OpenNebula Zones Overview 3.4
The OpenNebula Zones (oZones) component allows for the centralized management of multiple instances of OpenNebula (zones), managing in turn potentially different administrative domains. The module is run by the oZones administrator, with capacity to grant access to the different zones to particular users.
These zones can be effectively shared through the Virtual DataCenter (VDC) abstraction. A VDC is a set of virtual resources (images, VM templates, virtual networks and virtual machines) and users that manage those virtual resources, all sustained by infrastructure resources offered by OpenNebula. A VDC is supported by the resources of one zone, and it is associated to one cluster of the zone. The resources that the VDC can dispose of are a subset of that cluster. There is a special user (the VDC administrator) that can create new users inside the VDC, as well as manage all the virtual resources (but can not access other resources in the zone or even the see the physical hosts used for the VDC). VDC admin and users access the zone through a reverse proxy, so they don't need to know the endpoint of the zone, but rather the address of the oZones module and the VDC where they belong to.
The bird's-eye view of the oZones component can be sketched with a simple scenario. Let's take the point of view of the oZones manager that has access to two OpenNebula instances, managing resources in two different administrative domains. She can add those two instances as OpenNebula Zones in the oZones manager (provided she has the “oneadmin” credentials of both OpenNebula instances), and afterwards take a look at an aggregated view of resources combined from both zones. Also, she may want to give just a portion of the physical resources to a set of users, so she will create a VDC in one of the given zones, selecting a subset of the available hosts, and creating an account for the VDC admin. Once this is in place, she will be able to provide with access URL for the OpenNebula CLI and Sunstone GUI to the users, an url that will mask the location of the OpenNebula zone by using a reverse proxy. An example of such a URL can be:
This new Zones functionality addresses many common requirements in enterprise use cases, like for instance:
Moreover, the VDC mechanism allows advanced on-demand provisioning scenarios like: