data protection and openstack mitaka live webcast · 2019-12-21 · openstack doesn’t really have...

34
Data Protection and OpenStack Mitaka Live Webcast June 22, 2016 Moderator: Thomas Rivera, Hitachi Data Systems Panelists: Sam Fineberg, Hewlett Packard Enterprise Ben Swartzlander, NetApp Co-Sponsored by:

Upload: others

Post on 17-Jun-2020

0 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: Data Protection and OpenStack Mitaka Live Webcast · 2019-12-21 · OpenStack doesn’t really have a concept of a “remote” datacenter ! Vendor differences ! Multiple attempts

Data Protection and OpenStack Mitaka Live Webcast

June 22, 2016

Moderator: Thomas Rivera, Hitachi Data Systems Panelists: Sam Fineberg, Hewlett Packard Enterprise Ben Swartzlander, NetApp

Co-Sponsored by:

Page 2: Data Protection and OpenStack Mitaka Live Webcast · 2019-12-21 · OpenStack doesn’t really have a concept of a “remote” datacenter ! Vendor differences ! Multiple attempts

© 2016 Storage Networking Industry Association. All Rights Reserved.

Today’s Presenters

Sam Fineberg, Ph.D. Distinguished Technologist Hewlett Packard Enterprise

Thomas Rivera Co-Chair, SNIA Data Protection Committee

Hitachi Data Systems

Ben Swartzlander OpenStack Architect

NetApp

Panelists Moderator

2

Page 3: Data Protection and OpenStack Mitaka Live Webcast · 2019-12-21 · OpenStack doesn’t really have a concept of a “remote” datacenter ! Vendor differences ! Multiple attempts

© 2016 Storage Networking Industry Association. All Rights Reserved.

SNIA Legal Notice

!   The material contained in this tutorial is copyrighted by the SNIA unless otherwise noted.

!   Member companies and individual members may use this material in presentations and literature under the following conditions: !   Any slide or slides used must be reproduced in their entirety without modification !   The SNIA must be acknowledged as the source of any material used in the body of any

document containing material from these presentations. !   This presentation is a project of the SNIA Education Committee. !   Neither the author nor the presenter is an attorney and nothing in this

presentation is intended to be, or should be construed as legal advice or an opinion of counsel. If you need legal advice or a legal opinion please contact your attorney.

!   The information presented herein represents the author's personal opinion and current understanding of the relevant issues involved. The author, the presenter, and the SNIA do not assume any responsibility or liability for damages arising out of any reliance on or use of this information. NO WARRANTIES, EXPRESS OR IMPLIED. USE AT YOUR OWN RISK.

3

Page 4: Data Protection and OpenStack Mitaka Live Webcast · 2019-12-21 · OpenStack doesn’t really have a concept of a “remote” datacenter ! Vendor differences ! Multiple attempts

© 2016 Storage Networking Industry Association. All Rights Reserved.

OpenStack & Manila

Ben Swartzlander OpenStack Architect

NetApp

4

Page 5: Data Protection and OpenStack Mitaka Live Webcast · 2019-12-21 · OpenStack doesn’t really have a concept of a “remote” datacenter ! Vendor differences ! Multiple attempts

© 2016 Storage Networking Industry Association. All Rights Reserved.

Free open source (Apache license) software governed by a non-profit foundation (corporation) with a mission to produce the ubiquitous Open Source Cloud Computing platform that will meet the needs of public and private clouds regardless of size, by being simple to implement and massively scalable

What is OpenStack®

!   Massively scalable cloud operating system that controls large pools of compute, storage, & networking resources

!   Community open source with contributions from 5000+ developers & 300+ organizations (Source: Stackalytics)

!   Open web-based API Programmatic Infrastructure as a Service

!   Plug-in architecture; allows different hypervisors, block storage systems, network implementations, hardware agnostic, etc.

5

Page 6: Data Protection and OpenStack Mitaka Live Webcast · 2019-12-21 · OpenStack doesn’t really have a concept of a “remote” datacenter ! Vendor differences ! Multiple attempts

© 2016 Storage Networking Industry Association. All Rights Reserved.

What is OpenStack® (Cont.)

A series of interrelated projects that control pools of compute, storage, and networking infrastructure exposed as a consistent and open layer (API) for a heterogeneous Infrastructure as a Service (IaaS) environment.

6

Page 7: Data Protection and OpenStack Mitaka Live Webcast · 2019-12-21 · OpenStack doesn’t really have a concept of a “remote” datacenter ! Vendor differences ! Multiple attempts

© 2016 Storage Networking Industry Association. All Rights Reserved.

Manila

!   Manila is the OpenStack Shared File Systems Service that provides the management of file shares !   (for example, NFS and CIFS)

!   Intended to be an open standard, highly available, and fault tolerant

!   In the first half of this session, we’ll give you a brief overview of Manila, and talk about new features that were delivered for OpenStack Mitaka, focusing on data protection

7

Page 8: Data Protection and OpenStack Mitaka Live Webcast · 2019-12-21 · OpenStack doesn’t really have a concept of a “remote” datacenter ! Vendor differences ! Multiple attempts

© 2016 Storage Networking Industry Association. All Rights Reserved.

Manila: Project Overview

Customer use case for Manila: !   62% of disk capacity slated for

file storage (Source: IDC) !   Self-service management &

provisioning of shared file systems is hard

!   Customers invent this themselves via scripting, automation, etc.

8

Manila

Shares Provider

Finance R&D

Share “R&D” for instances

1 & 3

Create a “Marketing”

share for VM 4

Nova

Hypervisor

1 2 3 4 5 6 Mktg

Page 9: Data Protection and OpenStack Mitaka Live Webcast · 2019-12-21 · OpenStack doesn’t really have a concept of a “remote” datacenter ! Vendor differences ! Multiple attempts

© 2016 Storage Networking Industry Association. All Rights Reserved.

Manila: Status

!   Juno (Oct 2014) and Kilo (Apr 2015) in production (supported downstream)

!   Liberty (Oct 2015) supported upstream

! Mitaka released April 7th -- current stable release

!   18 drivers !   from 12 storage vendors (RedHat, EMC, Intel, HDS, HPE,

Huawei, IBM, NetApp, Quobyte, Oracle, Microsoft, Tegile)

9

Page 10: Data Protection and OpenStack Mitaka Live Webcast · 2019-12-21 · OpenStack doesn’t really have a concept of a “remote” datacenter ! Vendor differences ! Multiple attempts

© 2016 Storage Networking Industry Association. All Rights Reserved.

Manila: New in Mitaka

!   New first party drivers: LVM, ZFSonLinux !   New third party drivers: CephFS, Tegile

!   New share access interface

!   Share migration data service

!   Export location metadata

!   QoS support

!   Share Replication…

10

Page 11: Data Protection and OpenStack Mitaka Live Webcast · 2019-12-21 · OpenStack doesn’t really have a concept of a “remote” datacenter ! Vendor differences ! Multiple attempts

© 2016 Storage Networking Industry Association. All Rights Reserved.

Share Replication: Use Cases

!   Protection from site-level outages !   Recovery from temporary and permanent outages

!   End-user accessible (no admin-intervention required)

!   Can be tested

!   Completely automated

!   NOT inter-cloud

!   Disruptive (at the protocol layer)

11

Page 12: Data Protection and OpenStack Mitaka Live Webcast · 2019-12-21 · OpenStack doesn’t really have a concept of a “remote” datacenter ! Vendor differences ! Multiple attempts

© 2016 Storage Networking Industry Association. All Rights Reserved.

Share Replication: Key Concepts

!   Share (an instance of a shared file system) !   User specifies size, access protocol, “share type”

!   Can be accessed concurrently by multiple instances

!   AZ (availability zone) !   Arbitrarily-defined failure domain

!   Concept exists across all OpenStack projects

!   Replica (one copy of a replicated share) !   Created one at a time, in different AZs

!   Each mirrors the primary

12

Page 13: Data Protection and OpenStack Mitaka Live Webcast · 2019-12-21 · OpenStack doesn’t really have a concept of a “remote” datacenter ! Vendor differences ! Multiple attempts

© 2016 Storage Networking Industry Association. All Rights Reserved.

Admin Perspective

!   Administrator acquires and configures storage infrastructure

!   Replication not supported on all backends & not supported across vendors

!   Administrator designs AZ boundaries and replication relationships

!   Administrator sets up share types with replication

!   Administrator sets quotas and limits

!   NOT involved in creation of replicated shares, or failover/failback

13

Page 14: Data Protection and OpenStack Mitaka Live Webcast · 2019-12-21 · OpenStack doesn’t really have a concept of a “remote” datacenter ! Vendor differences ! Multiple attempts

© 2016 Storage Networking Industry Association. All Rights Reserved.

End-User Perspective

!   Determines what capabilities exist by looking at share types !   Decides which AZ(s) to run application in

!   Creates replicated shares and add replicas one at a time

!   Decides when to failover/failback storage

!   Can TEST that failover/failback works and validate DR plans

!   Zero interaction with human administrator

14

Page 15: Data Protection and OpenStack Mitaka Live Webcast · 2019-12-21 · OpenStack doesn’t really have a concept of a “remote” datacenter ! Vendor differences ! Multiple attempts

© 2016 Storage Networking Industry Association. All Rights Reserved.

Example: Oracle DB

!   Highly available database with VMs in multiple AZ !   NFS storage underneath

!   Share replication can be synchronous or asynchronous

!   User configures !   Shares and replicas in each AZ

!   Instances in each AZ with Oracle and appropriate config

!   In a disaster !   User notices loss of primary AZ and invokes Manila set-active-

replica, then pokes Oracle software already running in secondary AZ

15

Page 16: Data Protection and OpenStack Mitaka Live Webcast · 2019-12-21 · OpenStack doesn’t really have a concept of a “remote” datacenter ! Vendor differences ! Multiple attempts

© 2016 Storage Networking Industry Association. All Rights Reserved.

Example: WordPress

!   WordPress running on Apache+MySQL !   NFS storage underneath, asynchronous replication

!   User configures !   Shares and replicas in each AZ

!   Instances in each AZ with Wordpress and LAMP stack

!   In a disaster !   User notices loss of primary AZ and invokes Manila set-active-

replica, then starts Wordpress and dependent software (MySQL most importantly) already running in secondary AZ

16

Page 17: Data Protection and OpenStack Mitaka Live Webcast · 2019-12-21 · OpenStack doesn’t really have a concept of a “remote” datacenter ! Vendor differences ! Multiple attempts

© 2016 Storage Networking Industry Association. All Rights Reserved.

Future Work: Newton

!   Quotas limiting number of replicas !   Support for replication with share servers

(secure multi-tenant backends)

!   API finalization and non-experimental status

!   Admin APIs for snapshot replicas

!   Revert to snapshot

17

Page 18: Data Protection and OpenStack Mitaka Live Webcast · 2019-12-21 · OpenStack doesn’t really have a concept of a “remote” datacenter ! Vendor differences ! Multiple attempts

© 2016 Storage Networking Industry Association. All Rights Reserved.

Cinder

Sam Fineberg, Ph.D. Distinguished Technologist Hewlett Packard Enterprise

18

Page 19: Data Protection and OpenStack Mitaka Live Webcast · 2019-12-21 · OpenStack doesn’t really have a concept of a “remote” datacenter ! Vendor differences ! Multiple attempts

© 2016 Storage Networking Industry Association. All Rights Reserved.

What is Cinder?

!   Block Storage Service for Openstack !   Provides persistent storage volumes for

compute jobs !   Plug-in framework w/ more than 70 drivers !   Multiple storage fabrics

!   iSCSI, FC, NFS, RBD, …

Client

Cinder API Cinder Scheduler

Message Bus

Cinder Volume

Volume Driver

Storage Device

HTTP/REST

Volume Driver

Storage Device

19

Page 20: Data Protection and OpenStack Mitaka Live Webcast · 2019-12-21 · OpenStack doesn’t really have a concept of a “remote” datacenter ! Vendor differences ! Multiple attempts

© 2016 Storage Networking Industry Association. All Rights Reserved.

Cinder Volumes

!   Cinder storage is allocated as “volumes” !   A volume is a detachable block

storage device, like a disk !   Volumes can have a “type”, defining

device and class of storage !   Volumes can be attached or

detached from Nova jobs

20

VM

VM VM

Nova

Cinder Volumes

BM Node

Page 21: Data Protection and OpenStack Mitaka Live Webcast · 2019-12-21 · OpenStack doesn’t really have a concept of a “remote” datacenter ! Vendor differences ! Multiple attempts

© 2016 Storage Networking Industry Association. All Rights Reserved.

Data Protection Mechanisms in Cinder

!   Snapshotting !   Backup

!   Replication

!   Multi-attach

21

Page 22: Data Protection and OpenStack Mitaka Live Webcast · 2019-12-21 · OpenStack doesn’t really have a concept of a “remote” datacenter ! Vendor differences ! Multiple attempts

© 2016 Storage Networking Industry Association. All Rights Reserved.

Snapshotting

!   Cinder volumes can be snapshotted !   Creates a point-in-time copy of the data that a volume contains

!   Snapshots can be used to create volumes, or to restore a volume back to a past state

!   Implementation mechanisms vary, depending on the storage hardware and driver

!   By default, a volume being snapshotted must be unattached !   You can “force” a snapshot to be taken on an attached volume

!   Snapshots are at block level and crash consistent

!   May lead to issues unless if writes cannot be quiesced !   Not all drivers can support the force option

22

Page 23: Data Protection and OpenStack Mitaka Live Webcast · 2019-12-21 · OpenStack doesn’t really have a concept of a “remote” datacenter ! Vendor differences ! Multiple attempts

© 2016 Storage Networking Industry Association. All Rights Reserved.

Consistency Groups

!   If you have multiple related volumes you want to snapshot all at once !   E.g., multiple database tables, logs, etc.

!   A consistency group allows you to create snapshots sets at the exact same point in time from multiple volumes

!   CG actions !   When you create or update CGs you include a list of volume IDs

!   There are special CG snapshot commands

!   There is no “force” flag for cgsnapshot-create

23

Page 24: Data Protection and OpenStack Mitaka Live Webcast · 2019-12-21 · OpenStack doesn’t really have a concept of a “remote” datacenter ! Vendor differences ! Multiple attempts

© 2016 Storage Networking Industry Association. All Rights Reserved.

Cinder Backup

!   Cinder provides a block-level backup ! Not application or filesystem aware, no

consistency guarantees

! Full and incremental backup support

!   Can backup attached volume using “force” flag

!   Volumes can be “restored” from a backup !   Restores the volume to the backup state

!   Backup drivers !   Default is a “dd” to a swift object

!   Alternative backup implementations are available as vendor specific plugins

!   Plugins may provide alternative targets and/or backup methods

24

Client

Cinder API Cinder Scheduler

Message Bus

Cinder Volume

Cinder Backup

Volume Driver Backup Driver

Storage Device

Backup Device

HTTP/REST

Page 25: Data Protection and OpenStack Mitaka Live Webcast · 2019-12-21 · OpenStack doesn’t really have a concept of a “remote” datacenter ! Vendor differences ! Multiple attempts

© 2016 Storage Networking Industry Association. All Rights Reserved.

Backup Changes for Mitaka

!   Backup snapshot !   You can now backup a cinder snapshot

!   Allows you to “snapshot” a volume and then backup, better consistency and lower downtime

!   New backup drivers !   Existing: Swift, Posix, NFS, GlusterFS, Ceph, IBM TSM

!   New driver for Google Cloud Storage

!   Backup driver decoupled from volume nodes !   Better scalability, can add backup nodes

!   Less impact of backup on the Cinder service

25

Page 26: Data Protection and OpenStack Mitaka Live Webcast · 2019-12-21 · OpenStack doesn’t really have a concept of a “remote” datacenter ! Vendor differences ! Multiple attempts

© 2016 Storage Networking Industry Association. All Rights Reserved.

Replication

!   Replication has been a difficult feature to add to Cinder !   Cinder tries to hide storage devices

!   OpenStack doesn’t really have a concept of a “remote” datacenter

!   Vendor differences

!   Multiple attempts !   Early designs – vendor centric, hidden from cloud and apps

!   V1 – Juno, IBM only

!   V2 – Liberty – No drivers released (intentionally)

!   V 2.1 – multiple drivers in Mitaka

26

Page 27: Data Protection and OpenStack Mitaka Live Webcast · 2019-12-21 · OpenStack doesn’t really have a concept of a “remote” datacenter ! Vendor differences ! Multiple attempts

© 2016 Storage Networking Industry Association. All Rights Reserved.

Replication API 2.1

!   Simplified use case !   Disaster Recovery only !   Admin only !   Fail everything that is replicated !   Non-replicated volumes are “offline” !   Specified as part of volume “type”

27

Array A

Array B

VM

VM

VM

Page 28: Data Protection and OpenStack Mitaka Live Webcast · 2019-12-21 · OpenStack doesn’t really have a concept of a “remote” datacenter ! Vendor differences ! Multiple attempts

© 2016 Storage Networking Industry Association. All Rights Reserved.

Replication API 2.1 (Cont.)

!   Simplified use case !   Disaster Recovery only !   Admin only !   Fail everything that is replicated !   Non-replicated volumes are “offline” !   Specified as part of volume “type”

28

Array A

Array B

VM

VM

VM

Page 29: Data Protection and OpenStack Mitaka Live Webcast · 2019-12-21 · OpenStack doesn’t really have a concept of a “remote” datacenter ! Vendor differences ! Multiple attempts

© 2016 Storage Networking Industry Association. All Rights Reserved.

Replication

!   Limitations !   Secondary is not visible until after failover

!   All volumes failover when disaster is declared !   Replica storage becomes the only backend

!   No fallback, cleanup after failover is complicated

!   Use case will be expanded in later releases

!   Available drivers in Mitaka !   HPE, Dell, EMC, Huawei, Storwize, IBM, Pure, Solidfire

!   More coming in Newton

29

Page 30: Data Protection and OpenStack Mitaka Live Webcast · 2019-12-21 · OpenStack doesn’t really have a concept of a “remote” datacenter ! Vendor differences ! Multiple attempts

© 2016 Storage Networking Industry Association. All Rights Reserved.

Multi-attach

!   Allow volumes to be attached to multiple hosts or VMs

!   Cinder support already in Mitaka

!   Some Nova changes merged, still issues

!   Not fully functional, expect progress in Newton

30

Cinder Volume Service

Volume Driver

Storage Device

Nova Compute

VM

VM

Nova Compute

Cinder Volume

… VM

VM

Page 31: Data Protection and OpenStack Mitaka Live Webcast · 2019-12-21 · OpenStack doesn’t really have a concept of a “remote” datacenter ! Vendor differences ! Multiple attempts

© 2016 Storage Networking Industry Association. All Rights Reserved.

Other Enhancements

!   Live migration !   Cinder has had volume migration for some time

!   Supports the movement of volumes between Cinder back ends

!   Can also live migrate attached volumes (when using Nova/libvirt)

!   Cinder also supports Nova live migration !   Migrate VMs to a different Nova host

!   Some limitations

!   Rolling upgrades !   Backward compatible RPC APIs

! Mitaka is backward compatible with Liberty

!   Uses oslo versioned objects, online DB schema upgrade

31

Page 32: Data Protection and OpenStack Mitaka Live Webcast · 2019-12-21 · OpenStack doesn’t really have a concept of a “remote” datacenter ! Vendor differences ! Multiple attempts

© 2016 Storage Networking Industry Association. All Rights Reserved.

Q&A / Panel Discussion

Select:

to submit a question

Sam Fineberg, Ph.D. Distinguished Technologist Hewlett Packard Enterprise

Thomas Rivera Co-Chair, SNIA Data Protection Committee

Hitachi Data Systems

Ben Swartzlander OpenStack Architect

NetApp

Panelists Moderator

32

Page 33: Data Protection and OpenStack Mitaka Live Webcast · 2019-12-21 · OpenStack doesn’t really have a concept of a “remote” datacenter ! Vendor differences ! Multiple attempts

© 2016 Storage Networking Industry Association. All Rights Reserved.

Useful SNIA Resources

!   This webcast and a copy of the slides will be on the SNIA Cloud Storage and Data Protection Websites and available on-demand

! http://www.snia.org/forum/csi/knowledge/webcasts

!   http://www.snia.org/forums/dpco/knowledge/watch_learn

!   A Q&A from this webcast, including answers to questions we couldn't get to today, will be on the SNIACloud blog

! http://www.sniacloud.com/

!   Please rate the Webcast by selecting the button

33

Page 34: Data Protection and OpenStack Mitaka Live Webcast · 2019-12-21 · OpenStack doesn’t really have a concept of a “remote” datacenter ! Vendor differences ! Multiple attempts

Thank You!