Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Features
Speaker Deck
PRO
Sign in
Sign up for free
Search
Search
Orchestrator Wars
Search
Liz Rice
May 17, 2017
Technology
0
210
Orchestrator Wars
A light-hearted look at container orchestration options
Liz Rice
May 17, 2017
Tweet
Share
More Decks by Liz Rice
See All by Liz Rice
Unleashing the kernel with eBPF
lizrice
0
170
eBPF's Abilities and Limitations: The Truth
lizrice
0
290
Simplifying multi-cloud and multi-cluster Kubernetes deployments with Cilium
lizrice
0
170
When is a Secure Connection not encrypted? And other stories
lizrice
1
78
Keeping it simple: Cilium Mesh - networking for multi-cloud Kubernetes and beyond
lizrice
1
600
How Many Proxies Do You Need
lizrice
1
140
eBPF for Security Observability
lizrice
0
1.3k
Beginner's Guide to eBPF Programming for Networking
lizrice
1
2.3k
Contributing to Open Source - what's in it for my business?
lizrice
0
49
Other Decks in Technology
See All in Technology
AndroidXR 開発ツールごとの できることできないこと
donabe3
0
120
2.5Dモデルのすべて
yu4u
2
710
WAF に頼りすぎない AWS WAF 運用術 meguro sec #1
izzii
0
470
室長と気ままに学ぶマイクロソフトのビジネスアプリケーションとビジネスプロセス
ryoheig0405
0
340
Swiftの “private” を テストする / Testing Swift "private"
yutailang0119
0
120
現場の種を事業の芽にする - エンジニア主導のイノベーションを事業戦略に装着する方法 -
kzkmaeda
2
1.6k
転生CISOサバイバル・ガイド / CISO Career Transition Survival Guide
kanny
3
820
Googleマップ/Earthが一般化した 地図タイルのイマ
mapconcierge4agu
1
200
現場で役立つAPIデザイン
nagix
30
11k
関東Kaggler会LT: 人狼コンペとLLM量子化について
nejumi
3
500
第13回 Data-Centric AI勉強会, 画像認識におけるData-centric AI
ksaito_osx
0
360
開発者が自律的に AWS Security Hub findings に 対応する仕組みと AWS re:Invent 2024 登壇体験談 / Developers autonomously report AWS Security Hub findings Corresponding mechanism and AWS re:Invent 2024 presentation experience
kaminashi
0
190
Featured
See All Featured
The Psychology of Web Performance [Beyond Tellerrand 2023]
tammyeverts
45
2.3k
Rebuilding a faster, lazier Slack
samanthasiow
79
8.8k
No one is an island. Learnings from fostering a developers community.
thoeni
21
3.1k
4 Signs Your Business is Dying
shpigford
182
22k
The Cult of Friendly URLs
andyhume
78
6.2k
実際に使うSQLの書き方 徹底解説 / pgcon21j-tutorial
soudai
175
51k
Refactoring Trust on Your Teams (GOTO; Chicago 2020)
rmw
33
2.8k
Agile that works and the tools we love
rasmusluckow
328
21k
Put a Button on it: Removing Barriers to Going Fast.
kastner
60
3.7k
Design and Strategy: How to Deal with People Who Don’t "Get" Design
morganepeng
129
19k
Docker and Python
trallard
44
3.3k
Practical Tips for Bootstrapping Information Extraction Pipelines
honnibal
PRO
12
960
Transcript
Copyright @ 2017 Aqua Security Software Ltd. All Rights Reserved.
Orchestrator Wars Liz Rice @LizRice | @AquaSecTeam
2
3 Slide from contiv.github.io/articles/2016/03/06/scaling-microservices.html
4 Microservices
5 @LizRice | @AquaSecTeam Container orchestrators ▪ What do orchestrators
do? ▪ Choosing an orchestrator @LizRice | @AquaSecTeam
What does an orchestrator do?
7
8
9
10 @LizRice | @AquaSecTeam Container orchestrator scope ▪ Scheduling -
find space for containers to run ▪ Service discovery ▪ Availability / fault tolerance ▪ Scaling ▪ Upgrades @LizRice | @AquaSecTeam
11
12
Cattle not pets
14
15
Some popular container orchestrators
Kubernetes
18
19 @LizRice | @AquaSecTeam Kubernetes ▪ Huge community, many distributions
▪ CNCF (Linux Foundation) ▪ Abstraction of machines into clusters ▪ Scheduling pods of containers ▪ Load balancing of services ▪ Management through labels ▪ Customization points
OpenShift
21
22 @LizRice | @AquaSecTeam OpenShift ▪ RedHat support & enterprise
credibility ▪ Built on Kubernetes
Docker Swarm
24
25 @LizRice | @AquaSecTeam Docker Swarm ▪ Huge user base
▪ Docker Inc ▪ Ease of use ▪ Schedule by task = one container ▪ Secrets out-of-the-box
Mesos / Marathon
27
28 @LizRice | @AquaSecTeam Mesos / Marathon ▪ Heritage in
big data jobs (Hadoop, Spark) ▪ Mesos manages clusters ▪ Marathon schedules jobs (containers) ▪ ZooKeeper for service discovery ▪ Not written in Go! ▪ Enterprise DC/OS
Nomad
30
31 @LizRice | @AquaSecTeam Nomad ▪ Hashicorp pedigree - Terraform,
Vagrant, Consul... ▪ Manages non-containerized jobs
Amazon ECS
33
34 @LizRice | @AquaSecTeam Amazon ECS ▪ Well-integrated with Amazon
▪ Elastic Load Balancer ▪ CloudTrail ▪ Autoscaling groups ▪ Tasks groups into services
How to choose an orchestrator
36 Popularity
37 Popularity
38 @LizRice | @AquaSecTeam Anecdotally... ▪ Depends what you measure
▪ Measure by people: Docker Swarm ▪ Measure by workload: Mesos / Marathon
39 Community
40 Community
41 @LizRice | @AquaSecTeam Shifting sands ▪ March 2016 -
Microsoft invests in Mesosphere ▪ March 2017 - Microsoft acquires Deis ▪ May 2017 - Moby project
42
43 @LizRice | @AquaSecTeam Greatest strengths Docker Swarm Kubernetes /
OpenShift Amazon ECS Mesos / Marathon Nomad Works out-of-the-box X X Community X Scale X X X Big data workloads X Non-containerised workloads X X
44 To be continued...
Copyright @ 2017 Aqua Security Software Ltd. All Rights Reserved.
Questions? Liz Rice @LizRice | @AquaSecTeam