openstack/security-doc
Code Issues Proposed changes

Updated from openstack-manuals

Browse Source 
Change-Id: I9fd743f0e4cb0778201b52b7974271474cdfb18d
This commit is contained in:
OpenStack Proposal Bot 2016-08-31 01:20:11 +00:00 committed by KATO Tomoyuki
parent 25ca8a271a
commit d029b6f283
2 changed files with 37 additions and 52 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

87
common/glossary.rst
View File

@ -1475,7 +1475,7 @@ F
implemented in Compute using iptables, arptables, ip6tables, and
ebtables.
FWaaS
FireWall-as-a-Service (FWaaS)
A Networking extension that provides perimeter firewall
functionality.
@ -1780,28 +1780,12 @@ I
.. glossary::
IaaS
Infrastructure-as-a-Service. IaaS is a provisioning model in
which an organization outsources physical components of a data center,
such as storage, hardware, servers, and networking components. A
service provider owns the equipment and is responsible for housing,
operating and maintaining it. The client typically pays on a per-use
basis. IaaS is a model for providing cloud services.
Icehouse
The code name for the ninth release of OpenStack. The
design summit took place in Hong Kong and Ice House is a
street in that city.
ICMP
Internet Control Message Protocol, used by network
devices for control messages. For example,
:command:`ping` uses ICMP to test
connectivity.
ID number
Unique numeric ID associated with each user in Identity,
@ -1835,10 +1819,6 @@ I
The API used to access the OpenStack Identity service provided
through keystone.
IDS
Intrusion Detection System.
image
A collection of files for a specific operating system (OS) that
@ -1908,12 +1888,21 @@ I
A community project may be elevated to this status and is then
promoted to a core project.
Infrastructure-as-a-Service (IaaS)
IaaS is a provisioning model in which an organization outsources
physical components of a data center, such as storage, hardware,
servers, and networking components. A service provider owns the
equipment and is responsible for housing, operating and maintaining
it. The client typically pays on a per-use basis.
IaaS is a model for providing cloud services.
ingress filtering
The process of filtering incoming network traffic. Supported by
Compute.
INI
INI format
The OpenStack configuration files use an INI format to
describe options and their values. It consists of sections
@ -1924,6 +1913,12 @@ I
The process of putting a file into a virtual machine image
before the instance is started.
Input/Output Operations Per Second (IOPS)
IOPS are a common performance measurement used to benchmark computer
storage devices like hard disk drives, solid state drives, and
storage area networks.
instance
A running VM, or a VM in a known state such as suspended, that
@ -1956,6 +1951,15 @@ I
Unique ID assigned to each guest VM instance.
Intelligent Platform Management Interface (IPMI)
IPMI is a standardized computer system interface used by system
administrators for out-of-band management of computer systems and
monitoring of their operation. In layman's terms, it is a way to
manage a computer using a direct network connection, whether it is
turned on or not; connecting to the hardware rather than an operating
system or login shell.
interface
A physical or virtual device that provides connectivity
@ -1966,6 +1970,12 @@ I
Unique ID for a Networking VIF or vNIC in the form of a
UUID.
Internet Control Message Protocol (ICMP)
A network protocol used by network devices for control messages.
For example, :command:`ping` uses ICMP to test
connectivity.
Internet protocol (IP)
Principal communications protocol in the internet protocol
@ -1980,19 +1990,13 @@ I
Storage protocol that encapsulates SCSI frames for transport
over IP networks.
Supported by Compute, Object Storage, and Image service.
ironic
OpenStack project that provisions bare metal, as opposed to
virtual machines.
IOPS
IOPS (Input/Output Operations Per Second) are a common
performance measurement used to benchmark computer storage
devices like hard disk drives, solid state drives, and
storage area networks.
IP address
Number that is unique to every computer system on the Internet.
@ -2005,20 +2009,6 @@ I
and management. Currently provided by Compute, melange, and
Networking.
IPL
Initial Program Loader.
IPMI
Intelligent Platform Management Interface. IPMI is a
standardized computer system interface used by system administrators
for out-of-band management of computer systems and monitoring of their
operation. In layman's terms, it
is a way to manage a computer using a direct network connection,
whether it is turned on or not; connecting to the hardware rather than
an operating system or login shell.
ip6tables
Tool used to set up, maintain, and inspect the tables of IPv6
@ -2043,21 +2033,16 @@ I
ip6tables to IPv6, arptables to ARP, and ebtables to Ethernet frames.
Requires root privilege to manipulate.
IQN
iSCSI Qualified Name (IQN)
iSCSI Qualified Name (IQN) is the format most commonly used
for iSCSI names, which uniquely identify nodes in an iSCSI network.
IQN is the format most commonly used for iSCSI names, which uniquely
identify nodes in an iSCSI network.
All IQNs follow the pattern iqn.yyyy-mm.domain:identifier, where
'yyyy-mm' is the year and month in which the domain was registered,
'domain' is the reversed domain name of the issuing organization, and
'identifier' is an optional string which makes each IQN under the same
domain unique. For example, 'iqn.2015-10.org.openstack.408ae959bce1'.
iSCSI
The SCSI disk protocol tunneled within Ethernet, supported by
Compute, Object Storage, and Image service.
ISO9660
One of the VM image disk formats supported by Image

2
security-guide/source/compute/hypervisor-selection.rst
View File

@ -13,7 +13,7 @@ OpenStack-supported hypervisor technologies, there are significant differences
in the security architecture and features for each hypervisor, particularly
when considering the security threat vectors which are unique to elastic
OpenStack environments. As applications consolidate into single
Infrastructure-as-a-Service (:term:`IaaS`) platforms, instance isolation at
:term:`Infrastructure-as-a-Service (IaaS)` platforms, instance isolation at
the hypervisor level becomes paramount. The requirement for secure isolation
holds true across commercial, government, and military communities.