AWS-Style Regions Functional Spec

Bug Reference

Branch

regions

https://git-wip-us.apache.org/repos/asf?p=incubator-cloudstack.git;a=shortlog;h=refs/heads/regions

Introduction

Purpose

The objective of this feature is to add AWS EC2 like Regions implementation into CloudStack. Regions are dispersed and located in separate geographic areas. Availability Zones(or Zones in CloudStack) are distinct locations within a Region that are engineered to be isolated from failures in other Zones and provide inexpensive, low latency network connectivity to other Zones in the same Region

Regions would provide the following benefits:

Higher availability of the services: users can deploy services across AZs and even if one of the AZ goes down the services are still available to the end-user through VMs deployed in other zones.
Higher availability of the MS: Since each MS Cluster only manages a single Region, if that MS Cluster goes down, only that particular Region is impacted. Admin should be able to access all the other Regions.
Scalability: The scalability limit of CloudStack dramatically improves, as the scalability limit of MS Cluster is limited to a single Region.
Object Store: With Regions construct, CloudStack would also allow users to define Object Store (Secondary Storage) across AZs. This helps users easily deploy VMs in different AZs using the same template, offerings.
Geographical Grouping: Regions allow admins to group AZs (that have low latency and are geographically located nearby) into a broader region construct.

References

Requirements Doc: Regions requirements

Feature Specifications

Introduce the notion of Regions, which will be managed independently by a separate management servers. With Regions, infrastructure will be organized as follows:

Region -> Zone -> Pod -> Cluster

Accounts

User Accounts will be available across Regions. User should be able to use the same account in all Regions. Switching between Regions should not require the user to sign-in again

Templates

CS Templates are currently zone specific. Templates should be available to all zones within a region. User should be able to migrate templates from one Region to another. This requires S3 like object store

Snapshots

Snapshots also should be available to all zones within a Region. CS currently stores snapshots in secondary storage. Snapshots should instead be stored in the object-store

S3 like Object-store/Integration

Current secondary storage is at zone level. S3 like is object-store or integration with other object-stores(like Hadoop) is required to move data across Regions. Each Region should have object store and the data within it should be available to all zones within the region. Utility to move data across Regions should be supported. Templates and Snapshots will be stored in this object store. Requirements for S3 based secondary storage. This is tracked in ticket CLOUDSTACK-714 separately

ELB

ELB will be elevated to Region level. Jira ticket CLOUDSTACK-653

EIP

EIP enhancements CLOUDSTACK-652

Authentication Service

An authentication service will available for components like object-store to authenticate and get account information using getUser API

Assumptions

Object Store: This feature assumes that S3 like object store is available. Either implemented in CloudStack or through integration.

Templates, Snapshots, EIP and ELP work is not part of this spec. There are being tracked separately as per JIRA tickets mentioned above.

Account Provisioning: Typically account provisioning is external to CloudStack. Adding accounts in all regions and keeping the data in sync is not handled by CloudStack. Only events are generated when changes are made.

Usage

Usage records will be generated by each Region separately. Portal layer above CS should combine usage across Regions into a consolidated invoice.

Use cases

(Using external provisioning system)

Create Account
1. Create Account in the external provisioning system with unique Id
2. Using CS API create account in all regions using the unique Id created in step1 as UUID. CreateAccount API takes UUID as an optional parameter. When UUID is provided, CloudStack does not generate a UUID and instead will use external ID.
3. External Id(UUID) for the Account should be same in all Regions. Account DB Ids could be different for each Region.
Update Account (update/disable/enable Account)
1. Update account in external provisioning system
2. Update account in all regions via API.
Delete Account
1. Delete account in external provisioning system
2. Delete account in all regions via API

Similarly for users and domains.

Architecture and Design description

Database

Each Region will have a separate database. Below data will be common to all databases across Regions:

Account
User
Domain

Remaining data is expected to be per-Region(including projects, global config, resource limits) and not shared across databases in other Regions.

New Tables

Table	Columns	Description
region	id name end_point	Integer - Unique Id of the Region. Number regions are expected to be small, hence using integer instead of long Name of the Region. Should be unique. Region end_point. e.g http://10.147.30.11:8080/client

Event framework

Events are published using the event framework.

Authentication

Once logged in User should be able to switch from one Region to another without providing credentials again

web services APIs

New APIs

addRegion

Registers a region into another region

Request Parameters:

id: (int) Region Id
name: (String) Name of the Region
endpoint: (String) Region end point. e.g. http://10.147.30.11:8080/client

Response Parameters:

id: Region Id
name: Name of the Region
endpoint: Region end point

updateRegion

Updates region details

Request Parameters:

id: (int)Region Id
name: (String)Name of the Region
endpoint: (String)Region end point. e.g. https://10.147.30.11:8080/client

Response Parameters:

id: Region Id
name: Name of the Region
endpoint: Region end point

removeRegion

Removes region from current region.

Request Parameters:

id: (int)id of the Region to be removed

Response Parameters:

Boolean success

listRegions

list all Regions. Can be filtered by id or name

Request Parameters:

id: list by Region Id
name: (String)list by Region Name

Response Parameters (List):

id: Region Id
name: Name of the Region
endpoint: Region end point

getUser

Admin only API. Get user details by api_key.

Request Parameters:

userapikey: (String)Get user details by API key

Changes to existing APIs

createAccount *# New parameters
1. *## accountid : UUID of the account
  1. userid: UUID for the User
createUser
- New parameter
  - UUID for the User.

createDomain
- New parameter
  - domainid: UUID for the Domain

Limitations

1. Account/User/Domain data propogation/sync has to be handled outside cloudstack

2. Only events will be generated by cloudstack

Upgrade

During upgrade, flexibility will be provided to move existing zones into any Region.

Upgrade scenarios:

Each zone becomes part of a separate Region: Copy existing DB to all Regions and disable all zones except one in each Region.
- Upgrade existing MS to 4.1. This MS will become region 1
- Disable all the zones in region 1
- Dump region 1 DB
  - mysqldump -u cloud -p -h <region1_db_host> cloud > region1.sql
- Install 4.1 MS in the remaining Regions
  - Set the region_id while installing the DB
  - cloud-setup-databases cloud:<dbpassword>@localhost --deploy-as=root:<password> -e <encryption_type> -m <management_server_key> -k <database_key> -r <region_id>
- Copy region 1 DB to other regions*** mysql -u cloud -p -h <region2_db_host> cloud < region1.sql
- Start all management servers. At this point all the zones are disabled
- Selectively enable zones in the required regions
All zones remain in the same Region: Nothing to do here.
Zones are divided among Regions: Copy existing DB to all regions and disabling the zones in all Regions other than the selected Region

Scripts

Offline scripts will be provided to move data across regions to ease

upgrade
add new region
remove region

UI flow

User/Admin should be able to view all Regions by logging into a MS of any of the Regions. User then should be able to select a specific Region to view details of that Region.
Users should be able to switch between various regions for UI using Single Sign-On.

Sample Workflow

Single Region

If an environment has only 1 region, functionality will be same as the current CS installation. Id of this region will be 1. All accounts/users/domains will have region_id as 1

Default local region will be added with name "Local" and end_point "http://localhost:8080/client". Use updateRegion API to set a different name or end_point for this region

Adding 2nd Region

1. Install a 2nd CS instance.

2. While installing database set region_id using -r option in cloud-setup-databases script (Make sure database_key is same across all regions).

cloud-setup-databases cloud:<dbpassword>@localhost --deploy-as=root:<password> -e <encryption_type> -m <management_server_key> -k <database_key> -r <region_id>

3. Start mgmt server

4. Using addRegion API, add region 1 to region 2 and also region 2 to region 1.

5. copy account/user/domain tables from Region1 DB to Region2 DB:

mysqldump -u cloud -p -h <region1_db_host> cloud account user domain > region1.sql
mysql -u cloud -p -h <region2_db_host> cloud < region1.sql

6. Remove project accounts after copying:

mysql> delete from account where type = 5;

7. Set default zone as null

mysql> update account set default_zone_id = null;

8. Restart mgmt servers in region 2

Adding 3rd and subsequent Regions

1. Install CS in all new regions

2. While installing database set region_id using -r option in cloud-setup-databases script (Make sure _database_key _is same across all regions).

cloud-setup-databases cloud:<dbpassword>@localhost --deploy-as=root:<password> -e <encryption_type> -m <management_server_key> -k <database_key> -r <region_id>

3. Start mgmt server

4. Using addRegion API, add existing regions to region n and also region n to all existing regions

5. copy account/user/domain tables from any existing Region DB to RegionN DB.

mysqldump -u cloud -p -h <region1_db_host> cloud account user domain > region1.sql
mysql -u cloud -p -h <regionN_db_host> cloud < region1.sql

6. Remove project accounts after copying:

mysql> delete from account where type = 5;

7. Set default zone as null

mysql> update account set default_zone_id = null;

8. Restart mgmt servers in region N

Remove Region

1. Remove region from all other regions using removeRegion API

Appendix

Appendix A:

Appendix B:

Space shortcuts

Child pages

AWS-Style Regions Functional Spec

Bug Reference

Branch

Introduction

Purpose

References

Feature Specifications

Accounts

Templates

Snapshots

S3 like Object-store/Integration

ELB

EIP

Authentication Service

Assumptions

Usage

Use cases

Architecture and Design description

Database

New Tables

Event framework

Authentication

web services APIs

New APIs

addRegion

updateRegion

removeRegion

listRegions

getUser

Changes to existing APIs

Limitations

Upgrade

Scripts

UI flow

Sample Workflow

Single Region

Adding 2nd Region

Adding 3rd and subsequent Regions

Remove Region

Appendix

6 Comments

Chandan Purushothama

Chandan Purushothama

Sangeetha Hariharan

Sangeetha Hariharan

Sangeetha Hariharan

Sangeetha Hariharan