openstack-manuals/doc/glossary/glossary-terms.xml
Matt Kassawara d0ece3d6ef Updated Launch chapter
As part of the installation guide improvement project, I performed
the following operations on the Launch chapter:

1) Split monolithic file with instructions for nova networking into
   separate files for nova and neutron networking.
2) Updated instructions in each section to account for differences
   between nova and neutron networking.
3) Updated other sections and glossary as necessary.

Change-Id: I7faaadc0787cf85d816c7c2aab1247ecc77195b2
Partial-Bug: #1291071
Implements: blueprint networking-install-guide-improvements
2014-04-11 11:05:33 +08:00

5242 lines
204 KiB
XML

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE chapter [
<!-- Some useful entities borrowed from HTML -->
<!ENTITY mdash "&#x2014;">
<!ENTITY nbsp "&#160;">
]>
<glossary xmlns="http://docbook.org/ns/docbook"
xmlns:xlink="http://www.w3.org/1999/xlink" xml:id="rs_glossary"
version="5.0" role="auto">
<title>Glossary</title>
<info>
<legalnotice>
<para>Licensed under the Apache License, Version 2.0 (the
"License"); you may not use this file except in
compliance with the License. You may obtain a copy of
the License at</para>
<para>
<link
xlink:href="http://www.apache.org/licenses/LICENSE-2.0"
>http://www.apache.org/licenses/LICENSE-2.0</link>
</para>
<para>Unless required by applicable law or agreed to in
writing, software distributed under the License is
distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR
CONDITIONS OF ANY KIND, either express or implied. See
the License for the specific language governing
permissions and limitations under the License.</para>
</legalnotice>
</info>
<!-- .A. -->
<glossdiv>
<title>A</title>
<glossentry>
<glossterm>absolute limit</glossterm>
<glossdef>
<para>Impassable limits for guest VMs. Settings include
total RAM size, maximum number of vCPUs, and
maximum disk size.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>access control list</glossterm>
<glossdef>
<para>
A list of permissions attached to an object. An ACL
specifies which users or system processes have
access to objects. It also defines which operations
can be performed on specified objects. Each entry
in a typical ACL specifies a subject and an
operation. For instance, the ACL entry <code>(Alice,
delete)</code> for a file gives Alice permission to
delete the file.
</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>access key</glossterm>
<glossdef>
<para>Alternative term for an Amazon EC2 access key.
See EC2 access key.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>account</glossterm>
<glossdef>
<para>The Object Storage context of an account. Do not confuse
with a user account from an authentication service such
as Active Directory, /etc/passwd, OpenLDAP,
OpenStack Identity Service, and so on.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>account auditor</glossterm>
<glossdef>
<para>Checks for missing replicas and incorrect or
corrupted objects in a specified Object Storage account by
running queries against the back-end SQLite
database.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>account database</glossterm>
<glossdef>
<para>A SQLite database that contains Object Storage accounts
and related metadata and that the
accounts server accesses.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>account reaper</glossterm>
<glossdef>
<para>An Object Storage worker that scans for and deletes
account databases and that the account server has marked
for deletion.
</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>account server</glossterm>
<glossdef>
<para>Lists containers in Object Storage and stores container
information in the account database.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>account service</glossterm>
<glossdef>
<para>An Object Storage component that provides account services
such as list, create, modify, and audit. Do not
confuse with OpenStack Identity Service, OpenLDAP, or
similar user account services.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>accounting</glossterm>
<glossdef>
<para>The Compute service provides accounting information
through the event notification and system usage data
facilities.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>ACL</glossterm>
<glossdef>
<para>See access control list.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>active/active configuration</glossterm>
<glossdef>
<para>In a high availability setup with an active/active
configuration, several systems share the load together
and if one fails, the load is distributed to the
remaining systems.
</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Active Directory</glossterm>
<glossdef>
<para>Authentication and identity service by
Microsoft, based on LDAP. Supported in
OpenStack.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>active/passive configuration</glossterm>
<glossdef>
<para>In a high-availability setup with an
active/passive configuration, systems are set up to
bring additional resources online to replace those that
have failed.
</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>address pool</glossterm>
<glossdef>
<para>A group of fixed and/or floating IP addresses
that are assigned to a project and can be
used by or assigned to the VM instances in a
project.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>admin API</glossterm>
<glossdef>
<para>A subset of API calls that are accessible to
authorized administrators and are generally not
accessible to end users or the public Internet. They
can exist as a separate service (keystone) or can
be a subset of another API (nova).</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>admin server</glossterm>
<glossdef>
<para>In the context of the Identity Service, the worker
process that provides access to the admin API.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Advanced Message Queuing Protocol
(AMQP)</glossterm>
<glossdef>
<para>The open standard messaging protocol used by
OpenStack components for intra-service communications,
provided by RabbitMQ, Qpid, or
ZeroMQ.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Advanced RISC Machine (ARM)</glossterm>
<glossdef>
<para>Lower power consumption CPU often found in
mobile and embedded devices. Supported by
OpenStack.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>alert</glossterm>
<glossdef>
<para>The Compute service can send alerts through its
notification system, which includes a facility to
create custom notification drivers. Alerts can be
sent to and displayed on the horizon dashboard.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>allocate</glossterm>
<glossdef>
<para>The process of taking a floating IP address from
the address pool so it can be associated with a
fixed IP on a guest VM instance.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Amazon Kernel Image (AKI)</glossterm>
<glossdef>
<para>Both a VM container format and disk format.
Supported by Image Service.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Amazon Machine Image (AMI)</glossterm>
<glossdef>
<para>Both a VM container format and disk format.
Supported by Image Service.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Amazon Ramdisk Image (ARI)</glossterm>
<glossdef>
<para>Both a VM container format and disk format.
Supported by Image Service.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Anvil</glossterm>
<glossdef>
<para>A project that ports the shell script-based
project named DevStack to Python.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Apache</glossterm>
<glossdef>
<para>The Apache Software Foundation supports
the Apache community of open-source software
projects. These projects provide software products for the
public good.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Apache License 2.0</glossterm>
<glossdef>
<para>All OpenStack core projects are provided under
the terms of the Apache License 2.0
license.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Apache Web Server</glossterm>
<glossdef>
<para>The most common web server software currently
used on the Internet.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>API</glossterm>
<glossdef>
<para>Application programming interface.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>API endpoint</glossterm>
<glossdef>
<para>The daemon, worker, or service that a client
communicates with to access an API. API endpoints
can provide any number of services, such as
authentication, sales data, performance
metrics, Compute VM commands, census data, and so
on.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>API extension</glossterm>
<glossdef>
<para>
Custom modules that extend some OpenStack core APIs.
</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>API extension plug-in</glossterm>
<glossdef>
<para>Alternative term for a Networking plug-in or
Networking API extension.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>API key</glossterm>
<glossdef>
<para>Alternative term for an API token.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>API server</glossterm>
<glossdef>
<para>Any node running a daemon or worker that
provides an API endpoint.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>API token</glossterm>
<glossdef>
<para>Passed to API requests and used by OpenStack to
verify that the client is authorized to run the
requested operation.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>API version</glossterm>
<glossdef>
<para>In OpenStack, the API version for a project is
part of the URL. For example,
<filename>example.com/nova/v1/foobar</filename>.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>applet</glossterm>
<glossdef>
<para>A Java program that can be embedded into a web
page.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Application Programming Interface
(API)</glossterm>
<glossdef>
<para>A collection of specifications used to access a
service, application, or program. Includes service
calls, required parameters for each call, and the
expected return values.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>application server</glossterm>
<glossdef>
<para>A piece of software that makes available another
piece of software over a network.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Application Service Provider (ASP)</glossterm>
<glossdef>
<para>Companies that rent specialized applications
that help businesses and organizations provide
additional services with less cost.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>arptables</glossterm>
<glossdef>
<para>Tool used for maintaining Address Resolution Protocol
packet filter rules in the Linux kernel firewall modules.
Used along with iptables, ebtables, and ip6tables in
Compute to provide firewall services for VMs.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>associate</glossterm>
<glossdef>
<para>The process associating a Compute floating IP
address with a fixed IP address.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Asynchronous JavaScript and XML
(AJAX)</glossterm>
<glossdef>
<para>A group of interrelated web development
techniques used on the client-side to create
asynchronous web applications. Used extensively in
horizon.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>ATA over Ethernet (AoE)</glossterm>
<glossdef>
<para>A disk storage protocol tunneled within
Ethernet.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>attach</glossterm>
<glossdef>
<para>The process of connecting a VIF or vNIC to a L2
network in Networking. In the context of Compute, this
process connects a storage volume to an
instance.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>attachment (network)</glossterm>
<glossdef>
<para>Association of an interface ID to a logical
port. Plugs an interface into a port.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>auditing</glossterm>
<glossdef>
<para>Provided in Compute through the system usage data
facility.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>auditor</glossterm>
<glossdef>
<para>A worker process that verifies the integrity
of Object Storage objects, containers, and accounts.
Auditors is the collective term for the Object Storage
account auditor, container auditor, and object
auditor.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Austin</glossterm>
<glossdef>
<para>Project name for the initial release of
OpenStack.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>auth node</glossterm>
<glossdef>
<para>Alternative term for an Object Storage authorization
node.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>authentication</glossterm>
<glossdef>
<para>The process that confirms that the user,
process, or client is really who they say they are
through private key, secret token, password,
fingerprint, or similar method.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>authentication token</glossterm>
<glossdef>
<para>A string of text provided to the client after
authentication. Must be provided by the user or
process in subsequent requests to the API
endpoint.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>AuthN</glossterm>
<glossdef>
<para>The Identity Service component that provides
authentication services.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>authorization</glossterm>
<glossdef>
<para>The act of verifying that a user, process, or
client is authorized to perform an action.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>authorization node</glossterm>
<glossdef>
<para>An Object Storage node that provides authorization
services.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>AuthZ</glossterm>
<glossdef>
<para>The Identity Service component that provides high-level
authorization services.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Auto ACK</glossterm>
<glossdef>
<para>Configuration setting within RabbitMQ that
enables or disables message acknowledgment.
Enabled by default.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>auto declare</glossterm>
<glossdef>
<para>A Compute RabbitMQ setting that determines whether a
message exchange is automatically created when the
program starts.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>availability zone</glossterm>
<glossdef>
<para>An Amazon EC2 concept of an isolated area that
is used for fault tolerance. Do not confuse with
an OpenStack Compute zone or cell.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>AWS</glossterm>
<glossdef>
<para>Amazon Web Services.</para>
</glossdef>
</glossentry>
</glossdiv>
<!-- .B. -->
<glossdiv>
<title>B</title>
<glossentry>
<glossterm>back end</glossterm>
<glossdef>
<para>Interactions and processes that are obfuscated
from the user, such as Compute volume mount, data
transmission to an iSCSI target by a daemon, or
Object Storage object integrity checks.
</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>back-end catalog</glossterm>
<glossdef>
<para>The storage method used by the Identity Service catalog
service to store and retrieve information about
API endpoints that are available to the client.
Examples include a SQL database, LDAP database, or
KVS back end.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>back-end store</glossterm>
<glossdef>
<para>The persistent data store used to save and
retrieve information for a service, such as lists of
Object Storage objects, current state of guest VMs, lists
of user names, and so on. Also, the method that the
Image Service uses to get and store VM images.
Options include Object Storage, local file system, S3, and
HTTP.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>bandwidth</glossterm>
<glossdef>
<para>The amount of available data used by
communication resources such as the Internet.
Represents the amount of data that is used to
download things or the amount of data available to
download.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>bare</glossterm>
<glossdef>
<para>An Image Service container format that indicates that no
container exists for the VM image.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>base image</glossterm>
<glossdef>
<para>An OpenStack-provided image.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Bexar</glossterm>
<glossdef>
<para>A grouped release of projects related to
OpenStack that came out in February of 2011. It
included Compute (nova) and Object Storage (swift)
only.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>binary</glossterm>
<glossdef>
<para>Information that consists solely of ones and
zeroes, which is the language of computers.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>bit</glossterm>
<glossdef>
<para>A bit is a single digit number that is in base
of 2 (either a zero or one). Bandwidth usage is
measured in bits-per-second.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>bits-per-second (BPS)</glossterm>
<glossdef>
<para>The universal measurement of how quickly data is
transferred from place to place.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>block device</glossterm>
<glossdef>
<para>A device that moves data in the form of blocks.
These device nodes interface the devices, such as
hard disks, CD-ROM drives, flash drives, and other
addressable regions of memory.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>block migration</glossterm>
<glossdef>
<para>A method of VM live migration used by KVM to
evacuate instances from one host to another with
very little downtime during a user-initiated
switch-over. Does not require shared storage.
Supported by Compute.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Block Storage</glossterm>
<glossdef>
<para>The OpenStack core project that enables management
of volumes, volume snapshots, and volume types. The
project name of Block Storage is cinder.
</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Block Storage API</glossterm>
<glossdef>
<para>An API on a separate endpoint for attaching,
detaching, and creating block storage for compute
VMs.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>BMC</glossterm>
<glossdef>
<para>Baseboard Management Controller. The
intelligence in the IPMI architecture, which is a
specialized micro-controller that is embedded on
the motherboard of a computer and acts as a
server. Manages the interface between system
management software and platform hardware.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>bootable disk image</glossterm>
<glossdef>
<para>A type of VM image that exists as a single,
bootable file.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Bootstrap Protocol (BOOTP)</glossterm>
<glossdef>
<para>A network protocol used by a network client to
obtain an IP address from a configuration server.
Provided in Compute through the dnsmasq daemon when
using either the FlatDHCP manager or VLAN manager
network manager.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>browser</glossterm>
<glossdef>
<para>Any client software that enables a computer or
device to access the Internet.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>builder file</glossterm>
<glossdef>
<para>Contains configuration information that Object
Storage uses to reconfigure a ring or to re-create it from
scratch after a serious failure.
</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>button class</glossterm>
<glossdef>
<para>A group of related button types within horizon.
Buttons to start, stop, and suspend VMs are in one
class. Buttons to associate and disassociate
floating IP addresses are in another class, and so
on.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>byte</glossterm>
<glossdef>
<para>Set of bits that make up a single character;
there are usually 8 bits to a byte.</para>
</glossdef>
</glossentry>
</glossdiv>
<!-- .C. -->
<glossdiv>
<title>C</title>
<glossentry>
<glossterm>CA</glossterm>
<glossdef>
<para>Certificate Authority or Certification
Authority. In cryptography, an entity that issues
digital certificates. The digital certificate
certifies the ownership of a public key by the
named subject of the certificate. This enables
others (relying parties) to rely upon signatures
or assertions made by the private key that
corresponds to the certified public key. In this
model of trust relationships, a CA is a trusted
third party for both the subject (owner) of the
certificate and the party relying upon the
certificate. CAs are characteristic of many public
key infrastructure (PKI) schemes.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>cache pruner</glossterm>
<glossdef>
<para>A program that keeps the Image Service VM image
cache at or below its configured maximum size.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Cactus</glossterm>
<glossdef>
<para>An OpenStack grouped release of projects that
came out in the spring of 2011. It included
Compute (nova), Object Storage (swift), and the
Image Service (glance).</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>CALL</glossterm>
<glossdef>
<para>One of the RPC primitives used by the OpenStack
message queue software. Sends a message and waits
for a response.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>capability</glossterm>
<glossdef>
<para>Defines resources for a cell, including CPU,
storage, and networking. Can apply to the specific
services within a cell or a whole cell.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>capacity cache</glossterm>
<glossdef>
<para>A Compute back-end database table that contains
the current workload, amount of free RAM, and
number of VMs running on each host. Used to
determine on which VM a host starts.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>capacity updater</glossterm>
<glossdef>
<para>A notification driver that monitors VM instances
and updates the capacity cache as needed.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>CAST</glossterm>
<glossdef>
<para>One of the RPC primitives used by the OpenStack
message queue software. Sends a message and does
not wait for a response.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>catalog</glossterm>
<glossdef>
<para>
A list of API endpoints that are available to a user
after authentication with the Identity Service.
</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>catalog service</glossterm>
<glossdef>
<para>
An Identity Service that lists API endpoints
that are available to a user after authentication
with the Identity Service.
</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>ceilometer</glossterm>
<glossdef>
<para>The project name for the Telemetry service, which
is an integrated project that provides metering and
measuring facilities for OpenStack.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>cell</glossterm>
<glossdef>
<para>Provides logical partitioning of Compute resources
in a child and parent relationship. Requests are
passed from parent cells to child cells if the
parent cannot provide the requested
resource.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>cell forwarding</glossterm>
<glossdef>
<para>A Compute option that enables parent cells to pass
resource requests to child cells if the parent
cannot provide the requested resource.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>cell manager</glossterm>
<glossdef>
<para>The Compute component that contains a list of the
current capabilities of each host within the cell
and routes requests as appropriate.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>CentOS</glossterm>
<glossdef>
<para>A Linux distribution that is compatible with
OpenStack.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Ceph</glossterm>
<glossdef>
<para>Massively scalable distributed storage system
that consists of an object store, block store, and
POSIX-compatible distributed file system.
Compatible with OpenStack.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>CephFS</glossterm>
<glossdef>
<para>The POSIX-compliant file system provided by
Ceph.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>certificate authority</glossterm>
<glossdef>
<para>A simple certificate authority provided by Compute
for cloudpipe VPNs and VM image decryption.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Challenge-Handshake Authentication Protocol
(CHAP)</glossterm>
<glossdef>
<para>An iSCSI authentication method supported by
Compute.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>chance scheduler</glossterm>
<glossdef>
<para>A scheduling method used by Compute that randomly
chooses an available host from the pool.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>changes since</glossterm>
<glossdef>
<para>A Compute API parameter that downloads
changes to the requested item since your last
request, instead of downloading a new, fresh set
of data and comparing it against the old
data.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Chef</glossterm>
<glossdef>
<para>An operating system configuration management
tool supporting OpenStack deployments.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>child cell</glossterm>
<glossdef>
<para>If a requested resource such as CPU time, disk
storage, or memory is not available in the parent
cell, the request is forwarded to its associated
child cells. If the child cell can fulfill the
request, it does. Otherwise, it attempts to pass
the request to any of its children.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>cinder</glossterm>
<glossdef>
<para>A core OpenStack project that provides block
storage services for VMs.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>CirrOS</glossterm>
<glossdef>
<para>A minimal Linux distribution designed for use as a test
image on clouds such as OpenStack.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Cisco neutron plug-in</glossterm>
<glossdef>
<para>A Networking plug-in for Cisco devices and
technologies including UCS and Nexus.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>cloud architect</glossterm>
<glossdef>
<para>A person who plans, designs, and oversees the
creation of clouds.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>cloud computing</glossterm>
<glossdef>
<para>A model that enables access to a shared pool of
configurable computing resources, such as
networks, servers, storage, applications, and
services, that can be rapidly provisioned and
released with minimal management effort or service
provider interaction.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>cloud controller</glossterm>
<glossdef>
<para>Collection of Compute components that represent the
global state of the cloud, talks to services such
as Identity Service authentication, Object Storage,
and node/storage workers through a queue.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>cloud controller node</glossterm>
<glossdef>
<para>A node that runs network, volume, API, scheduler,
and image services. Each service may be broken out
into separate nodes for scalability or
availability.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Cloud Data Management Interface
(CDMI)</glossterm>
<glossdef>
<para>SINA standard that defines a RESTful API for
managing objects in the cloud, currently
unsupported in OpenStack.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Cloud Infrastructure Management Interface
(CIMI)</glossterm>
<glossdef>
<para>An in-progress specification for cloud
management. Currently unsupported in
OpenStack.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>cloud-init</glossterm>
<glossdef>
<para>A package commonly installed in VM images that
performs initialization of an instance after boot
using information that it retrieves from the
metadata service, such as the SSH public key and
user data.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>cloudadmin</glossterm>
<glossdef>
<para>One of the default roles in the Compute RBAC
system. Grants complete system access.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>cloudpipe</glossterm>
<glossdef>
<para>A Compute service that creates VPNs on a
per-project basis.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>cloudpipe image</glossterm>
<glossdef>
<para>A pre-made VM image that serves as a cloudpipe
server. Essentially, OpenVPN running on
Linux.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>CMDB</glossterm>
<glossdef>
<para>Configuration Management Database.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>command filter</glossterm>
<glossdef>
<para>Lists allowed commands within the Compute rootwrap
facility.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>community project</glossterm>
<glossdef>
<para>A project that is not officially endorsed by the
OpenStack Foundation. If the project is successful
enough, it might be elevated to an incubated
project and then to a core project, or it might be
merged with the main code trunk.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>compression</glossterm>
<glossdef>
<para>Reduce the size of files by special encoding, the file
can be decompressed again to its original content.
OpenStack supports compression at the Linux file
system level but does not support compression for
things such as Object Storage objects or Image Service VM
images.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Compute</glossterm>
<glossdef>
<para>The OpenStack core project that provides compute
services. The project name of the Compute service is nova.
</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Compute API</glossterm>
<glossdef>
<para>The <systemitem class="service">nova-api</systemitem>
daemon provides
access to nova services. Can communicate with
other APIs, such as the Amazon EC2 API.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>compute controller</glossterm>
<glossdef>
<para>The Compute component that chooses suitable hosts
on which to start VM instances.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>compute host</glossterm>
<glossdef>
<para>Physical host dedicated to running compute
nodes.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>compute node</glossterm>
<glossdef>
<para>
A node that runs the <systemitem
class="service">nova-compute</systemitem> daemon
which manages VM instances that provide a wide range
of services such as a web applications and
analytics.
</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Compute service</glossterm>
<glossdef>
<para>Name for the Compute component that
manages VMs.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>compute worker</glossterm>
<glossdef>
<para>The Compute component that runs on each compute
node and manages the VM instance life cycle,
including run, reboot, terminate, attach/detach
volumes, and so on. Provided by the
<systemitem class="service">nova-compute</systemitem>
daemon.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>concatenated object</glossterm>
<glossdef>
<para>A set of segment objects that Object Storage combines
and sends to the client.
</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>conductor</glossterm>
<glossdef>
<para>In Compute, conductor is the process that proxies
database requests from the compute process. Using
conductor improves security because compute nodes do not
need direct access to the database.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>consistency window</glossterm>
<glossdef>
<para>The amount of time it takes for a new Object Storage
object to become accessible to all clients.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>console log</glossterm>
<glossdef>
<para>Contains the output from a Linux VM console in
Compute.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>container</glossterm>
<glossdef>
<para>Organizes and stores objects in Object Storage.
Similar to the concept of a Linux directory but
cannot be nested. Alternative term for an Image Service
container format.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>container auditor</glossterm>
<glossdef>
<para>Checks for missing replicas or incorrect objects
in specified Object Storage containers through queries
to the SQLite back-end database.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>container database</glossterm>
<glossdef>
<para>
A SQLite database that stores Object Storage
containers and container metadata. The container
server accesses this database.
</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>container format</glossterm>
<glossdef>
<para>
A wrapper used by the Image Service that contains a
VM image and its associated metadata, such as
machine state, OS disk size, and so on.
</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>container server</glossterm>
<glossdef>
<para>An Object Storage server that manages containers.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>container service</glossterm>
<glossdef>
<para>The Object Storage component that provides container
services, such as create, delete, list, and so
on.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>controller node</glossterm>
<glossdef>
<para>Alternative term for a cloud controller
node.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>core API</glossterm>
<glossdef>
<para>Depending on context, the core API is either the
OpenStack API or the main API of a specific core
project, such as Compute, Networking, Image Service,
and so on.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>core project</glossterm>
<glossdef>
<para>
An official OpenStack project. Currently consists of
Compute (nova), Object Storage (swift), Image
Service (glance), Identity (keystone), Dashboard
(horizon), Networking (neutron), and Block Storage
(cinder). The Telemetry module (ceilometer) and
Orchestration module (heat) are integrated projects
as of the Havana release. In the Icehouse release,
the Database module (trove) gains integrated project
status.
</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>cost</glossterm>
<glossdef>
<para>Under the Compute distributed scheduler this is
calculated by looking at the capabilities of each
host relative to the flavor of the VM instance
being requested.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>credentials</glossterm>
<glossdef>
<para>
Data that is only known to or accessible by a user
and used to verify that the user is who they say
they are. Credentials are presented to the server
during authentication. Examples include a password,
secret key, digital certificate, fingerprint, and so
on.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Crowbar</glossterm>
<glossdef>
<para>An open source community project by Dell that
aims to provide all necessary services to quickly
deploy clouds.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>current workload</glossterm>
<glossdef>
<para>An element of the Compute capacity cache that is
calculated based on the number of build, snapshot,
migrate, and resize operations currently in
progress on a given host.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>customer</glossterm>
<glossdef>
<para>Alternative term for tenant.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>customization module</glossterm>
<glossdef>
<para>A user-created Python module that is loaded by
horizon to change the look and feel of the
dashboard.</para>
</glossdef>
</glossentry>
</glossdiv>
<!-- .D. -->
<glossdiv>
<title>D</title>
<glossentry>
<glossterm>daemon</glossterm>
<glossdef>
<para>A process that runs in the background and waits
for requests. May or may not listen on a TCP or
UDP port. Do not confuse with a worker.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>DAC</glossterm>
<glossdef>
<para>Discretionary access control. Governs the
ability of subjects to access objects, while
enabling users to make policy decisions and assign
security attributes. The traditional UNIX system
of users, groups, and read-write-execute
permissions is an example of DAC.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>dashboard</glossterm>
<glossdef>
<para>The web-based management interface for
OpenStack. An alternative name for horizon.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>data encryption</glossterm>
<glossdef>
<para>Both Image Service and Compute support encrypted virtual
machine (VM) images (but not instances).
In-transit data encryption is supported in
OpenStack using technologies such as HTTPS, SSL,
TLS, and SSH. Object Storage does not support object
encryption at the application level but may support storage
that uses disk encryption.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>database ID</glossterm>
<glossdef>
<para>A unique ID given to each replica of an Object Storage
database.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>database replicator</glossterm>
<glossdef>
<para>An Object Storage component that copies changes in the
account, container, and object databases to other
nodes.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Database Service</glossterm>
<glossdef>
<para>
An integrated project that provide scalable and
reliable Cloud Database-as-a-Service functionality
for both relational and non-relational database
engines. The project name of Database Service is trove.
</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>deallocate</glossterm>
<glossdef>
<para>The process of removing the association between
a floating IP address and a fixed IP address.
Once this association is removed, the floating IP
returns to the address pool.
</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Debian</glossterm>
<glossdef>
<para>A Linux distribution that is compatible with
OpenStack.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>deduplication</glossterm>
<glossdef>
<para>The process of finding duplicate data at the
disk block, file, and/or object level to minimize
storage use&mdash;currently unsupported within
OpenStack.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>default panel</glossterm>
<glossdef>
<para>The default panel that is displayed when a user
accesses the horizon dashboard.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>default tenant</glossterm>
<glossdef>
<para>New users are assigned to this tenant
if no tenant is specified when a user is
created.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>default token</glossterm>
<glossdef>
<para>An Identity Service token that is not associated with a
specific tenant and is exchanged for a scoped
token.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>delayed delete</glossterm>
<glossdef>
<para>
An option within Image Service so that an image is
deleted after a predefined number of seconds instead
of immediately.
</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>delivery mode</glossterm>
<glossdef>
<para>Setting for the Compute RabbitMQ message delivery
mode; can be set to either transient or
persistent.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>deprecated auth</glossterm>
<glossdef>
<para>An option within Compute that enables administrators
to create and manage users through the
<command>nova-manage</command>
command as opposed to using the Identity Service.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>developer</glossterm>
<glossdef>
<para>One of the default roles in the Compute RBAC system
and is the default role assigned to a new
user.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>device ID</glossterm>
<glossdef>
<para>Maps Object Storage partitions to physical storage
devices.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>device weight</glossterm>
<glossdef>
<para>
Distributes partitions proportionately across
Object Storage devices based on the storage
capacity of each device.
</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>DevStack</glossterm>
<glossdef>
<para>Community project that uses shell scripts to
quickly build complete OpenStack development
environments.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>DHCP</glossterm>
<glossdef>
<para>
Dynamic Host Configuration Protocol. A network
protocol that configures devices that are connected
to a network so that they can communicate on that
network by using the Internet Protocol (IP). The
protocol is implemented in a client-server model
where DHCP clients request configuration data such
as, an IP address, a default route, and one or more
DNS server addresses from a DHCP server.
</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>DHCP agent</glossterm>
<glossdef>
<para>OpenStack Networking agent that provides DHCP services
for virtual networks.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Diablo</glossterm>
<glossdef>
<para>A grouped release of projects related to
OpenStack that came out in the fall of 2011, the
fourth release of OpenStack. It included Compute
(nova 2011.3), Object Storage (swift 1.4.3), and
the Image Service (glance).</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>direct consumer</glossterm>
<glossdef>
<para>An element of the Compute RabbitMQ that comes to
life when a RPC call is executed. It connects to a
direct exchange through a unique exclusive queue,
sends the message, and terminates.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>direct exchange</glossterm>
<glossdef>
<para>A routing table that is created within the Compute
RabbitMQ during RPC calls, one is created for each
RPC call that is invoked.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>direct publisher</glossterm>
<glossdef>
<para>Element of RabbitMQ that provides a response to
an incoming MQ message.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>disassociate</glossterm>
<glossdef>
<para>The process of removing the association between
a floating IP address and fixed IP and thus
returning the floating IP address to the address
pool.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>disk encryption</glossterm>
<glossdef>
<para>The ability to encrypt data at the file system,
disk partition, or whole-disk level. Supported
within Compute VMs.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>disk format</glossterm>
<glossdef>
<para>The underlying format that a disk image for a VM
is stored as within the Image Service back-end store. For
example, AMI, ISO, QCOW2, VMDK, and so on.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>dispersion</glossterm>
<glossdef>
<para>In Object Storage, tools to test and ensure dispersion of
objects and containers to ensure fault
tolerance.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Django</glossterm>
<glossdef>
<para>A web framework used extensively in
horizon.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>DNS</glossterm>
<glossdef>
<para>Domain Name Server. A hierarchical and
distributed naming system for computers, services,
and resources connected to the Internet or a
private network. Associates a human-friendly names
to IP addresses.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>DNS record</glossterm>
<glossdef>
<para>A record that specifies information about a
particular domain and belongs to the
domain.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>dnsmasq</glossterm>
<glossdef>
<para>Daemon that provides DNS, DHCP, BOOTP, and TFTP
services, used by the Compute VLAN manager and
FlatDHCP manager.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>domain</glossterm>
<glossdef>
<para>Separates a web site from other sites. Often,
the domain name has two or more parts that are
separated by dots. For example, yahoo.com,
usa.gov, Harvard.edu, or mail.yahoo.com.</para>
<para>A domain is an entity or container of all
DNS-related information containing one or more
records.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Domain Name Service (DNS)</glossterm>
<glossdef>
<para>In Compute, the support that enables associating
DNS entries with floating IP addresses, nodes, or
cells so that hostnames are consistent across
reboots.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Domain Name System (DNS)</glossterm>
<glossdef>
<para>A system by which Internet domain
name-to-address and address-to-name resolutions
are determined.</para>
<para>DNS helps navigate the Internet by translating
the IP address into an address that is easier to
remember. For example, translating 111.111.111.1
into www.yahoo.com.</para>
<para>All domains and their components, such as mail
servers, utilize DNS to resolve to the appropriate
locations. DNS servers are usually set up in a
master-slave relationship such that failure of the
master invokes the slave. DNS servers might also
be clustered or replicated such that changes made
to one DNS server are automatically propagated to
other active servers.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>download</glossterm>
<glossdef>
<para>The transfer of data, usually in the form of
files, from one computer to another.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>DRTM</glossterm>
<glossdef>
<para>Dynamic root of trust measurement.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>durable exchange</glossterm>
<glossdef>
<para>The Compute RabbitMQ message exchange that remains
active when the server restarts.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>durable queue</glossterm>
<glossdef>
<para>A Compute RabbitMQ message queue that remains
active when the server restarts.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Dynamic Host Configuration Protocol
(DHCP)</glossterm>
<glossdef>
<para>A method to automatically configure networking
for a host at boot time. Provided by both Networking
and Compute.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Dynamic HyperText Markup Language
(DHTML)</glossterm>
<glossdef>
<para>Pages that use HTML, JavaScript, and Cascading
Style Sheets to enable users to interact with a web
page or show simple animation.</para>
</glossdef>
</glossentry>
</glossdiv>
<!-- .E. -->
<glossdiv>
<title>E</title>
<glossentry>
<glossterm>EBS boot volume</glossterm>
<glossdef>
<para>An Amazon EBS storage volume that contains a
bootable VM image, currently unsupported in
OpenStack.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>ebtables</glossterm>
<glossdef>
<para>Used in Compute along with arptables, iptables, and
ip6tables to create firewalls and to ensure
isolation of network communications.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>EC2</glossterm>
<glossdef>
<para>The Amazon commercial compute product, similar
to Compute.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>EC2 access key</glossterm>
<glossdef>
<para>Used along with an EC2 secret key to access the
Compute EC2 API.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>EC2 API</glossterm>
<glossdef>
<para>OpenStack supports accessing the Amazon EC2 API
through Compute.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>EC2 Compatibility API</glossterm>
<glossdef>
<para>A Compute component that enables OpenStack to
communicate with Amazon EC2.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>EC2 secret key</glossterm>
<glossdef>
<para>Used along with an EC2 access key when
communicating with the Compute EC2 API; used to
digitally sign each request.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Elastic Block Storage (EBS)</glossterm>
<glossdef>
<para>The Amazon commercial block storage
product.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>encryption</glossterm>
<glossdef>
<para>OpenStack supports encryption technologies such
as HTTPS, SSH, SSL, TLS, digital certificates, and
data encryption.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>endpoint</glossterm>
<glossdef>
<para>See API endpoint.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>endpoint registry</glossterm>
<glossdef>
<para>Alternative term for an Identity Service catalog.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>endpoint template</glossterm>
<glossdef>
<para>A list of URL and port number endpoints that
indicate where a service, such as Object Storage,
Compute, Identity, and so on, can be
accessed.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>entity</glossterm>
<glossdef>
<para>Any piece of hardware or software that wants to
connect to the network services provided by
Networking, the network connectivity service. An
entity can make use of Networking by implementing a
VIF.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>ephemeral image</glossterm>
<glossdef>
<para>A VM image that does not save changes made to
its volumes and reverts them to their original
state after the instance is terminated.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>ephemeral volume</glossterm>
<glossdef>
<para>Volume that does not save the changes made to it
and reverts to its original state when the current
user relinquishes control.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Essex</glossterm>
<glossdef>
<para>A grouped release of projects related to
OpenStack that came out in April 2012, the fifth
release of OpenStack. It included Compute (nova
2012.1), Object Storage (swift 1.4.8), Image
(glance), Identity (keystone), and Dashboard
(horizon).</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>ESX</glossterm>
<glossdef>
<para>An OpenStack-supported hypervisor.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>ESXi</glossterm>
<glossdef>
<para>An OpenStack-supported hypervisor.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>ebtables</glossterm>
<glossdef>
<para>Filtering tool for a Linux bridging firewall, enabling
filtering of network traffic passing through a Linux bridge.
Used to restrict communications between hosts and/or nodes
in OpenStack Compute along with iptables, arptables, and
ip6tables.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>ETag</glossterm>
<glossdef>
<para>MD5 hash of an object within Object Storage, used to
ensure data integrity.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>euca2ools</glossterm>
<glossdef>
<para>A collection of command-line tools for
administering VMs, most are compatible with
OpenStack.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Eucalyptus Kernel Image (EKI)</glossterm>
<glossdef>
<para>Used along with an ERI to create an EMI.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Eucalyptus Machine Image (EMI)</glossterm>
<glossdef>
<para>VM image container format supported by
Image Service.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Eucalyptus Ramdisk Image (ERI)</glossterm>
<glossdef>
<para>Used along with an EKI to create an EMI.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>evacuate</glossterm>
<glossdef>
<para>The process of migrating one or all virtual
machine (VM) instances from one host to another,
compatible with both shared storage live migration
and block migration.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>exchange</glossterm>
<glossdef>
<para>Alternative term for a RabbitMQ message
exchange.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>exchange type</glossterm>
<glossdef>
<para>A routing algorithm in the Compute RabbitMQ.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>exclusive queue</glossterm>
<glossdef>
<para>
Connected to by a direct consumer in
RabbitMQ&mdash;Compute, the message can be consumed
only by the current connection.
</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>extended attributes (xattrs)</glossterm>
<glossdef>
<para>File system option that enables storage of
additional information beyond owner, group,
permissions, modification time, and so on. The
underlying Object Storage file system must support extended
attributes.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>extension</glossterm>
<glossdef>
<para>
Alternative term for an API extension or
plug-in. In the context of Identity Service, this is
a call that is specific to the implementation, such
as adding support for OpenID.
</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>external network</glossterm>
<glossdef>
<para>A network segment typically used for instance Internet
access.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>extra specs</glossterm>
<glossdef>
<para>Specifies additional requirements
when Compute determines where to start a new
instance. Examples include a minimum amount of
network bandwidth or a GPU.</para>
</glossdef>
</glossentry>
</glossdiv>
<!-- .F. -->
<glossdiv>
<title>F</title>
<glossentry>
<glossterm>FakeLDAP</glossterm>
<glossdef>
<para>An easy method to create a local LDAP directory
for testing Identity Service and Compute. Requires
Redis.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>fan-out exchange</glossterm>
<glossdef>
<para>Within RabbitMQ and Compute it is the messaging
interface that is used by the scheduler service to
receive capability messages from the compute,
volume, and network nodes.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Fedora</glossterm>
<glossdef>
<para>A Linux distribution compatible with
OpenStack.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Fibre Channel</glossterm>
<glossdef>
<para>Storage protocol similar in concept to TCP/IP,
encapsulates SCSI commands and data.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Fibre Channel over Ethernet (FCoE)</glossterm>
<glossdef>
<para>The fibre channel protocol tunneled within
Ethernet.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>fill-first scheduler</glossterm>
<glossdef>
<para>The Compute scheduling method that attempts to fill
a host with VMs rather than starting new VMs on a
variety of hosts.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>filter</glossterm>
<glossdef>
<para>The step in the Compute scheduling process when
hosts that cannot run VMs are eliminated and not
chosen.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>firewall</glossterm>
<glossdef>
<para>Used to restrict communications between hosts
and/or nodes, implemented in Compute using iptables,
arptables, ip6tables, and etables.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Firewall-as-a-Service (FWaaS)</glossterm>
<glossdef>
<para>
A Networking extension that provides perimeter
firewall functionality.
</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>fixed IP address</glossterm>
<glossdef>
<para>An IP address that is associated with the same
instance each time that instance boots, is generally
not accessible to end users or the public
Internet, and used for management of the
instance.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Flat Manager</glossterm>
<glossdef>
<para>The Compute component that gives IP addresses to
authorized nodes and assumes DHCP, DNS, and
routing configuration and services are provided by
something else.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>flat mode injection</glossterm>
<glossdef>
<para>A Compute networking method where the OS network
configuration information is injected into the VM
image before the instance starts.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>flat network</glossterm>
<glossdef>
<para>The Network Controller provides virtual networks
to enable compute servers to interact with each
other and with the public network. All machines
must have a public and private network interface.
A flat network is a private network interface,
which is controlled by the flat_interface option
with flat managers.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>FlatDHCP Manager</glossterm>
<glossdef>
<para>The Compute component that provides dnsmasq (DHCP,
DNS, BOOTP, TFTP) and radvd (routing)
services.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>flavor</glossterm>
<glossdef>
<para>Alternative term for a VM instance type.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>flavor ID</glossterm>
<glossdef>
<para>UUID for each Compute or Image Service VM flavor or
instance type.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>floating IP address</glossterm>
<glossdef>
<para>An IP address that a project can associate
with a VM so that the instance has the same public IP
address each time that it boots. You create a pool
of floating IP addresses and assign them to
instances as they are launched to maintain a
consistent IP address for maintaining DNS
assignment.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Folsom</glossterm>
<glossdef>
<para>A grouped release of projects related to
OpenStack that came out in the fall of 2012, the
sixth release of OpenStack. It includes Compute
(nova), Object Storage (swift), Identity
(keystone), Networking (neutron), Image Service
(glance), and Volumes or Block Storage
(cinder).</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>FormPost</glossterm>
<glossdef>
<para>Object Storage middleware that uploads
(posts) an image through a form on a web
page.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>front end</glossterm>
<glossdef>
<para>The point where a user interacts with a service;
can be an API endpoint, the horizon dashboard, or
a command-line tool.</para>
</glossdef>
</glossentry>
</glossdiv>
<!-- .G. -->
<glossdiv>
<title>G</title>
<glossentry>
<glossterm>gateway</glossterm>
<glossdef>
<para>An IP address, typically assigned to a router, that
passes network traffic between different networks.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Generic Receive Offload (GRO)</glossterm>
<glossdef>
<para>Feature of certain network interface drivers that
combines many smaller received packets into a large packet
before delivery to the kernel IP stack.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Generic Routing Encapsulation (GRE)</glossterm>
<glossdef>
<para>Protocol that encapsulates a wide variety of network
layer protocols inside virtual point-to-point links.
</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>glance</glossterm>
<glossdef>
<para>A core project that provides the OpenStack Image
Service.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>glance API server</glossterm>
<glossdef>
<para>Processes client requests for VMs, updates
Image Service metadata on the registry server, and
communicates with the store adapter to upload VM
images from the back-end store.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>glance registry</glossterm>
<glossdef>
<para>Alternative term for the Image Service image
registry.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>global endpoint template</glossterm>
<glossdef>
<para>The Identity Service endpoint template that contains
services available to all tenants.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>GlusterFS</glossterm>
<glossdef>
<para>A file system designed to aggregate NAS hosts,
compatible with OpenStack.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>golden image</glossterm>
<glossdef>
<para>A method of operating system installation where
a finalized disk image is created and then used by
all nodes without modification.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Graphic Interchange Format (GIF)</glossterm>
<glossdef>
<para>A type of image file that is commonly used for
animated images on web pages.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Graphics Processing Unit (GPU)</glossterm>
<glossdef>
<para>Choosing a host based on the existence of a GPU
is currently unsupported in OpenStack.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Green Threads</glossterm>
<glossdef>
<para>The cooperative threading model used by Python;
reduces race conditions and only context switches
when specific library calls are made. Each
OpenStack service is its own thread.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Grizzly</glossterm>
<glossdef>
<para>Project name for the seventh release of
OpenStack.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>guest OS</glossterm>
<glossdef>
<para>An operating system instance running under the
control of a hypervisor.</para>
</glossdef>
</glossentry>
</glossdiv>
<!-- .H. -->
<glossdiv>
<title>H</title>
<glossentry>
<glossterm>Hadoop</glossterm>
<glossdef>
<para>Apache Hadoop is an open-source software
framework that supports data-intensive distributed
applications.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>handover</glossterm>
<glossdef>
<para>An object state in Object Storage where a new replica of
the object is automatically created due to a drive
failure.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>hard reboot</glossterm>
<glossdef>
<para>A type of reboot where a physical or virtual
power button is pressed as opposed to a graceful,
proper shutdown of the operating system.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Havana</glossterm>
<glossdef>
<para>Project name for the eighth release of
OpenStack.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>heat</glossterm>
<glossdef>
<para>An integrated project that aims to orchestrate
multiple cloud applications for OpenStack.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Heat Orchestration Template (HOT)</glossterm>
<glossdef>
<para>Heat input in the format native to
OpenStack.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>health monitor</glossterm>
<glossdef>
<para>Determines whether back-end members of a VIP
pool can process a request. A pool can have
several health monitors associated with it. When a
pool has several monitors associated with it, all
monitors check each member of the pool. All
monitors must declare a member to be healthy for
it to stay active.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>horizon</glossterm>
<glossdef>
<para>OpenStack project that provides a dashboard,
which is a web interface.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>horizon plug-in</glossterm>
<glossdef>
<para>A plug-in for the OpenStack dashboard
(horizon).</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>host</glossterm>
<glossdef>
<para>A physical computer, not a VM instance
(node).</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>host aggregate</glossterm>
<glossdef>
<para>A method to further subdivide availability zones
into hypervisor pools, a collection of common
hosts.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Host Bus Adapter (HBA)</glossterm>
<glossdef>
<para>Device plugged into a PCI slot such as a fibre
channel or network card.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>HTTP</glossterm>
<glossdef>
<para>Hypertext Transfer Protocol. HTTP is an
application protocol for distributed,
collaborative, hypermedia information systems. It
is the foundation of data communication for the
World Wide Web. Hypertext is structured text that
uses logical links (hyper links) between nodes
containing text. HTTP is the protocol to exchange
or transfer hypertext.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>HTTPS</glossterm>
<glossdef>
<para>Hypertext Transfer Protocol Secure (HTTPS) is a
communications protocol for secure communication
over a computer network, with especially wide
deployment on the Internet. Technically, it is not
a protocol in and of itself; rather, it is the
result of simply layering the Hypertext Transfer
Protocol (HTTP) on top of the SSL/TLS protocol,
thus adding the security capabilities of SSL/TLS
to standard HTTP communications.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Hyper-V</glossterm>
<glossdef>
<para>One of the hypervisors supported by
OpenStack.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>hyper link</glossterm>
<glossdef>
<para>Any kind of text that contains a link to some
other site, commonly found in documents where
clicking on a word or words opens up a different
web site.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Hypertext Transfer Protocol (HTTP)</glossterm>
<glossdef>
<para>The protocol that tells browsers where to go to
find information.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Hypertext Transfer Protocol Secure
(HTTPS)</glossterm>
<glossdef>
<para>Encrypted HTTP communications using SSL or TLS;
most OpenStack API endpoints and many
inter-component communications support HTTPS
communication.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>hypervisor</glossterm>
<glossdef>
<para>Software that arbitrates and controls VM access
to the actual underlying hardware.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>hypervisor pool</glossterm>
<glossdef>
<para>A collection of hypervisors grouped together
through host aggregates.</para>
</glossdef>
</glossentry>
</glossdiv>
<!-- .I. -->
<glossdiv>
<title>I</title>
<glossentry>
<glossterm>IaaS</glossterm>
<glossdef>
<para>
Infrastructure-as-a-Service. IaaS is a provisioning
model in which an organization outsources physical
components of a data center such as storage,
hardware, servers and networking components. A
service provider owns the equipment and is
responsible for housing, operating and maintaining
it. The client typically pays on a per-use
basis. IaaS is a model for providing cloud services.
</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Icehouse</glossterm>
<glossdef>
<para>Project name for the ninth release of OpenStack.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>ICMP</glossterm>
<glossdef>
<para>Internet Control Message Protocol, used by network devices
for control messages. For example, <command>ping</command>
uses ICMP to test connectivity.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>ID number</glossterm>
<glossdef>
<para>Unique numeric ID associated with each user in
Identity Service, conceptually similar to a Linux or LDAP
UID.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Identity API</glossterm>
<glossdef>
<para>Alternative term for the Identity Service
API.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Identity back end</glossterm>
<glossdef>
<para>The source used by Identity Service to retrieve user
information; an OpenLDAP server for example.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Identity Service</glossterm>
<glossdef>
<para>The OpenStack core project that provides a
central directory of users mapped to the OpenStack
services they can access. It also registers endpoints
for OpenStack services. It acts as a common
authentication system. The project name of the
Identity Service is keystone.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Identity Service API</glossterm>
<glossdef>
<para>The API used to access the OpenStack Identity
Service provided through keystone.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>IDS</glossterm>
<glossdef>
<para>Intrusion Detection System</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>image</glossterm>
<glossdef>
<para>A collection of files for a specific operating
system (OS) that you use to create or rebuild a
server. OpenStack provides pre-built images. You
can also create custom images, or snapshots, from
servers that you have launched. Custom images can
be used for data backups or as "gold" images for
additional servers.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Image API</glossterm>
<glossdef>
<para>The Image Service API endpoint for management of VM
images.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>image cache</glossterm>
<glossdef>
<para>Used by Image Service to obtain images on the local host
rather than re-downloading them from
the image server each time one is
requested.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>image ID</glossterm>
<glossdef>
<para>Combination of a URI and UUID used to access
Image Service VM images through the image API.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>image membership</glossterm>
<glossdef>
<para>A list of tenants that can access a given VM
image within Image Service.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>image owner</glossterm>
<glossdef>
<para>The tenant who owns an Image Service virtual
machine image.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>image registry</glossterm>
<glossdef>
<para>A list of VM images that are available through
Image Service.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Image Service</glossterm>
<glossdef>
<para>An OpenStack core project that provides
discovery, registration, and delivery services for disk
and server images. The project name of the Image
Service is glance.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Image Service API</glossterm>
<glossdef>
<para>Alternative name for the glance image
API.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>image status</glossterm>
<glossdef>
<para>The current status of a VM image in Image Service, not
to be confused with the status of a running
instance.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>image store</glossterm>
<glossdef>
<para>The back-end store used by Image Service to store VM
images, options include Object Storage, local file system,
S3, or HTTP.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>image UUID</glossterm>
<glossdef>
<para>UUID used by Image Service to uniquely identify each VM
image.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>incubated project</glossterm>
<glossdef>
<para>A community project may be elevated to this
status and is then promoted to a core
project.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>ingress filtering</glossterm>
<glossdef>
<para>The process of filtering incoming network
traffic. Supported by Compute.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>injection</glossterm>
<glossdef>
<para>The process of putting a file into a virtual
machine image before the instance is
started.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>instance</glossterm>
<glossdef>
<para>A running VM, or a VM in a known state such as
suspended, that can be used like a hardware server.
</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>instance ID</glossterm>
<glossdef>
<para>Alternative term for instance UUID.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>instance state</glossterm>
<glossdef>
<para>The current state of a guest VM image.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>instance tunnels network</glossterm>
<glossdef>
<para>A network segment used for instance traffic tunnels
between compute nodes and the network node.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>instance type</glossterm>
<glossdef>
<para>Describes the parameters of the various virtual
machine images that are available to users,
includes parameters such as CPU, storage, and
memory. Alternative term for flavor.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>instance type ID</glossterm>
<glossdef>
<para>Alternative term for a flavor ID.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>instance UUID</glossterm>
<glossdef>
<para>Unique ID assigned to each guest VM
instance.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>interface</glossterm>
<glossdef>
<para>A physical or virtual device that provides connectivity
to another device or medium.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>interface ID</glossterm>
<glossdef>
<para>Unique ID for a Networking VIF or vNIC in the form
of a UUID.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Internet Service Provider (ISP)</glossterm>
<glossdef>
<para>Any business that provides Internet access to
individuals or businesses.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>ironic</glossterm>
<glossdef>
<para>OpenStack project that provisions bare metal, as
opposed to virtual, machines.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>IP address</glossterm>
<glossdef>
<para>Number that is unique to every computer system
on the Internet. Two versions of the Internet
Protocol (IP) are in use for addresses: IPv4 and
IPv6.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>IP Address Management (IPAM)</glossterm>
<glossdef>
<para>The process of automating IP address allocation,
deallocation, and management. Currently provided
by Compute, melange, and Networking.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>IPL</glossterm>
<glossdef>
<para>Initial Program Loader.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>IPMI</glossterm>
<glossdef>
<para>Intelligent Platform Management Interface. IPMI
is a standardized computer system interface used
by system administrators for out-of-band
management of computer systems and monitoring of
their operation. In layman's terms, it is a way to
manage a computer using a direct network
connection, whether it is turned on or not;
connecting to the hardware rather than an
operating system or login shell.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>ip6tables</glossterm>
<glossdef>
<para>Tool used to set up, maintain, and inspect the tables of
IPv6 packet filter rules in the Linux kernel. In OpenStack
Compute, ip6tables is used along with arptables, ebtables,
and iptables to create firewalls for both nodes and
VMs.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>iptables</glossterm>
<glossdef>
<para>Used along with arptables and ebtables, iptables
create firewalls in Compute. iptables are the tables
provided by the Linux kernel firewall (implemented
as different Netfilter modules) and the chains and
rules it stores. Different kernel modules and
programs are currently used for different
protocols: iptables applies to IPv4, ip6tables to
IPv6, arptables to ARP, and ebtables to Ethernet
frames. Requires root privilege to
manipulate.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>iSCSI</glossterm>
<glossdef>
<para>The SCSI disk protocol tunneled within Ethernet,
supported by Compute, Object Storage, and Image Service.
</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>ISO9960</glossterm>
<glossdef>
<para>One of the VM image disk formats supported by
Image Service.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>itsec</glossterm>
<glossdef>
<para>A default role in the Compute RBAC system that
can quarantine an instance in any
project.</para>
</glossdef>
</glossentry>
</glossdiv>
<!-- .J. -->
<glossdiv>
<title>J</title>
<glossentry>
<glossterm>Java</glossterm>
<glossdef>
<para>A programming language that is used to create
systems that involve more than one computer by way
of a network.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>JavaScript</glossterm>
<glossdef>
<para>A scripting language that is used to build web
pages.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>JavaScript Object Notation (JSON)</glossterm>
<glossdef>
<para>One of the supported response formats in
OpenStack.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Jenkins</glossterm>
<glossdef>
<para>Tool used to run jobs automatically for
OpenStack development.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Juno</glossterm>
<glossdef>
<para>Project name for the tenth release of OpenStack.</para>
</glossdef>
</glossentry>
</glossdiv>
<!-- .K. -->
<glossdiv>
<title>K</title>
<glossentry>
<glossterm>kernel-based VM (KVM)</glossterm>
<glossdef>
<para>An OpenStack-supported hypervisor.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>keystone</glossterm>
<glossdef>
<para>The project that provides OpenStack Identity
services.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Kickstart</glossterm>
<glossdef>
<para>A tool to automate system configuration and
installation on Red Hat, Fedora, and CentOS based
Linux distributions.</para>
</glossdef>
</glossentry>
</glossdiv>
<!-- .L. -->
<glossdiv>
<title>L</title>
<glossentry>
<glossterm>large object</glossterm>
<glossdef>
<para>
An object within Object Storage that is larger than
5&nbsp;GB.
</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Launchpad</glossterm>
<glossdef>
<para>The collaboration site for OpenStack.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Layer-2 network</glossterm>
<glossdef>
<para>Term used for OSI network architecture for the
data link layer.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Layer-3 (L3) agent</glossterm>
<glossdef>
<para>OpenStack Networking agent that provides layer-3
(routing) services for virtual networks.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>libvirt</glossterm>
<glossdef>
<para>Virtualization API library used by OpenStack to
interact with many of its supported
hypervisors.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Linux bridge</glossterm>
<glossdef>
<para>Software that enables multiple VMs to share a
single physical NIC within Compute.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Linux Bridge neutron plug-in</glossterm>
<glossdef>
<para>Enables a Linux bridge to understand
a Networking port, interface attachment, and other
abstractions.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Linux containers (LXC)</glossterm>
<glossdef>
<para>An OpenStack-supported hypervisor.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>live migration</glossterm>
<glossdef>
<para>The ability within Compute to move running virtual
machine instances from one host to another with
only a small service interruption during
switch-over.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>load balancer</glossterm>
<glossdef>
<para>A load balancer is a logical device that
belongs to a cloud account. It is used to
distribute workloads between multiple back-end
systems or services, based on the criteria defined
as part of its configuration.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>load balancing</glossterm>
<glossdef>
<para>The process of spreading client requests between
two or more nodes to improve performance and
availability.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Load-Balancing-as-a-Service (LBaaS)</glossterm>
<glossdef>
<para>Enables Networking to distribute incoming
requests evenly between designated instances.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Logical Volume Manager (LVM)</glossterm>
<glossdef>
<para>Provides a method of allocating space on mass-storage
devices that is more flexible than conventional
partitioning schemes.</para>
</glossdef>
</glossentry>
</glossdiv>
<!-- .M. -->
<glossdiv>
<title>M</title>
<glossentry>
<glossterm>management API</glossterm>
<glossdef>
<para>Alternative term for an admin API.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>management network</glossterm>
<glossdef>
<para>A network segment used for administration, not
accessible to the public Internet.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>manager</glossterm>
<glossdef>
<para>Logical groupings of related code such as the
Block Storage volume manager or network manager.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>manifest</glossterm>
<glossdef>
<para>Used to track segments of a large object within
Object Storage.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>manifest object</glossterm>
<glossdef>
<para>A special Object Storage object that contains the
manifest for a large object.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>marconi</glossterm>
<glossdef>
<para>OpenStack project that provides a queue service
to applications.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>melange</glossterm>
<glossdef>
<para>Project name for OpenStack Network Information
Service. To be merged with Networking.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>membership</glossterm>
<glossdef>
<para>The association between an Image Service VM image and a
tenant. Enables images to be shared with specified
tenants.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>membership list</glossterm>
<glossdef>
<para>A list of tenants that can access a given VM
image within Image Service.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>memcached</glossterm>
<glossdef>
<para>A distributed memory object caching system that
is used by Object Storage for caching.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>memory overcommit</glossterm>
<glossdef>
<para>The ability to start new VM instances based on
the actual memory usage of a host, as opposed to
basing the decision on the amount of RAM each
running instance thinks it has available. Also
known as RAM overcommit.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>message broker</glossterm>
<glossdef>
<para>The software package used to provide AMQP
messaging capabilities within Compute. Default
package is RabbitMQ.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>message bus</glossterm>
<glossdef>
<para>The main virtual communication line used by all
AMQP messages for inter-cloud communications
within Compute.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>message queue</glossterm>
<glossdef>
<para>Passes requests from clients to the appropriate
workers and returns the output to the client after
the job completes.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Metadata agent</glossterm>
<glossdef>
<para>OpenStack Networking agent that provides metadata
services for instances.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Meta-Data Server (MDS)</glossterm>
<glossdef>
<para>Stores CephFS metadata.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>migration</glossterm>
<glossdef>
<para>The process of moving a VM instance from one
host to another.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>multinic</glossterm>
<glossdef>
<para>Facility in Compute that allows each virtual
machine instance to have more than one VIF
connected to it.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Modular Layer 2 (ML2) neutron plug-in</glossterm>
<glossdef>
<para>Can concurrently use multiple
layer-2 networking technologies, such as 802.1Q and
VXLAN, in Networking.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Monitor (LBaaS)</glossterm>
<glossdef>
<para>LBaaS feature that provides availability monitoring
using the <command>ping</command> command, TCP, and
HTTP/HTTPS GET.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Monitor (Mon)</glossterm>
<glossdef>
<para>A Ceph component that communicates with external
clients, checks data state and consistency, and
performs quorum functions.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>multi-factor authentication</glossterm>
<glossdef>
<para>Authentication method that uses two or more
credentials, such as a password and a private key.
Currently not supported in Identity Service.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>multi-host</glossterm>
<glossdef>
<para>High-availability mode for legacy (nova) networking.
Each compute node handles NAT and DHCP and acts as a
gateway for all of the VMs on it. A networking failure
on one compute node doesn't affect VMs on other compute
nodes.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>MultiNic</glossterm>
<glossdef>
<para>Facility in Compute that enables a virtual
machine instance to have more than one VIF
connected to it.</para>
</glossdef>
</glossentry>
</glossdiv>
<!-- .N. -->
<glossdiv>
<title>N</title>
<glossentry>
<glossterm>Nebula</glossterm>
<glossdef>
<para>Released as open source by NASA in 2010 and is
the basis for Compute.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>netadmin</glossterm>
<glossdef>
<para>One of the default roles in the Compute RBAC
system. Enables the user to allocate publicly
accessible IP addresses to instances and change
firewall rules.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>NetApp volume driver</glossterm>
<glossdef>
<para>Enables Compute to communicate with NetApp storage
devices through the NetApp OnCommand Provisioning
Manager.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>network</glossterm>
<glossdef>
<para>A virtual network that provides connectivity
between entities. For example, a collection of
virtual ports that share network connectivity. In
Networking terminology, a network is always a Layer-2
network.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Network Address Translation (NAT)</glossterm>
<glossdef>
<para>The process of modifying IP address information
while in-transit. Supported by Compute and
Networking.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>network controller</glossterm>
<glossdef>
<para>
A Compute daemon that orchestrates the network
configuration of nodes, including IP addresses,
VLANs, and bridging. Also manages routing for both
public and private networks.
</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Network File System (NFS)</glossterm>
<glossdef>
<para>A method for making file systems available over
the network. Supported by OpenStack.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>network ID</glossterm>
<glossdef>
<para>Unique ID assigned to each network segment
within Networking. Same as network UUID</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>network manager</glossterm>
<glossdef>
<para>The Compute component that manages various network
components, such as firewall rules, IP address
allocation, and so on.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>network node</glossterm>
<glossdef>
<para>Any compute node that runs the network worker
daemon.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>network segment</glossterm>
<glossdef>
<para>Represents a virtual, isolated OSI layer-2
subnet in Networking.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Network Time Protocol (NTP)</glossterm>
<glossdef>
<para>A method of keeping a clock for a host or node
correct through communications with a trusted,
accurate time source.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>network UUID</glossterm>
<glossdef>
<para>Unique ID for a Networking network segment.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>network worker</glossterm>
<glossdef>
<para>The nova-network worker daemon, provides
services such as giving an IP address to a booting
nova instance.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Networking</glossterm>
<glossdef>
<para>A core OpenStack project that provides a network
connectivity abstraction layer to OpenStack
Compute. The project name of Networking is
neutron.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Networking API</glossterm>
<glossdef>
<para>API used to access OpenStack Networking. Provides an
extensible architecture to enable custom plug-in
creation.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>neutron</glossterm>
<glossdef>
<para>A core OpenStack project that provides a network
connectivity abstraction layer to OpenStack
Compute.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>neutron API</glossterm>
<glossdef>
<para>An alternative name for Networking API.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>neutron manager</glossterm>
<glossdef>
<para>Enables Compute and Networking integration, which
enables Networking to perform network management for
guest VMs.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>neutron plug-in</glossterm>
<glossdef>
<para>Interface within Networking that enables
organizations to create custom plug-ins for
advanced features such as QoS, ACLs, or
IDS.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Nexenta volume driver</glossterm>
<glossdef>
<para>Provides support for NexentaStor devices in
Compute.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>No ACK</glossterm>
<glossdef>
<para>Disables server-side message acknowledgment in
the Compute RabbitMQ. Increases performance but
decreases reliability.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>node</glossterm>
<glossdef>
<para>A VM instance that runs on a host.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>non-durable exchange</glossterm>
<glossdef>
<para>Message exchange that is cleared when the
service restarts. Its data is not written to
persistent storage.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>non-durable queue</glossterm>
<glossdef>
<para>Message queue that is cleared when the service
restarts. Its data is not written to persistent
storage.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>non-persistent volume</glossterm>
<glossdef>
<para>Alternative term for an ephemeral volume.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>nova</glossterm>
<glossdef>
<para>OpenStack project that provides compute
services.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Nova API</glossterm>
<glossdef>
<para>Alternative term for the Compute
API.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>nova-network</glossterm>
<glossdef>
<para>A Compute component that manages IP address
allocation, firewalls, and other network-related
tasks. This is the legacy networking option and an
alternative to Networking.
</para>
</glossdef>
</glossentry>
</glossdiv>
<!-- .O. -->
<glossdiv>
<title>O</title>
<glossentry>
<glossterm>object</glossterm>
<glossdef>
<para>A BLOB of data held by Object Storage; can be in any
format.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>object auditor</glossterm>
<glossdef>
<para>Opens all objects for an object server and
verifies the MD5 hash, size, and metadata for each
object.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>object expiration</glossterm>
<glossdef>
<para>A configurable option within Object Storage to
automatically delete objects after a specified
amount of time has passed or a certain date is
reached.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>object hash</glossterm>
<glossdef>
<para>Uniquely ID for an Object Storage object.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>object path hash</glossterm>
<glossdef>
<para>Used by Object Storage to determine the location of an
object in the ring. Maps objects to
partitions.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>object replicator</glossterm>
<glossdef>
<para>An Object Storage component that copies and object to
remote partitions for fault tolerance.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>object server</glossterm>
<glossdef>
<para>An Object Storage component that is responsible for
managing objects.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Object Storage</glossterm>
<glossdef>
<para>The OpenStack core project that
provides eventually consistent and redundant
storage and retrieval of fixed digital
content. The project name of OpenStack
Object Storage is swift.
</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Object Storage API</glossterm>
<glossdef>
<para>API used to access OpenStack Object Storage.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Object Storage Device (OSD)</glossterm>
<glossdef>
<para>The Ceph storage daemon.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>object versioning</glossterm>
<glossdef>
<para>
Allows a user to set a flag on an Object Storage
container so that all objects within the container
are versioned.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Oldie</glossterm>
<glossdef>
<para>Term for an Object Storage process that runs
for a long time. Can indicate a hung
process.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Open Cloud Computing Interface
(OCCI)</glossterm>
<glossdef>
<para>A standardized interface for managing compute,
data, and network resources, currently unsupported
in OpenStack.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Open Virtualization Format (OVF)</glossterm>
<glossdef>
<para>Standard for packaging VM images. Supported in
OpenStack.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Open vSwitch neutron plug-in</glossterm>
<glossdef>
<para>Provides support for
Open vSwitch in Networking.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>OpenLDAP</glossterm>
<glossdef>
<para>An open source LDAP server. Supported by both
Compute and Identity Service.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>OpenStack</glossterm>
<glossdef>
<para>
OpenStack is a cloud operating system that controls
large pools of compute, storage, and networking
resources throughout a data center, all managed through
a dashboard that gives administrators control while
empowering their users to provision resources through
a web interface. OpenStack is an open source project licensed
under the Apache License 2.0.
</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>openSUSE</glossterm>
<glossdef>
<para>A Linux distribution that is compatible with
OpenStack.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>operator</glossterm>
<glossdef>
<para>The person responsible for planning and
maintaining an OpenStack installation.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Orchestration</glossterm>
<glossdef>
<para>An integrated project that
orchestrates multiple cloud applications for
OpenStack. The project name of Orchestration is
heat.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>orphan</glossterm>
<glossdef>
<para>
In the context of Object Storage, this is a process
that is not terminated after an upgrade, restart, or
reload of the service.
</para>
</glossdef>
</glossentry>
</glossdiv>
<!-- .P. -->
<glossdiv>
<title>P</title>
<glossentry>
<glossterm>parent cell</glossterm>
<glossdef>
<para>If a requested resource, such as CPU time, disk
storage, or memory, is not available in the parent
cell, the request is forwarded to associated child
cells.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>partition</glossterm>
<glossdef>
<para>
A unit of storage within Object Storage used to
store objects. It exists on top of devices and is,
replicated for fault tolerance.
</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>partition index</glossterm>
<glossdef>
<para>Contains the locations of all Object Storage partitions
within the ring.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>partition shift value</glossterm>
<glossdef>
<para>Used by Object Storage to determine which partition data
should reside on.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>pause</glossterm>
<glossdef>
<para>A VM state where no changes occur (no changes in
memory, network communications stop, etc); the VM
is frozen but not shut down.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>PCI passthrough</glossterm>
<glossdef>
<para>Gives guest VMs exclusive access to a
PCI device. Currently supported in OpenStack Havana
and later releases.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>persistent message</glossterm>
<glossdef>
<para>A message that is stored both in memory and on
disk. The message is not lost after a failure or
restart.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>persistent volume</glossterm>
<glossdef>
<para>Changes to these types of disk volumes are
saved.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>personality file</glossterm>
<glossdef>
<para>
A file used to customize a Compute instance. It can
be used to inject SSH keys or a specific network
configuration.
</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Platform-as-a-Service (PaaS)</glossterm>
<glossdef>
<para>
Provides to the consumer the ability to deploy
applications through a programming language or tools
supported by the cloud platform provider. An example
of Platform-as-a-Service is an Eclipse/Java
programming platform provided with no downloads
required.
</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>plug-in</glossterm>
<glossdef>
<para>Software component providing the actual
implementation for Networking APIs, or for Compute
APIs, depending on the context.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>policy service</glossterm>
<glossdef>
<para>
Component of Identity Service that provides a
rule-management interface and a rule-based
authorization engine.
</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>pool</glossterm>
<glossdef>
<para>A logical set of devices, such as web servers,
that you group together to receive and process
traffic. The load balancing function chooses which
member of the pool handles the new requests or
connections received on the VIP address. Each VIP
has one pool.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>pool member</glossterm>
<glossdef>
<para>An application that runs on the back-end server
in a load-balancing system.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>port</glossterm>
<glossdef>
<para>A virtual network port within Networking; VIFs /
vNICs are connected to a port.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>port UUID</glossterm>
<glossdef>
<para>Unique ID for a Networking port.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>preseed</glossterm>
<glossdef>
<para>A tool to automate system configuration and
installation on Debian-based Linux
distributions.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>private image</glossterm>
<glossdef>
<para>An Image Service VM image that is only available to
specified tenants.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>private IP address</glossterm>
<glossdef>
<para>An IP address used for management and
administration, not available to the public
Internet.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>private network</glossterm>
<glossdef>
<para>The Network Controller provides virtual networks
to enable compute servers to interact with each
other and with the public network. All machines
must have a public and private network interface.
A private network interface can be a flat or VLAN
network interface. A flat network interface is
controlled by the flat_interface with flat
managers. A VLAN network interface is controlled
by the vlan_interface option with VLAN managers.
</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>project</glossterm>
<glossdef>
<para>A logical grouping of users within Compute, used to
define quotas and access to VM images.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>project ID</glossterm>
<glossdef>
<para>User-defined alpha-numeric string in Compute; the
name of a project.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>project VPN</glossterm>
<glossdef>
<para>Alternative term for a cloudpipe.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>promiscuous mode</glossterm>
<glossdef>
<para>Causes the network interface to pass all traffic it
receives to the host rather than passing only the frames
addressed to it.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>provider</glossterm>
<glossdef>
<para>An administrator who has access to all hosts and
instances.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>proxy node</glossterm>
<glossdef>
<para>A node that provides the Object Storage proxy
service.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>proxy server</glossterm>
<glossdef>
<para>Users of Object Storage interact with the service through
the proxy server, which in-turn looks up the
location of the requested data within the ring and
returns the results to the user.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>public API</glossterm>
<glossdef>
<para>An API endpoint used for both service-to-service
communication and end-user interactions.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>public image</glossterm>
<glossdef>
<para>An Image Service VM image that is available to all
tenants.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>public IP address</glossterm>
<glossdef>
<para>An IP address that is accessible to
end-users.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>public key authentication</glossterm>
<glossdef>
<para>Authentication method that uses keys rather than
passwords.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>public network</glossterm>
<glossdef>
<para>The Network Controller provides virtual networks
to enable compute servers to interact with each
other and with the public network. All machines
must have a public and private network interface.
The public network interface is controlled by the
public_interface option.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Puppet</glossterm>
<glossdef>
<para>An operating system configuration-management
tool supported by OpenStack.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Python</glossterm>
<glossdef>
<para>Programming language used extensively in
OpenStack.</para>
</glossdef>
</glossentry>
</glossdiv>
<!-- .Q. -->
<glossdiv>
<title>Q</title>
<glossentry>
<glossterm>QEMU Copy On Write 2 (QCOW2)</glossterm>
<glossdef>
<para>One of the VM image disk formats supported by
Image Service.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Qpid</glossterm>
<glossdef>
<para>Message queue software supported by OpenStack;
an alternative to RabbitMQ.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>quarantine</glossterm>
<glossdef>
<para>If Object Storage finds objects, containers, or accounts
that are corrupt, they are placed in this state,
are not replicated, cannot be read by clients, and
a correct copy is re-replicated.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Quick EMUlator (QEMU)</glossterm>
<glossdef>
<para>QEMU is a generic and open source machine
emulator and virtualizer.</para>
<para>One of the hypervisors supported by OpenStack,
generally used for development purposes.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>quota</glossterm>
<glossdef>
<para>In Compute and Block Storage, the ability to set
resource limits on a per-project basis.
</para>
</glossdef>
</glossentry>
</glossdiv>
<!-- .R. -->
<glossdiv>
<title>R</title>
<glossentry>
<glossterm>RabbitMQ</glossterm>
<glossdef>
<para>The default message queue software used by
OpenStack.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Rackspace Cloud Files</glossterm>
<glossdef>
<para>Released as open source by Rackspace in 2010,
the basis for Object Storage.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>RADOS Block Device (RBD)</glossterm>
<glossdef>
<para>Ceph component that enables a Linux block
device to be striped over multiple distributed
data stores.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>radvd</glossterm>
<glossdef>
<para>The router advertisement daemon, used by the
Compute VLAN manager and FlatDHCP manager to provide
routing services for VM instances.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>RAM filter</glossterm>
<glossdef>
<para>The Compute setting that enables or disables RAM
overcommitment.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>RAM overcommit</glossterm>
<glossdef>
<para>The ability to start new VM instances based on
the actual memory usage of a host, as opposed to
basing the decision on the amount of RAM each
running instance thinks it has available. Also
known as memory overcommit.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>rate limit</glossterm>
<glossdef>
<para>Configurable option within Object Storage to limit
database writes on a per-account and/or
per-container basis.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>raw</glossterm>
<glossdef>
<para>One of the VM image disk formats supported by
Image Service; an unstructured disk image.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>rebalance</glossterm>
<glossdef>
<para>The process of distributing Object Storage partitions
across all drives in the ring; used during initial
ring creation and after ring
reconfiguration.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>reboot</glossterm>
<glossdef>
<para>Either a soft or hard reboot of a server. With a
soft reboot, the operating system is signaled to
restart, which enables a graceful shutdown of
all processes. A hard reboot is the equivalent of
power cycling the server. The virtualization
platform should ensure that the reboot action has
completed successfully even in cases in which the
underlying domain/VM is paused or halted/stopped.
</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>rebuild</glossterm>
<glossdef>
<para>Removes all data on the server and replaces it
with the specified image. Server ID and IP
addresses remain the same.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Recon</glossterm>
<glossdef>
<para>An Object Storage component that collects metrics.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>record</glossterm>
<glossdef>
<para>Belongs to a particular domain and is used to
specify information about the domain. There are
several types of DNS records. Each record type
contains particular information used to describe
the purpose of that record. Examples include mail
exchange (MX) records, which specify the mail
server for a particular domain, and name server
(NS) records, which specify the authoritative name
servers for a domain.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>record ID</glossterm>
<glossdef>
<para>A number within a database that is incremented
each time a change is made. Used by Object Storage when
replicating.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Red Hat Enterprise Linux (RHEL)</glossterm>
<glossdef>
<para>A Linux distribution that is compatible with
OpenStack.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>reference architecture</glossterm>
<glossdef>
<para>A recommended architecture for an OpenStack
cloud.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>region</glossterm>
<glossdef>
<para>A discrete OpenStack environment with dedicated API
endpoints that typically shares only the Identity
Service (keystone) with other regions.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>registry</glossterm>
<glossdef>
<para>Alternative term for the Image Service
registry.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>registry server</glossterm>
<glossdef>
<para>An Image Service that provides VM image metadata
information to clients.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Reliable, Autonomic Distributed Object Store
(RADOS)</glossterm>
<glossdef>
<para>A collection of components that provides object
storage within Ceph. Similar to OpenStack Object
Storage.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Remote Procedure Call (RPC)</glossterm>
<glossdef>
<para>The method used by the Compute RabbitMQ for
intra-service communications.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>replica</glossterm>
<glossdef>
<para>Provides data redundancy and fault tolerance by
creating copies of Object Storage objects, accounts, and
containers so that they are not lost when the
underlying storage fails.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>replica count</glossterm>
<glossdef>
<para>The number of replicas of the data in an Object Storage
ring.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>replication</glossterm>
<glossdef>
<para>The process of copying data to a separate
physical device for fault tolerance and
performance.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>replicator</glossterm>
<glossdef>
<para>The Object Storage back-end process that creates and
manages object replicas.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>request ID</glossterm>
<glossdef>
<para>Unique ID assigned to each request sent to
Compute.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>rescue image</glossterm>
<glossdef>
<para>A special type of VM image that is booted when
an instance is placed into rescue mode. Allows an
administrator to mount the file systems for an
instance to correct the problem.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>resize</glossterm>
<glossdef>
<para>Converts an existing server to a different
flavor, which scales the server up or down.
The original server is saved to enable rollback if
a problem occurs. All resizes must be tested
and explicitly confirmed, at which time the
original server is removed.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>RESTful</glossterm>
<glossdef>
<para>A kind of web service API that uses REST, or
Representational State Transfer. REST is the style
of architecture for hypermedia systems that is
used for the World Wide Web.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>ring</glossterm>
<glossdef>
<para>An entity that maps Object Storage data to partitions. A
separate ring exists for each service, such as
account, object, and container.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>ring builder</glossterm>
<glossdef>
<para>Builds and manages rings within Object Storage, assigns
partitions to devices, and pushes the
configuration to other storage nodes.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Role Based Access Control (RBAC)</glossterm>
<glossdef>
<para>Provides a predefined list of actions that the
user can perform, such as start or stop VMs, reset
passwords, and so on. Supported in both Identity Service
and Compute and can be configured using the horizon
dashboard.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>role</glossterm>
<glossdef>
<para>A personality that a user assumes that enables
them to perform a specific set of operations. A
role includes a set of rights and privileges. A
user assuming that role inherits those rights and
privileges.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>role ID</glossterm>
<glossdef>
<para>Alpha-numeric ID assigned to each Identity Service
role.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>rootwrap</glossterm>
<glossdef>
<para>A feature of Compute that allows the unprivileged
"nova" user to run a specified list of commands as
the Linux root user.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>round-robin scheduler</glossterm>
<glossdef>
<para>Type of Compute scheduler that evenly distributes
instances among available hosts.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>router</glossterm>
<glossdef>
<para>A physical or virtual network device that passes
network traffic between different networks.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>routing key</glossterm>
<glossdef>
<para>The Compute direct exchanges, fanout exchanges, and
topic exchanges use this key to determine how to
process a message; processing varies depending on
exchange type.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>RPC driver</glossterm>
<glossdef>
<para>Modular system that allows the underlying
message queue software of Compute to be changed. For
example, from RabbitMQ to ZeroMQ or Qpid.
</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>rsync</glossterm>
<glossdef>
<para>Used by Object Storage to push object replicas.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>RXTX cap</glossterm>
<glossdef>
<para>Absolute limit on the amount of network traffic
a Compute VM instance can send and receive.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>RXTX quota</glossterm>
<glossdef>
<para>Soft limit on the amount of network traffic a
Compute VM instance can send and receive.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Ryu neutron plug-in</glossterm>
<glossdef>
<para>Enables the Ryu network operating system to
function as a Networking OpenFlow controller.</para>
</glossdef>
</glossentry>
</glossdiv>
<!-- .S. -->
<glossdiv>
<title>S</title>
<glossentry>
<glossterm>S3</glossterm>
<glossdef>
<para>
Object storage service by Amazon; similar in
function to Object Storage, it can act as a back-end
store for Image Service VM images.
</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>sahara</glossterm>
<glossdef>
<para>
OpenStack project that provides a scalable
data-processing stack and associated management
interfaces.
</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>scheduler manager</glossterm>
<glossdef>
<para>A Compute component that determines where VM
instances should start. Uses modular design to
support a variety of scheduler types.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>scoped token</glossterm>
<glossdef>
<para>An Identity Service API access token that is associated
with a specific tenant.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>scrubber</glossterm>
<glossdef>
<para>Checks for and deletes unused VMs; the component
of Image Service that implements delayed delete.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>secret key</glossterm>
<glossdef>
<para>String of text known only by the user; used
along with an access key to make requests to the
Compute API.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>secure shell (SSH)</glossterm>
<glossdef>
<para>Open source tool used to access remote hosts
through an encrypted communications channel, SSH
key injection is supported by Compute.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>security group</glossterm>
<glossdef>
<para>A set of network traffic filtering rules that
are applied to a Compute instance.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>segmented object</glossterm>
<glossdef>
<para>An Object Storage large object that has been broken up
into pieces. The re-assembled object is called a
concatenated object.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>server</glossterm>
<glossdef>
<para>Computer that provides explicit services to the
client software running on that system, often
managing a variety of computer operations.</para>
<para>A server is a VM instance in the Compute system.
Flavor and image are requisite elements when
creating a server.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>server image</glossterm>
<glossdef>
<para>Alternative term for a VM image.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>server UUID</glossterm>
<glossdef>
<para>Unique ID assigned to each guest VM
instance.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>service</glossterm>
<glossdef>
<para>
An OpenStack service, such as Compute, Object
Storage, or Image Service. Provides one or more
endpoints through which users can access resources
and perform operations.
</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>service catalog</glossterm>
<glossdef>
<para>Alternative term for the Identity Service
catalog.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>service ID</glossterm>
<glossdef>
<para>Unique ID assigned to each service that is
available in the Identity Service catalog.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>service registration</glossterm>
<glossdef>
<para>An Identity Service feature that enables services,
such as Compute,
to automatically register with the
catalog.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>service tenant</glossterm>
<glossdef>
<para>Special tenant that contains all
services that are listed in the catalog.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>service token</glossterm>
<glossdef>
<para>An administrator defined token used by Compute to
communicate securely with the Identity Service.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>session back-end</glossterm>
<glossdef>
<para>The method of storage used by horizon to track
client sessions such as local memory, cookies, a
database, or memcached.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>session persistence</glossterm>
<glossdef>
<para>A feature of the load-balancing service. It
attempts to force subsequent connections to a
service to be redirected to the same node as long
as it is online.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>session storage</glossterm>
<glossdef>
<para>A horizon component that stores and tracks
client session information. Implemented through
the Django sessions framework.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>shared IP address</glossterm>
<glossdef>
<para>An IP address that can be assigned to a VM
instance within the shared IP group. Public IP
addresses can be shared across multiple servers
for use in various high availability scenarios.
When an IP address is shared to another server,
the cloud network restrictions are modified to
enable each server to listen to and respond on that
IP address. You can optionally specify that the
target server network configuration be modified.
Shared IP addresses can be used with many standard
heartbeat facilities, such as keepalive, that
monitor for failure and manage IP failover.
</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>shared IP group</glossterm>
<glossdef>
<para>A collection of servers that can share IPs with
other members of the group. Any server in a group
can share one or more public IPs with any other
server in the group. With the exception of the
first server in a shared IP group, servers must be
launched into shared IP groups. A server may
be a member of only one shared IP group.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>shared storage</glossterm>
<glossdef>
<para>Block storage that is simultaneously accessible
by multiple clients, for example, NFS.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Sheepdog</glossterm>
<glossdef>
<para>Distributed block storage system for QEMU,
supported by OpenStack.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Simple Cloud Identity Management
(SCIM)</glossterm>
<glossdef>
<para>Specification for managing identity in the
cloud, currently unsupported by OpenStack.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Single-root I/O Virtualization
(SR-IOV)</glossterm>
<glossdef>
<para>A specification that when implemented by a physical PCIe
device enables it to appear as multiple separate
PCIe devices. This enables multiple virtualized guests
to share direct access to the physical device, offering
improved performance over an equivalent virtual device.
Currently supported in OpenStack Havana and later
releases.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>SmokeStack</glossterm>
<glossdef>
<para>Runs automated tests against the core OpenStack
API; written in Rails.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>snapshot</glossterm>
<glossdef>
<para>A point-in-time copy of an OpenStack storage
volume or image. Use storage volume snapshots to
back up volumes. Use image snapshots to back up
data, or as "gold" images for additional servers.
</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>soft reboot</glossterm>
<glossdef>
<para>A controlled reboot where a VM instance is
properly restarted through operating system
commands.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>SolidFire Volume Driver</glossterm>
<glossdef>
<para>The Block Storage driver for the SolidFire iSCSI
storage appliance.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>SPICE</glossterm>
<glossdef>
<para>
The Simple Protocol for Independent Computing
Environments (SPICE) provides remote desktop access
to guest virtual machines. It is an alternative to
VNC. SPICE is supported by OpenStack.
</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>spread-first scheduler</glossterm>
<glossdef>
<para>The Compute VM scheduling algorithm that attempts
to start a new VM on the host with the least amount
of load.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>SQL-Alchemy</glossterm>
<glossdef>
<para>An open source SQL toolkit for Python, used in
OpenStack.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>SQLite</glossterm>
<glossdef>
<para>A lightweight SQL database, used as the default
persistent storage method in many OpenStack
services.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>stack</glossterm>
<glossdef>
<para>A set of OpenStack resources created and managed by
the Orchestration service according to a given template
(either an AWS CloudFormation template or a
<glossterm>Heat Orchestration Template
(HOT)</glossterm>).</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>StackTach</glossterm>
<glossdef>
<para>Community project that captures Compute AMQP
communications, useful for debugging.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>static IP address</glossterm>
<glossdef>
<para>Alternative term for a fixed IP address.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>StaticWeb</glossterm>
<glossdef>
<para>WSGI middleware component of Object Storage that serves
container data as a static web page.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>storage back end</glossterm>
<glossdef>
<para>The method that a service uses for persistent
storage, such as iSCSI, NFS, or local disk.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>storage node</glossterm>
<glossdef>
<para>An Object Storage node that provides container services,
account services, and object services; controls
the account databases, container databases, and
object storage.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>storage manager</glossterm>
<glossdef>
<para>A XenAPI component that provides a pluggable
interface to support a wide variety of persistent
storage back ends.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>storage manager back end</glossterm>
<glossdef>
<para>A persistent storage method supported by XenAPI,
such as iSCSI or NFS.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>storage services</glossterm>
<glossdef>
<para>Collective name for the Object Storage object services,
container services, and account services.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>strategy</glossterm>
<glossdef>
<para>Specifies the authentication source used by
Image Service or Identity Service.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>subdomain</glossterm>
<glossdef>
<para>A domain within a parent domain. Subdomains
cannot be registered. Subdomains enable you to
delegate domains. Subdomains can themselves have
subdomains, so third-level, fourth-level,
fifth-level, and deeper levels of nesting are
possible.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>subnet</glossterm>
<glossdef>
<para>Logical subdivision of an IP network.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>SUSE Linux Enterprise Server (SLES)</glossterm>
<glossdef>
<para>A Linux distribution that is compatible with
OpenStack.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>suspend</glossterm>
<glossdef>
<para>Alternative term for a paused VM
instance.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>swap</glossterm>
<glossdef>
<para>Disk-based virtual memory, used by operating
systems to provide more memory than is actually
available on the system.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>swawth</glossterm>
<glossdef>
<para>An authentication and authorization service for
Object Storage, implemented through WSGI middleware; uses
Object Storage itself as the persistent backing
store.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>swift</glossterm>
<glossdef>
<para>An OpenStack core project that provides object
storage services.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>swift All in One (SAIO)</glossterm>
<glossdef>
<para>Creates a full Object Storage development environment
within a single VM.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>swift middleware</glossterm>
<glossdef>
<para>Collective term for Object Storage components that
provide additional functionality.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>swift proxy server</glossterm>
<glossdef>
<para>Acts as the gatekeeper to Object Storage and is
responsible for authenticating the user.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>swift storage node</glossterm>
<glossdef>
<para>A node that runs Object Storage account, container, and
object services.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>sync point</glossterm>
<glossdef>
<para>Point in time since the last container and
accounts database sync among nodes within
Object Storage.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>sysadmin</glossterm>
<glossdef>
<para>One of the default roles in the Compute RBAC
system. Enables a user to add other users to a project,
interact with VM images that are
associated with the project, and start and stop VM
(VM) instances.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>system usage</glossterm>
<glossdef>
<para>A Compute component that, along with the
notification system, collects metrics and usage
information. This information can be used for billing.
</para>
</glossdef>
</glossentry>
</glossdiv>
<!-- .T. -->
<glossdiv>
<title>T</title>
<glossentry>
<glossterm>Telemetry</glossterm>
<glossdef>
<para>An integrated project that provides
metering and measuring facilities for OpenStack. The
project name of Telemetry is ceilometer.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>TempAuth</glossterm>
<glossdef>
<para>An authentication facility within Object Storage that
enables Object Storage itself to perform authentication and
authorization. Frequently used in testing and
development.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Tempest</glossterm>
<glossdef>
<para>Automated software test suite designed to run
against the trunk of the OpenStack core
project.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>TempURL</glossterm>
<glossdef>
<para>An Object Storage middleware component that enables creation of URLs for temporary object access.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>tenant</glossterm>
<glossdef>
<para>A group of users, used to isolate access to Compute
resources. An alternative term for a
project.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Tenant API</glossterm>
<glossdef>
<para>An API that is accessible to tenants.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>tenant endpoint</glossterm>
<glossdef>
<para>An Identity Service API endpoint that is associated with
one or more tenants.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>tenant ID</glossterm>
<glossdef>
<para>Unique ID assigned to each tenant within
the Identity Service. The project IDs map to the
tenant IDs.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>token</glossterm>
<glossdef>
<para>An alpha-numeric string of text used to access
OpenStack APIs and resources.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>token services</glossterm>
<glossdef>
<para>An Identity Service component that manages and validates
tokens after a user or tenant has been
authenticated.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>tombstone</glossterm>
<glossdef>
<para>Used to mark Object Storage objects that have been
deleted; ensures that the object is not updated on
another node after it has been deleted.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>topic publisher</glossterm>
<glossdef>
<para>A process that is created when a RPC call is
executed; used to push the message to the topic
exchange.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Torpedo</glossterm>
<glossdef>
<para>Community project used to run automated tests
against the OpenStack API.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>transaction ID</glossterm>
<glossdef>
<para>Unique ID assigned to each Object Storage request; used
for debugging and tracing.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>transient</glossterm>
<glossdef>
<para>Alternative term for non-durable.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>transient exchange</glossterm>
<glossdef>
<para>Alternative term for a non-durable
exchange.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>transient message</glossterm>
<glossdef>
<para>A message that is stored in memory and is lost
after the server is restarted.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>transient queue</glossterm>
<glossdef>
<para>Alternative term for a non-durable queue.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>TripleO</glossterm>
<glossdef>
<para>
TripleO, for OpenStack on OpenStack, is a project to
develop and maintain tooling and infrastructure able to
deploy OpenStack in production, using OpenStack itself
wherever possible.
</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>trove</glossterm>
<glossdef>
<para>OpenStack project that provides database
services to applications.</para>
</glossdef>
</glossentry>
</glossdiv>
<!-- .U. -->
<glossdiv>
<title>U</title>
<glossentry>
<glossterm>Ubuntu</glossterm>
<glossdef>
<para>A Debian-based Linux distribution.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>unscoped token</glossterm>
<glossdef>
<para>Alternative term for an Identity Service default
token.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>updater</glossterm>
<glossdef>
<para>Collective term for a group of Object Storage components
that processes queued and failed updates for
containers and objects.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>user</glossterm>
<glossdef>
<para>In Identity Service, each user is associated with one or
more tenants, and in Compute can be associated
with roles, projects, or both.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>user data</glossterm>
<glossdef>
<para>A blob of data that can be specified by the user
when launching an instance. This data can be
accessed by the instance through the metadata
service or config drive. Commonly used for passing
a shell script that is executed by the instance on
boot.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>User Mode Linux (UML)</glossterm>
<glossdef>
<para>An OpenStack-supported hypervisor.</para>
</glossdef>
</glossentry>
</glossdiv>
<!-- .V. -->
<glossdiv>
<title>V</title>
<glossentry>
<glossterm>VIF UUID</glossterm>
<glossdef>
<para>Unique ID assigned to each Networking VIF.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>VIP</glossterm>
<glossdef>
<para>The primary load balancing configuration object.
Specifies the virtual IP address and port where
client traffic is received. Also defines other
details such as the load balancing method to be
used, protocol, and so on. This entity is
sometimes known in load-balancing products as a
virtual server,
vserver, or
listener.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Virtual Central Processing Unit
(vCPU)</glossterm>
<glossdef>
<para>Sub-divides physical CPUs. Instances can then use those
divisions.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Virtual Disk Image (VDI)</glossterm>
<glossdef>
<para>One of the VM image disk formats supported by
Image Service.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Virtual Hard Disk (VHD)</glossterm>
<glossdef>
<para>One of the VM image disk formats supported by
Image Service.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>virtual IP</glossterm>
<glossdef>
<para>An Internet Protocol (IP) address configured on
the load balancer for use by clients connecting to
a service that is load balanced. Incoming
connections are distributed to back-end nodes
based on the configuration of the load balancer.
</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>virtual machine (VM)</glossterm>
<glossdef>
<para>An operating system instance that runs on top of
a hypervisor. Multiple VMs can run at the same
time on the same physical host.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>virtual network</glossterm>
<glossdef>
<para>An L2 network segment within Networking.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>virtual networking</glossterm>
<glossdef>
<para>A generic term for virtualization of network functions
such as switching, routing, load balancing, and
security using a combination of VMs and overlays on
physical network infrastructure.
</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Virtual Network Computing (VNC)</glossterm>
<glossdef>
<para>Open source GUI and CLI tools used for remote
console access to VMs. Supported by Compute.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Virtual Network InterFace (VIF)</glossterm>
<glossdef>
<para>An interface that is plugged into a port in a
Networking network. Typically a virtual network
interface belonging to a VM.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>virtual port</glossterm>
<glossdef>
<para>Attachment point where a virtual interface
connects to a virtual network.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>virtual private network (VPN)</glossterm>
<glossdef>
<para>Provided by Compute in the form of cloudpipes,
specialized instances that are used to create VPNs
on a per-project basis.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>virtual server</glossterm>
<glossdef>
<para>Alternative term for a VM or guest.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>virtual switch (vSwitch)</glossterm>
<glossdef>
<para>
Software that runs on a host or node and provides
the features and functions of a hardware-based
network switch.
</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>virtual VLAN</glossterm>
<glossdef>
<para>Alternative term for a virtual network.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>VirtualBox</glossterm>
<glossdef>
<para>An OpenStack-supported hypervisor.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>VLAN manager</glossterm>
<glossdef>
<para>A Compute component that provides dnsmasq and radvd
and sets up forwarding to and from cloudpipe
instances.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>VLAN network</glossterm>
<glossdef>
<para>The Network Controller provides virtual networks
to enable compute servers to interact with each
other and with the public network. All machines
must have a public and private network interface.
A VLAN network is a private network interface,
which is controlled by the vlan_interface option
with VLAN managers.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>VM disk (VMDK)</glossterm>
<glossdef>
<para>One of the VM image disk formats supported by
Image Service.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>VM image</glossterm>
<glossdef>
<para>Alternative term for an image.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>VM Remote Control (VMRC)</glossterm>
<glossdef>
<para>Method to access VM instance consoles using a
web browser. Supported by Compute.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>VMware API</glossterm>
<glossdef>
<para>Supports interaction with VMware products in
Compute.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>VMware NSX Neutron plugin</glossterm>
<glossdef>
<para>Provides support for VMware NSX in Neutron.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>VNC proxy</glossterm>
<glossdef>
<para>A Compute component that provides users access to
the consoles of their VM instances through VNC or
VMRC.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>volume</glossterm>
<glossdef>
<para>Disk-based data storage generally represented as
an iSCSI target with a file system that supports
extended attributes; can be persistent or
ephemeral.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Volume API</glossterm>
<glossdef>
<para>Alternative name for the Block Storage API.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>volume controller</glossterm>
<glossdef>
<para>A Block Storage component that oversees and coordinates
storage volume actions.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>volume driver</glossterm>
<glossdef>
<para>Alternative term for a volume plug-in.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>volume ID</glossterm>
<glossdef>
<para>Unique ID applied to each storage volume under
the Block Storage control.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>volume manager</glossterm>
<glossdef>
<para>A Block Storage component that creates, attaches, and
detaches persistent storage volumes.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>volume node</glossterm>
<glossdef>
<para>A Block Storage node that runs the
<systemitem class="service">cinder-volume</systemitem>
daemon.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>volume plug-in</glossterm>
<glossdef>
<para>Provides
support for new and specialized types of
back-end storage for the Block Storage
volume manager.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>volume worker</glossterm>
<glossdef>
<para>A cinder component that interacts with back-end
storage to manage the creation and deletion of
volumes and the creation of compute volumes,
provided by the <systemitem class="service">cinder-volume</systemitem> daemon.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>vSphere</glossterm>
<glossdef>
<para>An OpenStack-supported hypervisor.</para>
</glossdef>
</glossentry>
</glossdiv>
<!-- .W. -->
<glossdiv>
<title>W</title>
<glossentry>
<glossterm>weighing</glossterm>
<glossdef>
<para>A Compute process that determines the suitability
of the VM instances for a job for a particular
host. For example, not enough RAM on the host, too
many CPUs on the host, and so on.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>weight</glossterm>
<glossdef>
<para>Used by Object Storage devices to determine which
storage devices are suitable for the job. Devices
are weighted by size.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>weighted cost</glossterm>
<glossdef>
<para>The sum of each cost used when deciding where to
start a new VM instance in Compute.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>worker</glossterm>
<glossdef>
<para>
A daemon that listens to a queue and carries out
tasks in response to messages. For example, the
<systemitem
class="service">cinder-volume</systemitem> worker
manages volume creation and deletion on storage
arrays.
</para>
</glossdef>
</glossentry>
</glossdiv>
<!-- .X. -->
<glossdiv>
<title>X</title>
<glossentry>
<glossterm>Xen API</glossterm>
<glossdef>
<para>The Xen administrative API, which is supported
by Compute.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Xen Cloud Platform (XCP)</glossterm>
<glossdef>
<para>An OpenStack-supported hypervisor.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Xen Storage Manager Volume Driver</glossterm>
<glossdef>
<para>A Block Storage volume plug-in that enables
communication with the Xen Storage Manager
API.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>XenServer</glossterm>
<glossdef>
<para>An OpenStack-supported hypervisor.</para>
</glossdef>
</glossentry>
</glossdiv>
<!-- .Y. -->
<glossdiv>
<title>Y</title>
<glossentry>
<glossterm/>
<glossdef>
<para/>
</glossdef>
</glossentry>
</glossdiv>
<!-- .Z. -->
<glossdiv>
<title>Z</title>
<glossentry>
<glossterm>ZeroMQ</glossterm>
<glossdef>
<para>Message queue software supported by OpenStack.
An alternative to RabbitMQ. Also spelled
0MQ.</para>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Zuul</glossterm>
<glossdef>
<para>Tool used in OpenStack development to ensure
correctly ordered testing of changes in
parallel.</para>
</glossdef>
</glossentry>
</glossdiv>
<!-- ... -->
</glossary>