share the same the backend DB cluster.Because the DB cluster
will synchronize data in real time to multisite, all KeyStone server can see
the same data.
- Because each site with KeyStone installed, and all data kept same,
+Because each site with KeyStone installed, and all data kept same,
therefore all token validation could be done locally in the same site.
- The challenge for this solution is how many sites the DB cluster can
+The challenge for this solution is how many sites the DB cluster can
support. Question is aksed to MySQL galera developers, their answer is that no
number/distance/network latency limitation in the code. But in the practice,
they have seen a case to use MySQL cluster in 5 data centers, each data centers
with 3 nodes.
- This solution will be very good for limited sites which the DB cluster can
+This solution will be very good for limited sites which the DB cluster can
cover very well.
-- Distributed KeyStone service with Fernet token + Async replication (
- star-mode).
+**Distributed KeyStone service with Fernet token + Async replication (star-mode)**
- One master KeyStone cluster with Fernet token in two sites (for site level
+One master KeyStone cluster with Fernet token in two sites (for site level
high availability purpose), other sites will be installed with at least 2 slave
nodes where the node is configured with DB async replication from the master
cluster members, and one slave’s mater node in site1, another slave’s master
node in site 2.
- Only the master cluster nodes are allowed to write, other slave nodes
+Only the master cluster nodes are allowed to write, other slave nodes
waiting for replication from the master cluster member( very little delay).
- Pros.
- Deploy database cluster in the master sites is to provide more master
-nodes, in order to provide more slaves could be done with async. replication
-in parallel. Two sites for the master cluster is to provide higher
-reliability (site level) for writing request, but reduce the maintaince
-challenge at the same time by limiting the cluster spreading over too many
-sites.
- Multi-slaves in other sites is because of the slave has no knowledge of
-other slaves, so easy to manage multi-slaves in one site than a cluster, and
-multi-slaves work independently but provide multi-instance redundancy(like a
-cluster, but independent).
+Pros:
+ * Deploy database cluster in the master sites is to provide more master
+ nodes, in order to provide more slaves could be done with async. replication
+ in parallel. Two sites for the master cluster is to provide higher
+ reliability (site level) for writing request, but reduce the maintaince
+ challenge at the same time by limiting the cluster spreading over too many
+ sites.
+ * Multi-slaves in other sites is because of the slave has no knowledge of
+ other slaves, so easy to manage multi-slaves in one site than a cluster, and
+ multi-slaves work independently but provide multi-instance redundancy(like a
+ cluster, but independent).
- Cons. Need to be aware of the chanllenge of key distribution and rotation
-for Fernet token.
+Cons:
+ * Need to be aware of the chanllenge of key distribution and rotation
+ for Fernet token.
Multisite VNF Geo site disaster recovery
@@ -224,7 +218,7 @@ Multisite VNF Geo site disaster recovery
Goal
----
-a VNF (telecom application) should, be able to restore in another site for
+A VNF (telecom application) should, be able to restore in another site for
catastrophic failures happened.
Key consideration in multisite scenario
@@ -253,23 +247,20 @@ Option1, Consistency application backup
The disater recovery process will work like this:
-1).DR(Geo site disaster recovery )software get the volumes for each VM
-in the VNF from Nova
-2).DR software call Nova quiesce API to quarantee quiecing VMs in desired
-order
-3).DR software takes snapshots of these volumes in Cinder (NOTE: Because
-storage often provides fast snapshot, so the duration between quiece and
-unquiece is a short interval)
-4).DR software call Nova unquiece API to unquiece VMs of the VNF in reverse
-order
-5).DR software create volumes from the snapshots just taken in Cinder
-6).DR software create backup (incremental) for these volumes to remote
-backup storage ( swift or ceph, or.. ) in Cinder
-7).if this site failed,
-7.1)DR software restore these backup volumes in remote Cinder in the
-backup site.
-7.2)DR software boot VMs from bootable volumes from the remote Cinder in
-the backup site and attach the regarding data volumes.
+1) DR(Geo site disaster recovery )software get the volumes for each VM
+ in the VNF from Nova
+2) DR software call Nova quiesce API to quarantee quiecing VMs in desired order
+3) DR software takes snapshots of these volumes in Cinder (NOTE: Because
+ storage often provides fast snapshot, so the duration between quiece and
+ unquiece is a short interval)
+4) DR software call Nova unquiece API to unquiece VMs of the VNF in reverse order
+5) DR software create volumes from the snapshots just taken in Cinder
+6) DR software create backup (incremental) for these volumes to remote
+ backup storage ( swift or ceph, or.. ) in Cinder
+7) If this site failed,
+ 1) DR software restore these backup volumes in remote Cinder in the backup site.
+ 2) DR software boot VMs from bootable volumes from the remote Cinder in
+ the backup site and attach the regarding data volumes.
Note: It’s up to the DR policy and VNF character how to use the API. Some
VNF may allow the standby of the VNF or member of the cluster to do
@@ -282,51 +273,53 @@ OPNFV release.
Option2, Vitrual Machine Snapshot
---------------------------------
-1).DR software create VM snapshot in Nova
-2).Nova quiece the VM internally
- (NOTE: The upper level application or DR software should take care of
- avoiding infra level outage induced VNF outage)
-3).Nova create image in Glance
-4).Nova create a snapshot of the VM, including volumes
-5).If the VM is volume backed VM, then create volume snapshot in Cinder
-5).No image uploaded to glance, but add the snapshot in the meta data of the
+1) DR software create VM snapshot in Nova
+2) Nova quiece the VM internally
+ (NOTE: The upper level application or DR software should take care of
+ avoiding infra level outage induced VNF outage)
+3) Nova create image in Glance
+4) Nova create a snapshot of the VM, including volumes
+5) If the VM is volume backed VM, then create volume snapshot in Cinder
+5) No image uploaded to glance, but add the snapshot in the meta data of the
image in Glance
-6).DR software to get the snapshot information from the Glance
-7).DR software create volumes from these snapshots
-9).DR software create backup (incremental) for these volumes to backup storage
+6) DR software to get the snapshot information from the Glance
+7) DR software create volumes from these snapshots
+9) DR software create backup (incremental) for these volumes to backup storage
( swift or ceph, or.. ) in Cinder
-10).if this site failed,
-10.1).DR software restore these backup volumes to Cinder in the backup site.
-10.2).DR software boot vm from bootable volume from Cinder in the backup site
- and attach the data volumes.
+10) If this site failed,
+ 1) DR software restore these backup volumes to Cinder in the backup site.
+ 2) DR software boot vm from bootable volume from Cinder in the backup site
+ and attach the data volumes.
-This option only provides single VM level consistency disaster recovery
+This option only provides single VM level consistency disaster recovery.
This feature is already available in current OPNFV release.
Option3, Consistency volume replication
---------------------------------------
-1).DR software creates datastore (Block/Cinder, Object/Swift, App Custom
+1) DR software creates datastore (Block/Cinder, Object/Swift, App Custom
storage) with replication enabled at the relevant scope, for use to
selectively backup/replicate desire data to GR backup site
-2).DR software get the reference of storage in the remote site storage
-3).If primary site failed,
-3.1).DR software managing recovery in backup site gets references to relevant
+2) DR software get the reference of storage in the remote site storage
+3) If primary site failed,
+ 1) DR software managing recovery in backup site gets references to relevant
storage and passes to new software instances
-3.2).Software attaches (or has attached) replicated storage, in the case of
+ 2) Software attaches (or has attached) replicated storage, in the case of
volumes promoting to writable.
-Pros:1) Replication will be done in the storage level automatically, no need to
- create backup regularly, for example, daily.
- 2) Application selection of limited amount of data to replicate reduces
- risk of replicating failed state and generates less overhear.
- 3) Type of replication and model (active/backup, active/active, etc) can
- be tailored to application needs
+Pros:
+ * Replication will be done in the storage level automatically, no need to
+ create backup regularly, for example, daily.
+ * Application selection of limited amount of data to replicate reduces
+ risk of replicating failed state and generates less overhear.
+ * Type of replication and model (active/backup, active/active, etc) can
+ be tailored to application needs
-Cons:1) Applications need to be designed with support in mind, including both
- selection of data to be replicated and consideration of consistency
- 2) "Standard" support in Openstack for Disaster Recovery currently fairly
- limited, though active work in this area.
+Cons:
+ * Applications need to be designed with support in mind, including both
+ selection of data to be replicated and consideration of consistency
+ * "Standard" support in Openstack for Disaster Recovery currently fairly
+ limited, though active work in this area.
This feature is in discussion in OpenStack Mitaka release, and hopefully will
be avaialle in next OPNFV release.
@@ -338,7 +331,7 @@ VNF high availability across VIM
Goal
----
-a VNF (telecom application) should, be able to realize high availability
+A VNF (telecom application) should, be able to realize high availability
deloyment across OpenStack instances.
Key consideration in multisite scenario
@@ -398,8 +391,3 @@ OpenStack instances:
Overlay L2 networking across OpenStack instances is in discussion with Neutron
community.
-
-
-Revision: _sha1_
-
-Build date: |today|