• Secure and efficient Users and Groups Subsystem for authentication and authorization of requests with complete functionality for user management: create, delete, show…
• Pluggable authentication and authorization based on passwords, ssh rsa keypairs, X509 certificates, LDAP or Active Directory
• Special authentication mechanisms for SunStone (OpenNebula GUI) and the Cloud Services (EC2 and OCCI)
• Authorization framework with fine-grained ACLs that allows multiple-role support for different types of users and administrators, delegated control to authorized users, secure isolated multi-tenant environments, and easy resource (VM template, VM image, VM instance, virtual network and host) sharing

• Administrators can groups users into organizations that can represent different projects, division…
• Each group have configurable access to shared resources so enabling a multi-tenant environment with multiple groups sharing the same infrastructure
• Configuration of special users that are restricted to public cloud APIs (e.g. EC2 or OCCI)
• Complete functionality for management of groups: create, delete, show…
• Multiple group support, with the ability to define primary and secondary groups.

• A Virtual Data Centers (VDC) is a fully-isolated virtual infrastructure environment where a group of users, under the control of the VDC administrator, can create and manage compute, storage and networking capacity
• Support for the creation and management of multiples VDCs within the same logical cluster and zone
• Advanced multi-tenancy with complete functionality for management of VDCs: create, delete, show…

• Image Repository Subsystem with catalog and complete functionality for VM image management: list, publish, unpublish, show, enable, disable, register, update, saveas, delete, clone…
• Template Repository Subsystem with catalog and complete functionality for VM template management: add, delete, list, duplicate…
• Full control of VM instance life-cycle and complete functionality for VM instance management: submit, deploy, migrate, livemigrate, reschedule, stop, save, resume, cancel, shutdown, restart, reboot, delete, monitor, list, power-on, power-off,…
• Advanced functionality for VM dynamic management like system and disk snapshotting, capacity resizing, or NIC hotplugging
• Programmable VM operations, so allowing users to schedule actions
• Volume hotplugging to easily hot plug a volatile disk created on-the-fly or an existing image from a Datastore to a running VM
• Broad network virtualization capabilities with traffic isolation, ranged or fixed networks, definition of generic attributes to define multi-tier services consisting of groups of inter-connected VMs, and complete functionality for virtual network management to interconnect VM instances: create, delete, monitor, list…
• IPv6 support with definition site and global unicast addresses
• Configurable system accounting statistics to visualize and report resource usage data, to allow their integration with chargeback and billing platforms, or to guarantee fair share of resources among users
• Tagging of users, VM images and virtual networks with arbitrary metadata that can be later used by other components
• User defined VM tags to simplify VM management and to store application specific data
• Plain files datastore to store kernels, ramdisks and files to be used in context. The whole set of OpenNebula features applies, e.g. ACLs, ownership…

• Complete definition of VM attributes and requirements
• Support for automatic configuration of VMs with advanced contextualization mechanisms
• Cloud-init support
• Hook Manager to trigger administration scripts upon VM state change
• Wide range of guest operating system including Microsoft Windows and Linux
• Flexible network defintion
• Configuration of firewall for VMs to specify a set of black/white TCP/UDP ports

• Configurable to deploy public, private and hybrid clouds
• Host Management Subsystem with complete functionality for management of physical hosts: create, delete, enable, disable, monitor, list…
• Dynamic creation of clusters as a logical set of physical resources, namely: hosts, networks and data stores, within each zone
• Highly scalable and extensible built-in monitoring subsystem

• Hypervisor agnostic Virtualization Subsystem with broad hypervisor support (Xen, KVM and VMware), centralized management of environments with multiple hypervisors, and support for multiple hypervisors within the same physical box
• Storage Subsystem with support for multiple data stores to balance I/O operations between storage servers, or to define different SLA policies (e.g. backup) and performance features for different VM types or users
• Storage Subsystem supporting any backend configuration with different datastore types: file system datastore, to store disk images in a file form and with image transferring using ssh or shared file systems (NFS, GlusterFS, Lustre…), LVM to store disk images in a block device form, Ceph for distributed block device, and VMware datastore specialized for the VMware hypervisor that handle the vmdk format and with support for VMFS
• Flexible Network Subsystem with integration with Ebtable, Open vSwitch and 802.1Q tagging
• Virtual Router fully integrated with OpenNebula to provide basic L3 services like NATting, DHCP, DNS…

• Powerful and flexible requirement/rank matchmaker scheduler providing automatic initial VM placement for the definition of workload and resource-aware allocation policies such as packing, striping, load-aware, affinity-aware…
• Advanced requirement expressions with cluster attributes for VM placement, affinity policies, any host attribute for scheduling expressions, and scheduler feedback through VM tags
• Powerful and flexible requirement/rank matchmaker scheduler for storage load balancing to distribute efficiently the I/O of the VMs across different disks, LUNs or several storage backends
• Resource quota management to allocate, track and limit computing, storage and networking resource utilization
• Support for cgroups on KVM to enforce VM CPU usage as described in the VM Template

• Single access point and centralized management for multiple instances of OpenNebula
• Federation of multiple OpenNebula zones for scalability, isolation or multiple-site support
• Support for the creation and management of multiples clusters within the same zone
• Complete functionality for management of zones: create, delete, show, list…

• Persistent database backend with support for high availability configurations
• Configurable behavior in the event of host, VM, or OpenNebula instance failure to provide an easy to use and cost-effective failover solution
• Support for high availability architectures

• Marketplace with an online catalog where individuals and organizations can quickly distribute and deploy virtual appliances ready-to-run on OpenNebula cloud environments
• Marketplace is fully integrated with OpenNebula so any user of an OpenNebula cloud can find and deploy virtual appliances in a single click through familiar tools like the SunStone GUI or the OpenNebula CLI

• Automatic execution of multi-tiered applications with complete functionality for the management of groups of virtual machines as a single entity: list, delete, scale up, scale down, shutdown… and the management of Service Templates: create, show, delete, instantiate…
• Automatic deployment and undeployment of Virtual Machines according to their dependencies in the Service Template
• Provide configurable services from a catalog and self-service portal
• Enable tight, efficient administrative control
• Complete integration with the OpenNebula's User Security Management system
• Computing resources can be tracked and limited using OpenNebula's Resource Quota Management
• Automatic scaling of multi-tiered applications according to performance metrics and time schedule

• OneGate allows Virtual Machine guests to push monitoring information to OpenNebula
• With a security token the VMs can call back home and report guest and/or application status in a simple way, that can be easily queried through OpenNebula interfaces (Sunstone, CLI or API).
• Users and administrators can use it to gather metrics, detect problems in their applications, and trigger OneFlow auto-scaling rules

• Extension of the local private infrastructure with resources from remote clouds
• Support for Amazon EC2 with most of the EC2 features like tags, security groups or VPC; and simultaneous access to multiple remote clouds

• Transform your local infrastructure into a public cloud by exposing REST-based interfaces
• OGF OCCI service, the emerging cloud API standard, and client tools
• AWS EC2 API service, the de facto cloud API standard, with compatibility with EC2 ecosystem tools and client tools
• Support for simultaneously exposing multiple cloud APIs
• Self-service provisioning portal implemented as a user view of Sunstone to allow non-IT end users to easily create, deploy and manage compute, storage and network resources

• Unix-like Command Line Interface to manage all resources: users, VM images, VM templates, VM instances, virtual networks, zones, VDCs, physical hosts, accounting, authentication, authorization…
• Easy-to-use Sunstone Graphical Interface providing usage graphics and statistics with cloudwatch-like functionality, VNC support, different system views for different roles, catalog access, multiple-zone management…
• Sunstone is easily customizable to define multiple cloud views for different user groups

• Easy to install and update with packages for most common Linux distributions
• Available in most popular Linux distributions
• Optional building from source code
• System features a small footprint, less than 10Mb
• Detailed log files with syslog support for the different components that maintain a record of significant changes

• Modular and extensible architecture to fit into any existing datacenter
• Customizable drivers for the main subsystems to easily leverage existing IT infrastructure and system management products: Virtualization, Storage, Monitoring, Image Repository, Network, Auth and Hybrid Cloud
• New drivers can be easily written in any language
• Plugin support to easily extend SunStone Graphical Interface with additional tabs to better integrate Cloud and VM management with each site own operations and tools
• Easily customizable self-service portal for cloud consumers
• Configuration and tuning parameters to adjust behavior of the cloud management instance to the requirements of the environment and use cases
• Fully open-source technology available under Apache license
• Powerful and extensible low-level cloud API in Ruby and JAVA and XMLRPC API
• A Ruby API to build applications on top of the Zones/VDC component ZONA, the ZONes Api
• OpenNebula Add-on Catalog with components enhancing the functionality provided by OpenNebula

• Automated testing process for functionality, scalability, performance, robustness and stability
• Technology matured through an active and engaged community
• Proven on large scale infrastructures consisting of tens of thousands of cores and VMs
• Highly scalable database back-end with support for MySQL and SQLite
• Virtualization drivers adjusted for maximum scalability
• Very efficient core developed in C++ language

(*) Because OpenNebula leverages the functionality exposed by the underlying platform services, its functionality and performance may be affected by the limitations imposed by those services.

• The list of features may change on the different platform configurations
• Not all platform configurations exhibit a similar performance and stability
• The features may change to offer users more features and integration with other virtualization and cloud components
• The features may change due to changes in the functionality provided by underlying virtualization services