臺灣博碩士論文加值系統

根據NITS所定義的雲端服務模式中，架構即服務(IaaS)是將電腦基礎設備整體統合、有效利用資源的概念，分割成不同的單位供企業來租用。這種服務現在早在2006年亞馬遜書店將機房將閒置運算資源轉為Amazon Web Service(AWS)服務，受到市場歡迎並成為龍頭廠商。這種服務對初步創業的公司與短期大型活動節省IT草創期間大量的成本與彈性運用。但一直以來，公有雲在隱私安全上，受到許多企業保持的觀望質疑的態度。另一方面，企業內機房的運算資源，整體使用率只有10%左右。如何將企業內的閒置運算資源作有效利用統整分配，變成高彈性IaaS私有雲，讓IaaS私有雲相容於AWS公有雲，最終達到讓私有雲與公有雲無障礙的彈性混搭，成為一種願景。2010年七月NASA和Rackspace合作開發的雲端運算平台OpenStack。成為第一個相容於AWS的完全開源雲端基礎架構平台。然而在目前OpenStack中文資料非常匱乏的情況下，本文將詳細介紹以OpenStack建立一個精簡IaaS私有雲模型。內容詳細記載架設過程與經驗。並以 Nbench 與 UnixBench 進行與實體機器比對的效能測試。實驗結果顯示: 開放原始碼、零授權費、 透過國際共同合作所開發的OpenStack提供了一種企業組織實現自主 IaaS方式，提供給有興趣導入自主 IaaS 的企業組織參考。

According to NITS definition of cloud service models, Infrastructure as a service (IaaS) is the overall integration of computer-based resources. Resources are used more efficiently when they are divided into smaller units for businesses to hire. This kind of services began in 2006, The Amazon Bookstore take idle computing resources and convert them into Amazon Web Service (AWS)services. AWS became very hot in the market. It reduces a lot of costs and provides flexibility for new companies and short-term usage. However security concerns over public cloud services keep many companies from using it. On the other hand, according to surveys the overall utilization rate of enterprise computing resources in the computer room is only about 10%. It would be nice to make use of idle computing resources as a flexible IaaS private cloud and make it compatible with AWS public cloud. In July 2010 NASA and Rackspace''s cloud computing platform began to develop OpenStack. It’s the first fully open source project compatible with AWS cloud infrastructure platform. But Chinese resources on OpenStack are very scarce on now. This paper detail the steps of setting up an OpenStack IaaS private cloud. It records the processes and experiences. In addition Nbench and UnixBench are used for performance comparison with the physical test machine. The results show that the open source, zero license cost, internationally co-developed OpenStack provides a way for interested organizations to have their own IaaS.

目錄
第一章 緒論.......... 1
1.1 前言...................... 1
1.2 究動機與目的............. 1
1.3 論文架構.................. 3
第二章 背景知識......................... 3
2.1 雲端運算定義......................... 3
2.1.1 雲端服務模式................ 4
2.1.2 雲端部署模型................... 6
2.1.3 雲端基本特性.............. 7
2.2 虛擬化技術 (Virtualization) .....8
2.2.1 傳統 CPU 權限模式........ 9
2.2.3 全虛擬化(Full Virtualization) ............. 12
2.2.4 半虛擬化(Part Virtualization) ................ 13
2.2.5 硬體輔助虛擬化(Hardware-assisted virtualization) 14
第三章 自主雲端平台選擇............................................................................... 15
3.1 虛擬化技術平台.................................................................................... 16
3.1.1 KVM 運作模式......................................................................... 17
3.2 基礎架構管理軟體(Virtual Infrastructure Management Software)..... 19

第四章 基礎架構雲端管理平台OpenStack介紹........................ 23
4.1 OpenStack 相關概念........................................................ 25
4.2 OpenStack 制定與發展 ......................................................................... 27
第五章 安裝 OpenStack Nova 實例說明.......................................................... 29
5.1 OpenStack Nova 環境需求.................................................................... 29
5.2 安裝 OpenStack Nova 雲端運算中心.................................................. 32
第六章實驗方法與結果分析............................................................................. 33
6.1 效能實驗測試方法................................................................................ 33
6.2 nbench 效能測試實驗 ....................................................................... 34
6.3 UnixBench 效效能測試實驗................................................................. 35
6.4 實驗結果分析........................................................................................ 37
第七章 結論....................................................................................................... 38
參考文獻............................................................................................................. 40
附錄..................................................................................................................... 43

表目錄

表一: CPU Privileged Mode ................................................................. 10
表二: Windows/Linux OS CPU Privileged Mode ................................ 11
表三: 虛擬機器平台比較表一............................................................ 18
表四: 虛擬機器平台比較表二............................................................ 19
表五: IaaS 資源管理系統授權協議、許可證管理、購買價格比較表
....................................................................................................... 21
表六: OpenStack 子計畫比對表 ......................................................... 23
表七: 實驗機器能力表........................................................................ 30
表八: 網路配置表................................................................................ 31
表九: 實驗之實體與虛擬機器比對表................................................ 34
表十: nbench 測試項目 ........................................................................ 34
表十一 :UnixBench 測試項目............................................................. 35
圖目錄

圖一: Intel x86 CPU Privileged Mode .................................................. 10
圖二: OS Processor Privilege-Level ..................................................... 11
圖三: VMM 控制 CPU 權限模式........................................................ 12
圖四: Intel VMX CPU mode................................................................. 15
圖五: KVM 架構圖(引用自
http://www.csie.nuk.edu.tw/~brchang/kvm.pdf)........................... 18
圖六: 運作概念圖(引用自 OpenStack 官方網站)............................. 26
圖七: OpenStack Worldwide................................................................. 29
圖八: 網路配置示意圖........................................................................ 31
圖九: nbench 測試表現圖 .................................................................... 35
圖十: Unix Benchmarks 測試表現圖................................................... 37

[1] Kandukuri, B.R.(2009) Cloud Security Issues, 2009 IEEE International Conference on Services Computing. 518-520.
[2] 洪朝貴(2010)「(商業炒作之前的)雲端簡史與消費建議」，數位環境: 數位科技、數位內容、數位產業、數位服務與數位安全產學研討會，台北。
[3] (NIST) The NIST Definition of Cloud Computing, National Institute of Standards and Technology Special Publication 800-145 7 pages (September 2011)
[4] R. Jeyarani (2011)Power Aware Meta Scheduler for Adaptive VM Provisioning in IaaS Cloud International Journal of Cloud Applications and Computing, 36-51.
[5] Nicholas Petreley (n d) ,Security Report: Windows vs Linux In The register. Retrieved October 2004, from http://www.theregister.co.uk/2004/10/22/security_report_windows_vs_linux/
[6] Michael Larabel(2011) “Ubuntu 11.10: Xen vs. KVM vs. VirtualBox in phoronix form http://www.phoronix.com/scan.php?page=article&item=ubuntu_1110_xenkvm&num=1
[7] Andrew J.(2011)” Analysis of Virtualization Technologies for High Performance Computing Environments” 2011 IEEE 4th International Conference on Cloud Computing , 9-16.
[8] Patrícia Takako, (2010) A Survey on Open-source Cloud Computing Solution. (Ed.) VIII Workshop em Clouds, Grids e Aplicações 3-16.
[9] Joseph Foran (August 2010) “Comparing open source cloud platforms: OpenStack versus Eucalyptus” in earchcloudcomputing form http://searchcloudcomputing.techtarget.com/feature/Comparing-open-source-cloud-platforms-OpenStack-versus-Eucalyptus
[10] 戴佳慧(2010,12)。數位時代「美國電影租借網站Netflix全面移上雲端」。取自：http://bnext.com.tw/article/view/cid/0/id/16791
[11]Daniel Nurmi , Rich Wolski , Chris Grzegorczyk , Graziano Obertelli , Sunil Soman , Lamia Youseff , Dmitrii Zagorodnov (2008) Eucalyptus : The Pennsylvania State University A technical report on an elastic utility computing architecture linking your programs to useful systems
[12]李昀潔(2010)。「在企業發展雲端運算之關鍵成功因素」。碩士論文，淡江大學 企業管理學系
[13] Jiuxing Liu (2006)”High Performance VMM-Bypass I/O in Virtual Machines” ATEC ''06 Proceedings of the annual conference on USENIX . 29–42
[14] virtual machine manager In Benjr.tw Retrieved 6 August 2009, Form http://benjr.tw/node/517
[15] Virtualization In Wikipedia. Retrieved 13 December 2011 from http://en.wikipedia.org/wiki/Virtualization
[16]Amazon Elastic Compute Cloud In Wikipedia. Retrieved 8 December 2011 ,form http://en.wikipedia.org/wiki/Amazon_Elastic_Compute_Cloud
[17] Rackspace Cloud In Wikipedia. Retrieved 9 November 2011 ,Form http://en.wikipedia.org/wiki/Rackspace_Cloud
[18] Application programming interface. http://en.wikipedia.org/wiki/Application_programming_interface
[19]RBAC (Role-based access control) In Wikipedia. Retrieved 16 November 2011 ,Form http://en.wikipedia.org/wiki/Role-based_access_control
[20] RabbitMQ In Wikipedia. Retrieved 11 November 2011, Form http://en.wikipedia.org/wiki/RabbitMQ
[21] OpenStack API In wiki.openstack.org. Retrieved 9 November 2011 ,from the http://wiki.openstack.org/OpenStackAPI_1-1
[22] EC2API In aws.amazon.com Retrieved 15 August 2010 ,from http://aws.amazon.com/archives/2843
[23]Lazy consensus in www.apache.org, form http://www.apache.org/foundation/glossary.html#LazyConsensus
[24] 洪朝貴(2011) ,「保護雲端隱私的技術: Unhosted 與 Homomorphic Encryption」http://ckhung0.blogspot.com/2011/09/homomorphic-encryption-and-unhosted.html
[25]REST (Representational State Transfer) (n.d.). In Wikipedia. Retrieved October 28 2010, from http://en.wikipedia.org/wiki/Representational_State_Transfer
[26]RPC(Remote procedure call) In Wikipedia. Retrieved 28 November 2011,Form
http://en.wikipedia.org/wiki/Remote_procedure_call

[27] AMQP (Advanced Message Queue Protocol) In Wikipedia. Retrieved 17 December 2011 form http://en.wikipedia.org/wiki/Advanced_Message_Queuing_Protocol
[28]RESTful In Wikipedia Retrieved 15 December2011Form,
http://en.wikipedia.org/wiki/Representational_state_transfer
[29] LVM(Logical Volume Manager) In Wikipedia. Retrieved 7 November 2011 Form, http://en.wikipedia.org/wiki/Logical_Volume_Manager_(Linux)
[30] Benjamin Prosnitz (2007) Blackbox No More: Reconstruction of Internal Virtual Machine State
[31] Jeffrey Shafer (2010) I/O Virtualization Bottlenecks in Cloud Computing Today