40b657f993
Change-Id: I2f0c61006ef8885e157eb2b800080407f2bae393
116 lines
3.7 KiB
HTML
116 lines
3.7 KiB
HTML
{% extends "templates/base.tmpl" %}
|
|
{% block pagetitle %}Security Guide{% endblock %}
|
|
{% block title %}
|
|
<a href="http://docs.openstack.org/">Documentation</a> > Security Guide
|
|
{% endblock %}
|
|
{% block content %}
|
|
<div class="container">
|
|
<div class="span-12">
|
|
<div class="photo">
|
|
<img src="../common/images/openstack-security-guide.jpg" width="100%"/>
|
|
</div>
|
|
<p>
|
|
<a class="button" href="http://docs.openstack.org/security-guide/content/" onclick="recordOutboundLink(this, 'Outbound Links', 'security-guide.html');return false;">
|
|
HTML
|
|
</a>
|
|
<a class="button" href="http://docs.openstack.org/security-guide/security-guide.pdf" onclick="recordOutboundLink(this, 'Outbound Links', security-guide.pdf');return false;">
|
|
PDF
|
|
</a>
|
|
</p>
|
|
</div>
|
|
<div class="span-12 last">
|
|
<div class="photo">
|
|
<img src="../common/images/openstack-security-guide-team.jpg" width="100%"/>
|
|
</div>
|
|
<p>
|
|
<b>
|
|
The OpenStack Security Guide provides best practices learned by real cloud operators while hardening their OpenStack deployments.
|
|
</b>
|
|
</p>
|
|
<p>
|
|
This book was written by a close community of security experts from the
|
|
<a href="https://launchpad.net/~openstack-ossg">
|
|
OpenStack Security Group
|
|
</a>
|
|
in a short, intense
|
|
ek-long effort at an undisclosed location. One of the goals for this book is to bring together interested members to capture their collective knowledge and give it
|
|
ck to the OpenStack community.
|
|
</p>
|
|
<p>
|
|
In this book you'll find practical security guidance:
|
|
</p>
|
|
<ul>
|
|
<li>
|
|
Discussions about each OpenStack service
|
|
</li>
|
|
<li>
|
|
Information about isolating security domains and securing domain bridges
|
|
</li>
|
|
<li>
|
|
Public and private cloud considerations
|
|
</li>
|
|
<li>
|
|
Best practices for management layers and access
|
|
</li>
|
|
<li>
|
|
Secure node bootstrapping and hardening
|
|
</li>
|
|
<li>
|
|
SSL, SSH, and PKI availability per OpenStack service
|
|
</li>
|
|
<li>
|
|
API endpoint best practices
|
|
</li>
|
|
<li>
|
|
Security for messaging transport and queues
|
|
</li>
|
|
<li>
|
|
Database and data security best practices and considerations
|
|
</li>
|
|
<li>
|
|
Hypervisor selection advice
|
|
</li>
|
|
<li>
|
|
Security services available for OpenStack instances and trusted images
|
|
</li>
|
|
<li>
|
|
Migration information
|
|
</li>
|
|
<li>
|
|
Logging information and considerations
|
|
</li>
|
|
<li>
|
|
Access control and identity management concepts
|
|
</li>
|
|
</ul>
|
|
<p>
|
|
You can get the
|
|
<a href="http://docs.openstack.org/security-guide/security-guide.pdf" onclick="recordOutboundLink(this, 'Outbound Links', security-guide.pdf');return false;">
|
|
PDF
|
|
</a>
|
|
to print yourself. If you'd like a bound copy,
|
|
<a href="http://www.lulu.com/commerce/index.php?fBuyContent=13956188" onclick="recordOutboundLink(this, 'Outbound Links', 'securitylulu.com');return false;">
|
|
buy it from Lulu
|
|
</a>
|
|
and all proceeds go to the Foundation to support more book sprints efforts like this one.
|
|
</p>
|
|
<p>
|
|
<a href="http://www.lulu.com/commerce/index.php?fBuyContent=13956188">
|
|
<img alt="Support independent publishing: Buy this book on Lulu." border="0" src="http://static.lulu.com/images/services/buy_now_buttons/us/blue2.gif?20130702092152"/>
|
|
</a>
|
|
</p>
|
|
<p align="right">
|
|
<a href="http://creativecommons.org/licenses/by/3.0/us/" rel="license">
|
|
<img alt="Creative Commons License" src="http://i.creativecommons.org/l/by/3.0/us/88x31.png" style="border-width:0"/>
|
|
</a>
|
|
<br/>
|
|
This work is licensed under a
|
|
<a href="http://creativecommons.org/licenses/by/3.0/us/" rel="license">
|
|
Creative Commons Attribution 3.0 United States License
|
|
</a>
|
|
.
|
|
</p>
|
|
</div>
|
|
</div>
|
|
{% endblock content %}
|