| Recently years with the development of virtualization technology, which provides a good foundation for the development of Cloud Computing, at the same time promoted the technology of Cloud Computing diversity. As a new information technology model cloud computing brings a new round of innovation for the information technology and industry. With the progress of cloud computing technology, how to choose a proper technology of Cloud Computing and design a IaaS model are becoming more import.OpenStack is the most widely deployed open source software for building cloud platform by far, which made up of some components together. This paper analyzed and designed the IaaS architecture of cloud computing based on the researche of OpenStack and Kernel-based Virtual Machine Technology. The main design of this model includes cloud management site as well as control nodes and computing nodes, which were been managed and configured as a whole to provide resource and services for user with running and working cooperatively in a high availability manner. Though the IaaS for the user to provide a great convenience that can elastically get the IT resources and improve its utilization but the issue of its own security and management are indeed worthy of attention. Especially, the virtual machine’s image security and management problems, which will seriously affect the regular operation of the whole Cloud Computing system. Therefore to manage images, to scan the security vulnerabilities and updating the latest patches of virtual machines in the cloud platform timely and effectively could improve security of the system very well.This paper introduced the whole architecture of Cloud Computing based on OpenStack and explored virtualization technology firstly, then design and achieve IaaS platform by using layered architecture. Following researched the lifecycle of virtual machines and images. At the same time analyzed and designed plans of virtual machines and images automatically release, also include the plans of images security management and compliance. Meanwhile the paper offered management scheme of vulnerability scanning, patches gathering and updating for virtual machine’s image, which could resolve the challenges of updating patches of virtual machine’s image at a huge scale online. At the end tested the function of IaaS platform and patch management module on cloud computing nodes. |
