Marek Denis

We present the design, implementation, evaluation, deployment and production experiences of EBB (Express BackBone), a private WAN (Wide Area Network) connecting Meta's global data centers (DCs). Initiated in 2015, EBB now carries 100% of DC-DC traffic, witnessing remarkable growth over the years. A key design aspect of EBB is its multi-plane architecture, facilitating seamless deployment of a new control plane while ensuring operational simplicity. This architecture allows for efficient failure… Pokaż więcej

We present the design, implementation, evaluation, deployment and production experiences of EBB (Express BackBone), a private WAN (Wide Area Network) connecting Meta's global data centers (DCs). Initiated in 2015, EBB now carries 100% of DC-DC traffic, witnessing remarkable growth over the years. A key design aspect of EBB is its multi-plane architecture, facilitating seamless deployment of a new control plane while ensuring operational simplicity. This architecture allows for efficient failure mitigation, standard maintenance, and capacity expansion by draining one or two planes without impacting service level objectives (SLOs). Another critical design decision is the hybrid model, combining distributed control agents and a central controller. EBB's centralized traffic engineering utilizes an MPLS-TE based solution to allocate paths periodically for different traffic classes based on service requirements, while its distributed control agents enable fast local failure recovery by pre-installing pre-computed backup paths in the data plane. We delve into our eight-year production experience, highlighting the successful deployment of multiple generations of EBB. Pokaż mniej

We are evaluating cloud identity federation available in the OpenStack ecosystem that allows for on premise bursting into remote clouds with use of local identities (i.e. domain accounts). Further enhancements to identity federation are a clear way to hybrid cloud architectures - virtualized infrastructures layered across independent private and public clouds.

OpenStack continues to experience significant innovation in the area of federated identity and federated service provider support for OpenStack based hybrid clouds. In this presentation we will provide a brief overview of the federated functionality that was available in previous Keystone Releases (Icehouse and Juno). We then provide an overview of the newest innovations in Keystone for supporting hybrid clouds. We will share an overview of key new features such as support for OpenID Connect… Pokaż więcej

OpenStack continues to experience significant innovation in the area of federated identity and federated service provider support for OpenStack based hybrid clouds. In this presentation we will provide a brief overview of the federated functionality that was available in previous Keystone Releases (Icehouse and Juno). We then provide an overview of the newest innovations in Keystone for supporting hybrid clouds. We will share an overview of key new features such as support for OpenID Connect and tighter integration with OpenStack's dashboard (Horizon). We will also provide an overview of how our OpenStack superuser, CERN, is leveraging the Keystone hybrid federation support and enhancing it with a discovery service for greater usability and scalability. We then provide a deep dive into the inner workings of Keystone's hybrid cloud support and describe the typical configurations required for deployment of this new capability. Lastly, we describe best practices for how to i) configure Keystone to interoperate with mod_shib , ii) configure Horizon to perform single sign-on for a federated hybrid cloud, and iii) configure a common mapping that will work with Keystone's hybrid support. Pokaż mniej

OpenStack continues to experience significant innovation in the area of federated identity and federated service provider support for OpenStack based hybrid clouds. In this presentation we will provide a brief overview of the federated functionality that was available in previous Keystone Releases (Icehouse and Juno). We then provide an overview of the newest innovations in Keystone for supporting hybrid clouds. We will share an overview of key new features such as support for OpenID Connect… Pokaż więcej

OpenStack continues to experience significant innovation in the area of federated identity and federated service provider support for OpenStack based hybrid clouds. In this presentation we will provide a brief overview of the federated functionality that was available in previous Keystone Releases (Icehouse and Juno). We then provide an overview of the newest innovations in Keystone for supporting hybrid clouds. We will share an overview of key new features such as support for OpenID Connect and tighter integration with OpenStack's dashboard (Horizon). We will also provide an overview of how our OpenStack superuser, CERN, is leveraging the Keystone hybrid federation support and enhancing it with a discovery service for greater usability and scalability. We then provide a deep dive into the inner workings of Keystone's hybrid cloud support and describe the typical configurations required for deployment of this new capability. Lastly, we describe best practices for how to i) configure Keystone to interoperate with mod_shib , ii) configure Horizon to perform single sign-on for a federated hybrid cloud, and iii) configure a common mapping that will work with Keystone's hybrid support. Pokaż mniej

OpenStack continues to experience significant innovation in the area of federated identity and federated service provider support for OpenStack based hybrid clouds. In this presentation we will provide a brief overview of the federated functionality that was available in previous Keystone Releases (Icehouse and Juno). We then provide an overview of the newest innovations in Keystone for supporting hybrid clouds. We will share an overview of key new features such as support for OpenID Connect… Pokaż więcej

OpenStack continues to experience significant innovation in the area of federated identity and federated service provider support for OpenStack based hybrid clouds. In this presentation we will provide a brief overview of the federated functionality that was available in previous Keystone Releases (Icehouse and Juno). We then provide an overview of the newest innovations in Keystone for supporting hybrid clouds. We will share an overview of key new features such as support for OpenID Connect and tighter integration with OpenStack's dashboard (Horizon). We will also provide an overview of how our OpenStack superuser, CERN, is leveraging the Keystone hybrid federation support and enhancing it with a discovery service for greater usability and scalability. We then provide a deep dive into the inner workings of Keystone's hybrid cloud support and describe the typical configurations required for deployment of this new capability. Lastly, we describe best practices for how to i) configure Keystone to interoperate with mod_shib , ii) configure Horizon to perform single sign-on for a federated hybrid cloud, and iii) configure a common mapping that will work with Keystone's hybrid support. Pokaż mniej

Cloud Bursting has long been the holy grail of cloud use cases. And we are getting closer! With the recent progress in Icehouse, capabilities now exist to demonstrate a true federated user experience operating across multiple clouds.

In this presentation, we describe the federated identity enhancements we have added to support Keystone to Keystone federation for enabling hybrid cloud functionality. We begin with an overview of key hybrid cloud use cases that have been identified by our stakeholders including those being encountered by OpenStack superuser CERN.