What’s New in 5.10

This is the stable release of OpenNebula 5.10

OpenNebula 5.10 (Boomerang) is the sixth major release of the OpenNebula 5 series. The main focus has been to enforce functionality to manage NFVs (as well as other workloads) to propel OpenNebula as the default orchestrator of choice to build clouds in the edge and in environments where network performance is key. Also this focus on networking explains the new NSX integration over VMware infrastructures, which enables very interesting use cases in vSphere. The highlights of Boomerang are:

  • NUMA and CPU pinning, define in which NUMA node VMs are going to be deployed.
  • NSX integration, create and consume NSX networks from within OpenNebula.
  • Revamped hook subsystem, hook a script for any API call or change of state in any VM or host resource.
  • DPDK support, dramatically increase performance in network hungry, densely packed VMs.
  • 2FA Authentication for Sunstone.

As usual, the OpenNebula 5.10 codename refers to a nebula, in this case the Boomerang Nebula, a protoplanetary nebula located 5,000 light-years away from Earth in the constellation Centaurus. It is also known as the Bow Tie Nebula and catalogued as LEDA 3074547. The nebula’s temperature is measured at 1 K (-272.15 °C; -457.87 °F) making it the coolest natural place currently known in the Universe. Same as OpenNebula in the IaaS space :)

OpenNebula 5.10 Boomerang is considered to be a stable release and as such it is available to update production environments.

In the following list you can check the highlights of OpenNebula 5.10. (A detailed list of changes can be found here.)

OpenNebula Core

  • Update hashing algorithm: Now passwords and login tokens are hashed using sha256 instead of sha1. Also csrftoken is now hashed with SHA256 instead of MD5
  • NUMA and CPU pinning: You can define virtual NUMA topologies and pin them to specific hypervisor resources. NUMA and pinning is an important feature to improve the performance of specific workloads. You can read more here.
  • Live update of context information: Running VMs can update their context information and trigger the contextualization scripts in the guests, see here.
  • Uniform thread-safe random generator: For random numbers use a Mersenne Twister generator with uniform distribution.
  • VM operations configurable at user and group level: Use attributes VM_USE_OPERATIONS, VM_MANAGE_OPERATIONS and VM_ADMIN_OPERATIONS in the user or group template, more information
  • Unified objects’ secrets handling: Secrets are encrypted and decrypted in core, drivers get secrets decrypted see here.
  • Allow VM reschedule in poweroff state: See here.
  • System wide CPU model configuration: The default CPU model for KVM can be set in config file see here.
  • KVM configuration per Host or Cluster: All kvm default attributes can be overriden in Cluster and Host.
  • Revamped Hook System: A more flexible and powerful hook system has been developed for 5.10. Now you can hook on any API call as well as state changes

Other minor features in OpenNebula core:



  • DPDK Support: The Open vSwitch drivers include an option to support DPDK datapaths, read more here.
  • Extensible Network Drivers: You can extend network driver actions with customizable hooks, see more details.
  • Deprecate brctl: The ip-route2 toolset replaces brctl to manage bridges for the KVM/LXD networking.


  • Two Factor Authentication: With this method, not only does it request a username and password, it also requires a token generated by any of these applications: Google Authentication, Authy or Microsoft Authentication. You can read more here.


OneFlow & OneGate

  • Remove attributes from VMs: The onegate server API supports a new option to delete attributes from VM user template via onegate command.



IPAM Drivers

  • IPAM driver scripts now receive the template of the AR via STDIN instead of via arguments, see more details.

KVM Virtualization Driver

Other Issues Solved