Ideal for teams that…
Cloud, automation and CI/CD in practice — hands-on for engineering teams.
Gain an in-depth understanding of OpenStack architecture.
Learn to manage virtual resources such as VMs and storage volumes.
Build virtual networks with routers and secure access to resources.
Understand how virtualization of compute and networking is implemented at the OS level.
Learn cloud monitoring principles and troubleshooting techniques.
Secure cloud environments and infrastructure against unauthorized access.
What we actually do
- · History of the cloud and OpenStack
- · Cloud features
- · Cloud models: private, public, hybrid; on-premise, IaaS, PaaS, SaaS
- · Public and private cloud deployments based on OpenStack
- · Open source and commercial OpenStack distributions
- · OpenStack deployment models
- · Modules
- · Underlying tools
- · Integrations
- · OpenStack lifecycle
- · OpenStack certification
- · OpenStack lab (VM) for this course
- · OpenStack components: Keystone, Glance, Nova, Neutron, Cinder, Swift, Heat
- · Interaction with the OpenStack cloud
- · OpenStack daemons and API communication flow
- · Keystone architecture
- · Authentication and available backends
- · Token types and token management
- · Authorization in OpenStack – roles and oslo.policy
- · Keystone resources: domains, projects, users
- · openrc and clouds.yaml – CLI client configuration
- · OpenStack service catalog
- · Adding new OpenStack service
- · Quota system in OpenStack
- · Images adjusted to the cloud
- · Image features: properties, metadata, format, container
- · Uploading and downloading images
- · Sharing images
- · Glance image stores
- · Protected images
- · Managing quotas for the image service
- · Verification of Glance services
- · Architecture and Neutron services
- · The ML2 plugin
- · Networking in the compute node – analysis
- · Networking concepts and tools used by Neutron
- · Basic Neutron network resource types
- · Managing tenant networks and subnets
- · Managing security groups and rules
- · East-West routing
- · Network namespaces
- · Managing external/provider networks
- · North-South routing
- · Floating IP management
- · Network quotas
- · Basic network troubleshooting (namespaces, tcpdump, etc.)
- · Verification of Neutron services
- · Interfaces to hypervisors
- · Keypair management
- · Flavour management
- · Flavors and CPU topology
- · Instance parameters
- · Creating and managing instances
- · Verification of spawned instances
- · Snapshotting
- · Resizing instances
- · Assigning floating IPs
- · Interactive console and console logs
- · Security groups assignment
- · Internals of security groups and port security (iptables)
- · Internals of L3 routers
- · Compute quotas
- · Statistics from Nova
- · Placement API and Nova Cells v2
- · Instance scheduling with Placement API
- · Verification of Nova services
- · Volume parameters
- · Creating and managing volumes
- · Attaching volumes to Nova instances
- · Managing snapshots and backups
- · Transferring volumes between projects
- · Restoring backups
- · Volume quotas
- · QoS in Cinder
- · LVM, storage array, and Ceph backends
- · Ceph integration with Cinder
- · Good practices for Ceph deployments
- · Verification of Cinder services
- · Barbican architecture
- · Storing passphrases and encryption keys
- · Volume encryption mechanisms and limitations
- · Configuring encrypted Cinder volumes
- · Storing X.509 certificate bundles
- · Swift components and processes
- · Managing containers and objects
- · Access control lists (ACLs)
- · Object expiration
- · The Ring and storage policies
- · Monitoring storage capacity
- · Quotas
- · Verification of Swift services
- · Heat Orchestration Templates (HOT)
- · Creating and updating stacks
- · Verification of Heat stacks and services
- · Architecture and request flow
- · Flavors and availability zones
- · HTTP, TCP, and HTTPS passthrough load balancers
- · Listeners, pools, and health monitors
- · Layer 7 load balancing
- · Amphora image creation
- · Failover, networking, and monitoring
- · Troubleshooting Octavia
- · Analyzing logs and centralized logging
- · Debugging OpenStack client queries
- · Database management and backups
- · Analyzing compute and instance status
- · RabbitMQ diagnostics
- · Metadata services
- · Network and performance troubleshooting
- · Instance backup and recovery
- · Hardware considerations and capacity planning
- · HA control plane and message queue
- · Cloud partitioning and Nova scheduler filters
- · Cold and live migrations, Watcher project
- · Advanced SDN networking (Linux Bridge, OVS, DVR, VPNaaS)
- · Monitoring and telemetry (Ceilometer, external tools)
- · Advanced hypervisor features: CPU pinning, NUMA, SR-IOV
- · Cloud-init and image customization
- · Upgrade strategies and zero-downtime upgrades
- · Bare-metal provisioning with Ironic
- · Undercloud and overcloud concepts
- · Future of OpenStack
From brief to retro in 30 days.
Brief & diagnosis
A call with the team lead + a short survey for participants. We define goals, gap and context.
Program customization
We adapt modules, case studies and code examples to your stack. Approval in 5 days.
Workshop
Trainer-led sessions, hands-on, code review. Mentor available between sessions too.
Retro + report
Outcome report for the team and lead. 30 days of consulting included.
Send a brief. We'll reply within 1 day.
After a short brief we'll prepare a program and a quote. No obligations — it's just a starting point.
Thank you!
We'll get back to you within 1 business day.
Other programs for teams
See all →Advanced Ansible Training
Cloud, automation and CI/CD in practice — hands-on for engineering teams.
Advanced Linux System Administration Training
Cloud, automation and CI/CD in practice — hands-on for engineering teams.
Ansible Basic Training
Cloud, automation and CI/CD in practice — hands-on for engineering teams.