What's New In Apache CloudStack 4.17
0 likes1,146 views
The document provides an overview of the latest Apache CloudStack 4.17 release, highlighting features such as zero downtime upgrades, IPv6 support, a storpool storage plugin, and enhancements for network self-service. Significant improvements include multi-account network access, the ability to reserve public IPs, and structural event tracking for better traceability. The release also parallels increased support for Ubuntu 22.04 and introduces several new service offerings for improved user management and system performance.
What's New In Apache CloudStack 4.17
- 1. Agenda (1/2) • Last Releases Information • VR Zero Downtime upgrades and Live Patching • IPv6 support for Isolated and VPC Networks • StorPool Storage Plugin • Self-service Network Improvements • Multi-account Network Access • Multiple SSH Keys 1
- 2. Agenda (2/2) • Structured System Events • Instance and Volumes migration improvements • More flexible service offerings • Server Status Report • KVM multiple local storage • Reserve and release Public Ips • Support for Ubuntu 22.04 (4.17.1.0) 2
- 3. 3 About Me • Senior Software Engineer at ShapeBlue • Apache CloudStack Committer & PMC member • Dad, husband, tennis and football (soccer) fan
- 4. Last Releases Information • 4.17.0.0 Released 7 June 2022 • 383 new features, improvements and bug fixes • 16 major new features • 4.17 is an LTS release • EOL. Jan 2024 • 4.17.0.1 (and 4.16.1.1) Released 18 July 2022 (CVE*) • 4.17.1.0 Released 27 September 2022
- 5. Zero Downtime Upgrades & VR Patching 5 “Upgrading CloudStack is fast and reliable ……….except the Virtual Routers”
- 6. Zero Downtime Upgrades & VR Patching 6 • Router upgrades prior to 4.17 vs 4.17 and onwards:
- 7. • No VR shutdown when CloudStack is upgraded • VR Live patching instead of destroy/create and reboot during VR configuration • Zero downtime when updating the VR • No TCP packets lost • Services restarted in ms • No more long maintenance windows 7 Zero Downtime Upgrades & VR Patching
- 8. • haproxy, apache2, dnsmasq Services will need to be re-started • Restart <1s • Network reprogramming may be affected by complexity of network (i.e number load balancers, firewall rules,etc on VR) 8 Zero Downtime Upgrades & VR Patching ACS Version Upgrade Version Live PatchingSupport Reason / Comment <= 4.13 4.17+ No Update in the openJDK version 4.14 4.17+ Yes May notice some issue with remote access VPN due to older Strongswan version >= 4.15 4.17+ Yes N/A
- 9. 9 Zero Downtime Upgrades & VR Patching
- 10. • Zero downtime upgrade demo! • ACS 4.14 -> ACS 4.17 • Vmware environment, 1 zone, 1 pod, 2 hosts • System VMs live patching (CPVM -> update to noVNC) • VPC router and internal load balancer routing • Zero Downtime during the upgrade 10 Zero Downtime Upgrades & VR Patching
- 11. 11 IPv6 support for Isolated and VPC Networks • CloudStack Isolated and VPC Network now support IPv6 • The IPv6 addresses are configured directly in the VM NIC • Dual stack is supported but IPv4 continue using NAT • Supports only firewall configuration in this phase • Uses static route in the VR to enable IPv6 traffic to the internet
- 12. 12 IPv6 support for Isolated and VPC Networks
- 13. 13 IPv6 support for Isolated and VPC Networks • Root admin register a /64 or bigger IPv6 prefix/range • Users can assign a /64 IPv6 prefix/range creating isolated network or VPC tier • SLAAC is supported and used, there is no DHCPv6 support • All systemvms (ssvm, cpvm, VRs etc) with a public NIC should get automatic/SLAAC IPv6 address if zone has ipv6 /64 prefix dedicated/allocated.
- 14. 14 IPv6 support for Isolated and VPC Networks
- 15. 15 IPv6 support for Isolated and VPC Networks • To come in future releases • Dynamic routing using BGP & OSPF • Support for further services (LB, port redirect, etc)
- 16. 16 Storpool Storage Plugin • StorPool Plugin for Apache CloudStack • CloudStack can directly manage storage pools • Provides block devices as raw disk images for KVM hosts • Enable a range of VM operations for volumes and snapshots • Supported Hypervisor: KVM
- 17. 17 Storpool Storage Plugin • This integration enables users to operate natively StorPool storage for KVM hosts • Enables operations like cloned provisioning, instant snapshots, thin provisioning, backup/DR and QoS policies per virtual disk and/or per Instance
- 18. 18 Self-Service Network Improvements • Enable regular users to create Shared Networks and Private Gateways • Remove the need to ask to admin to create these resources • Also, users can associate existing Isolated, VPC tier or L2 Networksas Shared Network or VPC Private Gateway • The Shared Network Offering must be set to specifyvlan=false to enable users to create Shared Network without specified VLAN
- 19. 19 Self-Service Network Improvements • Admin creates network offering: specifyvlan=false: • Users can create shared networks
- 20. 20 Multi-account Network Access • This new feature enables users to share their own Networkswith Accountswhen in the same Domain • Reduces the application overhead when accessing resourcesfrom an application hosted in different AccountNetworks, reducing the number of hops • Note: administration of the network can only be performed by the original Account.
- 21. 21 Multi-account Network Access • Network detail view includes the Network Permission tab: • Share the network with other accounts:
- 22. 22 Multiple SSH-keys • Enable users to add multiple SSH Keys for Instances • No need to edit ~/.ssh/Authorized_keysto include new users • Simplifies security management when managing users access to the Virtual Machines • The Create Instance wizard allows selecting multiple SSH keys:
- 23. 23 Structures System Events • Simplify the traceability and auditability of user operations • Allows events to be searched, sorted and filtered • Events specific to each object in UI • Easy to navigate from the event to the related object • Accessible through the API, being able to integrate with 3rd party systems. • Event descriptions maintained for backwards compatibility
- 25. 25 More flexible service offerings • Before 4.17, ROOT Volumes and Disk Offerings were decoupled • Redefines the relationship between the Service Offerings used for Instance Root Disks • Enables users to change the Root Volume characteristics based on Disk Offering • The existing model is still fully supported if required • Increases the Service Providers offerings, considering that in most cases, users only use the ROOT Volume in their Instances.
- 26. 26 More flexible service offerings
- 27. 27 Reserve and release Public IPs • Users can now reserve Public IPs • The reserved Public IP is locked for the user to be used later in their networks • Allows users to register the IP on the DNS server even before they are allocated to a network
- 28. 28 Reserve and release Public IPs • New Public IP state:Reserved:
- 29. 29 Reserve and release Public IPs • To reserve a Public IP, select a Free IP and click Reserve: • Can reserve to: Accountor Project
- 30. 30 Reserve and release Public IPs • When acquiring a new IP, the reserved IPs are displayed:
- 31. 31 Server Status Report • Gives admins the ability to see the status/health • Management Servers • Usage Server • DatabaseServer • Available in the UI and API for integration/monitoring purposes
- 32. 32 Server Status Report • Infrastructure -> Management Servers:
- 33. 33 Server Status Report • Infrastructure -> DB/Usage server:
- 34. 34 Other new features • Multiple local storage for KVM hosts • Improvements to Instance and volume migration • Support for Ubuntu 22.04 on management server and KVM hosts (since 4.17.1.0)
- 35. 35 Resources • Download CloudStack 4.17: https://cloudstack.apache.org/downloads.html • Documentation: https://docs.cloudstack.apache.org/en/4.17.1.0/ • What’s New Blog: https://blogs.apache.org/cloudstack/entry/what-s-new-in-apache1 • Mailing lists: https://cloudstack.apache.org/mailing-lists.html