first_name

last_name

von Thadden

In this lab I will show a practical way to use heavy software (like OpenStack) or annoying software (like Cisco AnyConnect) via container technologies on insufficient or precious resources - for testing and preparing customer environments - or just because we can :-) We will start with preparing our laptops and then creating a sufficient RHEL image to put some workloads on it like the AnyConnect and RHOSP-Director to see possibilities and limits of this approach. This lab is not for deploying production environments - it's more about embedding software that's normally running in VMs on your weak Linux Laptop for testing things out. As an example we use OpenStack - if you know how this one works, everything else is a breeze!

Get Hands on with Containerized Deployment of OpenStack

Hearing a lot about OpenStack and want to check it out for yourself? See how quick and easy it is to install and start using OpenStack using containers that run within a VM on your laptop or within a sandbox. OpenStack Kolla provides production ready tools to deploy OpenStack services as Docker containers that can be managed and upgraded easily. To help you explore Kolla and OpenStack, we provide access to a VM with a containerized deployment of OpenStack Mitaka and step by step instructions. Acquaint yourself with the environment. Learn your way around Horizon (GUI) and the CLI to view and operate your OpenStack cloud. Best of all, take what you learn with you and experiment on your own to discover all OpenStack offers you.

Kethamakka

A look at various components of Kata containers. This new project combines clear containers and Hyper runV technology. As part of the workshop you will be able to understand clear containers and Hyper runV individually and as a technology behind Kata containers. We will setup the environment for this technology and run through various use cases for this technology.

A look at various components of Kata containers. This new project combines clear containers and Hyper runV technology. As part of the workshop you will be able to understand clear containers and Hyper runV individually and as a technology behind Kata containers. We will setup the environment for this technology and run through various use cases for this technology.

McCollum

byron.mccollum@rackspace.com

Kubernetes is quickly growing in popularity and more businesses are adopting it into their infrastructure. In order to better understand Kubernetes, this workshop is designed to help users grasp the beginning building blocks of Kubernetes. We will go over the Kubernetes Application Plane. Starting with, the basic objects that make up Kubernetes such as pods, services and volumes. Then we will go into some higher level abstractions like ReplicaSets and Deployments.
Once we have a good foundation, we will go through a hands on lab where we build out our first application using Kubernetes. Students will leave with the knowledge how to deploy an application and be ready to continue on the path to learn more about Kubernetes. 

Kubernetes is quickly growing in popularity and more businesses are adopting it into their infrastructure. In order to better understand Kubernetes, this workshop is designed to help users grasp the beginning building blocks of Kubernetes. We will go over the Kubernetes Application Plane. Starting with, the basic objects that make up Kubernetes such as pods, services and volumes. Then we will go into some higher level abstractions like ReplicaSets and Deployments.
Once we have a good foundation, we will go through a hands on lab where we build out our first application using Kubernetes. Students will leave with the knowledge how to deploy an application and be ready to continue on the path to learn more about Kubernetes. 

DeRosa-Grund

tyler.derosa-grund@rackspace.com

Kubernetes is quickly growing in popularity and more businesses are adopting it into their infrastructure. In order to better understand Kubernetes, this workshop is designed to help users grasp the beginning building blocks of Kubernetes. We will go over the Kubernetes Application Plane. Starting with, the basic objects that make up Kubernetes such as pods, services and volumes. Then we will go into some higher level abstractions like ReplicaSets and Deployments.
Once we have a good foundation, we will go through a hands on lab where we build out our first application using Kubernetes. Students will leave with the knowledge how to deploy an application and be ready to continue on the path to learn more about Kubernetes. 

Kubernetes and Openstack unified networking using Calico - Hands on Lab

Currently in a datacenter everyone has containers managed by Kubernetes and also Openstack as a IAAS platform . we need a unified way to making sure that these kinda of hybrid setup can works on same network . Project Calico help us to bridge that gap . Calico provides a pure L3 fabric solution for interconnecting Virtual Machines or Linux Containers (“workloads”). Instead of a vSwitch, Calico employs a vRouter function in each compute node.From Kubernetes to OpenStack, AWS to GCE, Calico supports all of major cloud providers . 
 

This course provides a detailed examination of container architecture from the Linux kernel to Kubernetes, including security & resource controls, kernel structures, and low level storage & network function. This lab provides hands-on training, concepts, and demonstrations, with an emphasis on realistic deployment and troubleshooting exercises.
Topics include security (sVirt, SELinux, SECCOMP), isolation (kernel namespaces, cgroups), and data structures (Kubernetes/Linux). Together, these topics provide an architectural level understanding of the complete container stack, from the Linux kernel, to container runtime (Docker,CRI-O, runc), and container orchestration (Kubernetes).
Following a logical path from container host & image, to container runtime, to orchestrator, we will answer questions like: How does sVirt/SELinux, SECCOMP, namespaces, and isolation really work? How does the Docker Daemon work? How does Kubernetes talk to the Docker Daemon? How are container images made?
 

OpenStack-Helm Hands-on Workshop: Deploy & Upgrade OpenStack on Kubernetes

Get hands-on experience deploying OpenStack on Kubernetes using the OpenStack-Helm project!
OpenStack-Helm is a Helm chart library that allows simple customization and deployment of OpenStack containers across k8s clusters, from laptop-scale to data center-scale. This workshop will explain the fundamentals of containerized OpenStack and Kubernetes, and how to use the Helm tool to orchestrate customized cloud deployments without the sweat and tears.
In this workshop, participants will have a chance 1) to deploy OpenStack on top of Kubernetes with a set of official helm charts from OpenStack-Helm project, 2) to deploy logging, monitoring, and alerting tools, 3) and to perform OpenStack version upgrade on the running OpenStack cluster.
Please bring your own laptop; a VM will be provided for the lab.

OpenStack-Helm Hands-on Workshop: Deploy & Upgrade OpenStack on Kubernetes

Get hands-on experience deploying OpenStack on Kubernetes using the OpenStack-Helm project!
OpenStack-Helm is a Helm chart library that allows simple customization and deployment of OpenStack containers across k8s clusters, from laptop-scale to data center-scale. This workshop will explain the fundamentals of containerized OpenStack and Kubernetes, and how to use the Helm tool to orchestrate customized cloud deployments without the sweat and tears.
In this workshop, participants will have a chance 1) to deploy OpenStack on top of Kubernetes with a set of official helm charts from OpenStack-Helm project, 2) to deploy logging, monitoring, and alerting tools, 3) and to perform OpenStack version upgrade on the running OpenStack cluster.
Please bring your own laptop; a VM will be provided for the lab.

OpenStack-Helm Hands-on Workshop: Deploy & Upgrade OpenStack on Kubernetes

Get hands-on experience deploying OpenStack on Kubernetes using the OpenStack-Helm project!
OpenStack-Helm is a Helm chart library that allows simple customization and deployment of OpenStack containers across k8s clusters, from laptop-scale to data center-scale. This workshop will explain the fundamentals of containerized OpenStack and Kubernetes, and how to use the Helm tool to orchestrate customized cloud deployments without the sweat and tears.
In this workshop, participants will have a chance 1) to deploy OpenStack on top of Kubernetes with a set of official helm charts from OpenStack-Helm project, 2) to deploy logging, monitoring, and alerting tools, 3) and to perform OpenStack version upgrade on the running OpenStack cluster.
Please bring your own laptop; a VM will be provided for the lab.

OpenVswitch and OVN : A hands on contrast and comparison

Kethamakka

OVS is used as software switching and networking component for virtual machines as well as container platforms. OVN provides L2/L3 virtual networking for OpenVSwitch. It is therefore important to understand how OVS works inside different technologies and platforms. To help understand this better, in this lab we go directly into OVS/OVN specifics. With this lab you will learn- Installing OVS- Configuring OVS- Setting up networks- Creating flows- Understanding and watching packets flow using wireshark.

OpenVswitch and OVN : A hands on contrast and comparison

OVS is used as software switching and networking component for virtual machines as well as container platforms. OVN provides L2/L3 virtual networking for OpenVSwitch. It is therefore important to understand how OVS works inside different technologies and platforms. To help understand this better, in this lab we go directly into OVS/OVN specifics. With this lab you will learn- Installing OVS- Configuring OVS- Setting up networks- Creating flows- Understanding and watching packets flow using wireshark.

Orchestrate Kubernetes & OpenStack using Heat Engine & OpenContrail SDN

None, Juniper Network

 
The industry has changed quite significantly over the past couple of years. Recent trends have suggested that service-providers & enterprises need to scale quickly to satisfy their end-users.
In this workshop, users will learn how to rapidly build a PaaS solution such as Kubernetes/OpenShift on top of OpenStack cloud (IaaS) using Heat orchestration engine. The audience will also learn how to stitch different types of workloads (containers, virtual-machines, bare-metals) using OpenContrail SDN.

None, Juniper Network

Kubernetes (Container orchestration) and Openstack (Infrastructure Orchestration) have evolved as independent entities with seperate networking models. 
Though today openstack support running Kubernetes over an Openstack IaaS or running Openstack Service as Kubernetes Orchestrated containers , there is limited support to manage and maintain these two entities seperately and unifiy the networking across these two technologies 
OpenContrail Unified Networking helps solve the key challenges of networking Open stack Workloads with Kubernetes orchestrated containers (Containers running on baremetal) . Opencontrail brings the flexibility and agility to build your next generation IT /Services architecture
The workshop will help end user build a unified PaaS model where he can on demand request CaaS or IaaS for running his application 
 

Juniper Networks Inc

Kubernetes (Container orchestration) and Openstack (Infrastructure Orchestration) have evolved as independent entities with seperate networking models. 
Though today openstack support running Kubernetes over an Openstack IaaS or running Openstack Service as Kubernetes Orchestrated containers , there is limited support to manage and maintain these two entities seperately and unifiy the networking across these two technologies 
OpenContrail Unified Networking helps solve the key challenges of networking Open stack Workloads with Kubernetes orchestrated containers (Containers running on baremetal) . Opencontrail brings the flexibility and agility to build your next generation IT /Services architecture
The workshop will help end user build a unified PaaS model where he can on demand request CaaS or IaaS for running his application 
 

Forming Edge Device Clouds towards Smarter Environments

Senthil kumar

Arunachalam

It is projected that there will be billions of connected devices and trillions of digitized entities in the years ahead. Increasingly our everyday devices are being empowered with more processing, memory, storage and input/output capacities. The size of the data getting generated by these devices are humongous whereas the scope, speed, and structure of data are varying. Our environments are being stuffed with multifaceted sensors, actuators and devices. The challenge is to aggregate all the property and people data to do localized and cognitive analytics to extricate and disseminate actionable insights in time to produce smarter devices and people-centric services. The traditional cloud environments are massive in their processing and storage capabilities but the real-time data capture, analytics, decision-making and actuation are hard. The strategic alternative is to form edge device clouds for instantaneous data capture, cleansing and crunching of sensor and actuator data

Forming Edge Device Clouds towards Smarter Environments

It is projected that there will be billions of connected devices and trillions of digitized entities in the years ahead. Increasingly our everyday devices are being empowered with more processing, memory, storage and input/output capacities. The size of the data getting generated by these devices are humongous whereas the scope, speed, and structure of data are varying. Our environments are being stuffed with multifaceted sensors, actuators and devices. The challenge is to aggregate all the property and people data to do localized and cognitive analytics to extricate and disseminate actionable insights in time to produce smarter devices and people-centric services. The traditional cloud environments are massive in their processing and storage capabilities but the real-time data capture, analytics, decision-making and actuation are hard. The strategic alternative is to form edge device clouds for instantaneous data capture, cleansing and crunching of sensor and actuator data

Forming Edge Device Clouds towards Smarter Environments

Pethuru Raj

Reliance Jio Infocomm Ltd.

It is projected that there will be billions of connected devices and trillions of digitized entities in the years ahead. Increasingly our everyday devices are being empowered with more processing, memory, storage and input/output capacities. The size of the data getting generated by these devices are humongous whereas the scope, speed, and structure of data are varying. Our environments are being stuffed with multifaceted sensors, actuators and devices. The challenge is to aggregate all the property and people data to do localized and cognitive analytics to extricate and disseminate actionable insights in time to produce smarter devices and people-centric services. The traditional cloud environments are massive in their processing and storage capabilities but the real-time data capture, analytics, decision-making and actuation are hard. The strategic alternative is to form edge device clouds for instantaneous data capture, cleansing and crunching of sensor and actuator data

Rinse , Lather and Repeat - A practical guide to being a mentee

McCollum

byron.mccollum@rackspace.com

There has been a push in our community to be active mentors. What is not explained, however, is how to foster a healthy and prosperous relationship that benefits both the mentor and the mentee. Together we will explore the different types of mentoring relationships, as well as setting goals, tracking progress, and getting the most out of these relationships. In this workshop, we will explore the types of mentoring relationships that exist. We will also learn how to set goals, track progress towards those goals and how to get the most out of a mentorship. We will also discuss resources the OpenStack and technical communities have to help us overcome obstacles; along with how we can help others on their journey as well.

Rinse , Lather and Repeat - A practical guide to being a mentee

There has been a push in our community to be active mentors. What is not explained, however, is how to foster a healthy and prosperous relationship that benefits both the mentor and the mentee. Together we will explore the different types of mentoring relationships, as well as setting goals, tracking progress, and getting the most out of these relationships. In this workshop, we will explore the types of mentoring relationships that exist. We will also learn how to set goals, track progress towards those goals and how to get the most out of a mentorship. We will also discuss resources the OpenStack and technical communities have to help us overcome obstacles; along with how we can help others on their journey as well.

Rinse , Lather and Repeat - A practical guide to being a mentee

DeRosa-Grund

tyler.derosa-grund@rackspace.com

There has been a push in our community to be active mentors. What is not explained, however, is how to foster a healthy and prosperous relationship that benefits both the mentor and the mentee. Together we will explore the different types of mentoring relationships, as well as setting goals, tracking progress, and getting the most out of these relationships. In this workshop, we will explore the types of mentoring relationships that exist. We will also learn how to set goals, track progress towards those goals and how to get the most out of a mentorship. We will also discuss resources the OpenStack and technical communities have to help us overcome obstacles; along with how we can help others on their journey as well.

von Thadden

Operation and Management of OpenStack clouds has to be automated to be efficient and reproducible. The shade library is the Ansible key to OpenStack and allows most OpenStack functions to be used idempotent and with much more fun than command calls or direct API calls. This workshop will help you learn and understand the usage of the shade library in a practical way. We will use it to perform different actions from simple to complex and discuss use-cases of the daily operational life.

Chargeback and showback of your cloud services using Cloudkitty and Gnocchi !

Christophe

christophe.sauthier@objectif-libre.com

Objectif Libre, Objectif Libre

Chargeback and showback are almost present on every cloud infrastructure. But do you know that you can acheive that using Open Source tools that are part of OpenStack ?
The goal of that workshop is to explain to you how to do chargeback/showback of OpenStack services using Gnocchi and Cloudkitty (the rating component of OpenStack).
Following you a brief introduction of the various components used, you'll deploy and configure them on a running OpenStack, and be able to define/create of your rating rules !

Chargeback and showback of your cloud services using Cloudkitty and Gnocchi !

luka.peschke@objectif-libre.com

Objectif Libre, Objectif Libre

Chargeback and showback are almost present on every cloud infrastructure. But do you know that you can acheive that using Open Source tools that are part of OpenStack ?
The goal of that workshop is to explain to you how to do chargeback/showback of OpenStack services using Gnocchi and Cloudkitty (the rating component of OpenStack).
Following you a brief introduction of the various components used, you'll deploy and configure them on a running OpenStack, and be able to define/create of your rating rules !

Chargeback and showback of your cloud services using Cloudkitty and Gnocchi !

ludovic.logiou@objectif-libre.com

Chargeback and showback are almost present on every cloud infrastructure. But do you know that you can acheive that using Open Source tools that are part of OpenStack ?
The goal of that workshop is to explain to you how to do chargeback/showback of OpenStack services using Gnocchi and Cloudkitty (the rating component of OpenStack).
Following you a brief introduction of the various components used, you'll deploy and configure them on a running OpenStack, and be able to define/create of your rating rules !

Nokia Networks, Nokia Networks

After the great success of Vitrage hands-on labs that were executed in the Openstack Barcelona and Boston summits, here comes the new lab!
Are you a cloud admin managing a large deployment, struggling with fault management in your system? Are you an OpenStack distro vendor seeking to help your customers deal with increasingly complex fault scenarios in their production environments? 
Vitrage is an official OpenStack Root Cause Analysis service, designed to organize, visualize and analyze faults in your Cloud. 
In this hands-on lab, our core developers will present an overview of what Vitrage is all about and will guide you through the process of installing, configuring and experimenting with Vitrage on your own laptop. By the end of this session, you will know how to personalize Vitrage for your own system structure and needs; Enough to "make it your own". 
 

Muhamad

After the great success of Vitrage hands-on labs that were executed in the Openstack Barcelona and Boston summits, here comes the new lab!
Are you a cloud admin managing a large deployment, struggling with fault management in your system? Are you an OpenStack distro vendor seeking to help your customers deal with increasingly complex fault scenarios in their production environments? 
Vitrage is an official OpenStack Root Cause Analysis service, designed to organize, visualize and analyze faults in your Cloud. 
In this hands-on lab, our core developers will present an overview of what Vitrage is all about and will guide you through the process of installing, configuring and experimenting with Vitrage on your own laptop. By the end of this session, you will know how to personalize Vitrage for your own system structure and needs; Enough to "make it your own". 
 

Demystifying - deploying an Red Hat OSP Cloud with Dell EMC

Perryman

What is the network scheme? What network hardware and features are needed? What Server platform to use? Which Software components to deploy? What is the storage needed? The Dell EMC Ready Bundle for Red Hat OpenStack Platform, marries the innovation of Red Hat OpenStack Platform and Dell EMC PowerEdge Servers and Networking with a fast automated deployment, highly reliable operations, and simplified management.   During the session, Dell EMC and Red Hat will present to you what questions have been asked, what questions still have to be answered, and a Demo of deployment will done. 

Encryption Workshop: Using Encryption to Secure Your Cloud

McCowan

Encryption technology can be used in OpenStack to protect the confidentiality and integrity of data and software.  There are services built in to Nova, Cinder, Glance, and Barbican to work together to protect your cloud and its users.This workshop provides a hands-on tour through encryption use in OpenStack, led by core members of the Barbican project.During the class you'll be led through hands-on exercises to configure and operate an OpenStack deployment to encrypt data, store and retrieve encryption keys, and perform software signing and validation.Bring your laptop!  At the begining of this workshop, attendees will each be given SSH access to a VM with OpenStack software arleady installed.  After discussing the architecture and technology,  we'll hit the ground running with configuration and operation steps to get hands on experience encrypting Nova and Cinder volumes, verifying Glance images, and storing encryption keys in Barbican.

Encryption Workshop: Using Encryption to Secure Your Cloud

Encryption technology can be used in OpenStack to protect the confidentiality and integrity of data and software.  There are services built in to Nova, Cinder, Glance, and Barbican to work together to protect your cloud and its users.This workshop provides a hands-on tour through encryption use in OpenStack, led by core members of the Barbican project.During the class you'll be led through hands-on exercises to configure and operate an OpenStack deployment to encrypt data, store and retrieve encryption keys, and perform software signing and validation.Bring your laptop!  At the begining of this workshop, attendees will each be given SSH access to a VM with OpenStack software arleady installed.  After discussing the architecture and technology,  we'll hit the ground running with configuration and operation steps to get hands on experience encrypting Nova and Cinder volumes, verifying Glance images, and storing encryption keys in Barbican.

McCollum

byron.mccollum@rackspace.com

Images are almost always taken for granted. With most mainstream distros providing ready-to-go downloadable images for use, why build your own images from scratch?

What about your favorite obscure-artisanal-hipster distro?
What about your hyper-opiniated base configs?
What about your tinfoil-hat alarms going off at the thought of using someone else's image?

Sooner or later, you will probably need to build your own images. So what really goes into building images from scratch that seamlessly work with OpenStack?

Images are almost always taken for granted. With most mainstream distros providing ready-to-go downloadable images for use, why build your own images from scratch?

What about your favorite obscure-artisanal-hipster distro?
What about your hyper-opiniated base configs?
What about your tinfoil-hat alarms going off at the thought of using someone else's image?

Sooner or later, you will probably need to build your own images. So what really goes into building images from scratch that seamlessly work with OpenStack?

DeRosa-Grund

tyler.derosa-grund@rackspace.com

Images are almost always taken for granted. With most mainstream distros providing ready-to-go downloadable images for use, why build your own images from scratch?

What about your favorite obscure-artisanal-hipster distro?
What about your hyper-opiniated base configs?
What about your tinfoil-hat alarms going off at the thought of using someone else's image?

Sooner or later, you will probably need to build your own images. So what really goes into building images from scratch that seamlessly work with OpenStack?

How to build secure-connectivity while bridging public and private clouds ?

You want agility, flexibility, and security for your cloud irrespective of where the workloads are hosted private or public, container or virtual machine or baremetal
That means utilizing all the cloud environments in your disposal to run applications, designing your IT at ANY SCALE while securing your network end-to-end.   
 
With this secure elastic cloud, your workloads move between private and public clouds dynamically while utilizing the best compute vehicle available to run a particular workload, requiring Cloud Connect technology to connect any compute environments anywhere. 
 
In this session, you will learn about
1: Secure: Tenant isolation & protect workloads
2: Hybrid Cloud: Build your IT as service at any scale  
3: Freedom of Choice: Run applications on different compute environments.

In this session, attendees will learn how to troubleshoot an OpenStack cloud environment.  Content will focus on the core OpenStack services: Glance, Cinder, Nova, Neutron, Swift, and Keystone.  Five major areas of troubleshooting will be covered.
 
1)            Enabling debug and use the CLI commands to trace API requests.
2)            Using external tools such as ip netns, nc, wget, curl, strace, and tcpdump.
3)            Examining the different databases used by the OpenStack core services.
4)            Navigating the multitude of log files related to a given OpenStack operation.
5)            Discussing ways to become more proficient with troubleshooting an OpenStack cloud.

In this session, attendees will learn how to troubleshoot an OpenStack cloud environment.  Content will focus on the core OpenStack services: Glance, Cinder, Nova, Neutron, Swift, and Keystone.  Five major areas of troubleshooting will be covered.
 
1)            Enabling debug and use the CLI commands to trace API requests.
2)            Using external tools such as ip netns, nc, wget, curl, strace, and tcpdump.
3)            Examining the different databases used by the OpenStack core services.
4)            Navigating the multitude of log files related to a given OpenStack operation.
5)            Discussing ways to become more proficient with troubleshooting an OpenStack cloud.

Villarreal Pelegrino

As OpenStack popularity and complexity continue to rise and new feature sets are introduced regularly, findings ways to simplify and produce consistent results is always at the forefront of any system administrator’s mind. With the use of Ansible, an agentless IT automation technology, a system administrator can do just that.
The goal of this lab is to provide a brief introduction to Ansible, the usability of Ansible playbooks, and then show how to leverage key Ansible modules to better manage and simplify OpenStack environments. These management playbooks will consist of typical administrative tasks such as:

Managing Networks
Managing Instances
Managing Resources

This lab is best suited for system and OpenStack administrators looking for ways to automate their day-to-day OpenStack administrative tasks
Lab Requirements:
- A laptop with an SSH client and a modern web browser.

As OpenStack popularity and complexity continue to rise and new feature sets are introduced regularly, findings ways to simplify and produce consistent results is always at the forefront of any system administrator’s mind. With the use of Ansible, an agentless IT automation technology, a system administrator can do just that.
The goal of this lab is to provide a brief introduction to Ansible, the usability of Ansible playbooks, and then show how to leverage key Ansible modules to better manage and simplify OpenStack environments. These management playbooks will consist of typical administrative tasks such as:

Managing Networks
Managing Instances
Managing Resources

This lab is best suited for system and OpenStack administrators looking for ways to automate their day-to-day OpenStack administrative tasks
Lab Requirements:
- A laptop with an SSH client and a modern web browser.

Running OpenStack in production is not an easy task. Thankfully most OpenStack components share common principles and logic.  This workshop will share basic troubleshooting steps applicable to majority of OpenStack components, as well as tips and tricks learned while running OpenStack in production and in the labs.

Running OpenStack in production is not an easy task. Thankfully most OpenStack components share common principles and logic.  This workshop will share basic troubleshooting steps applicable to majority of OpenStack components, as well as tips and tricks learned while running OpenStack in production and in the labs.

Toktonaliev

Running OpenStack in production is not an easy task. Thankfully most OpenStack components share common principles and logic.  This workshop will share basic troubleshooting steps applicable to majority of OpenStack components, as well as tips and tricks learned while running OpenStack in production and in the labs.

Practical OpenStack Security with OpenStack-Ansible and ansible-hardening

hastexo Professional Services GmbH, City Network Hosting AB

You run OpenStack and want to ensure a reliable, auditable security baseline for your entire OpenStack infrastructure? Enter OpenStack-Ansible and ansible-hardening.
In this workshop, we'll introduce you to the basics of system hardening in accordance with the Security Technical Implementation Guide (STIG) from the Defense Information Systems Agency (DISA), part of the United States Department of Defense. The guide is released with a public domain license and it is commonly used to secure systems at public and private organizations around the world. We will then show you how exactly the ansible-hardening role allows you to easily implement the hardening guidelines laid out in this guide, and how you can use it in the context of OpenStack-Ansible managed OpenStack clusters.
 
This is an entirely hands-on workshop, with every attendee having the opportunity of applying presented material in a provided OpenStack cloud of their own.

Practical OpenStack Security with OpenStack-Ansible and ansible-hardening

You run OpenStack and want to ensure a reliable, auditable security baseline for your entire OpenStack infrastructure? Enter OpenStack-Ansible and ansible-hardening.
In this workshop, we'll introduce you to the basics of system hardening in accordance with the Security Technical Implementation Guide (STIG) from the Defense Information Systems Agency (DISA), part of the United States Department of Defense. The guide is released with a public domain license and it is commonly used to secure systems at public and private organizations around the world. We will then show you how exactly the ansible-hardening role allows you to easily implement the hardening guidelines laid out in this guide, and how you can use it in the context of OpenStack-Ansible managed OpenStack clusters.
 
This is an entirely hands-on workshop, with every attendee having the opportunity of applying presented material in a provided OpenStack cloud of their own.

 
Securing web applications in a virtualized cloud environment has historically been difficult to implement requiring tricky networking and hypervisor integration. Advancements in software-defined networking (SDN) now allow network security functions to be virtualized within virtual layer 2 (media link) network. Through the use of SDN defined service function chains, policies can quickly and easily be implemented requiring traffic to flow through network security functions securing applications.
This will be a dive into using the network-sfc, service function chaining, project available for Neutron, to implement security policies. This plugin allows advanced command line options to build layer 2 network service chains to implement network policy.
Attendees will be provided with an OpenStack cloud to secure a virtualized web application utilizing security function chains and network function virtualization. This lab is based on open-source software.
 

 
Securing web applications in a virtualized cloud environment has historically been difficult to implement requiring tricky networking and hypervisor integration. Advancements in software-defined networking (SDN) now allow network security functions to be virtualized within virtual layer 2 (media link) network. Through the use of SDN defined service function chains, policies can quickly and easily be implemented requiring traffic to flow through network security functions securing applications.
This will be a dive into using the network-sfc, service function chaining, project available for Neutron, to implement security policies. This plugin allows advanced command line options to build layer 2 network service chains to implement network policy.
Attendees will be provided with an OpenStack cloud to secure a virtualized web application utilizing security function chains and network function virtualization. This lab is based on open-source software.
 

The Ceph Power Show - Hands-on Lab with Ceph :: Episode 3

Join our Openstack and Ceph architects for this guided hands-on lab where you will learn how to do storage for OpenStack. The Lab is designed to be interactive & hands-on at the same time where every participant will get a 8-Node lab environment to try-out OpenStack and Ceph using the following Modules.
 
Module 1: Introduction to OpenStack Storage and Ceph
Module 2: Setting up a Ceph cluster & Openstack environments
Module 3: OpenStack Instance and Image Storage with Ceph
Module 4: OpenStack Block Storage with Ceph
Module 5: OpenStack File Storage with Ceph
Module 6: OpenStack Object Storage with Ceph
Module 7: Day-2 operations in a Ceph cluster
Lab modules are designed for an adaptable pace and to allow free-form work in a sizable lab hosted in the clouds. Attendees need to bring their own laptops with SSH client and a browser installed. Recommended proficiency is from beginner to intermediate.

The Ceph Power Show - Hands-on Lab with Ceph :: Episode 3

karan.singh731987@gmail.com

Join our Openstack and Ceph architects for this guided hands-on lab where you will learn how to do storage for OpenStack. The Lab is designed to be interactive & hands-on at the same time where every participant will get a 8-Node lab environment to try-out OpenStack and Ceph using the following Modules.
 
Module 1: Introduction to OpenStack Storage and Ceph
Module 2: Setting up a Ceph cluster & Openstack environments
Module 3: OpenStack Instance and Image Storage with Ceph
Module 4: OpenStack Block Storage with Ceph
Module 5: OpenStack File Storage with Ceph
Module 6: OpenStack Object Storage with Ceph
Module 7: Day-2 operations in a Ceph cluster
Lab modules are designed for an adaptable pace and to allow free-form work in a sizable lab hosted in the clouds. Attendees need to bring their own laptops with SSH client and a browser installed. Recommended proficiency is from beginner to intermediate.

The Ceph Power Show - Hands-on Lab with Ceph :: Episode 3

Join our Openstack and Ceph architects for this guided hands-on lab where you will learn how to do storage for OpenStack. The Lab is designed to be interactive & hands-on at the same time where every participant will get a 8-Node lab environment to try-out OpenStack and Ceph using the following Modules.
 
Module 1: Introduction to OpenStack Storage and Ceph
Module 2: Setting up a Ceph cluster & Openstack environments
Module 3: OpenStack Instance and Image Storage with Ceph
Module 4: OpenStack Block Storage with Ceph
Module 5: OpenStack File Storage with Ceph
Module 6: OpenStack Object Storage with Ceph
Module 7: Day-2 operations in a Ceph cluster
Lab modules are designed for an adaptable pace and to allow free-form work in a sizable lab hosted in the clouds. Attendees need to bring their own laptops with SSH client and a browser installed. Recommended proficiency is from beginner to intermediate.

SDN Contrail Automation using Shaker framework on the AT&T Integrated Cloud (AIC)

Testing of artifacts like VMs, networks & volumes within a distributed data plane. Shaker scenarios specify the deployment and list of tests to execute. Additionally tests may be tuned dynamically in command-line.
Participants will get to develop and execute test automation in the following areas:
* User-defined topology via Heat templates
* Simultaneously test execution on multiple instances
* Pluggable tools, Dynamic command line execution
Scenario tests executed for measuring bandwidth between pairs of instances deployed in different virtual networks, L3 East-West & North-South. Service chaining, QoS, VLAN trunking, Spot scenarios are executed between the local machine (where shaker runs) and the remote, with TCP/UDP/ICMP bandwidth & latency tests to the destination host.  Share the experiences or short comings of Shaker & enhancements done to containerize the deployment as CICD quality gate. All with no shortage of seeing and writing code!

SDN Contrail Automation using Shaker framework on the AT&T Integrated Cloud (AIC)

Testing of artifacts like VMs, networks & volumes within a distributed data plane. Shaker scenarios specify the deployment and list of tests to execute. Additionally tests may be tuned dynamically in command-line.
Participants will get to develop and execute test automation in the following areas:
* User-defined topology via Heat templates
* Simultaneously test execution on multiple instances
* Pluggable tools, Dynamic command line execution
Scenario tests executed for measuring bandwidth between pairs of instances deployed in different virtual networks, L3 East-West & North-South. Service chaining, QoS, VLAN trunking, Spot scenarios are executed between the local machine (where shaker runs) and the remote, with TCP/UDP/ICMP bandwidth & latency tests to the destination host.  Share the experiences or short comings of Shaker & enhancements done to containerize the deployment as CICD quality gate. All with no shortage of seeing and writing code!

SDN Contrail Automation using Shaker framework on the AT&T Integrated Cloud (AIC)

Testing of artifacts like VMs, networks & volumes within a distributed data plane. Shaker scenarios specify the deployment and list of tests to execute. Additionally tests may be tuned dynamically in command-line.
Participants will get to develop and execute test automation in the following areas:
* User-defined topology via Heat templates
* Simultaneously test execution on multiple instances
* Pluggable tools, Dynamic command line execution
Scenario tests executed for measuring bandwidth between pairs of instances deployed in different virtual networks, L3 East-West & North-South. Service chaining, QoS, VLAN trunking, Spot scenarios are executed between the local machine (where shaker runs) and the remote, with TCP/UDP/ICMP bandwidth & latency tests to the destination host.  Share the experiences or short comings of Shaker & enhancements done to containerize the deployment as CICD quality gate. All with no shortage of seeing and writing code!

Walk Through of an automated Openstack deployment using TripleO coupled with OpenContrail - POC

Kumuthini

Ratnasingham

In this POC, learn about an automated installation of an OpenStack Cluster in matter of minutes without burning cycles in minuscule details. his simplified deployment enables the user to jumpstart with NFV workloads ( Network Function Virtualization ) within a short period of time. This automated package is composed of tripleO, OpenContrail Networking, Ceph Storage. We will share the mistakes we made and the lessons we learned along our path in automating this procedure.