Mobile Cloud Computing Challenges and Solutions

Transcription

1

2 Mobile Cloud Computing Challenges and Solutions Rohit Bhardwaj Principal Cloud Engineer, Kronos Inc. Twitter: rbhardwaj1

3 Roadmap Mobile cloud challenges Case studies: Uber, Twitter Availability, scalability, self healing Containers - Dockers, Kubernetes, Mesos Performance Security

4

5 Designing for Low Bandwidth

6

7

8

9

10 Service Availability

11

12

13

14 Mobile app battery drain

15

16 Vendor lockin

17

18 Roadmap Mobile cloud challenges Case studies: Uber, Twitter Availability, scalability, self healing Containers - Dockers, Kubernetes, Mesos Performance Security

19

20

21

22 initial über

23

24 availability

25 operational cost per trip

26 response time

27

28 1000 services challenges Trip tracking Mapping and Routing Realtime Market place + Matching (Supply vs Demand) Reputation tracking (Ratings) Global Payment Processing Data Warehousing + Modeling Supply + Demand prediction Fraud Detection

29 twitter

30 scalability challenge

31 Traditional Solutions

32 TWITTER

33 Roadmap Mobile cloud challenges Case studies: Uber, Twitter Availability, scalability, self healing Containers - Dockers, Kubernetes, Mesos Performance Security

34 Decouple the data- design for availability, scalability, self healing

35 Netflix case study

36

37

38 Chaos Gorilla

39 Service Discovery Pattern

40 distributed, eventually consistent hierarchical configuration store

41 Resilient to Failure

42 Circuit Breaker

43 Circuit Breaker demo

44

45 CIRCUIT BREAKER DESIGN Benefits PATTERN Improved resilience to failure To provide visibility into component failures (though visibility into tripped breakers) Where to use this pattern To eliminate timeout delays due to network or VM instance failures To prevent errors cascading and complicating upstream error handling (fail transparently, fail silently)

46 Consider communications between application components

47 Issue: Latency between New York and San Francisco 13.8 ms 27.6 ms (Round trip) As per AT&T: 70 ms Distance, as the crow flies, between New York and San Francisco = 2,565 miles; speed of light = 186,000 miles/second.

48 Service A depends on B which depends on C

49 Solution 1: Co-locate

50 Solution 2: Reducing the number of network requests REST API design Ask for Zip and phone in same REST request Consolidate small details into one form

51 Netflix in 2009: Bandwidth Aware

52 Reduce chattiness

53 Roadmap Mobile cloud challenges Case studies: Uber, Twitter Availability, scalability, self healing Containers - Dockers, Kubernetes, Mesos Performance Security

54 Choosing right container technology using Docker, Kubernetes and Mesos

55

56

57 Dockers Docker allows you to package an application with all of its dependencies into a standardized unit for software development.

58

59

60

61

62 Deploying your first app on Kubernetes

63 Kubernetes Pods

64 Node overview

65 Kubernetes Services

66 Scaling overview

67 Service Scaling

68 Updating an application

69 Updating an application

70 Updating an application

71 Updating an application

72

73 Roadmap Mobile cloud challenges Case studies: Uber, Twitter Availability, scalability, self healing Containers - Dockers, Kubernetes, Mesos Performance Security

74 PERFORMANCE queries

75 killrvideo.com

76 Conceptual Data Modeling

77 purpose

78

79 abstraction

80 abstraction

81 application workflow model

82 entity type

83

84 Mapping Conceptual to Logical

85 Query-Driven Data Modeling

86 Example Chebotko Diagram

87 Duplicate Data

88 Roadmap Mobile cloud challenges Case studies: Uber, Twitter Availability, scalability, self healing Containers - Dockers, Kubernetes, Mesos Performance Security

89

90

91

92

93

94 Threat modeling

95

96 Mobile Best practices Do NOT store PII or other sensitive data on the user device Do NOT rely on built-in key chains Do practice defense in depth Do limit permissions to only the most necessary components required for the app to function correctly Do implement proper TLS by ensuring HTTPS is always used

97 Mobile Best practices Do NOT hard-code data within the app Do invalidate a user s session upon logout on both the client and server side. Do implement OAuth 2.0 /JSON Web Tokens (JWT) Do know which regulations your application needs to adhere to (PCI-DSS, HIPAA) Do use proper binary protection to combat buffer overflow and stack overflow attacks, along with jailbreaking

98

99 TM 2018 Conference and Deep Dive Sessions April 24-28, IISc Bangalore Register early and get the best bit.ly/gidslinkedin