A Keystone-Based General Federation Agent

摘要

We present a design for a general federation agent based on the OpenStack Keystone v3 service. We examine and choose an initial approach based on peer-to-peer methods that support the use of arbitrary application-level services in Virtual Organizations. We review general federation management requirements, deployment models, and current work, including those using Keystone. We then extend our work on KeyVOMS, a centralized third-party management system, to a distributed peer-to-peer system possibly using distributed hash tables. We also describe how OpenStack's Horizon dashboard could be extended to function as a Virtual Organization dashboard. While an initial approach is chosen, we catalog a number of implementation trade-offs and concerns including scalability, protocol security, network support, and adoption.