Docker Networking with Clocker and Calico

Lightning talk at Container Camp, San Francisco, April 2015

Transcript

1. Container  Camp  SF;  April  2015 Andrew  Kennedy  @grkvlt Docker  Networking Using  Clocker  and  Project  Calico
3. @grkvlt What  does  it  do? 1. Spins  up  and  Manages  Docker   Clouds 2. Serves  up  Containers  on  Demand 3. Manages  Composite  Application   Deployments  on  Docker
4. @grkvlt What  does  it  provide? • Multi  Host  and  Multi  Container  Applications • Seamless  Networking – Communication  Between  Services • Orchestration  and  Clustering – Control  of  Containers – Container  Management
5. @grkvlt Apache  Brooklyn • Application  Management  Platform • Deploy,  Manage  and  Monitor  Blueprints • Provisioning,  Installation  and  Customization • Management – AutoScaling,  Resilience,  Performance,  Security
6. @grkvlt Apache  jclouds • Java  Cloud  Library • API  Agnostic • Create  Virtual  Machines • Docker  Driver  by  @turlinux • Virtual  Container
7. @grkvlt Docker • Popular • Containers – Isolation – Performance – Composable – Complex – The  Future...
8. @grkvlt Software-­‐defined  Networking • Pluggable  providers • Weave • Project  Calico • New  in  0.8.x • DOVE • Write  your  own!
9. @grkvlt Clocker  Orchestration Docker   Engine Virtual   Machine Container Clocker Network   Segment SDN Cloud
10. @grkvlt Software-­‐Defined  Networking • Needed  for  Seamless  Provisioning • Host  to  Host  Communication – Same  LAN  Segment – No  Port  Forwarding – Natural  Application  Configuration • Initial  Driver  was  EPMD  Applications
11. @grkvlt Networking  Providers • Implementation  Agnostic – L2  over  L3  over  L2  over  L8  over  whatever  etc. – Similar  to  Hypervisor  in  Clouds • Generic  Interfaces – Host  Component – Service  Component  (or  Endpoint)
12. @grkvlt Metaswitch  Project  Calico • SDN  for  Bare  Metal,  VMs  and  Containers – Layer  3  (with  adorable  kittens) – Uses  OS  IP  routing  and  forwarding • Configuration  in  an  etcd Cluster • Version  0.3.2  now  available – Uses  profiles  for  container  ACL – Supported  in  Clocker  0.8.1
13. @grkvlt Networking  Capabilities • Provide  Multiple  Networks – Single  Application  or  Shared – Private  Addresses – Segmented  by  CIDR • Docker  Port  Forwarding  Access – Debug  Mechanism
14. @grkvlt Web  Resources http://clocker.io/ http://brooklyn.io/ http://docker.io/ http://projectcalico.org/ http://weave.works/ http://abstractvisitorpattern.co.uk/