Security for instances
In the earlier sections, we studied about different OpenStack components and how to implement security at different levels.
Now, we will see how to ensure security for instances running in OpenStack.
In OpenStack, we have the scheduler function, which helps us to decide which instances will be allocated to which node. This scheduler in OpenStack is known as nova-scheduler, it's basically a component of nova-compute. The nova-scheduler works on a set of filters to choose the right node for the instance. The nova-scheduler allocates the host to the instances on the basis of the following points:
- Resource allocated to image, the nova-scheduler basically checks the free resource in terms of RAM, CPU, and storage (IO) and then validates the instance requirement to allocate the right host.
- Image, normally in the cloud environment, we define a tag for hypervisor hosts to allocate on the basis of OS images. In OpenStack too, we use this facility such as image OS and size of the...
