)]}'
{"doc/arch-design/network_focus/section_operational_considerations_network_focus.xml":[{"author":{"_account_id":10607,"name":"Alexandra Settle","email":"a.settle@outlook.com","username":"asettle"},"change_message_id":"5dc95855e54325f8875e3638577fee2a35c4cc04","unresolved":false,"context_lines":[{"line_number":8,"context_line":"    \u003ctitle\u003eOperational considerations\u003c/title\u003e"},{"line_number":9,"context_line":"    \u003cpara\u003eNetwork focused OpenStack clouds have a number of operational"},{"line_number":10,"context_line":"    considerations including, but not limited to, dynamic routing of static"},{"line_number":11,"context_line":"    routes, service level agreements, and ownership of user management that"},{"line_number":12,"context_line":"    influence the selected design.\u003c/para\u003e"},{"line_number":13,"context_line":"    \u003cpara\u003eOne of the first required decisions is the selection of a telecom"},{"line_number":14,"context_line":"    company or transit provider. This is especially true if the network"}],"source_content_type":"application/xml","patch_set":1,"id":"3acd31a7_fb98916c","line":11,"updated":"2015-04-30 00:30:16.000000000","message":"I would suggest changing this to an itemizedlist\n\"...operational considerations including:\n\u003citemizedlist\u003e etc etc\"","commit_id":"e0bbea479a1cea5a359ab85e8260f6a8ad632a54"},{"author":{"_account_id":12686,"name":"Brian Moss","email":"kallimachos@gmail.com","username":"bmoss"},"change_message_id":"0d0b40e579dba33ca3b8c01b6fae9622e6f0a137","unresolved":false,"context_lines":[{"line_number":8,"context_line":"    \u003ctitle\u003eOperational considerations\u003c/title\u003e"},{"line_number":9,"context_line":"    \u003cpara\u003eNetwork focused OpenStack clouds have a number of operational"},{"line_number":10,"context_line":"    considerations including, but not limited to, dynamic routing of static"},{"line_number":11,"context_line":"    routes, service level agreements, and ownership of user management that"},{"line_number":12,"context_line":"    influence the selected design.\u003c/para\u003e"},{"line_number":13,"context_line":"    \u003cpara\u003eOne of the first required decisions is the selection of a telecom"},{"line_number":14,"context_line":"    company or transit provider. This is especially true if the network"}],"source_content_type":"application/xml","patch_set":1,"id":"5ad0253b_ecba1d6e","line":11,"updated":"2015-04-28 23:57:55.000000000","message":"insert a comma after \u0027management\u0027","commit_id":"e0bbea479a1cea5a359ab85e8260f6a8ad632a54"},{"author":{"_account_id":10607,"name":"Alexandra Settle","email":"a.settle@outlook.com","username":"asettle"},"change_message_id":"5dc95855e54325f8875e3638577fee2a35c4cc04","unresolved":false,"context_lines":[{"line_number":15,"context_line":"    requirements include external or site-to-site network connectivity.\u003c/para\u003e"},{"line_number":16,"context_line":"    \u003cpara\u003eMake additional design decisions about monitoring and alarming."},{"line_number":17,"context_line":"    This can be an internal responsibility or the responsibility of the external"},{"line_number":18,"context_line":"    provider. In the case of using an external provider, service level agreements"},{"line_number":19,"context_line":"    likely apply. In addition, other operational considerations such as bandwidth,"},{"line_number":20,"context_line":"    latency, and jitter can be part of a service level agreement.\u003c/para\u003e"},{"line_number":21,"context_line":"    \u003cpara\u003eConsider the ability to upgrade the infrastructure. As demand for"}],"source_content_type":"application/xml","patch_set":1,"id":"3acd31a7_5b4b05b1","line":18,"updated":"2015-04-30 00:30:16.000000000","message":"\"service level agreements (SLAs)\"","commit_id":"e0bbea479a1cea5a359ab85e8260f6a8ad632a54"},{"author":{"_account_id":10607,"name":"Alexandra Settle","email":"a.settle@outlook.com","username":"asettle"},"change_message_id":"5dc95855e54325f8875e3638577fee2a35c4cc04","unresolved":false,"context_lines":[{"line_number":17,"context_line":"    This can be an internal responsibility or the responsibility of the external"},{"line_number":18,"context_line":"    provider. In the case of using an external provider, service level agreements"},{"line_number":19,"context_line":"    likely apply. In addition, other operational considerations such as bandwidth,"},{"line_number":20,"context_line":"    latency, and jitter can be part of a service level agreement.\u003c/para\u003e"},{"line_number":21,"context_line":"    \u003cpara\u003eConsider the ability to upgrade the infrastructure. As demand for"},{"line_number":22,"context_line":"    network resources increase, operators add additional IP address blocks and"},{"line_number":23,"context_line":"    add additional bandwidth capacity. In addition, consider managing hardware"}],"source_content_type":"application/xml","patch_set":1,"id":"3acd31a7_7be5a1a6","line":20,"updated":"2015-04-30 00:30:16.000000000","message":"\"...part of an SLA.\"","commit_id":"e0bbea479a1cea5a359ab85e8260f6a8ad632a54"},{"author":{"_account_id":12686,"name":"Brian Moss","email":"kallimachos@gmail.com","username":"bmoss"},"change_message_id":"0d0b40e579dba33ca3b8c01b6fae9622e6f0a137","unresolved":false,"context_lines":[{"line_number":22,"context_line":"    network resources increase, operators add additional IP address blocks and"},{"line_number":23,"context_line":"    add additional bandwidth capacity. In addition, consider managing hardware"},{"line_number":24,"context_line":"    and software life cycle events, for example upgrades, decommissioning, and"},{"line_number":25,"context_line":"    outages while avoiding service interruptions for tenants.\u003c/para\u003e"},{"line_number":26,"context_line":"    \u003cpara\u003eFactor in maintainability into the overall network design. This includes"},{"line_number":27,"context_line":"    the ability to manage and maintain IP addresses as well as the use of overlay"},{"line_number":28,"context_line":"    identifiers including VLAN tag IDs, GRE tunnel IDs, and MPLS tags. As an"}],"source_content_type":"application/xml","patch_set":1,"id":"5ad0253b_2c6815f5","line":25,"updated":"2015-04-28 23:57:55.000000000","message":"insert comma after \u0027outages\u0027","commit_id":"e0bbea479a1cea5a359ab85e8260f6a8ad632a54"},{"author":{"_account_id":12686,"name":"Brian Moss","email":"kallimachos@gmail.com","username":"bmoss"},"change_message_id":"0d0b40e579dba33ca3b8c01b6fae9622e6f0a137","unresolved":false,"context_lines":[{"line_number":23,"context_line":"    add additional bandwidth capacity. In addition, consider managing hardware"},{"line_number":24,"context_line":"    and software life cycle events, for example upgrades, decommissioning, and"},{"line_number":25,"context_line":"    outages while avoiding service interruptions for tenants.\u003c/para\u003e"},{"line_number":26,"context_line":"    \u003cpara\u003eFactor in maintainability into the overall network design. This includes"},{"line_number":27,"context_line":"    the ability to manage and maintain IP addresses as well as the use of overlay"},{"line_number":28,"context_line":"    identifiers including VLAN tag IDs, GRE tunnel IDs, and MPLS tags. As an"},{"line_number":29,"context_line":"    example, if all of the IP addresses have to be changed on a network, a process"}],"source_content_type":"application/xml","patch_set":1,"id":"5ad0253b_0c6d5904","line":26,"updated":"2015-04-28 23:57:55.000000000","message":"remove \u0027in\u0027","commit_id":"e0bbea479a1cea5a359ab85e8260f6a8ad632a54"},{"author":{"_account_id":12686,"name":"Brian Moss","email":"kallimachos@gmail.com","username":"bmoss"},"change_message_id":"0d0b40e579dba33ca3b8c01b6fae9622e6f0a137","unresolved":false,"context_lines":[{"line_number":26,"context_line":"    \u003cpara\u003eFactor in maintainability into the overall network design. This includes"},{"line_number":27,"context_line":"    the ability to manage and maintain IP addresses as well as the use of overlay"},{"line_number":28,"context_line":"    identifiers including VLAN tag IDs, GRE tunnel IDs, and MPLS tags. As an"},{"line_number":29,"context_line":"    example, if all of the IP addresses have to be changed on a network, a process"},{"line_number":30,"context_line":"    known as renumbering, then the design needs to support the ability to do so.\u003c/para\u003e"},{"line_number":31,"context_line":"    \u003cpara\u003eNetwork focused applications themselves need to be addressed when"},{"line_number":32,"context_line":"    considering certain operational realities. For example, the impending"}],"source_content_type":"application/xml","patch_set":1,"id":"5ad0253b_8c816992","line":29,"updated":"2015-04-28 23:57:55.000000000","message":"passive: \u0027have to be changed\u0027","commit_id":"e0bbea479a1cea5a359ab85e8260f6a8ad632a54"},{"author":{"_account_id":12686,"name":"Brian Moss","email":"kallimachos@gmail.com","username":"bmoss"},"change_message_id":"0d0b40e579dba33ca3b8c01b6fae9622e6f0a137","unresolved":false,"context_lines":[{"line_number":28,"context_line":"    identifiers including VLAN tag IDs, GRE tunnel IDs, and MPLS tags. As an"},{"line_number":29,"context_line":"    example, if all of the IP addresses have to be changed on a network, a process"},{"line_number":30,"context_line":"    known as renumbering, then the design needs to support the ability to do so.\u003c/para\u003e"},{"line_number":31,"context_line":"    \u003cpara\u003eNetwork focused applications themselves need to be addressed when"},{"line_number":32,"context_line":"    considering certain operational realities. For example, the impending"},{"line_number":33,"context_line":"    exhaustion of IPv4 addresses, the migration to IPv6 and the utilization of"},{"line_number":34,"context_line":"    private networks to segregate different types of traffic that an application"}],"source_content_type":"application/xml","patch_set":1,"id":"5ad0253b_4c4a3185","line":31,"updated":"2015-04-28 23:57:55.000000000","message":"passive: \u0027need to be addressed\u0027","commit_id":"e0bbea479a1cea5a359ab85e8260f6a8ad632a54"},{"author":{"_account_id":12686,"name":"Brian Moss","email":"kallimachos@gmail.com","username":"bmoss"},"change_message_id":"0d0b40e579dba33ca3b8c01b6fae9622e6f0a137","unresolved":false,"context_lines":[{"line_number":34,"context_line":"    private networks to segregate different types of traffic that an application"},{"line_number":35,"context_line":"    receives or generates. In the case of IPv4 to IPv6 migrations, applications"},{"line_number":36,"context_line":"    should follow best practices for storing IP addresses. It is further recommended"},{"line_number":37,"context_line":"    to avoid relying on IPv4 features that were not carried over to the IPv6"},{"line_number":38,"context_line":"    protocol or have differences in implementation.\u003c/para\u003e"},{"line_number":39,"context_line":"    \u003cpara\u003eWhen using private networks to segregate traffic, applications should"},{"line_number":40,"context_line":"    create private tenant networks for database and data storage network traffic,"}],"source_content_type":"application/xml","patch_set":1,"id":"5ad0253b_ec3fbdd4","line":37,"updated":"2015-04-28 23:57:55.000000000","message":"s/It is further recommended to avoid/We recommend you avoid\n\npassive: \u0027were not carried over\u0027","commit_id":"e0bbea479a1cea5a359ab85e8260f6a8ad632a54"},{"author":{"_account_id":10607,"name":"Alexandra Settle","email":"a.settle@outlook.com","username":"asettle"},"change_message_id":"5dc95855e54325f8875e3638577fee2a35c4cc04","unresolved":false,"context_lines":[{"line_number":42,"context_line":"    traffic, quality of service and security decisions ensure that each network"},{"line_number":43,"context_line":"    has the correct level of service that it requires.\u003c/para\u003e"},{"line_number":44,"context_line":"    \u003cpara\u003eFinally, make considerations about the routing of network traffic."},{"line_number":45,"context_line":"    For some applications, develop a more complex policy framework for routing."},{"line_number":46,"context_line":"    To create a routing policy that satisfy business requirements, consider the"},{"line_number":47,"context_line":"    economic cost of transmitting traffic over expensive links versus cheaper"},{"line_number":48,"context_line":"    links, in addition to bandwidth, latency, and jitter requirements.\u003c/para\u003e"}],"source_content_type":"application/xml","patch_set":1,"id":"3acd31a7_5b90a5ec","line":45,"updated":"2015-04-30 00:30:16.000000000","message":"\"...develop a complex policy framework.\" - remove the \u0027more\u0027","commit_id":"e0bbea479a1cea5a359ab85e8260f6a8ad632a54"},{"author":{"_account_id":12686,"name":"Brian Moss","email":"kallimachos@gmail.com","username":"bmoss"},"change_message_id":"0d0b40e579dba33ca3b8c01b6fae9622e6f0a137","unresolved":false,"context_lines":[{"line_number":43,"context_line":"    has the correct level of service that it requires.\u003c/para\u003e"},{"line_number":44,"context_line":"    \u003cpara\u003eFinally, make considerations about the routing of network traffic."},{"line_number":45,"context_line":"    For some applications, develop a more complex policy framework for routing."},{"line_number":46,"context_line":"    To create a routing policy that satisfy business requirements, consider the"},{"line_number":47,"context_line":"    economic cost of transmitting traffic over expensive links versus cheaper"},{"line_number":48,"context_line":"    links, in addition to bandwidth, latency, and jitter requirements.\u003c/para\u003e"},{"line_number":49,"context_line":"    \u003cpara\u003eAdditionally, consider how to respond to network events. As an example,"}],"source_content_type":"application/xml","patch_set":1,"id":"5ad0253b_8c2f29a1","line":46,"updated":"2015-04-28 23:57:55.000000000","message":"s/satisfy/satisfies","commit_id":"e0bbea479a1cea5a359ab85e8260f6a8ad632a54"},{"author":{"_account_id":12686,"name":"Brian Moss","email":"kallimachos@gmail.com","username":"bmoss"},"change_message_id":"0d0b40e579dba33ca3b8c01b6fae9622e6f0a137","unresolved":false,"context_lines":[{"line_number":47,"context_line":"    economic cost of transmitting traffic over expensive links versus cheaper"},{"line_number":48,"context_line":"    links, in addition to bandwidth, latency, and jitter requirements.\u003c/para\u003e"},{"line_number":49,"context_line":"    \u003cpara\u003eAdditionally, consider how to respond to network events. As an example,"},{"line_number":50,"context_line":"    how load is transferred from one link to another during a failure scenario"},{"line_number":51,"context_line":"    could be a factor in the design. If network capacity is not planned correctly,"},{"line_number":52,"context_line":"    failover traffic could overwhelm other ports or network links and create a"},{"line_number":53,"context_line":"    cascading failure scenario. In this case, traffic that fails over to one link"}],"source_content_type":"application/xml","patch_set":1,"id":"5ad0253b_2c1db573","line":50,"updated":"2015-04-28 23:57:55.000000000","message":"passive: \u0027is transferred\u0027","commit_id":"e0bbea479a1cea5a359ab85e8260f6a8ad632a54"},{"author":{"_account_id":12686,"name":"Brian Moss","email":"kallimachos@gmail.com","username":"bmoss"},"change_message_id":"0d0b40e579dba33ca3b8c01b6fae9622e6f0a137","unresolved":false,"context_lines":[{"line_number":48,"context_line":"    links, in addition to bandwidth, latency, and jitter requirements.\u003c/para\u003e"},{"line_number":49,"context_line":"    \u003cpara\u003eAdditionally, consider how to respond to network events. As an example,"},{"line_number":50,"context_line":"    how load is transferred from one link to another during a failure scenario"},{"line_number":51,"context_line":"    could be a factor in the design. If network capacity is not planned correctly,"},{"line_number":52,"context_line":"    failover traffic could overwhelm other ports or network links and create a"},{"line_number":53,"context_line":"    cascading failure scenario. In this case, traffic that fails over to one link"},{"line_number":54,"context_line":"    overwhelms that link and then moves to the subsequent links until all network"}],"source_content_type":"application/xml","patch_set":1,"id":"5ad0253b_ec169d54","line":51,"updated":"2015-04-28 23:57:55.000000000","message":"passive: \u0027is not planned\u0027","commit_id":"e0bbea479a1cea5a359ab85e8260f6a8ad632a54"}],"doc/arch-design/network_focus/section_user_requirements_network_focus.xml":[{"author":{"_account_id":12686,"name":"Brian Moss","email":"kallimachos@gmail.com","username":"bmoss"},"change_message_id":"0d0b40e579dba33ca3b8c01b6fae9622e6f0a137","unresolved":false,"context_lines":[{"line_number":8,"context_line":"    \u003ctitle\u003eUser requirements\u003c/title\u003e"},{"line_number":9,"context_line":"    \u003cpara\u003eNetwork focused architectures vary from the general purpose designs."},{"line_number":10,"context_line":"    Specific subset of applications that interact with the network in a more"},{"line_number":11,"context_line":"    impacting way influence these architectures. Some of the business requirements"},{"line_number":12,"context_line":"    that influence the design include:\u003c/para\u003e"},{"line_number":13,"context_line":"    \u003citemizedlist\u003e"},{"line_number":14,"context_line":"        \u003clistitem\u003e"}],"source_content_type":"application/xml","patch_set":1,"id":"5ad0253b_f71f8a59","line":11,"updated":"2015-04-28 23:57:55.000000000","message":"rephrase: \u0027A specific subset of applications with increased network impact influence these architectures.\u0027","commit_id":"e0bbea479a1cea5a359ab85e8260f6a8ad632a54"},{"author":{"_account_id":10607,"name":"Alexandra Settle","email":"a.settle@outlook.com","username":"asettle"},"change_message_id":"5dc95855e54325f8875e3638577fee2a35c4cc04","unresolved":false,"context_lines":[{"line_number":25,"context_line":"            \u003cpara\u003eRegulatory requirements: Consider any regulatory requirements about"},{"line_number":26,"context_line":"            the physical location of data as it traverses the network. For example,"},{"line_number":27,"context_line":"            Canadian medical records cannot pass outside of Canadian sovereign"},{"line_number":28,"context_line":"            territory. Another network consideration is maintaining network segregation"},{"line_number":29,"context_line":"            of private data flows and ensuring that the network between cloud"},{"line_number":30,"context_line":"            locations is encrypted where required. Regulatory requirements for"},{"line_number":31,"context_line":"            encryption and protection of data in flight affect network architectures"}],"source_content_type":"application/xml","patch_set":1,"id":"3acd31a7_1b1d8d73","line":28,"updated":"2015-04-30 00:30:16.000000000","message":"I don\u0027t think the example about Canadian medical records is necessary. It doesn\u0027t really relate or flow (contextually). Consider removal?","commit_id":"e0bbea479a1cea5a359ab85e8260f6a8ad632a54"},{"author":{"_account_id":12686,"name":"Brian Moss","email":"kallimachos@gmail.com","username":"bmoss"},"change_message_id":"0d0b40e579dba33ca3b8c01b6fae9622e6f0a137","unresolved":false,"context_lines":[{"line_number":68,"context_line":"    demand on network resources having high availability requirements. Financial"},{"line_number":69,"context_line":"        transaction systems have a much higher requirement for high availability"},{"line_number":70,"context_line":"        than a development application. Network availability technologies, for"},{"line_number":71,"context_line":"        example, quality of service (QoS) can be used to improve the network"},{"line_number":72,"context_line":"        performance of sensitive applications such as VoIP and video streaming.\u003c/para\u003e"},{"line_number":73,"context_line":"    \u003cpara\u003eOften, high performance systems have SLA requirements for a minimum"},{"line_number":74,"context_line":"    QoS with regard to guaranteed uptime, latency, and bandwidth. The level of"}],"source_content_type":"application/xml","patch_set":1,"id":"5ad0253b_774b7a5a","line":71,"updated":"2015-04-28 23:57:55.000000000","message":"s/for example, quality of service (QoS)/for example quality of service (QoS),\n\npassive: \u0027can be used\u0027","commit_id":"e0bbea479a1cea5a359ab85e8260f6a8ad632a54"},{"author":{"_account_id":12686,"name":"Brian Moss","email":"kallimachos@gmail.com","username":"bmoss"},"change_message_id":"0d0b40e579dba33ca3b8c01b6fae9622e6f0a137","unresolved":false,"context_lines":[{"line_number":114,"context_line":"        \u003cvarlistentry\u003e"},{"line_number":115,"context_line":"          \u003cterm\u003eComplexity\u003c/term\u003e"},{"line_number":116,"context_line":"          \u003clistitem\u003e"},{"line_number":117,"context_line":"            \u003cpara\u003eAn overly complex network design can become"},{"line_number":118,"context_line":"                difficult to maintain and troubleshoot. While"},{"line_number":119,"context_line":"                automated tools that handle overlay networks or device"},{"line_number":120,"context_line":"                level configuration can mitigate this, avoid or document non-traditional"}],"source_content_type":"application/xml","patch_set":1,"id":"5ad0253b_77625ada","line":117,"updated":"2015-04-28 23:57:55.000000000","message":"s/become/be","commit_id":"e0bbea479a1cea5a359ab85e8260f6a8ad632a54"},{"author":{"_account_id":12686,"name":"Brian Moss","email":"kallimachos@gmail.com","username":"bmoss"},"change_message_id":"0d0b40e579dba33ca3b8c01b6fae9622e6f0a137","unresolved":false,"context_lines":[{"line_number":127,"context_line":"          \u003clistitem\u003e"},{"line_number":128,"context_line":"            \u003cpara\u003eThere are additional risks"},{"line_number":129,"context_line":"                that arise from configuring the cloud network to take"},{"line_number":130,"context_line":"                advantage of vendor specific features. One example is"},{"line_number":131,"context_line":"                multi-link aggregation (MLAG) that is being used to"},{"line_number":132,"context_line":"                provide redundancy at the aggregator switch level of"},{"line_number":133,"context_line":"                the network. MLAG is not a standard and, as a result,"}],"source_content_type":"application/xml","patch_set":1,"id":"5ad0253b_575f5e0e","line":130,"updated":"2015-04-28 23:57:55.000000000","message":"passive: \u0027is being used\u0027","commit_id":"e0bbea479a1cea5a359ab85e8260f6a8ad632a54"},{"author":{"_account_id":12686,"name":"Brian Moss","email":"kallimachos@gmail.com","username":"bmoss"},"change_message_id":"0d0b40e579dba33ca3b8c01b6fae9622e6f0a137","unresolved":false,"context_lines":[{"line_number":141,"context_line":"      \u003c/variablelist\u003e"},{"line_number":142,"context_line":"    \u003c/section\u003e"},{"line_number":143,"context_line":"    \u003csection xml:id\u003d\"security-network-focus\"\u003e\u003ctitle\u003eSecurity\u003c/title\u003e"},{"line_number":144,"context_line":"    \u003cpara\u003eSecurity is often overlooked or added after a design implementation."},{"line_number":145,"context_line":"    Consider security implications and requirements before designing the physical"},{"line_number":146,"context_line":"    and logical network topologies. Make sure that the networks are properly"},{"line_number":147,"context_line":"    segregated and traffic flows are going to the correct destinations without"}],"source_content_type":"application/xml","patch_set":1,"id":"5ad0253b_17a0c6f3","line":144,"updated":"2015-04-28 23:57:55.000000000","message":"passive: \u0027is often overlooked or added\u0027","commit_id":"e0bbea479a1cea5a359ab85e8260f6a8ad632a54"},{"author":{"_account_id":10607,"name":"Alexandra Settle","email":"a.settle@outlook.com","username":"asettle"},"change_message_id":"5dc95855e54325f8875e3638577fee2a35c4cc04","unresolved":false,"context_lines":[{"line_number":161,"context_line":"    vulnerability. To separate a network from other systems, schedule instances"},{"line_number":162,"context_line":"    for the network onto dedicated compute nodes. You can do this to mitigate"},{"line_number":163,"context_line":"    against exploiting a hypervisor breakout allowing the attacker access to networks from a compromised instance.\u003c/para\u003e"},{"line_number":164,"context_line":"    \u003c/section\u003e"},{"line_number":165,"context_line":"\u003c/section\u003e"}],"source_content_type":"application/xml","patch_set":1,"id":"3acd31a7_0d5d54e9","line":164,"updated":"2015-04-30 00:30:16.000000000","message":"I feel like the last sentence is confusing and doesn\u0027t flow as well with the rest of the para.\n\"Networks are attached to hypervisors as another security vulnerability. To mitigate against exploiting hypervisor breakouts, separate networks from other systems and schedule instances for the network onto dedicated compute nodes. This allows the attacker access to the networks from a compromised instance.\"","commit_id":"e0bbea479a1cea5a359ab85e8260f6a8ad632a54"}]}