Buenos Aires 31 de Octubre de 2018

Transcription

1 Buenos Aires 31 de Octubre de 2018

2

3 VMware NSX Data Center & Containers in the Dell EMC Ecosystem Gonzalo Atienza Sr Systems Engineer, Network & Security Business Unit, VMware

4

5 Containers are Here to stay! Container Instances (Installed Base; Million Units) 985M 555M 611 ~1B containers by M 334 >60% in VMs by M 34M Source: IDC Special Study on Container Forecast (Dec 2016); Q&A with Gary Chen, IDC; CCMI team analysis

6 Containers vs VMs Application Container Application OS Dependencies Easier Hard Problem Operating System & Dependencies Compute Net Sec Storage OS Abstraction Operating System & Container Dependencies Host OS Compute Net Sec Storage Physical Infrastructure Physical Infrastructure 2018 VMware, Inc. 6

7 Building a Container with Docker Container Registry FROM: Ubuntu RUN apt-get redis EXPOSE 6379 Redis DB Running Container CMD [ /user/sbin/redis..] #docker build #docker push Tools, Libs, SW #docker run redis_img1 Redis DB Tools, Libs, SW Dockerfile Repo for Container Images Docker Engine Minimal Linux Container Host VM 2018 VMware, Inc. 7

8 Docker and Kubernetes Docker One at a time Kubernetes Orchestrating Multiple Containers $docker run container1 $kubectl create f App.yaml Wanted: Container Orchestrator! $docker run container2 $docker run container3 The App $docker run container4 The App Kubernetes Cluster 8

9 High Level K8s 101 Desired State Management P1R 1 P2R 1 P2R 1 P1R 1 App_X.yaml K Node (Container Host VM) POD1 ContainerImage1 Replicas: App_Y.yaml 3 POD1 POD2 ContainerImage1 ContainerImage2 Replicas: Replicas: 1 2 POD2 ContainerImage2 Replicas: 2 API Kubernetes Cluster Services (Master & etcd nodes) K K P1R 2 P1R 3 P2R 1 P2R 2 P1R 1 Node (Container Host VM) P2R 2 P1R 2 Node (Container Host VM) 9 9

10 Challenges in Containers Cloud Native Computing Foundation 50% 45% 40% 35% 30% 25% 20% 15% 10% 5% All solved by VMware 0% Difficulty choosing an orchestration solution Reliability Scaling Deployments Logging Complexity Networking Monitoring Storage Security Source: CNCF user Survey, December 2017

11 Mapping Challenges with VMware Portfolio Reliability Scaling Complexity Networking Security vrops vrli Wavefront Monitoring Storage

12 Demystifying Kubernetes Networking 2018 VMware, Inc. 12

13 K8s Networking pod1 netns pod2 netns veth.x veth.y docker0 root netns Kubernetes node - VM vswitch

14 K8s Networking pod1 netns pod2 netns pod3 netns pod4 netns veth.x docker 0 veth.y veth.x docker 0 veth.y root netns root netns K8s node - VM K8s node - VM Challenges L2 Overlays L3/L4 Policies LB Services

15 K8s Networking pod1 netns pod2 netns veth.x veth.y docker0 root netns Kubernetes node - VM vswitch

16 Container Network Interface & NSX-T pod1 netns NSX CNI Plugin & Node Agent pod2 netns root netns O V S Kubernetes node - VM vswitch

17 Container Network Interface & NSX-T pod1 netns pod2 netns pod3 netns pod4 netns NSX CNI Plugin & Node Agent NSX CNI Plugin & Node Agent root netns K8s node - VM O V S root netns K8s node - VM O V S k8s ns LS DFW K DFW L2 Overlays L3/L4 Policies LB Services DFW K DFW k8s ns LS cif cif cif cif

18 NCP NSX Container Plugin NSX Container Plugin - K8s Pod K8s / OS Adapter K8s master etc d API- Server Schedule r CloudFoundr y Adapter Libnetwork Adapter More NC M Infr a NSX Manager API Client NSX Manager NSX/ K8s topology NS: foo NS: bar NSX CNI Plugin & Node Agent

19 Kubernetes

20 Hands On Labs NET Integrating Kubernetes with VMware NSX-T Data Center YELB Containers Legacy VM

21

22 Canal Kubernetes Networking Options *Open Source NSX-T L2 L3 (North/South) L4 Security Policy Load Balancing VM Connectivity End to End Configuration & Troubleshooting + Existing Ops Tools Flannel L2 only (East/West Pod Traffic) Calico L3/L4 (IP Tables) NGINX/HA Proxy Load balancing Zero VM Networking Integration No End to End Configuration & Troubleshooting + New Ops Tools 2018 VMware, Inc. 22

23 VMware NSX on CaaS or PaaS

24

25 25