Orchestrator Wars - Speaker Deck

Slide 1

Slide 1 text

Slide 2

Slide 2 text

Slide 3

Slide 3 text

3 Slide from contiv.github.io/articles/2016/03/06/scaling-microservices.html

Slide 4

Slide 4 text

4 Microservices

Slide 5

Slide 5 text

5 @LizRice | @AquaSecTeam Container orchestrators ■ What do orchestrators do? ■ Choosing an orchestrator @LizRice | @AquaSecTeam

Slide 6

Slide 6 text

What does an orchestrator do?

Slide 7

Slide 7 text

Slide 8

Slide 8 text

Slide 9

Slide 9 text

Slide 10

Slide 10 text

10 @LizRice | @AquaSecTeam Container orchestrator scope ■ Scheduling - find space for containers to run ■ Service discovery ■ Availability / fault tolerance ■ Scaling ■ Upgrades @LizRice | @AquaSecTeam

Slide 11

Slide 11 text

Slide 12

Slide 12 text

Slide 13

Slide 13 text

Cattle not pets

Slide 14

Slide 14 text

Slide 15

Slide 15 text

Slide 16

Slide 16 text

Some popular container orchestrators

Slide 17

Slide 17 text

Kubernetes

Slide 18

Slide 18 text

Slide 19

Slide 19 text

19 @LizRice | @AquaSecTeam Kubernetes ■ Huge community, many distributions ■ CNCF (Linux Foundation) ■ Abstraction of machines into clusters ■ Scheduling pods of containers ■ Load balancing of services ■ Management through labels ■ Customization points

Slide 20

Slide 20 text

OpenShift

Slide 21

Slide 21 text

Slide 22

Slide 22 text

22 @LizRice | @AquaSecTeam OpenShift ■ RedHat support & enterprise credibility ■ Built on Kubernetes

Slide 23

Slide 23 text

Docker Swarm

Slide 24

Slide 24 text

Slide 25

Slide 25 text

25 @LizRice | @AquaSecTeam Docker Swarm ■ Huge user base ■ Docker Inc ■ Ease of use ■ Schedule by task = one container ■ Secrets out-of-the-box

Slide 26

Slide 26 text

Mesos / Marathon

Slide 27

Slide 27 text

Slide 28

Slide 28 text

28 @LizRice | @AquaSecTeam Mesos / Marathon ■ Heritage in big data jobs (Hadoop, Spark) ■ Mesos manages clusters ■ Marathon schedules jobs (containers) ■ ZooKeeper for service discovery ■ Not written in Go! ■ Enterprise DC/OS

Slide 29

Slide 29 text

Nomad

Slide 30

Slide 30 text

Slide 31

Slide 31 text

31 @LizRice | @AquaSecTeam Nomad ■ Hashicorp pedigree - Terraform, Vagrant, Consul... ■ Manages non-containerized jobs

Slide 32

Slide 32 text

Amazon ECS

Slide 33

Slide 33 text

Slide 34

Slide 34 text

34 @LizRice | @AquaSecTeam Amazon ECS ■ Well-integrated with Amazon ■ Elastic Load Balancer ■ CloudTrail ■ Autoscaling groups ■ Tasks groups into services

Slide 35

Slide 35 text

How to choose an orchestrator

Slide 36

Slide 36 text

36 Popularity

Slide 37

Slide 37 text

37 Popularity

Slide 38

Slide 38 text

38 @LizRice | @AquaSecTeam Anecdotally... ■ Depends what you measure ■ Measure by people: Docker Swarm ■ Measure by workload: Mesos / Marathon

Slide 39

Slide 39 text

39 Community

Slide 40

Slide 40 text

40 Community

Slide 41

Slide 41 text

41 @LizRice | @AquaSecTeam Shifting sands ■ March 2016 - Microsoft invests in Mesosphere ■ March 2017 - Microsoft acquires Deis ■ May 2017 - Moby project

Slide 42

Slide 42 text

Slide 43

Slide 43 text

43 @LizRice | @AquaSecTeam Greatest strengths Docker Swarm Kubernetes / OpenShift Amazon ECS Mesos / Marathon Nomad Works out-of-the-box X X Community X Scale X X X Big data workloads X Non-containerised workloads X X