OpenStack Barbican vs Virtuozzo Infrastructure

OpenStack Barbican is the OpenStack Key Manager service for storing, provisioning, and managing secrets such as keys, certificates, passwords, and raw binary data. Its barbican-api component provides an OpenStack-native REST API for managing secrets; barbican-worker and barbican-keystone-listener are also part of the service. The listener manages Barbican’s database records for Keystone projects when those projects are deleted. A plugin architecture lets operators connect software secret stores or hardware such as HSMs. Documented options include KMIP, Dogtag, and Vault secret-store plugins, as well as PKCS#11 crypto plugins. With PKCS#11, master encryption and HMAC keys can reside in an HSM. Operators can develop plugins for storage, generation, and event handling, though support status may be stable, experimental, or out-of-tree. The default Simple Crypto plugin stores its single encryption key in plaintext in barbican.conf, so service-node access must be restricted carefully. Container ACL settings do not carry over to associated secrets, and ACL functionality requires Keystone integration. Barbican is free under Apache 2.0; installation guidance assumes a working OpenStack deployment.

Virtuozzo Infrastructure is a hyperconverged IaaS platform combining compute, networking and storage. Compute options include KVM virtual machines, Kubernetes as a service, high availability, live migration and online resizing. Storage covers software-defined block, file and S3-compatible object services, including NFS and SMB. Networking includes distributed routing, load balancing, VPN as a service, IPv6 and security rules. Administrators can use a web panel or command line for monitoring, alerts and rolling updates. Tenant controls include isolation, role-based access, quotas, usage metering and white-labeled self-service. Listed security measures include encryption in transit, AES-256 data encryption and two-factor authentication. The platform provides orchestration and S3-compatible REST APIs, and lists integrations such as Acronis, Veeam, AWS, Grafana and Prometheus. The self-install free offer is capped at 96 physical cores and 1TB of storage. A hosted trial supplies a managed, preconfigured cluster for 30 days; pricing is available on request.