OpenStack Security Analysis: Advantages and disadvantages of open source cloud software

I was asked to make a brief security analysis of the OpenStack Open source cloud computing platform, and briefly analyze whether our enterprise should pursue the open source cloud computing platform as the basis for cloud infrastructure construction. My initial assessment is that, like Apache and Linux, the openness of the platform allows us to quickly discover and fix security vulnerabilities, which can reduce the likelihood of overflow. Do you agree? Are there other OpenStack safety points (pros and cons) worth considering?

    OpenStack is a platform for the implementation of simple, feature-rich, and scalable infrastructure, the services cloud. Released in July 2010 by the hosting provider Rackspace Limited and NASA, it consists of a series of related projects that build the various components of the cloud infrastructure solution plan. With Apache 2.0 licenses, all codes are free to use, and hundreds of companies contribute to its development, including Cisco Systems, Citrix Systems, Dell, Intel, and Microsoft.

    Choosing open source cloud software means avoiding the potential dilemma of patented vendor technology lock-in, and OpenStack's typical design enables it to merge with traditional or third-party technologies. OpenStack also aims to set cloud computing standards, which are now missing. With standards, it becomes easier to have compatible tools and services that are applied in cloud vendors, simplifying the process of moving data and applications between clouds and clouds, especially from private clouds to the public cloud. Open-source Linux solves the problem of the emergence of UNIX features, which can provide the same benefits for large cloud computing.

    OpenStack has two related projects: OpenStack computing and OpenStack object storage. OpenStack Computing is the software that provides and manages large virtual private server groups. Use the Eventlet and twisted architectures to write it to Python and access the data store in accordance with the standards and sqlalchemy of the Advanced Message Queuing Protocol (AMQP). It blends code from NASA's Nebula Cloud platform and Rackspace's cloud document platform. Object storage is software that uses clustered servers to create redundant, scalable target storage to store large amounts of data. If you choose OpenStack, you will run the same software that NASA uses and the cloud services provided by HP and Rackspace, and other suppliers are starting to offer OpenStack, such as piston cloud computing.

    Although OpenStack wants toEnabling enterprise organizations to deploy private clouds and public clouds running on large-scale standard hardware becomes possible, but this requires qualified technical operations teams that have the ability to turn physical hardware into large cloud deployments. This is not an ordinary business to consider the factor.

    When it comes to security issues, there are generally good track records for open source projects, but they also have vulnerabilities and vulnerabilities, and OpenStack is still emerging. One can choose to replace the Eucalyptus architecture, which executes Amazon's EC2 cloud-computing API stack, which enables cluster servers to emulate what is done inside Amazon, but in a private cloud. Eucalyptus came out longer than OpenStack, but not entirely open source. This may be one of the reasons the Ubuntu community has decided to support OpenStack for future releases of Ubuntu servers.

     as to whether OpenStack or eucalyptus will succeed and live on, no one can say well, but now it seems that OpenStack is gaining momentum.
 

(editor: Heritage)