IMPLEMENTATION OF IMPLEMENTATION OF HYBRID CLOUD AND HYBRID CLOUD AND SECURITYSECURITYGROUP MEMBERS:GROUP MEMBERS:

KARAN CHHABRA (14111322)KARAN CHHABRA (14111322)RAJAT DIKSHIT (14119200)RAJAT DIKSHIT (14119200)

1

OPENSTACK AND OPENSTACK AND WINDOWS AZUREWINDOWS AZURE

At the private cloud side we chose At the private cloud side we chose Openstack because of the fact that it is an Openstack because of the fact that it is an open-source cloud platform.open-source cloud platform.

This trait helped us to configure our This trait helped us to configure our private cloud environment according to private cloud environment according to the infrastructural and networking needs.the infrastructural and networking needs.

Whereas, at the public cloud side of the Whereas, at the public cloud side of the project, we selected Windows Azure as our project, we selected Windows Azure as our platform because subscribing to its platform because subscribing to its services and using them later was services and using them later was practically very info graphical and easy.practically very info graphical and easy.

Also, we acknowledged that remote access Also, we acknowledged that remote access to azure was if not easily but practically to azure was if not easily but practically possible.possible.

CONFIGURATION OF CONFIGURATION OF OPENSTACKOPENSTACK

The base operating system that is used as a platform for the creation of openstack is The base operating system that is used as a platform for the creation of openstack is Ubuntu 14.04 Trusty Tahr Server edition.Ubuntu 14.04 Trusty Tahr Server edition.

Steps taken to configure Openstack on our Ubuntu server: Steps taken to configure Openstack on our Ubuntu server:

Cloned server with devstack repositories.Cloned server with devstack repositories.

Bridged Host and VM network topologies.Bridged Host and VM network topologies.

Installed all services of Openstack.Installed all services of Openstack.

After all these operation an admin layer of Openstack dashboard was provided to us and After all these operation an admin layer of Openstack dashboard was provided to us and our native machines started acting as a server to the abovementioned private cloud our native machines started acting as a server to the abovementioned private cloud environment. environment.

TextText

HYBRID CLOUDHYBRID CLOUDIMPLEMENTATION AND DEMONSTRATIONIMPLEMENTATION AND DEMONSTRATION

For the collaboration of Windows Azure with Openstack, we embedded some For the collaboration of Windows Azure with Openstack, we embedded some necessary CLI platform and services related to Azure within Openstack. These are as necessary CLI platform and services related to Azure within Openstack. These are as follows: follows:

Since Azure’s remote services run on nodejs engine, we implemented recent node Since Azure’s remote services run on nodejs engine, we implemented recent node modules in the server.modules in the server.

Implemented Azure’s Cross Platform CLI (XPLAT-CLI).Implemented Azure’s Cross Platform CLI (XPLAT-CLI).

Imported Azure’s client subscription in order to make our private cloud recognise Imported Azure’s client subscription in order to make our private cloud recognise Azure successfully.Azure successfully.

Embedded Azure management key from the subscription so as to authorise ourselves Embedded Azure management key from the subscription so as to authorise ourselves into the network. into the network.

These operations successfully created a connection between the two cloud These operations successfully created a connection between the two cloud environments.environments.

TextText

DemonstrationDemonstrationVM PROVISIONING VM PROVISIONING

IMPLEMENTATION AND IMPLEMENTATION AND DEMONSTRATION OF DEMONSTRATION OF SECURITYSECURITY

Since Openstack is laid upon VMware which is then layered on a host operating system, Since Openstack is laid upon VMware which is then layered on a host operating system, access to it is already very much restricted.access to it is already very much restricted.

All the security implementations were made out on the network layer.All the security implementations were made out on the network layer.

These are the tools we used in order to secure the network layer:These are the tools we used in order to secure the network layer:

NMapNMap

NiktoNikto

NessusNessus

Port blocking via IP tablesPort blocking via IP tables

Internal VM isolation through VLAN’sInternal VM isolation through VLAN’s

Thank YouThank You( TIME FOR ( TIME FOR QUESTIONS )QUESTIONS )