Migration Paths

Migrate to
OpenStack

Whether you're leaving VMware after Broadcom's licensing changes, repatriating workloads from public cloud, or transitioning from CloudStack — there is a well-understood path to OpenStack. The key is knowing what moves cleanly and what needs rearchitecting.

Migration Sources

Three Common Migration Paths

Each source platform has different strengths and friction points when moving to OpenStack.

VM

From VMware

The most common migration path today. Broadcom's acquisition has triggered licensing cost increases of 2-10x, forcing organizations to evaluate alternatives. VM images convert cleanly; vSphere-specific features need replacement.

Details below →

CP

From AWS / Azure / GCP

Cloud repatriation — bringing workloads back on-premises after the cost, sovereignty, or control limitations of public cloud become untenable. Standard VMs move easily; proprietary managed services require alternatives.

Details below →

CS

From CloudStack

CloudStack to OpenStack is the smoothest migration path. Both are open-source IaaS platforms with similar architectures. The primary work is in API migration and networking reconfiguration, not workload conversion.

Details below →

Migration Path 01

From VMware to OpenStack

Broadcom's acquisition of VMware in late 2023 fundamentally changed the licensing model. Perpetual licenses were eliminated. Bundled subscriptions replaced a la carte pricing. Many organizations saw their VMware costs increase 3-10x overnight, with little negotiating leverage. The result has been the largest wave of VMware departures in the platform's history.

OpenStack is the natural destination. It provides the same core capabilities — compute virtualization, software-defined networking, block storage, identity management — without per-socket or per-core licensing fees. The Apache 2.0 license means no vendor can change the terms.

What Moves Cleanly

  • VM disk images (VMDK converts to qcow2 or raw with qemu-img)
  • Network topology (VLANs map directly; NSX overlay policies need translation to Neutron/OVN)
  • Storage volumes (VMFS datastores convert to Ceph RBD or LVM-backed Cinder)
  • VM configurations (CPU, RAM, disk size — direct mapping to Nova flavors)
  • Linux guest operating systems (no driver changes needed for KVM)

What Needs Rearchitecting

vCenter Automation

vCenter API calls, PowerCLI scripts, and vRealize workflows do not translate. Replace with OpenStack APIs, Terraform OpenStack provider, or Heat templates.

NSX Microsegmentation

NSX distributed firewall rules need to be recreated as Neutron security groups or OVN ACLs. The concepts are equivalent but the syntax differs.

vSAN Storage

vSAN is replaced by Ceph. This is a full storage platform migration — data must be moved, not converted in place. Plan for parallel operation during transition.

Windows VMs with VMware Tools

VMware Tools must be replaced with virtio drivers for KVM. For Windows guests, install virtio-win drivers before migration or inject them during image conversion.

Timeline: A typical VMware-to-OpenStack migration for 200-500 VMs takes 3-6 months, including parallel operation. The OpenStack environment is built first (6-8 weeks), then workloads are migrated in waves while both platforms run simultaneously.

Service Mapping: Public Cloud to OpenStack

EC2 / Azure VMs / GCE Nova
EBS / Azure Disk / PD Cinder
VPC / VNet Neutron
S3 / Blob / GCS Ceph RGW (Swift)
ELB / Azure LB / Cloud LB Octavia
IAM / Azure AD / Cloud IAM Keystone

No equivalent in OpenStack: Managed services like RDS, DynamoDB, Lambda, SQS, Kinesis, and Bedrock have no direct OpenStack equivalent. These require self-managed replacements (PostgreSQL, Redis, RabbitMQ) or architectural changes. This is the primary friction point in cloud repatriation.

Migration Path 02

From AWS / Azure / GCP

Cloud repatriation is accelerating. The drivers are consistent: costs that grew faster than expected, data sovereignty requirements that public cloud cannot satisfy, and the realization that vendor lock-in to proprietary managed services makes future migration progressively harder.

The good news: standard IaaS workloads — VMs, block storage, networking — map directly to OpenStack equivalents. If your application runs on a Linux VM with a mounted volume behind a load balancer, it will run on OpenStack with minimal changes.

Repatriation Strategy

  • Inventory first — Catalog every workload by its cloud service dependencies. VMs with only IaaS dependencies are migration-ready
  • Replace managed services — Swap RDS for self-managed PostgreSQL/MySQL, ElastiCache for Redis, SQS for RabbitMQ. Do this before moving infrastructure
  • Export VM images — Use cloud provider export tools to create disk images, then convert to qcow2 for OpenStack
  • Migrate in waves — Start with stateless services, then stateful, then databases last. Maintain hybrid connectivity during transition
  • Terraform portability — If you use Terraform, the OpenStack provider supports the same resource patterns as AWS/Azure providers
Migration Path 03

From CloudStack to OpenStack

Apache CloudStack and OpenStack are both open-source IaaS platforms with overlapping capabilities. Organizations typically migrate from CloudStack to OpenStack for broader ecosystem support, a larger contributor base, and deeper integration with tools like Terraform, Ansible, and Kubernetes (via Magnum or Cluster API).

This is the smoothest migration path. Both platforms use KVM as the default hypervisor, both use Linux-based networking, and both manage similar resource types. The primary work is in API translation and network reconfiguration, not workload conversion.

Migration Steps

  • Image export — Extract VM templates and volumes from CloudStack's primary and secondary storage. Formats are typically qcow2 — the same as OpenStack
  • Network mapping — Map CloudStack zones, pods, and clusters to OpenStack regions, availability zones, and host aggregates
  • API migration — CloudStack API calls (listVirtualMachines, deployVirtualMachine) map to Nova API equivalents. Update automation scripts and CI/CD pipelines
  • User and project mapping — CloudStack accounts and domains map to Keystone projects and domains. Recreate RBAC policies in Keystone
  • Storage migration — If CloudStack uses local storage, migrate to Ceph-backed Cinder. If CloudStack uses Ceph or NFS, the backend may be reusable

CloudStack vs OpenStack — Component Mapping

CloudStack Management Server OpenStack Control Plane
CloudStack Compute (KVM) Nova + KVM
CloudStack VPC / Virtual Router Neutron + OVN
CloudStack Primary Storage Cinder + Ceph
CloudStack Secondary Storage Glance + Ceph RGW

Advantage: Because both platforms use KVM, live VM images (qcow2) can often be imported directly into Glance without conversion. This eliminates the most time-consuming part of most migrations — disk image conversion and driver replacement.

Methodology

Step-by-Step Migration Approach

Regardless of source platform, successful migrations follow the same phases.

Phase 1

Assess and Plan

Inventory all workloads. Classify each as migration-ready, needs-modification, or requires-rearchitecting. Map network topology, storage dependencies, and automation tooling. Define success criteria and rollback procedures.

Duration: 2-4 weeks

Phase 2

Build Target Platform

Deploy the OpenStack environment on target hardware. Configure networking, storage (Ceph), identity (Keystone with LDAP/AD integration), monitoring, and backup. Validate with test workloads before migrating production.

Duration: 4-8 weeks

Phase 3

Migrate in Waves

Move workloads in ordered batches: stateless services first, then stateful applications, then databases and critical systems last. Maintain hybrid connectivity between source and target. Validate each wave before proceeding.

Duration: 4-12 weeks (depends on scale)

Phase 4

Validate and Optimize

Run production workloads on OpenStack while maintaining rollback capability to the source platform. Monitor performance, validate SLAs, tune Ceph and Nova configurations. Confirm all automation and CI/CD pipelines work against OpenStack APIs.

Duration: 2-4 weeks

Phase 5

Decommission Source

Once all workloads are validated on OpenStack and the team is confident in operations, decommission the source platform. Cancel public cloud accounts or repurpose VMware hardware. Document the new operational procedures and close the migration project.

Duration: 1-2 weeks

Honest Assessment

What Moves Easily vs What Doesn't

Moves Cleanly

  • Linux VMs with standard configurations
  • Block storage volumes (format conversion is straightforward)
  • Network topology (VLANs, subnets, security groups)
  • Load balancers (HTTP/TCP — direct Octavia equivalent)
  • Object storage (S3-compatible via Ceph RGW)
  • DNS records (Designate provides equivalent functionality)
  • Terraform configurations (swap provider, keep structure)
  • Ansible playbooks (OpenStack modules available)

Needs Rearchitecting

  • Serverless functions (Lambda, Azure Functions) — no OpenStack equivalent; containerize instead
  • Managed databases (RDS, Cloud SQL) — replace with self-managed PostgreSQL, MySQL, or MariaDB
  • Managed Kubernetes (EKS, AKS, GKE) — replace with Magnum or self-deployed Kubernetes
  • Proprietary queuing (SQS, Azure Service Bus) — replace with RabbitMQ or Kafka
  • Proprietary identity (AWS IAM policies) — redesign for Keystone RBAC model
  • CDN and edge services — use external CDN provider or self-hosted caching
Get Started

Plan Your Migration

Every migration starts with an assessment. Talk to engineers who have migrated production workloads to OpenStack from VMware, AWS, Azure, and CloudStack.