.. _telemetry-system-architecture: =================== System architecture =================== The Telemetry service uses an agent-based architecture. Several modules combine their responsibilities to collect data, store samples in a database, or provide an API service for handling incoming requests. The Telemetry service is built from the following agents and services: ceilometer-api (deprecated in Ocata) Presents aggregated metering data to consumers (such as billing engines and analytics tools). Alarm, Meter and Event APIs are now handled by aodh, gnocchi, and panko services respectively. ceilometer-polling Polls for different kinds of meter data by using the polling plug-ins (pollsters) registered in different namespaces. It provides a single polling interface across different namespaces. The ``compute`` namespace polls the local hypervisor to acquire performance data of local instances. The ``central`` namespace polls the public RESTful APIs of other OpenStack services such as Compute service and Image service. The ``ipmi`` namespace polls the local node with IPMI support, in order to acquire IPMI sensor data and Intel Node Manager datahost-level information. ceilometer-agent-notification Consumes AMQP messages from other OpenStack services, normalizes messages, and publishes them to configured targets. ceilometer-collector (deprecated in Ocata) Consumes AMQP notifications from the agents, then dispatches these data to the appropriate data store. .. note:: 1. The ``ceilometer-polling`` service provides polling support on any namespace but many distributions continue to provide namespace-scoped agents: ``ceilometer-agent-central``, ``ceilometer-agent-compute``, and ``ceilometer-agent-ipmi``. 2. The ``ceilometer-api`` and ``ceilometer-collector`` are no longer supported since the Ocata release. Storage and API are provided by gnocchi, aodh, and panko services. Except for the ``ceilometer-polling`` agents polling the ``compute`` or ``ipmi`` namespaces, all the other services are placed on one or more controller nodes. The Telemetry architecture highly depends on the AMQP service both for consuming notifications coming from OpenStack services and internal communication. .. _telemetry-supported-databases: Supported databases ~~~~~~~~~~~~~~~~~~~ The other key external component of Telemetry is the database, where events, samples, alarm definitions, and alarms are stored. Each of the data models have their own storage service and each support various back ends. The list of supported base back ends for measurements: - `gnocchi `__ The list of supported base back ends for alarms: - `MySQL `__ - `PostgreSQL `__ The list of supported base back ends for events: - `ElasticSearch `__ - `MongoDB `__ - `MySQL `__ - `PostgreSQL `__ - `HBase `__ .. _telemetry-supported-hypervisors: Supported hypervisors ~~~~~~~~~~~~~~~~~~~~~ The Telemetry service collects information about the virtual machines, which requires close connection to the hypervisor that runs on the compute hosts. The following is a list of supported hypervisors. - The following hypervisors are supported via `libvirt `__ * `Kernel-based Virtual Machine (KVM) `__ * `Quick Emulator (QEMU) `__ * `Linux Containers (LXC) `__ * `User-mode Linux (UML) `__ .. note:: For details about hypervisor support in libvirt please check the `Libvirt API support matrix `__. - `Hyper-V `__ - `XEN `__ - `VMware vSphere `__ Supported networking services ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Telemetry is able to retrieve information from OpenStack Networking and external networking services: - OpenStack Networking: - Basic network meters - Firewall-as-a-Service (FWaaS) meters - Load-Balancer-as-a-Service (LBaaS) meters - VPN-as-a-Service (VPNaaS) meters - SDN controller meters: - `OpenDaylight `__ - `OpenContrail `__ .. _telemetry-users-roles-projects: Users, roles, and projects ~~~~~~~~~~~~~~~~~~~~~~~~~~ This service of OpenStack uses OpenStack Identity for authenticating and authorizing users. The required configuration options are listed in the `Telemetry section `__ in the OpenStack Configuration Reference. Alternatively, gnocchi can be configured without authentication to minimize overhead. The system uses two roles:``admin`` and ``non-admin``. The authorization happens before processing each API request. The amount of returned data depends on the role the requestor owns. The creation of alarm definitions also highly depends on the role of the user, who initiated the action. Further details about :ref:`telemetry-alarms` handling can be found in this guide.