Services for tenants
Compute
| vCPU and RAM | Ordered per tenant on a cluster. VMs run up to these limits. You can request changes from the tenant page. |
| GPU | Whole GPUs passed through to a VM (PCI passthrough), on clusters that have them. |
| VMs | Any number within the limits. Create them from templates, images or marketplace appliances in the OpenNebula console. |
| Live migration | Running VMs move between hosts during maintenance without stopping. |
Storage
- One storage number covers VM disks, images and files. Tenant admins split it on the tenant page whenever they like, without approval. By default, above 100 GB, 20 GB go to images and 1 GB to files, and VM disks get the rest.
- Files: the first 1 GB is free.
- Backups are ordered separately (0 by default) and kept on separate storage.
Connectivity
| Internet (inet) | Bandwidth from 10 to 1000 Mbps. A main public network (/31 to /26): its first address is the provider edge and your default gateway, the next one is your tenant gateway. You can add more public networks. |
| Corporate network (corpnet) | Corporate organizations only. A list of corporate prefixes, connected through the corporate edge. |
| L2 channel (l2) | A dedicated L2-over-L3 channel that brings a VLAN from your site into a tenant network. Support assigns the VLAN number. After that you bind the channel to a network yourself. |
Any combination is possible: internet and corporate network together, and L2 with either of them or alone. The portal assigns the addresses; you choose only the sizes. You can request network changes (add or remove public networks, replace the main network, corporate prefixes) from the tenant page. They are carried out after approval.
Tenant gateway (igw)
With the internet you choose the igw type; the corporate network and L2 channels need no igw. Whatever the type, the igw has the address right after the egw and is the gateway of your public networks. You can change the type later; the igw is then replaced and its configuration is not kept.
| Advanced (default) | A VyOS router, created and set up for you. |
| Native | The OpenNebula Service Virtual Router, created with the site's settings. |
| Custom | You deploy your own VM for the igw role and give it the igw address. |
- The advanced igw is your own VyOS router VM in your tenant, owned by the tenant admin.
- Private networks behind it reach the internet through address translation (SNAT). Extra public networks are routed through it.
- You sign in with ssh keys: your organization's default key, or the keys you add on the tenant page. You choose the addresses allowed to connect over ssh (any address by default).
OpenNebula services
- FireEdge console with the views your role allows.
- OneFlow services: multi-VM applications with roles, start order and elasticity rules.
- Images, templates and marketplace appliances to start VMs quickly.
- Private networks inside the tenant, and virtual routers between them.
- Quotas per tenant and cluster, as ordered.
Users and access
| Organization admin | Everything in the organization: users, ordering, every tenant. |
| Tenant admin | Only the tenants given: resources, networks, keys, the OpenNebula admin password. |
| Read only | Sees every tenant of the organization and changes nothing. |
Each tenant also has one OpenNebula admin account (<org>-<tenant>-admin) for the console. Its password follows the password policy, and tenant admins can show and change it in the portal.