Security for instances

In the earlier sections, we studied about different OpenStack components and how to implement security at different levels.

Now, we will see how to ensure security for instances running in OpenStack.

In OpenStack, we have the scheduler function, which helps us to decide which instances will be allocated to which node. This scheduler in OpenStack is known as nova-scheduler, it's basically a component of nova-compute. The nova-scheduler works on a set of filters to choose the right node for the instance. The nova-scheduler allocates the host to the instances on the basis of the following points:

  • Resource allocated to image, the nova-scheduler basically checks the free resource in terms of RAM, CPU, and storage (IO) and ...

Get Cloud Security Automation now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.