Browse Library
Sign In Start Free Trial
Close icon Search icon
Account
Browse Library Sign In Start Free Trial

Add to playlist

Create a Playlist

Modal Close icon
You need to login to use this feature.
  • Book Overview & Buying OpenStack Cloud Security
  • Table Of Contents Toc
OpenStack Cloud Security

OpenStack Cloud Security

By : Fabio Alessandro Locati
3.7 (3)
Buy this Book
close
close
OpenStack Cloud Security

OpenStack Cloud Security

3.7 (3)
By: Fabio Alessandro Locati
Buy this Book

Overview of this book

If you are an OpenStack administrator or developer, or wish to build solutions to protect your OpenStack environment, then this book is for you. Experience of Linux administration and familiarity with different OpenStack components is assumed.
Table of Contents (9 chapters)
close
close
close
Preface
Icon
Preface
Icon
What this book covers
Icon
What you need for this book
Icon
Who this book is for
Icon
Conventions
Icon
Reader feedback
Icon
Customer support
Lock Free Chapter
1
1. First Things First – Creating a Safe Environment
Icon
1. First Things First – Creating a Safe Environment
Icon
Access control
Icon
The CIA model
Icon
The principles of security
Icon
Data center security
Icon
Server security
Icon
The importance of logs
Icon
The people aspect of security
Icon
Summary
2
2. OpenStack Security Challenges
Icon
2. OpenStack Security Challenges
Icon
Private cloud versus public cloud security
Icon
The different kinds of security threats
Icon
The possible attacks
Icon
The OpenStack structure
Icon
Future components
Icon
Summary
3
3. Securing OpenStack Networking
Icon
3. Securing OpenStack Networking
Icon
The Open Systems Interconnection model
Icon
TCP/IP
Icon
Architecting secure networks
Icon
Generic Routing Encapsulation (GRE)
Icon
Flat network versus VLAN versus GRE in OpenStack Quantum
Icon
Design a secure network for your OpenStack deployment
Icon
Virtual Private Network as a Service (VPNaaS)
Icon
Summary
4
4. Securing OpenStack Communications and Its API
Icon
4. Securing OpenStack Communications and Its API
Icon
Encryption security
Icon
Symmetric encryption
Icon
Asymmetric encryption
Icon
Symmetric/asymmetric comparison and synergies
Icon
Hashing
Icon
Public key infrastructure
Icon
Cipher security
Icon
Designing a redundant environment for your APIs
Icon
Secure your OpenStack API with TLS
Icon
Enforcing HTTPS for future connections
Icon
Summary
5
5. Securing the OpenStack Identification and Authentication System and Its Dashboard
Icon
5. Securing the OpenStack Identification and Authentication System and Its Dashboard
Icon
Identification versus authentication versus authorization
Icon
Identification
Icon
Authentication
Icon
Authorization
Icon
Session management
Icon
Federated identity
Icon
Configuring OpenStack Keystone to use Apache HTTPd
Icon
Setting up Keystone as a Identity Provider
Icon
Configuring Shibboleth
Icon
Summary
6
6. Securing OpenStack Storage
chevron up
Icon
6. Securing OpenStack Storage
Icon
Different storage types
Icon
Backends
Icon
Security
Icon
Securing OpenStack Swift
Icon
Summary
7
7. Securing the Hypervisor
Icon
7. Securing the Hypervisor
Icon
Various types of virtualization
Icon
Hypervisors
Icon
Baremetal
Icon
Containers
Icon
Docker
Icon
Linux Containers
Icon
Criteria for choosing a hypervisor
Icon
Hardening the hardware management
Icon
sVirt – SELinux and virtualization
Icon
Hardening the host operative system
Icon
Summary
8
Index
Icon
Index

Backends

Backends are critical since these software are the real holders of your data. This means that if the backend you are using ends up having a major security flaw, chances are, you'll be afflicted. The main backends are as follows:

Backend

Block storage

File storage

Object storage

Ceph

Yes

Yes

Yes

GlusterFS

Yes

Yes

Yes

LVM

Yes

No

No

NFS

Yes

Yes

No

Sheepdog

Yes

No

Yes

Swift

No

No

Yes

ZFS

Yes

No

No

As you can see, several options can be used as backends. Let's look at each one of them more specifically.

Ceph

Ceph was created by Sage Weil (co-founder of DreamHost) in a doctoral dissertation in 2007. After completing his doctorate, he continued to work on Ceph, and few years later (2011), he approached Inktank Storage to provide commercial support for Ceph. In April 2014, Red Hat acquired Inktank Storage for $175 million.

Ceph is composed of an object store called Reliable, Autonomous, Distributed Object Store (RADOS), on which multiple components rely. Two...

CONTINUE READING
83
Tech Concepts
36
Programming languages
73
Tech Tools
Icon Unlimited access to the largest independent learning library in tech of over 8,000 expert-authored tech books and videos.
Icon Innovative learning tools, including AI book assistants, code context explainers, and text-to-speech.
Icon 50+ new titles added per month and exclusive early access to books as they are being written.
OpenStack Cloud Security
End of Section 6
Next Section
notes
bookmark Notes and Bookmarks search Search in title playlist Add to playlist font-size Font size

Change the font size

margin-width Margin width

Change margin width

day-mode Day/Sepia/Night Modes

Change background colour

Close icon Search
Country selected
Close icon Your notes and bookmarks

Confirmation

Modal Close icon
claim successful
Order Page Read Now

Buy this book with your credits?

Modal Close icon
Are you sure you want to buy this book with one of your credits?
Close
YES, BUY

Submit Your Feedback

Modal Close icon
Modal Close icon
Modal Close icon