Search icon CANCEL
Subscription
0
Cart icon
Your Cart (0 item)
Close icon
You have no products in your basket yet
Arrow left icon
Explore Products
Best Sellers
New Releases
Books
Videos
Audiobooks
Learning Hub
Conferences
Free Learning
Arrow right icon
Arrow up icon
GO TO TOP
OpenStack Cloud Security

You're reading from   OpenStack Cloud Security Your OpenStack cloud storage contains all your vital computing resources and potentially sensitive data – secure it with this essential OpenStack tutorial

Arrow left icon
Product type Paperback
Published in Jul 2015
Publisher
ISBN-13 9781782170983
Length 160 pages
Edition 1st Edition
Arrow right icon
Author (1):
Arrow left icon
Fabio Alessandro Locati Fabio Alessandro Locati
Author Profile Icon Fabio Alessandro Locati
Fabio Alessandro Locati
Arrow right icon
View More author details
Toc

Table of Contents (9) Chapters Close

Preface 1. First Things First – Creating a Safe Environment FREE CHAPTER 2. OpenStack Security Challenges 3. Securing OpenStack Networking 4. Securing OpenStack Communications and Its API 5. Securing the OpenStack Identification and Authentication System and Its Dashboard 6. Securing OpenStack Storage 7. Securing the Hypervisor Index

Baremetal


OpenStack Nova also uses real servers as if they were virtualized guest machines. Users can be given real server and virtual machines as guest machines in a transparent manner. This allows you to use real machines for some tasks you already know will be heavy loaded and could have an impact the performance of your cluster.

Until the Icehouse release, it was possible to use baremetal machine by using the Nova-Baremetal backend, but since the Juno release, the current right way is by using OpenStack Ironic.

This option can even be considered for security reasons, since if you use Ironic (or Nova-Baremetal) you'll end up having a single virtual machine on the physical server. This means that this server will not share computing resources (RAM, CPU, and so on) with other virtual machines, preventing any consequence of a possible hypervisor breakout.

Tip

For machines that require a special level of security, using a baremetal hypervisor (Nova-Baremetal or OpenStack Ironic) could be a good...

lock icon The rest of the chapter is locked
Register for a free Packt account to unlock a world of extra content!
A free Packt account unlocks extra newsletters, articles, discounted offers, and much more. Start advancing your knowledge today.
Unlock this book and the full library FREE for 7 days
Get unlimited access to 7000+ expert-authored eBooks and videos courses covering every tech area you can think of
Renews at $19.99/month. Cancel anytime
Banner background image