Databases

The choice of database server is an important consideration in the security of an OpenStack deployment. Multiple factors should be considered when deciding on a database server, however for the scope of this book only security considerations will be discussed. OpenStack supports a variety of database types. See the OpenStack Administrator Guide for more information.

The Security Guide currently focuses on PostgreSQL and MySQL.

• Database back end considerations
  • Security references for database back ends
• Database access control
  • OpenStack database access model
  • Database authentication and access control
  • Require user accounts to require SSL transport
  • Authentication with X.509 certificates
  • OpenStack service database configuration
  • Nova-conductor
• Database transport security
  • Database server IP address binding
  • Database transport
  • MySQL SSL configuration
  • PostgreSQL SSL configuration