Upgrade to Pro — share decks privately, control downloads, hide ads and more …

リアルとバーチャルを繋ぐエッジネットワーキング動向

 リアルとバーチャルを繋ぐエッジネットワーキング動向

2023.06.15 Interop23 / ONESUMMIT

One Summitにて、エッジとクラウドのデータ連携を行うためのネットワーキング技術について紹介しました。
なお、ここで紹介しているSkupperはKubernetesを前提とした絵になっていますが、必ずしもKubernetesは必須ではありません。

keyword: EdgeX Foundry Akri, Kafka, Skupper

小野佑大

June 15, 2023
Tweet

More Decks by 小野佑大

Other Decks in Technology

Transcript

  1. • 5GC, NFV, Edge Computing , • OpenShift • Edge

    Computing Role Red Hat Cloud Specialist Solution Architect @pinkink_yudai Publication 2 !
  2. 6 Device Edge End-user Premises Edge Provider Edge Datacenter /

    Cloud . https://rheb.hatenablog.com/entry/2022/03/04/EdgeComputing Edge ( ) ( )
  3. IoT 7 Data Source Edge .PLC - - NW MQTT

    IoT Gateway HW Read Cloud Data Hub Applications : HD 5Mbps/ 2.25GB/h 1 10 Actor
  4. 8 PLC Applications Actor Hub Edge Applications Data Hub Read

    / Write Data Hub Hub Data Source Edge Cloud advise ) https://www.amazon.co.jp/NVIDIA-JETSON-ORIN-NANO-%E9%96%8B%E7%99%BA%E8%80%85%E3%82%AD%E3%83%83%E3%83%88/dp/B0BZHCGDCC ) https://www.intel.co.jp/content/www/jp/ja/products/details/nuc.html ) https://www.onlogic.com/computers/industrial/fanless/helix-500-600/ AI HW
  5. 9 DX Data & Analytics Control Technology SCADA I/O MES

    OPC-UA REST Service PLC, etc HMI Managed Service HW OS Device management Security Cloud Cloud entry gateway Compute & storage Container API Gateway Streaming data Pub/Sub Object storage OPC-UA Profinet, Ethercat Edge Computing IO Link Apps Apps Apps Apps / AI/ML TCP IP
  6. Trends Overview | DX SW-Defined HW-Defined SW-Defined Data & Analytics

    trends Control technology trends MES MES SCADA PLC PLC COTS PLC Robot DeepL AI/ML Edge OT/IT Data DeepL App CI CD IT/OT Gap OT IT SW-Defined IT Data Contract Ontology Data Federation 10
  7. Manufacturing Reference Architecture The manufacturing ecosystem is moving from hardware-based

    structure and hierarchy-based communication to a more flexible system of machines and actors which can interact across hierarchy levels and communicate among all participants even outside the enterprise environment. [Open Manufacturing Platform Reference Architecture] . https://github.com/OpenManufacturingPlatform/MRA-Architectural-Considerations/blob/publication/Whitepaper/01_Introduction_to_the_OMP_Manufacturing_Reference_Architecture/02_Approach.md 11
  8. Gateway ( ) HA ( ) IPC K8s MQTT App

    IoT GW etc IoT GW Digital Twin etc 12 App K8s Obj ST MQTT App
  9. 13 SaaS Datacenter / Cloud Operation Control Sense (ERP /

    PLM, etc ) PLC Sensor app Broker K8s Fleet CI/CD PLC Sensor K8s Fleet CI/CD Broker / Broker app app Broker app
  10. Trusted execution environments Unikernels Hardware attestation Blockchain Service mesh Partitioning

    hypervisors Edge to Edge / Edge to Cloud Edge to Cloud Heterogeneous clusters Quantum computing RISC-V Secure multi-party computing FPGAs Interoperability Scalability Consistency
  11. Trusted execution environments Unikernels Hardware attestation Blockchain Service mesh Partitioning

    hypervisors Edge to Edge / Edge to Cloud Edge to Cloud Heterogeneous clusters Quantum computing RISC-V Secure multi-party computing FPGAs Interoperability Scalability Consistency
  12. 16 . https://www.edgexfoundry.org/ • IoT • DELL Project FUSE •

    Device Service ◦ • Core Service ◦ ◦ • Supporting Service ◦ / / Logging • Export Service ◦ MQTT Topic REST
  13. Device Service Microservice ONVIF Camera USB Camera LLRP SNMP MQTT

    Modbus BACnet C, GoなどのSDK提供 Device Device Device Device Service Microservice Core Service REST Protocol Protocol REST Interface . https://docs.edgexfoundry.org/2.3/microservices/device/Ch-DeviceServices/ 17
  14. • Kubernetes Leaf Device • Kubernetes CRD Leaf Device Leaf

    Device • Broker Pod HTTP/gRPC • OPC-UA, ONVIF, udev . https://github.com/project-akri/akri-docs/tree/main/docs Kubernetes Cluster Leaf Device Control Node Worker Node Controller Broker Agent kind: Configuration metadata: name: akri-onvif spec: discoveryHandler: name: onvif brokerPodSpec: containers: Pod deploy gRPC /dev/video0 kube-api CRD 18
  15. (Shifu) • IoT • Kubernetes CRD • deviceShifu 1 Pod

    HTTP/gRPC • HTTP TCP MQTT RTSP Siemens S7 OPC UA Hikvision . https://shifu.dev/ Kubernetes Cluster Device Control Node Worker Node shifu controller apiVersion: shifu.edgenesis.io/v1alph a1 kind: EdgeDevice metadata: name: edgedevice-plc namespace: devices spec: sku: "PLC" connection: Ethernet address: Pod deploy gRPC Read / Write kube-api CRD PLC shifud (DaemonSet) deviceShifu (Deployment) 19
  16. Trusted execution environments Unikernels Hardware attestation Blockchain Service mesh Partitioning

    hypervisors Edge to Edge / Edge to Cloud Edge to Cloud Heterogeneous clusters Quantum computing RISC-V Secure multi-party computing FPGAs Interoperability Scalability Consistency
  17. Data Hub Dashboard MQTT [Seldon] KNI - Industrial Edge Blueprint

    CI/CD AI/ML Data Hub 21 + Integration IT IT OT Fleet Connector Fieldbus PLC Device Level . https://redhat.highspot.com/items/61a8c79a8b7e3f1a256a6659#7 Kafka +
  18. Trusted execution environments Unikernels Hardware attestation Blockchain Service mesh Partitioning

    hypervisors Edge to Edge / Edge to Cloud Edge to Cloud Heterogeneous clusters Quantum computing RISC-V Secure multi-party computing FPGAs Interoperability Scalability Consistency
  19. Kubernetes App App Ingress DNS DNS DNS NAT/FW DNS App

    App DNS IP Overlay NW Overlay Kubernetes 23
  20. Pod Pod P2P Hub & Spoke Scale Out . https://skupper.io/

    . https://qpid.apache.org/components/dispatch-router/ Kubernetes AMQP (NAT ) Namespace OSPF P2P AMQP Message Routing mTLS DNS 24
  21. Apache Qpid Dispatch Router Publisher Broker Subscriber Publisher Router Subscriber

    Send message Accepted Send message Accepted Send message Accepted Send message Accepted Broker: Router: • AMQP • Broker ( ) • ◦ Link State ◦ Shortest Path First ◦ 25
  22. Skupper Skupper TLS Expose Control Plane Control Plane Pod Control

    Plane Control Plane Pod Control Plane Control Plane Pod Pod Pod Pod Expose 26
  23. K8s Cluster( ) GW Pod K8s Cluster( ) GW Pod

    Control Plane IPsec, VPN, VXLAN K8s Cluster( ) Ingress Pod K8s Cluster( ) Ingress Pod ( )Ingress DNS K8s Cluster( ) Pod K8s Cluster( ) Pod Control Plane Control Plane Proxy GW Proxy Control Plane K8s Cluster( ) GW Pod K8s Cluster( ) GW Pod Control Plane AMQP AMQP with TLS Control Plane Service Mesh Control Plane 29
  24. 30 Ingress Istio / Linkerd Cilium Submariner Liqo Skupper Pod

    Gateway Cilium agent Overlay & Gateway Overlay & Gateway Qpid Dispatch Router or ( LAN ) TLS TLS VXLAN, Geneve, IPsec, WireGuard IPsec, WireGuard WireGuard mTLS Service Discovery DNS DNS DNS DNS DNS DNS Namespace Namespace 1 1 1 1 1 1 1 1 1 1 1 1, 1 CNI × FW × IP × ×
  25. linkedin.com/company/red-hat youtube.com/user/RedHatVideos facebook.com/redhatinc twitter.com/RedHat Thank you Red Hat is the

    world’s leading provider of enterprise open source software solutions. Award-winning support, training, and consulting services make Red Hat a trusted adviser to the Fortune 500.