云原生应用平台架构解析

1、云原生应用平台架构解析第1页Agenda122.12.22.32.4The Rise of Cloud Native ApplicationsCloud Native Key TechnologiesContainer optimized LinuxDeveloper ToolingSecure Container RuntimeMicroservices governance第2页7Mobile-Cloud Era = Increased Customer ExpectationsEverythingOn-DemandFully Functional,All the TimeAccessib

2、leEverywhereApplications must be more resilient than ever!第3页8Market Expectations drive Operational Changes for CustomersIT decisionsmoving to LOB andapplicationdevelopersApplicationsbroken intomicroservicesContinuous DeliverySeveral times a dayDo everything faster第4页9Changing Infrastructure NeedsSe

3、rverWorkload 1Workload 2Workload 3Workload ConsolidationServerServerServerApplication DistributionApplication第5页The Cloud Native ApplicationServerServerCloud NativeApplicationsServerLeverage elasticinfrastructure toProvision instances of itselfScale up and downDetect and work aroundfailures第6页Cloud

4、Native Application CharacteristicsDistributed and Scale-outMicroservices orientedContainer packagedDynamically managedServerServerServerApplication第7页A New Application Architecture is EmergingProperties of a MicroserviceSmall code baseEasy to scale, deploy and throwawayAutonomousResilientBenefits of

5、 a microservicesarchitectureA highly resilient, scalable andresource efficient applicationEnables smaller developmentteamsTeams free to use the rightlanguages and tools for the jobRapid application development 12Monolithic/LayeredMicro Services第8页App processApp processApp processApp processApp proce

6、ssApp processApp processUserspaceContainerOS File systemOS KernelHardwareContainerMicroservices with Containers13Conatiners Exist for Many Years Solaris Zones, FreeBSD Jails,OpenVZ, LXCWhy Containers? Process isolation with goodperformance isolation Reproducible environment Enables management at sca

7、le第9页14Its a Challenging Jump to Cloud Native ApplicationEcosystems to be harmonizedHidden Costs Management overheads Container sprawl Governance challengesContainers DO NOT provide:SecurityisolationDataPersistenceGuaranteed Overcommit andResources rebalancing第10页15Agenda122.12.22.32.4The Rise of Cl

8、oud Native ApplicationsCloud Native Key TechnologiesContainer optimized LinuxDeveloper ToolingSecure Container RuntimeMicroservices governance第11页16Developer is a First-Class User of the Cloud Build technologies that span the applifecycle Empower operations teams to manage Cloud-Native applications

9、Build to and support open systems and standards第12页ContainerRepositories17Cloud Native Platform Dev & Production Stack, DevOps ProcessManagementApp Definition, Policies, and ProvisioningContainer ClusterSchedulerContainer PackagingContainer-optimizedLinuxInfrastructure(Hypervisor, storage,networking

10、, etc)ProductionDeveloper ToolsContainer PackagingLinuxOptional: Type 2HypervisorDevs LaptopDeveloper第13页18Agenda122.12.22.32.43The Rise of Cloud Native ApplicationsCloud Native Key TechnologiesContainer optimized LinuxDeveloper ToolingSecure Container RuntimeMicroservices governanceSummary第14页Conta

11、inerRepositoriesDeveloper ToolsContainer PackagingLinuxOptional: Type 2HypervisorDevs LaptopDeveloperContainer Developer Stacke.g. Hashicorp Vagrante.g. OCF, Docker images/Docker Hube.g. Photon OS, CoreOS, Atomic, RancherOSe.g. Fusion, Workstation, VMPlayer, VirtualBox1919第15页20ContainerRepositories

12、Developer ToolsContainer Packaginge.g. Photon OS, CoreOS, Atomic, RancherOSLinuxOptional: Type 2HypervisorDevs LaptopDeveloperContainer Developer Stack Container Runtime20第16页21Photon OS - Secure & Optimized Container RuntimeContainer Optimized Linux OSDocker, rkt and Garden (Pivotal) supportMinimal

13、 footprint to run containersvSphere IntegrationPart of your vSphere installHypervisor-optimized container runtimeUpdates from VMwareEnterprise supportSecurity and update patches from VMwareOpen SourceGPL v2 License第17页Photon OS Directions Hypervisor-optimized container host Guest customization suppo

14、rt improved vSphere and vCloud Air compatibility Shared folders for Workstation & Fusion streamline developer to production pipeline Lightwave integration single identity across all infrastructure Software Defined Datacenter for Containers single operational model for allworkloads Performance and pa

15、ckaging optimizations faster boot, smaller footprint Secure container stack Signed packages ensures trust of VMware packages Lightwave integration extends trust to containers and container authors Secure boot and attestation creates a chain of trust from the hardware, through thehypervisor, to the c

16、ontainer22第18页23Agenda122.12.22.32.4The Rise of Cloud Native ApplicationsCloud Native Key TechnologiesContainer optimized LinuxDeveloper ToolingSecure Container RuntimeMicroservices governance第19页AppCatalyst24Container Developer Stack Dev Tooling24Developer ToolsContainer PackagingLinuxOptional: Typ

17、e 2HypervisorDevs LaptopDeveloperIntegrated with Docker Machine and VagrantAn alternative to VirtualBox第20页REST APICLI25AppCatalyst - The Hypervisor for Container DeveloperContainerContainerContainerContainerDockerMachineVagrantorBring Your Own LinuxNetwork and Storage Abstractions(coming soon)VMwar

18、e AppCatalystDeveloper Desktop25ContainerContainerPHOTON OS第21页AppCatalyst - Hypervisor to Speed up DevelopmentDatacenter-in-a-laptop, model production deployments on yourlaptopSame battle-tested virtualization engine as Fusion and WorkstationDrop-in replacement for Virtualbox in Docker Machine and

19、VagrantDeveloper-FriendlyOptimized to support developer workflowsExposes REST API with command-line interfaceNo UI to mess with, built to run fast and mean第22页ContainerRepositoriesOCF: Standard operations Content-agnostic Infrastructure-agnostic Designed for automation Industrial-grade deliveryDevel

20、oper ToolsContainer PackagingLinuxOptional: Type 2HypervisorDevs LaptopDeveloperContainer Developer Stack27第23页28Agenda122.12.22.32.4The Rise of Cloud Native ApplicationsCloud Native Key TechnologiesContainer optimized LinuxDeveloper ToolingSecure Container RuntimeMicroservices governance第24页29Cloud

21、 Native Platform Production StackManagementApp Definition, Policies,and ProvisioningContainer ClusterSchedulerContainer PackagingContainer-optimizedLinuxInfrastructure(Hypervisor, storage,networking, etc)Productione.g. Photon OS, CoreOS, Atomice.g. vSphere Integrated Container, VSAN, NSX, KVM,第25页Th

22、e Debate: Container vs VM30 Portable packaging Small footprint Performance Secure Isolation MatureVS第26页31Combining the best of both Container & VMHypervisorVMMini OSkernelContainerimage Mini OS kernel enables fast startup time Mounting container image to start the bundled application Achieve strong

23、 isolation as VM第27页CONFIDENTIAL32 NO vSpherevSphere Integrated Containers (VIC)“Cloud-Native Platform” EXTENDING an existing vSphereenvironment Containers become a first-class citizenIndustry-leading capabilities DRS, vMotion, HA/DRvSphere Integrated ContainersInstant Clone, rebuilding or re-archit

24、ecture requiredProject Bonneville, Photon OS Full compatibility with existing toolsVMware Broadest ecosystemservices, and hardware platformsVSANLeverage Your Existing Investments andEnable On-Ramp To Cloud-Native第28页33vSphere Integrated Containers Combine the best ofboth worldsThe convenience of Doc

25、ker containers with themanagement and security of vSphereDocker containers encapsulated as virtual machinesEverything in ESX becomes a well-isolated VM “container”Customers can move containers in and out of vSphere seamlesslyComplete API compatibility with DockerContainers visible to IT administrato

26、rs when running on ESXWorks with full ecosystem of Docker clientsGreater security and resource efficiencyNo container host operating system to maintain.ESX clustering allows for more efficient multi-tenant access第29页vSphere Integrated Containers ArchitectureBonnevilleDockerDaemonVanillaDockerClientD

27、ocker REST APIESXi Server Containers are first-class citizens on the hypervisor No need for a separately managed Linux container host, ESX is the containerhost Virtualization brings many benefits: Security, Isolation and multiple-OS support,migration, HA3434ContainerContainerContainerLegacyVMsMount

28、ImageDockerImagesDocker HubPullImageContainerVM template(running)第30页35Demo: Containers integrated with VMs on ESX第31页Demo: Containers integrated with VMs on ESX36第32页Cloud Native Platform Production Stack37ManagementApp Definition, Policies,and ProvisioningContainer ClusterSchedulerContainer PackagingContainer-optimizedLinuxInfrastructure(Hypervisor, storage,networking, etc)Productione.g. Lightwave, Composee.g. K8s, Mesose.g. OCFe.g. Photon OS, CoreOS,