)]}'
{"/COMMIT_MSG":[{"author":{"_account_id":12686,"name":"Brian Moss","email":"kallimachos@gmail.com","username":"bmoss"},"change_message_id":"d82fd4473f92949f8a95584aeebdbc0359b6d049","unresolved":false,"context_lines":[{"line_number":6,"context_line":""},{"line_number":7,"context_line":"Removal of passive voice from chapter 7, arch guide"},{"line_number":8,"context_line":""},{"line_number":9,"context_line":"Removal of passive voice from sectino_tech_considerations"},{"line_number":10,"context_line":""},{"line_number":11,"context_line":"Change-Id: Ib49cef77eeb5e9870a1a9fa3d75f325ad090b0b7"},{"line_number":12,"context_line":"Partial-bug: #1429696"}],"source_content_type":"text/x-gerrit-commit-message","patch_set":3,"id":"9aa53dc9_4cbf99fb","line":9,"updated":"2015-04-08 03:14:03.000000000","message":"s/sectino_tech_considerations/section_tech_considerations","commit_id":"10abe1663973159ddfac6b1009f9e76a429ba057"}],"doc/arch-design/hybrid/section_tech_considerations_hybrid.xml":[{"author":{"_account_id":10897,"name":"Joseph Robinson","email":"josephremail@gmail.com","username":"RobiJoe"},"change_message_id":"26e3fc6818142f9ca60ac7e52a78787c830f571e","unresolved":false,"context_lines":[{"line_number":46,"context_line":"    \u003cpara\u003eThe situation can be predictable if different cloud"},{"line_number":47,"context_line":"        platforms are incorporated from inception. If the other clouds are not"},{"line_number":48,"context_line":"        based on OpenStack, compatibility is unattainable. CMP tools must account"},{"line_number":49,"context_line":"        tools must account for the myriad of differences in the way operations"},{"line_number":50,"context_line":"        are handled and services are implemented. Some situations in which these"},{"line_number":51,"context_line":"        incompatibilities can arise include differences between the way in which a"},{"line_number":52,"context_line":"        cloud:\u003c/para\u003e"}],"source_content_type":"application/xml","patch_set":2,"id":"9aa53dc9_7fe4703a","line":49,"updated":"2015-04-07 05:44:40.000000000","message":"Line 49: Remove repetition, remove \"of\":\n\n\"CMP tools must account for the myriad differences in the way operations are handled...\"","commit_id":"41666753b587fceb614efdcc4e1a2b8e8751e1e1"},{"author":{"_account_id":10897,"name":"Joseph Robinson","email":"josephremail@gmail.com","username":"RobiJoe"},"change_message_id":"26e3fc6818142f9ca60ac7e52a78787c830f571e","unresolved":false,"context_lines":[{"line_number":135,"context_line":"        whole, or simply to networks over which an organization has no"},{"line_number":136,"context_line":"        authority. Do not trust this domain."},{"line_number":137,"context_line":"        For example, in a hybrid cloud deployment, any information"},{"line_number":138,"context_line":"        that is traversing between and beyond the multiple clouds is"},{"line_number":139,"context_line":"        of the public domain and untrustworthy.\u003c/para\u003e"},{"line_number":140,"context_line":"    \u003cpara\u003eThe guest security domain, typically used for instance-to-instance"},{"line_number":141,"context_line":"        traffic within a single data center, handles compute"}],"source_content_type":"application/xml","patch_set":2,"id":"9aa53dc9_7fbb500f","line":138,"updated":"2015-04-07 05:44:40.000000000","message":"Line 138 remove \"that is\" and \"multiple\":\n\n\", any information traversing between and beyond the clouds is of the public domain...\"","commit_id":"41666753b587fceb614efdcc4e1a2b8e8751e1e1"},{"author":{"_account_id":10897,"name":"Joseph Robinson","email":"josephremail@gmail.com","username":"RobiJoe"},"change_message_id":"26e3fc6818142f9ca60ac7e52a78787c830f571e","unresolved":false,"context_lines":[{"line_number":144,"context_line":"        not to trust this domain if you are a public cloud provider that"},{"line_number":145,"context_line":"        uses hybrid cloud configurations, or private cloud provider who does"},{"line_number":146,"context_line":"        not have controls on instance use and allows unrestricted internet access"},{"line_number":147,"context_line":"        to instances. Private cloud providers however can use this network as"},{"line_number":148,"context_line":"        an internally trusted network if controls are in place.\u003c/para\u003e"},{"line_number":149,"context_line":"    \u003cpara\u003eThe management security domain is where services interact."},{"line_number":150,"context_line":"        The networks in this domain transport confidential data such as configuration"}],"source_content_type":"application/xml","patch_set":2,"id":"9aa53dc9_7f5230df","line":147,"updated":"2015-04-07 05:44:40.000000000","message":"Line 147 commas\n\n\"Private cloud providers, however, can use this network...\"","commit_id":"41666753b587fceb614efdcc4e1a2b8e8751e1e1"},{"author":{"_account_id":10897,"name":"Joseph Robinson","email":"josephremail@gmail.com","username":"RobiJoe"},"change_message_id":"26e3fc6818142f9ca60ac7e52a78787c830f571e","unresolved":false,"context_lines":[{"line_number":173,"context_line":"        organizations typically do not have control over the choice of"},{"line_number":174,"context_line":"        hypervisor. For example, Amazon uses its own particular version of Xen."},{"line_number":175,"context_line":"        Properly securing your hypervisor is important. Attacks made upon the"},{"line_number":176,"context_line":"        unsecured hypervisor is called a \"hypervisor breakout\"."},{"line_number":177,"context_line":"        Hypervisor breakout describes the event of a"},{"line_number":178,"context_line":"        compromised or malicious instance breaking out of the resource"},{"line_number":179,"context_line":"        controls of the hypervisor and gaining access to the bare"}],"source_content_type":"application/xml","patch_set":2,"id":"9aa53dc9_ff13e00b","line":176,"updated":"2015-04-07 05:44:40.000000000","message":"Line 176 verb subject agreement between \"attacks\" and \"is\":\n\n\"Attacks made upon the unsecured hypervisor are called...\"","commit_id":"41666753b587fceb614efdcc4e1a2b8e8751e1e1"},{"author":{"_account_id":12686,"name":"Brian Moss","email":"kallimachos@gmail.com","username":"bmoss"},"change_message_id":"d82fd4473f92949f8a95584aeebdbc0359b6d049","unresolved":false,"context_lines":[{"line_number":16,"context_line":"        organization\u0027s control. In many cases, it is necessary to"},{"line_number":17,"context_line":"        ensure that the architecture and CMP chosen are adaptable."},{"line_number":18,"context_line":"        In this situation, applications cross diverse platforms and are"},{"line_number":19,"context_line":"        located in diverse locations. All of these factors will influence"},{"line_number":20,"context_line":"        and add complexity to the design of the hybrid cloud architecture.\u003c/para\u003e"},{"line_number":21,"context_line":"    \u003cpara\u003eIncompatibilities with other cloud platforms are inevitable,"},{"line_number":22,"context_line":"        however, clouds that are based on the same version and distribution"}],"source_content_type":"application/xml","patch_set":3,"id":"9aa53dc9_cc5849fd","line":19,"updated":"2015-04-08 03:14:03.000000000","message":"passive: \u0027are located\u0027\nfuture: \u0027will influence\u0027","commit_id":"10abe1663973159ddfac6b1009f9e76a429ba057"},{"author":{"_account_id":12686,"name":"Brian Moss","email":"kallimachos@gmail.com","username":"bmoss"},"change_message_id":"d82fd4473f92949f8a95584aeebdbc0359b6d049","unresolved":false,"context_lines":[{"line_number":19,"context_line":"        located in diverse locations. All of these factors will influence"},{"line_number":20,"context_line":"        and add complexity to the design of the hybrid cloud architecture.\u003c/para\u003e"},{"line_number":21,"context_line":"    \u003cpara\u003eIncompatibilities with other cloud platforms are inevitable,"},{"line_number":22,"context_line":"        however, clouds that are based on the same version and distribution"},{"line_number":23,"context_line":"        of OpenStack are unlikely to experience any issues.\u003c/para\u003e"},{"line_number":24,"context_line":"    \u003cpara\u003eThose that exclusively use the same version of OpenStack should"},{"line_number":25,"context_line":"        have no issues, regardless of distribution. The newer the distribution in"}],"source_content_type":"application/xml","patch_set":3,"id":"9aa53dc9_cc0f29e0","line":22,"updated":"2015-04-08 03:14:03.000000000","message":"s/clouds that are based/clouds using the","commit_id":"10abe1663973159ddfac6b1009f9e76a429ba057"},{"author":{"_account_id":12686,"name":"Brian Moss","email":"kallimachos@gmail.com","username":"bmoss"},"change_message_id":"d82fd4473f92949f8a95584aeebdbc0359b6d049","unresolved":false,"context_lines":[{"line_number":21,"context_line":"    \u003cpara\u003eIncompatibilities with other cloud platforms are inevitable,"},{"line_number":22,"context_line":"        however, clouds that are based on the same version and distribution"},{"line_number":23,"context_line":"        of OpenStack are unlikely to experience any issues.\u003c/para\u003e"},{"line_number":24,"context_line":"    \u003cpara\u003eThose that exclusively use the same version of OpenStack should"},{"line_number":25,"context_line":"        have no issues, regardless of distribution. The newer the distribution in"},{"line_number":26,"context_line":"        question, the less likely it is that there will be"},{"line_number":27,"context_line":"        incompatibilities between version. The OpenStack community has established"}],"source_content_type":"application/xml","patch_set":3,"id":"9aa53dc9_4c0439bf","line":24,"updated":"2015-04-08 03:14:03.000000000","message":"s/Those/Clouds","commit_id":"10abe1663973159ddfac6b1009f9e76a429ba057"},{"author":{"_account_id":12686,"name":"Brian Moss","email":"kallimachos@gmail.com","username":"bmoss"},"change_message_id":"d82fd4473f92949f8a95584aeebdbc0359b6d049","unresolved":false,"context_lines":[{"line_number":24,"context_line":"    \u003cpara\u003eThose that exclusively use the same version of OpenStack should"},{"line_number":25,"context_line":"        have no issues, regardless of distribution. The newer the distribution in"},{"line_number":26,"context_line":"        question, the less likely it is that there will be"},{"line_number":27,"context_line":"        incompatibilities between version. The OpenStack community has established"},{"line_number":28,"context_line":"        an initiative to define core functions that need to remain backward"},{"line_number":29,"context_line":"        compatible between supported versions.\u003c/para\u003e"},{"line_number":30,"context_line":"      \u003cnote\u003e"}],"source_content_type":"application/xml","patch_set":3,"id":"9aa53dc9_ec2f8d3c","line":27,"updated":"2015-04-08 03:14:03.000000000","message":"s/version/versions\n\nrephrase: \u0027An OpenStack community initiative defines core functions\u0027","commit_id":"10abe1663973159ddfac6b1009f9e76a429ba057"},{"author":{"_account_id":12686,"name":"Brian Moss","email":"kallimachos@gmail.com","username":"bmoss"},"change_message_id":"d82fd4473f92949f8a95584aeebdbc0359b6d049","unresolved":false,"context_lines":[{"line_number":36,"context_line":"        an application or architecture makes use of these features, it will be"},{"line_number":37,"context_line":"        difficult to migrate to or use other types of environments.\u003c/para\u003e"},{"line_number":38,"context_line":"      \u003cwarning\u003e"},{"line_number":39,"context_line":"        \u003cpara\u003eAnyone considering incorporating older versions of OpenStack prior"},{"line_number":40,"context_line":"           to Havana should consider carefully before attempting to incorporate"},{"line_number":41,"context_line":"           functionality between versions. Internal differences in older"},{"line_number":42,"context_line":"           versions may be so great that the best approach might be to"}],"source_content_type":"application/xml","patch_set":3,"id":"9aa53dc9_2ced75ef","line":39,"updated":"2015-04-08 03:14:03.000000000","message":"s/considering incorporating/planning to use","commit_id":"10abe1663973159ddfac6b1009f9e76a429ba057"},{"author":{"_account_id":12686,"name":"Brian Moss","email":"kallimachos@gmail.com","username":"bmoss"},"change_message_id":"d82fd4473f92949f8a95584aeebdbc0359b6d049","unresolved":false,"context_lines":[{"line_number":41,"context_line":"           functionality between versions. Internal differences in older"},{"line_number":42,"context_line":"           versions may be so great that the best approach might be to"},{"line_number":43,"context_line":"           consider the versions to be essentially diverse platforms, as"},{"line_number":44,"context_line":"           different as OpenStack and Amazon Web Services or Microsoft Azure.\u003c/para\u003e"},{"line_number":45,"context_line":"      \u003c/warning\u003e"},{"line_number":46,"context_line":"    \u003cpara\u003eThe situation can be predictable if different cloud"},{"line_number":47,"context_line":"        platforms are incorporated from inception. If the other clouds are not"}],"source_content_type":"application/xml","patch_set":3,"id":"9aa53dc9_ecbd4dd8","line":44,"updated":"2015-04-08 03:14:03.000000000","message":"s/OpenStack and Amazon/OpenStack is from Amazon","commit_id":"10abe1663973159ddfac6b1009f9e76a429ba057"},{"author":{"_account_id":12686,"name":"Brian Moss","email":"kallimachos@gmail.com","username":"bmoss"},"change_message_id":"d82fd4473f92949f8a95584aeebdbc0359b6d049","unresolved":false,"context_lines":[{"line_number":45,"context_line":"      \u003c/warning\u003e"},{"line_number":46,"context_line":"    \u003cpara\u003eThe situation can be predictable if different cloud"},{"line_number":47,"context_line":"        platforms are incorporated from inception. If the other clouds are not"},{"line_number":48,"context_line":"        based on OpenStack, compatibility is unattainable. CMP tools must account"},{"line_number":49,"context_line":"        for the myriad differences in the way operations are handled and services"},{"line_number":50,"context_line":"        are implemented. Some situations in which these"},{"line_number":51,"context_line":"        incompatibilities can arise include differences between the way in which a"}],"source_content_type":"application/xml","patch_set":3,"id":"9aa53dc9_2c9b3574","line":48,"updated":"2015-04-08 03:14:03.000000000","message":"Rephrase the first two sentences:\n\nIf an environment includes non-OpenStack clouds, it may experience compatibility problems.","commit_id":"10abe1663973159ddfac6b1009f9e76a429ba057"},{"author":{"_account_id":12686,"name":"Brian Moss","email":"kallimachos@gmail.com","username":"bmoss"},"change_message_id":"d82fd4473f92949f8a95584aeebdbc0359b6d049","unresolved":false,"context_lines":[{"line_number":47,"context_line":"        platforms are incorporated from inception. If the other clouds are not"},{"line_number":48,"context_line":"        based on OpenStack, compatibility is unattainable. CMP tools must account"},{"line_number":49,"context_line":"        for the myriad differences in the way operations are handled and services"},{"line_number":50,"context_line":"        are implemented. Some situations in which these"},{"line_number":51,"context_line":"        incompatibilities can arise include differences between the way in which a"},{"line_number":52,"context_line":"        cloud:\u003c/para\u003e"},{"line_number":53,"context_line":"    \u003citemizedlist\u003e"}],"source_content_type":"application/xml","patch_set":3,"id":"9aa53dc9_cc828900","line":50,"updated":"2015-04-08 03:14:03.000000000","message":"passive: \u0027are handled\u0027\n\npassive: \u0027are implemented\u0027","commit_id":"10abe1663973159ddfac6b1009f9e76a429ba057"},{"author":{"_account_id":12686,"name":"Brian Moss","email":"kallimachos@gmail.com","username":"bmoss"},"change_message_id":"d82fd4473f92949f8a95584aeebdbc0359b6d049","unresolved":false,"context_lines":[{"line_number":70,"context_line":"    \u003cpara\u003eOne of the primary reasons many organizations turn to a"},{"line_number":71,"context_line":"        hybrid cloud system is to increase capacity without having to"},{"line_number":72,"context_line":"        make large capital investments.\u003c/para\u003e"},{"line_number":73,"context_line":"    \u003cpara\u003eCapacity, and the placement of workloads,"},{"line_number":74,"context_line":"        need to be accounted for when designing for a mostly"},{"line_number":75,"context_line":"        internally-operated cloud."},{"line_number":76,"context_line":"        The long-term capacity plan for this design needs to"}],"source_content_type":"application/xml","patch_set":3,"id":"9aa53dc9_8ccb6153","line":73,"updated":"2015-04-08 03:14:03.000000000","message":"passive: \u0027need to be accounted for\u0027","commit_id":"10abe1663973159ddfac6b1009f9e76a429ba057"},{"author":{"_account_id":12686,"name":"Brian Moss","email":"kallimachos@gmail.com","username":"bmoss"},"change_message_id":"d82fd4473f92949f8a95584aeebdbc0359b6d049","unresolved":false,"context_lines":[{"line_number":74,"context_line":"        need to be accounted for when designing for a mostly"},{"line_number":75,"context_line":"        internally-operated cloud."},{"line_number":76,"context_line":"        The long-term capacity plan for this design needs to"},{"line_number":77,"context_line":"        incorporate growth over time to prevent the need to"},{"line_number":78,"context_line":"        permanently burst into, and occupy, a potentially more"},{"line_number":79,"context_line":"        expensive external cloud. In order to avoid this scenario, we"},{"line_number":80,"context_line":"        recommend accounting for the future applications, capacity"}],"source_content_type":"application/xml","patch_set":3,"id":"9aa53dc9_aceaa5aa","line":77,"updated":"2015-04-08 03:14:03.000000000","message":"diction: is \u0027burst into\u0027 a technical term? If not, perhaps s/burst/extend","commit_id":"10abe1663973159ddfac6b1009f9e76a429ba057"},{"author":{"_account_id":12686,"name":"Brian Moss","email":"kallimachos@gmail.com","username":"bmoss"},"change_message_id":"d82fd4473f92949f8a95584aeebdbc0359b6d049","unresolved":false,"context_lines":[{"line_number":76,"context_line":"        The long-term capacity plan for this design needs to"},{"line_number":77,"context_line":"        incorporate growth over time to prevent the need to"},{"line_number":78,"context_line":"        permanently burst into, and occupy, a potentially more"},{"line_number":79,"context_line":"        expensive external cloud. In order to avoid this scenario, we"},{"line_number":80,"context_line":"        recommend accounting for the future applications, capacity"},{"line_number":81,"context_line":"        requirements and plan growth appropriately.\u003c/para\u003e"},{"line_number":82,"context_line":"    \u003cpara\u003eUnpredictability is a side affect of capacity planning. It is"}],"source_content_type":"application/xml","patch_set":3,"id":"9aa53dc9_2cd7b5ee","line":79,"updated":"2015-04-08 03:14:03.000000000","message":"remove comma and s/applications/applications\u0027","commit_id":"10abe1663973159ddfac6b1009f9e76a429ba057"},{"author":{"_account_id":12686,"name":"Brian Moss","email":"kallimachos@gmail.com","username":"bmoss"},"change_message_id":"d82fd4473f92949f8a95584aeebdbc0359b6d049","unresolved":false,"context_lines":[{"line_number":78,"context_line":"        permanently burst into, and occupy, a potentially more"},{"line_number":79,"context_line":"        expensive external cloud. In order to avoid this scenario, we"},{"line_number":80,"context_line":"        recommend accounting for the future applications, capacity"},{"line_number":81,"context_line":"        requirements and plan growth appropriately.\u003c/para\u003e"},{"line_number":82,"context_line":"    \u003cpara\u003eUnpredictability is a side affect of capacity planning. It is"},{"line_number":83,"context_line":"        difficult to predict the amount of load a particular application"},{"line_number":84,"context_line":"        might incur if the number of users fluctuate, or the application"}],"source_content_type":"application/xml","patch_set":3,"id":"9aa53dc9_4cf3199f","line":81,"updated":"2015-04-08 03:14:03.000000000","message":"diction: \u0027side affect\u0027 should be \u0027side effect\u0027, but actually I think this is the wrong phrase anyway. Perhaps s/side affect of/consideration for","commit_id":"10abe1663973159ddfac6b1009f9e76a429ba057"},{"author":{"_account_id":12686,"name":"Brian Moss","email":"kallimachos@gmail.com","username":"bmoss"},"change_message_id":"d82fd4473f92949f8a95584aeebdbc0359b6d049","unresolved":false,"context_lines":[{"line_number":89,"context_line":"    \u003cpara\u003eOversubscription is a method to emulate more capacity than"},{"line_number":90,"context_line":"        may physically be present. For example, a physical"},{"line_number":91,"context_line":"        hypervisor node with 32\u0026nbsp;GB RAM may host 24"},{"line_number":92,"context_line":"        instances, each provisioned with 2\u0026nbsp;GB RAM. As long"},{"line_number":93,"context_line":"        as all 24 of them are not concurrently utilizing 2 full"},{"line_number":94,"context_line":"        gigabytes, this arrangement is a non-issue. However, some"},{"line_number":95,"context_line":"        hosts take oversubscription to extremes and, as a result,"}],"source_content_type":"application/xml","patch_set":3,"id":"9aa53dc9_0c2cf100","line":92,"updated":"2015-04-08 03:14:03.000000000","message":"s/of them/instances","commit_id":"10abe1663973159ddfac6b1009f9e76a429ba057"},{"author":{"_account_id":12686,"name":"Brian Moss","email":"kallimachos@gmail.com","username":"bmoss"},"change_message_id":"d82fd4473f92949f8a95584aeebdbc0359b6d049","unresolved":false,"context_lines":[{"line_number":119,"context_line":"        \u003clistitem\u003e"},{"line_number":120,"context_line":"            \u003cpara\u003eData\u003c/para\u003e"},{"line_number":121,"context_line":"        \u003c/listitem\u003e"},{"line_number":122,"context_line":"    \u003c/orderedlist\u003e"},{"line_number":123,"context_line":"    \u003cpara\u003eThese security domains can be mapped individually to the"},{"line_number":124,"context_line":"        organization\u0027s installation or combined. For example, some"},{"line_number":125,"context_line":"        deployment topologies combine both guest and data domains onto"}],"source_content_type":"application/xml","patch_set":3,"id":"9aa53dc9_ac38653e","line":122,"updated":"2015-04-08 03:14:03.000000000","message":"passive: can be mapped ... or combined","commit_id":"10abe1663973159ddfac6b1009f9e76a429ba057"},{"author":{"_account_id":12686,"name":"Brian Moss","email":"kallimachos@gmail.com","username":"bmoss"},"change_message_id":"d82fd4473f92949f8a95584aeebdbc0359b6d049","unresolved":false,"context_lines":[{"line_number":126,"context_line":"        one physical network, whereas other topologies physically"},{"line_number":127,"context_line":"        separate the networks. In each case, the cloud operator"},{"line_number":128,"context_line":"        should be aware of the appropriate security concerns. Security"},{"line_number":129,"context_line":"        domains should be mapped out against the specific OpenStack"},{"line_number":130,"context_line":"        deployment topology. The domains and their trust requirements"},{"line_number":131,"context_line":"        depend upon whether the cloud instance is public, private, or"},{"line_number":132,"context_line":"        hybrid.\u003c/para\u003e"}],"source_content_type":"application/xml","patch_set":3,"id":"9aa53dc9_8c4001a7","line":129,"updated":"2015-04-08 03:14:03.000000000","message":"passive: \u0027should be mapped\u0027\n\nredundant: \u0027out against\u0027  Remove \u0027out\u0027","commit_id":"10abe1663973159ddfac6b1009f9e76a429ba057"},{"author":{"_account_id":12686,"name":"Brian Moss","email":"kallimachos@gmail.com","username":"bmoss"},"change_message_id":"d82fd4473f92949f8a95584aeebdbc0359b6d049","unresolved":false,"context_lines":[{"line_number":136,"context_line":"        authority. Do not trust this domain."},{"line_number":137,"context_line":"        For example, in a hybrid cloud deployment, any information traversing"},{"line_number":138,"context_line":"        between and beyond the clouds is of the public domain and untrustworthy.\u003c/para\u003e"},{"line_number":139,"context_line":"    \u003cpara\u003eThe guest security domain, typically used for instance-to-instance"},{"line_number":140,"context_line":"        traffic within a single data center, handles compute"},{"line_number":141,"context_line":"        data. Instances on the cloud generate the data, but not services that"},{"line_number":142,"context_line":"        support the operation of the cloud, such as API calls. We recommend not"}],"source_content_type":"application/xml","patch_set":3,"id":"9aa53dc9_4c4af9c6","line":139,"updated":"2015-04-08 03:14:03.000000000","message":"passive: \u0027used\u0027","commit_id":"10abe1663973159ddfac6b1009f9e76a429ba057"},{"author":{"_account_id":12686,"name":"Brian Moss","email":"kallimachos@gmail.com","username":"bmoss"},"change_message_id":"d82fd4473f92949f8a95584aeebdbc0359b6d049","unresolved":false,"context_lines":[{"line_number":140,"context_line":"        traffic within a single data center, handles compute"},{"line_number":141,"context_line":"        data. Instances on the cloud generate the data, but not services that"},{"line_number":142,"context_line":"        support the operation of the cloud, such as API calls. We recommend not"},{"line_number":143,"context_line":"        not to trust this domain if you are a public cloud provider that"},{"line_number":144,"context_line":"        uses hybrid cloud configurations, or private cloud provider who does"},{"line_number":145,"context_line":"        not have controls on instance use and allows unrestricted internet access"},{"line_number":146,"context_line":"        to instances. Private cloud providers, however, can use this network as"}],"source_content_type":"application/xml","patch_set":3,"id":"9aa53dc9_cc0cc996","line":143,"updated":"2015-04-08 03:14:03.000000000","message":"s/not not/not","commit_id":"10abe1663973159ddfac6b1009f9e76a429ba057"},{"author":{"_account_id":12686,"name":"Brian Moss","email":"kallimachos@gmail.com","username":"bmoss"},"change_message_id":"d82fd4473f92949f8a95584aeebdbc0359b6d049","unresolved":false,"context_lines":[{"line_number":141,"context_line":"        data. Instances on the cloud generate the data, but not services that"},{"line_number":142,"context_line":"        support the operation of the cloud, such as API calls. We recommend not"},{"line_number":143,"context_line":"        not to trust this domain if you are a public cloud provider that"},{"line_number":144,"context_line":"        uses hybrid cloud configurations, or private cloud provider who does"},{"line_number":145,"context_line":"        not have controls on instance use and allows unrestricted internet access"},{"line_number":146,"context_line":"        to instances. Private cloud providers, however, can use this network as"},{"line_number":147,"context_line":"        an internally trusted network if controls are in place.\u003c/para\u003e"}],"source_content_type":"application/xml","patch_set":3,"id":"9aa53dc9_ac0f4587","line":144,"updated":"2015-04-08 03:14:03.000000000","message":"s/or private/or a private","commit_id":"10abe1663973159ddfac6b1009f9e76a429ba057"},{"author":{"_account_id":12686,"name":"Brian Moss","email":"kallimachos@gmail.com","username":"bmoss"},"change_message_id":"d82fd4473f92949f8a95584aeebdbc0359b6d049","unresolved":false,"context_lines":[{"line_number":153,"context_line":"        information pertaining to the storage services within"},{"line_number":154,"context_line":"        OpenStack. The data that crosses this network has integrity and"},{"line_number":155,"context_line":"        confidentiality requirements. Depending on the type of deployment there"},{"line_number":156,"context_line":"        may also be availability requirements. The trust level of this network"},{"line_number":157,"context_line":"        is heavily dependent on deployment decisions, therefore is not assigned"},{"line_number":158,"context_line":"        a default level of trust.\u003c/para\u003e"},{"line_number":159,"context_line":"    \u003cpara\u003eWhen operating or utilizing public or private clouds, consider the management"}],"source_content_type":"application/xml","patch_set":3,"id":"9aa53dc9_6c225d03","line":156,"updated":"2015-04-08 03:14:03.000000000","message":"passive: \u0027is not assigned\u0027","commit_id":"10abe1663973159ddfac6b1009f9e76a429ba057"},{"author":{"_account_id":12686,"name":"Brian Moss","email":"kallimachos@gmail.com","username":"bmoss"},"change_message_id":"d82fd4473f92949f8a95584aeebdbc0359b6d049","unresolved":false,"context_lines":[{"line_number":165,"context_line":"        \u003cpara\u003eBe mindful of consistency when utilizing third party"},{"line_number":166,"context_line":"        clouds to explore authentication options.\u003c/para\u003e"},{"line_number":167,"context_line":"      \u003c/warning\u003e"},{"line_number":168,"context_line":"    \u003cpara\u003eDue to the passing of user names, passwords, generating tokens between"},{"line_number":169,"context_line":"        client machines and API endpoints, we recommend the placement of API"},{"line_number":170,"context_line":"        services behind hardware to perform SSL termination.\u003c/para\u003e"},{"line_number":171,"context_line":"    \u003cpara\u003eThe hypervisor also requires a security assessment. In a public cloud,"}],"source_content_type":"application/xml","patch_set":3,"id":"9aa53dc9_ac8625d9","line":168,"updated":"2015-04-08 03:14:03.000000000","message":"s/generating tokens/and tokens","commit_id":"10abe1663973159ddfac6b1009f9e76a429ba057"},{"author":{"_account_id":12686,"name":"Brian Moss","email":"kallimachos@gmail.com","username":"bmoss"},"change_message_id":"d82fd4473f92949f8a95584aeebdbc0359b6d049","unresolved":false,"context_lines":[{"line_number":182,"context_line":"        do this is to avoid a situation where the instances are running"},{"line_number":183,"context_line":"        on a public cloud. That does not mean that there is a"},{"line_number":184,"context_line":"        need to own all of the infrastructure on which an OpenStack"},{"line_number":185,"context_line":"        installation operates; it suggests avoiding situations in"},{"line_number":186,"context_line":"        which hardware may be shared with others.\u003c/para\u003e"},{"line_number":187,"context_line":"    \u003cpara\u003eThere are other services worth considering that provide a"},{"line_number":188,"context_line":"        bare metal instance instead of a cloud. In other cases, it is"}],"source_content_type":"application/xml","patch_set":3,"id":"9aa53dc9_ac5d057b","line":185,"updated":"2015-04-08 03:14:03.000000000","message":"passive: \u0027may be shared\u0027","commit_id":"10abe1663973159ddfac6b1009f9e76a429ba057"},{"author":{"_account_id":12686,"name":"Brian Moss","email":"kallimachos@gmail.com","username":"bmoss"},"change_message_id":"d82fd4473f92949f8a95584aeebdbc0359b6d049","unresolved":false,"context_lines":[{"line_number":188,"context_line":"        bare metal instance instead of a cloud. In other cases, it is"},{"line_number":189,"context_line":"        possible to replicate a second private cloud by integrating"},{"line_number":190,"context_line":"        with a private Cloud-as-a-Service deployment. The"},{"line_number":191,"context_line":"        organization does not buy the hardware, but also does not share"},{"line_number":192,"context_line":"        with other tenants. It is also possible use a provider that"},{"line_number":193,"context_line":"        hosts a bare-metal \"public\" cloud instance for which the"},{"line_number":194,"context_line":"        hardware is dedicated only to one customer, or a provider that"}],"source_content_type":"application/xml","patch_set":3,"id":"9aa53dc9_8c55a151","line":191,"updated":"2015-04-08 03:14:03.000000000","message":"s/use/to use","commit_id":"10abe1663973159ddfac6b1009f9e76a429ba057"},{"author":{"_account_id":12686,"name":"Brian Moss","email":"kallimachos@gmail.com","username":"bmoss"},"change_message_id":"d82fd4473f92949f8a95584aeebdbc0359b6d049","unresolved":false,"context_lines":[{"line_number":215,"context_line":"        the other hand, situations exist in which the opposite is"},{"line_number":216,"context_line":"        true. The internal cloud may only be for development and"},{"line_number":217,"context_line":"        stressing it is undesirable. In most cases, a cost model of"},{"line_number":218,"context_line":"        various scenarios helps with this decision. However, this"},{"line_number":219,"context_line":"        analysis is heavily influenced by internal priorities. The"},{"line_number":220,"context_line":"        important thing is the ability to efficiently make those"},{"line_number":221,"context_line":"        decisions on a programmatic basis.\u003c/para\u003e"}],"source_content_type":"application/xml","patch_set":3,"id":"9aa53dc9_8cdc81e5","line":218,"updated":"2015-04-08 03:14:03.000000000","message":"passive: \u0027is heavily influenced by\u0027","commit_id":"10abe1663973159ddfac6b1009f9e76a429ba057"},{"author":{"_account_id":12686,"name":"Brian Moss","email":"kallimachos@gmail.com","username":"bmoss"},"change_message_id":"d82fd4473f92949f8a95584aeebdbc0359b6d049","unresolved":false,"context_lines":[{"line_number":216,"context_line":"        true. The internal cloud may only be for development and"},{"line_number":217,"context_line":"        stressing it is undesirable. In most cases, a cost model of"},{"line_number":218,"context_line":"        various scenarios helps with this decision. However, this"},{"line_number":219,"context_line":"        analysis is heavily influenced by internal priorities. The"},{"line_number":220,"context_line":"        important thing is the ability to efficiently make those"},{"line_number":221,"context_line":"        decisions on a programmatic basis.\u003c/para\u003e"},{"line_number":222,"context_line":"    \u003cpara\u003eThe Telemetry module (ceilometer) is designed to"}],"source_content_type":"application/xml","patch_set":3,"id":"9aa53dc9_acebc577","line":219,"updated":"2015-04-08 03:14:03.000000000","message":"rephrase: \u0027To improve efficiency, make these decisions programmatically.\u0027","commit_id":"10abe1663973159ddfac6b1009f9e76a429ba057"},{"author":{"_account_id":12686,"name":"Brian Moss","email":"kallimachos@gmail.com","username":"bmoss"},"change_message_id":"d82fd4473f92949f8a95584aeebdbc0359b6d049","unresolved":false,"context_lines":[{"line_number":218,"context_line":"        various scenarios helps with this decision. However, this"},{"line_number":219,"context_line":"        analysis is heavily influenced by internal priorities. The"},{"line_number":220,"context_line":"        important thing is the ability to efficiently make those"},{"line_number":221,"context_line":"        decisions on a programmatic basis.\u003c/para\u003e"},{"line_number":222,"context_line":"    \u003cpara\u003eThe Telemetry module (ceilometer) is designed to"},{"line_number":223,"context_line":"        provide information on the usage of various OpenStack"},{"line_number":224,"context_line":"        components. There are two limitations to consider:\u003c/para\u003e"}],"source_content_type":"application/xml","patch_set":3,"id":"9aa53dc9_6cfedd39","line":221,"updated":"2015-04-08 03:14:03.000000000","message":"verbose: s/is designed to provide/provides","commit_id":"10abe1663973159ddfac6b1009f9e76a429ba057"},{"author":{"_account_id":12686,"name":"Brian Moss","email":"kallimachos@gmail.com","username":"bmoss"},"change_message_id":"d82fd4473f92949f8a95584aeebdbc0359b6d049","unresolved":false,"context_lines":[{"line_number":224,"context_line":"        components. There are two limitations to consider:\u003c/para\u003e"},{"line_number":225,"context_line":"      \u003citemizedlist\u003e"},{"line_number":226,"context_line":"        \u003clistitem\u003e"},{"line_number":227,"context_line":"          \u003cpara\u003e"},{"line_number":228,"context_line":"          Firstly, if there is to be a large amount of data (for example, if"},{"line_number":229,"context_line":"        monitoring a large cloud, or a very active one) it is"},{"line_number":230,"context_line":"        desirable to use a NoSQL back end for Ceilometer, such as"}],"source_content_type":"application/xml","patch_set":3,"id":"9aa53dc9_4cfd5939","line":227,"updated":"2015-04-08 03:14:03.000000000","message":"Delete \u0027firstly\u0027 and \u0027secondly\u0027","commit_id":"10abe1663973159ddfac6b1009f9e76a429ba057"},{"author":{"_account_id":12686,"name":"Brian Moss","email":"kallimachos@gmail.com","username":"bmoss"},"change_message_id":"d82fd4473f92949f8a95584aeebdbc0359b6d049","unresolved":false,"context_lines":[{"line_number":233,"context_line":"        \u003clistitem\u003e"},{"line_number":234,"context_line":"          \u003cpara\u003e"},{"line_number":235,"context_line":"          Secondly, when connecting to a non-OpenStack cloud,"},{"line_number":236,"context_line":"        there will need to be a way to monitor that usage and to"},{"line_number":237,"context_line":"        provide that monitoring data back to the CMP.\u003c/para\u003e"},{"line_number":238,"context_line":"        \u003c/listitem\u003e"},{"line_number":239,"context_line":"      \u003c/itemizedlist\u003e"}],"source_content_type":"application/xml","patch_set":3,"id":"9aa53dc9_8cb12192","line":236,"updated":"2015-04-08 03:14:03.000000000","message":"rephrase: \u0027You must monitor connections to non-OpenStack clouds and report this information to the CMP.\u0027","commit_id":"10abe1663973159ddfac6b1009f9e76a429ba057"},{"author":{"_account_id":12686,"name":"Brian Moss","email":"kallimachos@gmail.com","username":"bmoss"},"change_message_id":"d82fd4473f92949f8a95584aeebdbc0359b6d049","unresolved":false,"context_lines":[{"line_number":245,"context_line":"        cloud. When it comes to a hybrid cloud deployment, many of the"},{"line_number":246,"context_line":"        same issues for multi-site deployments apply, such as network"},{"line_number":247,"context_line":"        latency between sites. It is also important to think about the"},{"line_number":248,"context_line":"        speed at which a workload can be spun up in another cloud, and"},{"line_number":249,"context_line":"        what can be done to reduce the time necessary to accomplish"},{"line_number":250,"context_line":"        that task. This may mean moving data closer to applications"},{"line_number":251,"context_line":"        or applications closer to the data they process, including a"}],"source_content_type":"application/xml","patch_set":3,"id":"9aa53dc9_ec666d28","line":248,"updated":"2015-04-08 03:14:03.000000000","message":"passive: \u0027can be done\u0027","commit_id":"10abe1663973159ddfac6b1009f9e76a429ba057"},{"author":{"_account_id":12686,"name":"Brian Moss","email":"kallimachos@gmail.com","username":"bmoss"},"change_message_id":"d82fd4473f92949f8a95584aeebdbc0359b6d049","unresolved":false,"context_lines":[{"line_number":255,"context_line":"        the intelligence to know which cloud can most efficiently run"},{"line_number":256,"context_line":"        which types of workloads.\u003c/para\u003e"},{"line_number":257,"context_line":"    \u003cpara\u003eAs with utilization, native OpenStack tools are available to"},{"line_number":258,"context_line":"        assist. Ceilometer can measure performance and, if necessary,"},{"line_number":259,"context_line":"        the Orchestration (heat) module can be used to"},{"line_number":260,"context_line":"        react to changes in demand by spinning up more resources.\u003c/para\u003e"},{"line_number":261,"context_line":"      \u003cnote\u003e"}],"source_content_type":"application/xml","patch_set":3,"id":"9aa53dc9_ac7065dd","line":258,"updated":"2015-04-08 03:14:03.000000000","message":"passive: \u0027can be used\u0027","commit_id":"10abe1663973159ddfac6b1009f9e76a429ba057"},{"author":{"_account_id":12686,"name":"Brian Moss","email":"kallimachos@gmail.com","username":"bmoss"},"change_message_id":"d82fd4473f92949f8a95584aeebdbc0359b6d049","unresolved":false,"context_lines":[{"line_number":272,"context_line":"      \u003ctitle\u003eComponents\u003c/title\u003e"},{"line_number":273,"context_line":"    \u003cpara\u003eThe number and types of native OpenStack components that are"},{"line_number":274,"context_line":"        available for use is dependent on whether the deployment is"},{"line_number":275,"context_line":"        exclusively an OpenStack cloud or not. If so, all of the"},{"line_number":276,"context_line":"        OpenStack components will be available for use, and in many"},{"line_number":277,"context_line":"        ways the issues that need to be considered will be similar to"},{"line_number":278,"context_line":"        those that need to be considered for a multi-site"}],"source_content_type":"application/xml","patch_set":3,"id":"9aa53dc9_0c4bd188","line":275,"updated":"2015-04-08 03:14:03.000000000","message":"future passive: \u0027will be available for use\u0027","commit_id":"10abe1663973159ddfac6b1009f9e76a429ba057"},{"author":{"_account_id":12686,"name":"Brian Moss","email":"kallimachos@gmail.com","username":"bmoss"},"change_message_id":"d82fd4473f92949f8a95584aeebdbc0359b6d049","unresolved":false,"context_lines":[{"line_number":274,"context_line":"        available for use is dependent on whether the deployment is"},{"line_number":275,"context_line":"        exclusively an OpenStack cloud or not. If so, all of the"},{"line_number":276,"context_line":"        OpenStack components will be available for use, and in many"},{"line_number":277,"context_line":"        ways the issues that need to be considered will be similar to"},{"line_number":278,"context_line":"        those that need to be considered for a multi-site"},{"line_number":279,"context_line":"        deployment.\u003c/para\u003e"},{"line_number":280,"context_line":"    \u003cpara\u003eIn any situation in which more than one cloud is"}],"source_content_type":"application/xml","patch_set":3,"id":"9aa53dc9_ac474576","line":277,"updated":"2015-04-08 03:14:03.000000000","message":"passive: \u0027need to be considered\u0027 x2\n\nfuture: \u0027will be similar\u0027","commit_id":"10abe1663973159ddfac6b1009f9e76a429ba057"},{"author":{"_account_id":12686,"name":"Brian Moss","email":"kallimachos@gmail.com","username":"bmoss"},"change_message_id":"d82fd4473f92949f8a95584aeebdbc0359b6d049","unresolved":false,"context_lines":[{"line_number":278,"context_line":"        those that need to be considered for a multi-site"},{"line_number":279,"context_line":"        deployment.\u003c/para\u003e"},{"line_number":280,"context_line":"    \u003cpara\u003eIn any situation in which more than one cloud is"},{"line_number":281,"context_line":"        being used, at least four OpenStack tools will be"},{"line_number":282,"context_line":"        considered:\u003c/para\u003e"},{"line_number":283,"context_line":"    \u003citemizedlist\u003e"},{"line_number":284,"context_line":"        \u003clistitem\u003e"}],"source_content_type":"application/xml","patch_set":3,"id":"9aa53dc9_8c5fe140","line":281,"updated":"2015-04-08 03:14:03.000000000","message":"passive: \u0027is being used\u0027\n\nfuture passive: \u0027will be considered\u0027","commit_id":"10abe1663973159ddfac6b1009f9e76a429ba057"},{"author":{"_account_id":12686,"name":"Brian Moss","email":"kallimachos@gmail.com","username":"bmoss"},"change_message_id":"d82fd4473f92949f8a95584aeebdbc0359b6d049","unresolved":false,"context_lines":[{"line_number":285,"context_line":"            \u003cpara\u003eOpenStack Compute (nova): Regardless of deployment"},{"line_number":286,"context_line":"                location, hypervisor choice has a direct effect on how"},{"line_number":287,"context_line":"                difficult it is to integrate with one or more"},{"line_number":288,"context_line":"                additional clouds. For example, integrating a Hyper-V"},{"line_number":289,"context_line":"                based OpenStack cloud with Azure will have less"},{"line_number":290,"context_line":"                compatibility issues than if KVM is used.\u003c/para\u003e"},{"line_number":291,"context_line":"        \u003c/listitem\u003e"}],"source_content_type":"application/xml","patch_set":3,"id":"9aa53dc9_4c59d959","line":288,"updated":"2015-04-08 03:14:03.000000000","message":"future: will have","commit_id":"10abe1663973159ddfac6b1009f9e76a429ba057"},{"author":{"_account_id":12686,"name":"Brian Moss","email":"kallimachos@gmail.com","username":"bmoss"},"change_message_id":"d82fd4473f92949f8a95584aeebdbc0359b6d049","unresolved":false,"context_lines":[{"line_number":291,"context_line":"        \u003c/listitem\u003e"},{"line_number":292,"context_line":"        \u003clistitem\u003e"},{"line_number":293,"context_line":"            \u003cpara\u003eNetworking (neutron): Whether OpenStack Networking"},{"line_number":294,"context_line":"                or legacy networking (nova-network) is used, the network is one place"},{"line_number":295,"context_line":"                where integration capabilities need to be understood"},{"line_number":296,"context_line":"                in order to connect between clouds.\u003c/para\u003e"},{"line_number":297,"context_line":"        \u003c/listitem\u003e"}],"source_content_type":"application/xml","patch_set":3,"id":"9aa53dc9_2c54551f","line":294,"updated":"2015-04-08 03:14:03.000000000","message":"passive: \u0027need to be understood\u0027","commit_id":"10abe1663973159ddfac6b1009f9e76a429ba057"},{"author":{"_account_id":12686,"name":"Brian Moss","email":"kallimachos@gmail.com","username":"bmoss"},"change_message_id":"d82fd4473f92949f8a95584aeebdbc0359b6d049","unresolved":false,"context_lines":[{"line_number":317,"context_line":"        \u003clistitem\u003e"},{"line_number":318,"context_line":"          \u003cpara\u003eImage portability: Note that, as of the Icehouse release,"},{"line_number":319,"context_line":"        there is no single common image format that is usable by all"},{"line_number":320,"context_line":"        clouds. This means that images will need to be converted or"},{"line_number":321,"context_line":"        recreated when porting between clouds. To make things simpler,"},{"line_number":322,"context_line":"        launch the smallest and simplest images feasible, installing"},{"line_number":323,"context_line":"        only what is necessary preferably using a deployment manager"}],"source_content_type":"application/xml","patch_set":3,"id":"9aa53dc9_8c26c1cc","line":320,"updated":"2015-04-08 03:14:03.000000000","message":"future passive: \u0027will need to be converted or recreated\u0027","commit_id":"10abe1663973159ddfac6b1009f9e76a429ba057"},{"author":{"_account_id":12686,"name":"Brian Moss","email":"kallimachos@gmail.com","username":"bmoss"},"change_message_id":"d82fd4473f92949f8a95584aeebdbc0359b6d049","unresolved":false,"context_lines":[{"line_number":322,"context_line":"        launch the smallest and simplest images feasible, installing"},{"line_number":323,"context_line":"        only what is necessary preferably using a deployment manager"},{"line_number":324,"context_line":"        such as Chef or Puppet. That means not to use golden images"},{"line_number":325,"context_line":"        for speeding up the process, however if the same images are"},{"line_number":326,"context_line":"        being repeatedly deployed it may make more sense to utilize"},{"line_number":327,"context_line":"        this technique instead of provisioning applications on lighter"},{"line_number":328,"context_line":"        images each time.\u003c/para\u003e"}],"source_content_type":"application/xml","patch_set":3,"id":"9aa53dc9_6c213db4","line":325,"updated":"2015-04-08 03:14:03.000000000","message":"passive: \u0027being repeatedly deployed\u0027","commit_id":"10abe1663973159ddfac6b1009f9e76a429ba057"},{"author":{"_account_id":12686,"name":"Brian Moss","email":"kallimachos@gmail.com","username":"bmoss"},"change_message_id":"d82fd4473f92949f8a95584aeebdbc0359b6d049","unresolved":false,"context_lines":[{"line_number":327,"context_line":"        this technique instead of provisioning applications on lighter"},{"line_number":328,"context_line":"        images each time.\u003c/para\u003e"},{"line_number":329,"context_line":"        \u003c/listitem\u003e"},{"line_number":330,"context_line":"        \u003clistitem\u003e"},{"line_number":331,"context_line":"          \u003cpara\u003eAPI differences: The most profound issue, that cannot be"},{"line_number":332,"context_line":"        avoided when using a hybrid cloud deployment with more than"},{"line_number":333,"context_line":"        just OpenStack (or with different versions of OpenStack), is"}],"source_content_type":"application/xml","patch_set":3,"id":"9aa53dc9_2c2b3596","line":330,"updated":"2015-04-08 03:14:03.000000000","message":"delete comma between \u0027issue\u0027 and \u0027that\u0027\n\npassive: \u0027cannot be avoided\u0027","commit_id":"10abe1663973159ddfac6b1009f9e76a429ba057"},{"author":{"_account_id":12686,"name":"Brian Moss","email":"kallimachos@gmail.com","username":"bmoss"},"change_message_id":"d82fd4473f92949f8a95584aeebdbc0359b6d049","unresolved":false,"context_lines":[{"line_number":334,"context_line":"        that the APIs needed to perform certain functions are"},{"line_number":335,"context_line":"        different. The CMP needs to know how to handle all necessary"},{"line_number":336,"context_line":"        versions. To get around this issue, some implementers build"},{"line_number":337,"context_line":"        portals to achieve a hybrid cloud environment, but a heavily"},{"line_number":338,"context_line":"        developer-focused organization will get more use out of a"},{"line_number":339,"context_line":"        hybrid cloud broker SDK such as jClouds.\u003c/para\u003e"},{"line_number":340,"context_line":"        \u003c/listitem\u003e"}],"source_content_type":"application/xml","patch_set":3,"id":"9aa53dc9_2c02150c","line":337,"updated":"2015-04-08 03:14:03.000000000","message":"rephrase: \u0027organization may benefit more from a hybrid cloud broker\u0027","commit_id":"10abe1663973159ddfac6b1009f9e76a429ba057"},{"author":{"_account_id":12686,"name":"Brian Moss","email":"kallimachos@gmail.com","username":"bmoss"},"change_message_id":"f4f820cc13e09b63180ea5a057a229d8e3dcbc71","unresolved":false,"context_lines":[{"line_number":72,"context_line":"        internally-operated cloud."},{"line_number":73,"context_line":"        The long-term capacity plan for this design needs to"},{"line_number":74,"context_line":"        incorporate growth over time to prevent the need to"},{"line_number":75,"context_line":"        permanently burst into, and occupy, a potentially more"},{"line_number":76,"context_line":"        expensive external cloud. In order to avoid this scenario, we"},{"line_number":77,"context_line":"        recommend accounting for the future applications\u0027 capacity"},{"line_number":78,"context_line":"        requirements and plan growth appropriately.\u003c/para\u003e"}],"source_content_type":"application/xml","patch_set":5,"id":"9aa53dc9_e371aa77","line":75,"updated":"2015-04-09 05:49:09.000000000","message":"Having thought about it again, I think this sentence needs a bit of massage. Perhaps:\n\n\"The long-term capacity plan for this design must incorporate growth over time to prevent permanent consumption of a more expensive external cloud.\"","commit_id":"b08f113201723684b4988fb10a87a85a3da6bedc"},{"author":{"_account_id":12686,"name":"Brian Moss","email":"kallimachos@gmail.com","username":"bmoss"},"change_message_id":"f4f820cc13e09b63180ea5a057a229d8e3dcbc71","unresolved":false,"context_lines":[{"line_number":76,"context_line":"        expensive external cloud. In order to avoid this scenario, we"},{"line_number":77,"context_line":"        recommend accounting for the future applications\u0027 capacity"},{"line_number":78,"context_line":"        requirements and plan growth appropriately.\u003c/para\u003e"},{"line_number":79,"context_line":"    \u003cpara\u003eUnpredictability is a consideration for of capacity planning. It is"},{"line_number":80,"context_line":"        difficult to predict the amount of load a particular application"},{"line_number":81,"context_line":"        might incur if the number of users fluctuate, or the application"},{"line_number":82,"context_line":"        experiences an unexpected increase in popularity. It is possible"}],"source_content_type":"application/xml","patch_set":5,"id":"9aa53dc9_e3f88ac5","line":79,"updated":"2015-04-09 05:49:09.000000000","message":"delete \u0027of\u0027","commit_id":"b08f113201723684b4988fb10a87a85a3da6bedc"},{"author":{"_account_id":12686,"name":"Brian Moss","email":"kallimachos@gmail.com","username":"bmoss"},"change_message_id":"f4f820cc13e09b63180ea5a057a229d8e3dcbc71","unresolved":false,"context_lines":[{"line_number":118,"context_line":"        \u003c/listitem\u003e"},{"line_number":119,"context_line":"    \u003c/orderedlist\u003e"},{"line_number":120,"context_line":"    \u003cpara\u003eYou can map the security domains individually to the"},{"line_number":121,"context_line":"        organization\u0027s installation or combined. For example, some"},{"line_number":122,"context_line":"        deployment topologies combine both guest and data domains onto"},{"line_number":123,"context_line":"        one physical network, whereas other topologies physically"},{"line_number":124,"context_line":"        separate the networks. In each case, the cloud operator"}],"source_content_type":"application/xml","patch_set":5,"id":"9aa53dc9_c30106b1","line":121,"updated":"2015-04-09 05:49:09.000000000","message":"s/combined/combine them","commit_id":"b08f113201723684b4988fb10a87a85a3da6bedc"},{"author":{"_account_id":12686,"name":"Brian Moss","email":"kallimachos@gmail.com","username":"bmoss"},"change_message_id":"f4f820cc13e09b63180ea5a057a229d8e3dcbc71","unresolved":false,"context_lines":[{"line_number":267,"context_line":"    \u003cpara\u003eThe number and types of native OpenStack components that are"},{"line_number":268,"context_line":"        available for use is dependent on whether the deployment is"},{"line_number":269,"context_line":"        exclusively an OpenStack cloud or not.\u003c/para\u003e"},{"line_number":270,"context_line":"    \u003cpara\u003eUsing more than one cloud in any situation will result in"},{"line_number":271,"context_line":"        the consideration of four OpenStack tools:\u003c/para\u003e"},{"line_number":272,"context_line":"    \u003citemizedlist\u003e"},{"line_number":273,"context_line":"        \u003clistitem\u003e"}],"source_content_type":"application/xml","patch_set":5,"id":"9aa53dc9_03ea4edb","line":270,"updated":"2015-04-09 05:49:09.000000000","message":"s/will result in the consideration/requires consideration","commit_id":"b08f113201723684b4988fb10a87a85a3da6bedc"},{"author":{"_account_id":12686,"name":"Brian Moss","email":"kallimachos@gmail.com","username":"bmoss"},"change_message_id":"f4f820cc13e09b63180ea5a057a229d8e3dcbc71","unresolved":false,"context_lines":[{"line_number":306,"context_line":"        \u003clistitem\u003e"},{"line_number":307,"context_line":"          \u003cpara\u003eImage portability: Note that, as of the Icehouse release,"},{"line_number":308,"context_line":"        there is no single common image format that is usable by all"},{"line_number":309,"context_line":"        clouds. Conversion or the recreation of images will be necessary"},{"line_number":310,"context_line":"        if porting between clouds. To make things simpler,"},{"line_number":311,"context_line":"        launch the smallest and simplest images feasible, installing"},{"line_number":312,"context_line":"        only what is necessary preferably using a deployment manager"}],"source_content_type":"application/xml","patch_set":5,"id":"9aa53dc9_83bc1edd","line":309,"updated":"2015-04-09 05:49:09.000000000","message":"s/will be necessary/is necessary","commit_id":"b08f113201723684b4988fb10a87a85a3da6bedc"},{"author":{"_account_id":12686,"name":"Brian Moss","email":"kallimachos@gmail.com","username":"bmoss"},"change_message_id":"f4f820cc13e09b63180ea5a057a229d8e3dcbc71","unresolved":false,"context_lines":[{"line_number":323,"context_line":"        versions. To get around this issue, some implementers build"},{"line_number":324,"context_line":"        portals to achieve a hybrid cloud environment, but a heavily"},{"line_number":325,"context_line":"        developer-focused organization may benefit more from a hybrid"},{"line_number":326,"context_line":"        cloud broke SDK such as jClouds.\u003c/para\u003e"},{"line_number":327,"context_line":"        \u003c/listitem\u003e"},{"line_number":328,"context_line":"      \u003c/itemizedlist\u003e"},{"line_number":329,"context_line":"    \u003c/section\u003e"}],"source_content_type":"application/xml","patch_set":5,"id":"9aa53dc9_63c11a54","line":326,"updated":"2015-04-09 05:49:09.000000000","message":"s/broke/broker","commit_id":"b08f113201723684b4988fb10a87a85a3da6bedc"},{"author":{"_account_id":12686,"name":"Brian Moss","email":"kallimachos@gmail.com","username":"bmoss"},"change_message_id":"e975a5132d53e8acc00144107790664c1df3b673","unresolved":false,"context_lines":[{"line_number":305,"context_line":"        \u003clistitem\u003e"},{"line_number":306,"context_line":"          \u003cpara\u003eImage portability: Note that, as of the Icehouse release,"},{"line_number":307,"context_line":"        there is no single common image format that is usable by all"},{"line_number":308,"context_line":"        clouds. Conversion or the recreation of images will is necessary"},{"line_number":309,"context_line":"        if porting between clouds. To make things simpler,"},{"line_number":310,"context_line":"        launch the smallest and simplest images feasible, installing"},{"line_number":311,"context_line":"        only what is necessary preferably using a deployment manager"}],"source_content_type":"application/xml","patch_set":6,"id":"9aa53dc9_a3a5e247","line":308,"updated":"2015-04-09 06:15:23.000000000","message":"delete \u0027will\u0027","commit_id":"c5e12c37511a20e99cc0d7c7b6851e8c1c06e8ce"},{"author":{"_account_id":14643,"name":"Olga Gusarenko","email":"ogusarenko@mirantis.com","username":"Olga"},"change_message_id":"d4df9c614cfd3adc6c9f76d413a24a3342433adf","unresolved":false,"context_lines":[{"line_number":23,"context_line":"    \u003cpara\u003eClouds that exclusively use the same versions of OpenStack should"},{"line_number":24,"context_line":"        have no issues, regardless of distribution. The newer the distribution in"},{"line_number":25,"context_line":"        question, the less likely it is that there will be"},{"line_number":26,"context_line":"        incompatibilities between version. An OpenStack community initiative defines"},{"line_number":27,"context_line":"        core functions that need to remain backward compatible between supported"},{"line_number":28,"context_line":"        versions.\u003c/para\u003e"},{"line_number":29,"context_line":"      \u003cnote\u003e"}],"source_content_type":"application/xml","patch_set":7,"id":"9aa53dc9_5ea8298d","line":26,"updated":"2015-04-09 07:10:14.000000000","message":"incompatibilities between versionS  -\u003e   the plural is probably required here","commit_id":"6c806beb14e6ecfca52b8781e7b918466ad427a2"},{"author":{"_account_id":14643,"name":"Olga Gusarenko","email":"ogusarenko@mirantis.com","username":"Olga"},"change_message_id":"d4df9c614cfd3adc6c9f76d413a24a3342433adf","unresolved":false,"context_lines":[{"line_number":121,"context_line":"        deployment topologies combine both guest and data domains onto"},{"line_number":122,"context_line":"        one physical network, whereas other topologies physically"},{"line_number":123,"context_line":"        separate the networks. In each case, the cloud operator"},{"line_number":124,"context_line":"        should be aware of the appropriate security concerns.  We recommand"},{"line_number":125,"context_line":"        mapping security domains against the specific OpenStack"},{"line_number":126,"context_line":"        deployment topology. The domains and their trust requirements"},{"line_number":127,"context_line":"        depend upon whether the cloud instance is public, private, or"}],"source_content_type":"application/xml","patch_set":7,"id":"9aa53dc9_be1e15b9","line":124,"updated":"2015-04-09 07:10:14.000000000","message":"recommand  --\u003e  recommEnd","commit_id":"6c806beb14e6ecfca52b8781e7b918466ad427a2"},{"author":{"_account_id":14643,"name":"Olga Gusarenko","email":"ogusarenko@mirantis.com","username":"Olga"},"change_message_id":"d4df9c614cfd3adc6c9f76d413a24a3342433adf","unresolved":false,"context_lines":[{"line_number":143,"context_line":"    \u003cpara\u003eThe management security domain is where services interact."},{"line_number":144,"context_line":"        The networks in this domain transport confidential data such as configuration"},{"line_number":145,"context_line":"        parameters, user names, and passwords. Trust this domain when it is"},{"line_number":146,"context_line":"        in deployments behind an organization\u0027s firewall.\u003c/para\u003e"},{"line_number":147,"context_line":"    \u003cpara\u003eThe data security domain is concerned primarily with"},{"line_number":148,"context_line":"        information pertaining to the storage services within"},{"line_number":149,"context_line":"        OpenStack. The data that crosses this network has integrity and"}],"source_content_type":"application/xml","patch_set":7,"id":"9aa53dc9_3eb44580","line":146,"updated":"2015-04-09 07:10:14.000000000","message":"I would rather put \"in deployments\" after \"behind an organization\u0027s firewall\"","commit_id":"6c806beb14e6ecfca52b8781e7b918466ad427a2"},{"author":{"_account_id":14643,"name":"Olga Gusarenko","email":"ogusarenko@mirantis.com","username":"Olga"},"change_message_id":"d4df9c614cfd3adc6c9f76d413a24a3342433adf","unresolved":false,"context_lines":[{"line_number":174,"context_line":"        metal operating system and hardware resources.\u003c/para\u003e"},{"line_number":175,"context_line":"    \u003cpara\u003eThere is not an issue if the security of instances is not important."},{"line_number":176,"context_line":"        However, enterprises need to avoid vulnerability. The only way to"},{"line_number":177,"context_line":"        do this is to avoid a situation where the instances are running"},{"line_number":178,"context_line":"        on a public cloud. That does not mean that there is a"},{"line_number":179,"context_line":"        need to own all of the infrastructure on which an OpenStack"},{"line_number":180,"context_line":"        installation operates; it suggests avoiding situations in which"}],"source_content_type":"application/xml","patch_set":7,"id":"9aa53dc9_894f9d6a","line":177,"updated":"2015-04-09 07:10:14.000000000","message":"I would rather use THE situation, as it is defined immediately after it","commit_id":"6c806beb14e6ecfca52b8781e7b918466ad427a2"}]}