Book Image

OpenStack Cloud Security

By : Fabio Alessandro Locati
Book Image

OpenStack Cloud Security

By: Fabio Alessandro Locati

Overview of this book

Table of Contents (14 chapters)
OpenStack Cloud Security
Credits
About the Author
About the Reviewers
www.PacktPub.com
Preface
Index

Baremetal


OpenStack Nova also uses real servers as if they were virtualized guest machines. Users can be given real server and virtual machines as guest machines in a transparent manner. This allows you to use real machines for some tasks you already know will be heavy loaded and could have an impact the performance of your cluster.

Until the Icehouse release, it was possible to use baremetal machine by using the Nova-Baremetal backend, but since the Juno release, the current right way is by using OpenStack Ironic.

This option can even be considered for security reasons, since if you use Ironic (or Nova-Baremetal) you'll end up having a single virtual machine on the physical server. This means that this server will not share computing resources (RAM, CPU, and so on) with other virtual machines, preventing any consequence of a possible hypervisor breakout.

Tip

For machines that require a special level of security, using a baremetal hypervisor (Nova-Baremetal or OpenStack Ironic) could be a good...