Docker FedSummit 2017 - Journey to the Cloud with CaaS

An overview of planning and deployment of a containers as a service (CaaS) to on-premises and cloud environments.

Transcript

1. A Journey to the Cloud with CaaS Docker Federal Summit 2017 1
2. © 2017 Emerging Technology Advisors LLC 2 Who Am I? Alex Rhea Solutions Architect @ ETA - Supported Homeland Security and Civilian sectors with application development, cloud migrations, and DevOps - Designed and implemented CaaS platforms for companies of all sizes in the cloud and on-premises - Creator and Maintainer of Harbor Master, a Docker Node.js SDK - Proud Hokie, Golf, and Caps fan /alexandermrhea arhea _arhea
3. © 2017 Emerging Technology Advisors LLC What We Do? 3 We are technologists, strategists, and creatives with a passion for problem-solving. Architecture Design, Review, and Strategy for your IT footprint. Design Product Design and Vision, driven by user experience principles. Development World class, full-stack development and training. Infrastructure Infrastructure automation, container fabrics, and ops support. Data Data modeling, storage, and streaming to support change. Who We Work With
4. 4 Promises of the Cloud
5. 5 Promise #1: OpEx vs CapEx Pay per hour / minute pricing, with flexible instance sizes.
6. 6 Reality #1: “Lift and Shift” Approach Leads To Higher Costs
7. 7 Promise #2: Scalability Applications can scale to meet the demand of the application.
8. Reality #2: Applications Are Not Designed To Leverage Cloud Elasticity 8
9. 9 Promise #3: Security Industry best practices, encryption as a service, and automatic software upgrades.
10. Reality #3: Hard To Utilize Managed Services And PaaS 10
11. Containers Make Moving Workloads Between the Cloud and On-Premises Seamless 11
12. © 2017 Emerging Technology Advisors LLC 12 Containerization and CaaS Create Operational Efficiencies within the Enterprise Docker Platform On-Premises Hardware Public Cloud Provider Application Development Teams Infrastructure Teams Application Application Application Application Security Team Infrastructure teams manage a single OS across multiple providers using automated tools. Security teams have visibility into the infrastructure, containers, and their configuration. Development teams focus on working and self contained applications for deployment to the fabric.
13. © 2017 Emerging Technology Advisors LLC 13 Accelerated Delivery, Testing, and Security Using Docker Data Center Pipelines Developer commits code to repository. Container is built on a central CI server. Container is tested on a central CI server. Container is scanned using DTR and open source tools. Container is rolled out automatically to the CaaS. Ok / Signed Containers are continually scanned at build and run time to alert teams when a new vulnerability is announced. Ok / Signed Ok / Signed Deploy
14. 14 Preparing for CaaS
15. 15 Step #1: Evaluate and Profile Existing CPU, RAM, and Storage Utilization
16. 16 Step #2: Containerize Applications Using Best Practices
17. 17 Step #3: Develop A Labeling Ontology For Servers Within The CaaS
18. 18 Step #4: Develop a Secrets Ontology for Application Configuration
19. Deploying and Managing a CaaS 19
20. © 2017 Emerging Technology Advisors LLC Key Considerations When Planning A Hybrid Cloud CaaS 20 1 2 3 Latency between managers across data centers, public cloud providers, or private cloud providers. Highly available and scalable Docker Registry backed by a replicated and distributed storage solution such as Amazon S3, Google Storage, or Azure Storage. Distributed volume driver to provide various levels of storage performance to containers. RexRay is a popular tool from Dell/EMC Code Labs. 4 Centralized logging and monitoring solutions across infrastructure providers. DataDog, NewRelic, AppDynamics, Dynatrace, and many others have Docker integrations.
21. © 2017 Emerging Technology Advisors LLC 21 Automated and Version Controlled CaaS Deployments on Hybrid Cloud On-Premises Public Cloud Provider Swarm Master Swarm Worker Swarm Worker Swarm Worker Swarm Master Swarm Worker Swarm Worker Swarm Worker Direct connection with the cloud provider. We utilize Terraform as our tool of choice to manage on-premises and cloud infrastructure.
22. © 2017 Emerging Technology Advisors LLC 22 Align CaaS Swarm Workers with Application Workloads and Infrastructure Swarm Master Swarm Worker Swarm Worker Swarm Worker Swarm Worker --label com.example.dc=sanfrancisco --label com.example.tier=dtr --label com.example.dc=sanfrancisco --label com.example.tier=app --label com.example.type=standard --label com.example.dc=aws --label com.example.tier=app --label com.example.type=high-memory --label com.example.dc=aws --label com.example.tier=app --label com.example.type=high-cpu
23. © 2017 Emerging Technology Advisors LLC 23 Run identical machine images in all environments, built with automated tools Amazon Machine Image Packer facilitates sharing scripts between template builds while targeting specific environments. Install and configure all dependencies based on the same underlying operating system.
24. 24 Deploying and Managing Services
25. © 2017 Emerging Technology Advisors LLC Stripe Services Across Deployment Zones For High Availability and Fault Tolerance 25 docker service create --name hello-world-lb \ --global \ --publish 8080:80 \ --env=”HOSTS=hello-world-1,hello-world-2,hello-world-3” \ hello-world-lb:latest docker service create --name hello-world-1 --constraint=”engine.label=com.example.zone=a” \ --replicas=1 \ hello-world:latest docker service create --name hello-world-2 --constraint=”engine.label=com.example.zone=b” \ --replicas=1 \ hello-world:latest docker service create --name hello-world-3 \ --constraint=”engine.label=com.example.zone=c” \ --replicas=1 \ hello-world:latest Load Balancer App 1 App 2 App 3
26. © 2017 Emerging Technology Advisors LLC For High Traffic Services Use A Load Balancer Service to Properly Load Balance Traffic 26 Load Balancer Load Balancer App App App Docker’s Mesh Networking can load balance low traffic services however, for high traffic services or services that require proper load balancing we recommend pulling in a dedicated load balancer container per application that is run globally.
27. © 2017 Emerging Technology Advisors LLC. 27
28. 28 Thanks!