Implementation and use of a highly available and innovative IaaS solution: the Cloud Area Padovana

21st International Conference on Computing in High Energy and Nuclear Physics

物理学;计算机科学

Aiftimiei, C.^1,4 ; Andreetto, P.^2 ; Bertocco, S.^2 ; Biasotto, M.^3 ; Dal Pra, S.^1 ; Costa, F.^2 ; Crescente, A.^2 ; Dorigo, A.^2 ; Fantinel, S.^3 ; Fanzago, F.^2 ; Frizziero, E.^2 ; Gulmini, M.^3 ; Michelotto, M.^2 ; Sgaravatto, M.^2 ; Traldi, S.^2 ; Venaruzzo, M.^3 ; Verlato, M.^2 ; Zangrando, L.^2

INFN CNAF, Viale Berti Pichat 6/2, Bologna

I-40127, Italy^1

INFN, Sezione di Padova, Via Marzolo 8, Padova

I-35131, Italy^2

INFN, Lab. Naz. di Legnaro, Via Romea 4, Legnaro

35020, Italy^3

IFIN-HH, Str. Reactorului 30, Magurele, Romania^4

关键词: Authorization management;    Cloud services;    High availability;    National laboratory;    Open source adoptions;    Pluggable schedulers;    Queuing mechanism;    Standard architecture;   

Others  :  https://iopscience.iop.org/article/10.1088/1742-6596/664/2/022016/pdf
DOI  :  10.1088/1742-6596/664/2/022016

学科分类：计算机科学（综合）

来源: IOP

【 摘 要 】

While in the business world the cloud paradigm is typically implemented purchasing resources and services from third party providers (e.g. Amazon), in the scientific environment there's usually the need of on-premises IaaS infrastructures which allow efficient usage of the hardware distributed among (and owned by) different scientific administrative domains. In addition, the requirement of open source adoption has led to the choice of products like OpenStack by many organizations. We describe a use case of the Italian National Institute for Nuclear Physics (INFN) which resulted in the implementation of a unique cloud service, called 'Cloud Area Padovana', which encompasses resources spread over two different sites: the INFN Legnaro National Laboratories and the INFN Padova division. We describe how this IaaS has been implemented, which technologies have been adopted and how services have been configured in high-availability (HA) mode. We also discuss how identity and authorization management were implemented, adopting a widely accepted standard architecture based on SAML2 and OpenID: by leveraging the versatility of those standards the integration with authentication federations like IDEM was implemented. We also discuss some other innovative developments, such as a pluggable scheduler, implemented as an extension of the native OpenStack scheduler, which allows the allocation of resources according to a fair-share based model and which provides a persistent queuing mechanism for handling user requests that can not be immediately served. Tools, technologies, procedures used to install, configure, monitor, operate this cloud service are also discussed. Finally we present some examples that show how this IaaS infrastructure is being used.