Cloud services
Timeline
OpenStack as Private Cloud to offer IaaS and PaaS for unmanaged VMs
We finished our OpenStack setup by August 2026 and it is production since.
We provide unmanaged VMs for our users and we're running other platform services on top of it like Open OnDemand, Kubernetes, and more (see System Demo from PIP #9 I&A; IT-Services internal only).
In April 2026, BFH has started working on a new platformstrategie.
Until finalized, using OpenStack remains on hold.
1. Hardware
1.1 Control Plane
4x Supermicro Server SYS-122H-TN (8 bay NVMe):
- 2x Intel Xeon 6530P
- 16x 32GB PC5-51200 6400MHz DDR5 ECC RDIMM
- 1x Intel E810-XXVDA2 - PCIe 4.0 x8 - 2x SFP28
- 2x SolidIGM D7-PS1010 1.92TB U.2
- 2x SolidIGM D5-P5430 7.68TB U.2
1.2 Data Plan
upto 32x Supermicro Server SYS-122H-TN (8 bay NVMe):
- 2x Intel Xeon 6756E
- 16x 64GB PC5-51200 6400MHz DDR5 ECC RDIMM
- 1x Intel E810-XXVDA4 - PCIe 4.0 x8 - 4x SFP28
- 2x SolidIGM D7-PS1010 1.92TB
upto 32x Supermicro Server SYS-122H-TN (8 bay NVMe):
- 2x Intel Xeon 6530P
- 16x 64GB PC5-51200 6400MHz DDR5 ECC RDIMM
- 1x Intel E810-XXVDA4 - PCIe 4.0 x8 - 4x SFP28
- 2x SolidIGM D7-PS1010 1.92TB
2. Software
2.1 Base System
Debian 13 (trixie)
2.2 OpenStack
OpenStack 2025.1 (epoxy)
3. Services
3.1 Core Services
| Service | Implementation Status |
|---|---|
| cinder | done |
| glance | done |
| horizon | done |
| keystone | done |
| neutron | done |
| nova | done |
| placement | done |
| rally | done |
3.2 Supporting Services
| Service | Implementation Status |
|---|---|
| haproxy | done |
| mariadb | done |
| memcached | done |
| ovn | done |
| proxysql | packages should be uploaded to Debian |
| rabbitmq | done |
| dehydrated | patches should be merged upstream |
| Ceph | done |
| SSP | enable Selfservice after platformstrategie decision |
4. Features
4.1 User Features
| Service | Implementation Status |
|---|---|
| VM create | done |
| VM start | done |
| VM stop | done |
| VM remove | done |
| VM console | done |
| VM life migration | done |
| VM cold migration | done |
| VM Snapshot create | done |
| VM Snapshot remove | done |
| VM Snapshot restore | done |
4.2 Infrastructure Features
| Service | Implementation Status |
|---|---|
| Storage | completely on Ceph |
| Ceph | RBD and Pool snapshots work alongside (copy image into image pool) |
| Hostnames | update documentation |
| Subnets | done |
| Addresses | done |
| Permissions | done |
| Backup | done |
| Monitoring | done |
4.3 Provider Networks
| Name | Name in OpenStack | IPv4 | IPv6 |
|---|---|---|---|
| Provider Private | provider-private | 2a07:6b45:201::/48 | 10.5.0.0/20 |
| Provider Public | provider-public | 2a07:6b45:203::/48 | 147.87.144.0/24 |
5. TODO
5.1 Notes
- rally different container-host (not openstack)
- rsyslog for openstack on base9 or base10
- define VM flavours
- define user limits
- define Firewall processes
- update tooling to build VM images
- setup test environment
- clarify maintenance vs development
- clarify feature roadmap
- create user documentation
5.2 Problems
5.3 Procedures
- Review
- Resiliance/HA tests
- Disaster recovery
- TLS renew test
- Update tests