Secure Kubernetes Container Workloads
|
|
- Ashlyn Nelson
- 5 years ago
- Views:
Transcription
1 Secure Kubernetes Container Workloads with Production-Grade Networking Cynthia Thomas Irena Berezovsky Tim Hockin
2 CIA IT operations have top secret apps for their agents, most of which require isolation - Antoni Antoni is in Ops and wants to help CIA embrace DevOps Berta is a Dev eager to design efficiently and deliver excellent apps Berta
3 The world before Neutron: can I plug in your cable? 1. New project defined: Developer needs an environment 2. Dev asks SysAdmin for some resources 3. SysAdmin installs Server OS and asks Network people for a VLAN (ewww!) 4. Network people ask Security team to open a port in a firewall rule. Someone plugs into wrong port or wrong requirements: start over!
4 Antoni & Berta were doing it the hard way The CIA IT takes weeks, even months to deliver isolated resources for the various projects at CIA. Servers and VLANs and firewalls, oh my!
5 Neutron for higher layer network services OpenStack core project since Folsom Tenant and Admin solution agnostic API Pluggable Framework Provides extensible API to build rich topologies (vendor extensions) Advanced Services Support, i.e. LBaaS, VPNaaS, FWaaS
6 OpenStack Networking on the fly at CIA Operator (networking, security, etc) versus App Developer OpenStack has reduced the time to deliver compute resources Security policies allows the CIA to keep business units separate Each department admin can manage its own resources
7 Can we do better? Spawning a VM is slow expensive There is a lot of management overhead VMs are not portable: run on a specific Hypervisor If only there was a way to virtualize an OS to enable multiple workloads to run on a single OS... App App App Libs Libs Libs Guest OS Guest OS Guest OS Hypervisor OS Hardware
8 Along came Docker Containers are an alternative to VMs Bundle your app & deps, but not the OS Faster and lower overhead than VMs O(milliseconds) to spawn Developer-focused Enables fast iteration, less non-app concerns Ridiculously simple UX It s the technology of the decade! container container container App App App Libs Libs Libs OS Hardware
9 CIA developers demand containers Launch in milliseconds! Dev-Prod parity, on my laptop! MUST HAVE! But it is very chaotic -- they need need help managing it all...
10 Kubernetes changed everything The Kubernetes API is app-centric De-emphasizes infrastructure and operations concerns Those can exist, but are not the primary focus Integrate with existing infrastructure and ops, but don t replace it Networking is infrastructure, security is ops We still need to address the concerns of ops!
11 Kubernetes network model Assumes a single, shared network space No noun for Network (yet?) Network plugins decide what technology veth, VXLAN, OVS, etc. All connectivity is enabled by default Implicitly single tenant Also reflected in services like DNS Compare to Docker model: Noun for Network App-centric networks
12 Tension between dev and ops No, no, no! I can t have my apps be reachable by Carlos s team!
13 Namespaces: Kubernetes Scopes for named objects within a cluster Pods, Services, etc. are all namespaced Logical grouping of related things Could be 1 user...or 1 app...or 1 tier of an app No relationship to nodes or networks All Namespaces exist on all nodes Network is not segmented Seems like an obvious hook for networking
14 Kubernetes NetworkPolicy API to lock down the network Describe the graph of your app Specify which connectivity to allow Applies per Namespace Exists alongside the apps it decribes Default-deny plus explicit allow rules Network infrastructure can enforce it Many vendors have implementations Does not cover egress (yet?)
15 Kubernetes NetworkPolicy apiversion: extensions/v1beta1 kind: NetworkPolicy metadata: name: front-to-mid namespace: cia-spy-app spec: podselector: role: middleware ingress: - ports: - protocol: TCP port: 6379 from: - podselector: role: frontend apiversion: extensions/v1beta1 kind: NetworkPolicy metadata: name: mid-to-db namespace: cia-spy-app spec: podselector: role: db ingress: - ports: - protocol: TCP port: 3306 from: - podselector: role: middleware
16 Kubernetes NetworkPolicy apiversion: extensions/v1beta1 kind: NetworkPolicy metadata: name: front-to-mid namespace: cia-spy-app spec: podselector: role: middleware ingress: - ports: - protocol: TCP port: 6379 from: - podselector: role: frontend apiversion: extensions/v1beta1 kind: NetworkPolicy metadata: name: mid-to-db namespace: cia-spy-app spec: podselector: role: db ingress: - ports: - protocol: TCP port: 3306 from: - podselector: role: middleware
17 Kubernetes NetworkPolicy apiversion: extensions/v1beta1 kind: NetworkPolicy metadata: name: front-to-mid namespace: cia-spy-app spec: podselector: role: middleware ingress: - ports: - protocol: TCP port: 6379 from: - podselector: role: frontend apiversion: extensions/v1beta1 kind: NetworkPolicy metadata: name: mid-to-db namespace: cia-spy-app spec: podselector: role: db ingress: - ports: - protocol: TCP port: 3306 from: - podselector: role: middleware
18 Kubernetes NetworkPolicy apiversion: extensions/v1beta1 kind: NetworkPolicy metadata: name: front-to-mid namespace: cia-spy-app spec: podselector: role: middleware ingress: - ports: - protocol: TCP port: 6379 from: - podselector: role: frontend apiversion: extensions/v1beta1 kind: NetworkPolicy metadata: name: mid-to-db namespace: cia-spy-app spec: podselector: role: db ingress: - ports: - protocol: TCP port: 3306 from: - podselector: role: middleware
19 Where Neutron is ahead of k8s Neutron Kubernetes Multi Tenant environment Single Tenant Rich network topologies with overlapping IPs Flat, shared network with IP per pod Security Groups, Port Security (ARP Spoofing) Network Policy (ingress only) Port Quality of Service - Admin and Tenant facing API Primarily application-centric API
20 Containers Challenges A lot of new products/companies have emerged in the container orchestration and integration ecosystem With multi-host, multi orchestration environment, networking becomes critical Run containers in VMs for better isolation and security Multi-tenancy, host or cluster per tenant VMs and Containers share the same network
21 What is Kuryr? Neutron as a production-ready networking abstraction that containers need Kuryr translates container orchestration events into Neutron entities, performs API calls and manages the response to the orchestrator
22 Kuryr as a translator between k8s and Neutron Map container networking abstractions to the Neutron API Kubernetes Neutron Allow Container, BM and VM networking under the same API Namespace Network, Subnet Pod Port Implements all the common code for Neutron vendors, allowing them to provide advanced container networking by just having a binding script Service Load Balancer External IP Floating IP Network Policy Security Groups
23 Example: CIA Security Antoni can satisfy CIA security requirements with Kubernetes & Kuryr: Kubernetes made it easy for the app devs to express the application in terms of required deployment With NetworkPolicy devs can specify the intended application connectivity With Kuryr mapping of Kubernetes requests to Neutron constructs, and NetworkPolicy realization by Neutron security groups, true isolation and security is achieved via the Kubernetes API
24 Kubernetes + Kuryr + MidoNet: Scalable Neutron Neutron plugin scaling with ease, and flexible API for fine-grain security policies Event-based design (receives events from k8s-api) Compatible with Kubernetes >=1.2 API watcher + CNI driver Asynchronous event-loop based on asyncio python 3.4 library No kube-proxy
25 How is MidoNet a Scalable Neutron Solution?
26 Example: CIA MidoNet deployment Antoni uses MidoNet for his OpenStack Neutron plugin for production-grade networking He knows he can scale compute for the CIA with confidence with an HA solution MidoNet Manager provides Antoni with every single network flow and each security policy applied
27 Example: CIA MidoNet deployment with kuryr-k8s Antoni is trying the kuryr-k8s tech preview solution with MidoNet: Today, he can launch a script to automatically deploy the k8s-master and k8s-worker to try MidoNet with k8s Antoni wants native API calls for pods and VMs while using the same operator tools
28 MidoNet-enhanced Security Neutron Security Groups white-list of allowed traffic port-level firewall MidoNet implements SG+: low-level constructs called chains and rules richer feature set for matching/filtering and actions
29 Future of networking in Kubernetes Multi-tenancy is probably unavoidable Ripples are deep and wide Possible evolution: Network objects in API More fine-grained policy Egress policy L7 policy QoS/shaping Multi-tenant DNS (and other services)
30 Kuryr-Kubernetes status Current Early stage CNI Driver and k8s API watcher in progress Future work K8s Network Policy support High Availability Kuryr-openshift Bridging OpenStack VMs and kuryr-k8s
31 Get Involved! Kuryr Kubernetes MidoNet Community Site Community Site Community Site Project Git Repo Project Git Repo Project Git Repo IRC weekly meeting Join Slack slack.k8s.io/ Join Slack slack.midonet.org Try MidoNet with one command: $> curl -sl quickstart.midonet.org sudo bash
Project Kuryr. Antoni Segura Puimedon (apuimedo) Gal Sagie (gsagie)
Project Kuryr Antoni Segura Puimedon (apuimedo) Gal Sagie (gsagie) What are the problems? Reinventing networking abstractions Changing and vendor specific solutions Flannel Weave SocketPlane Overlay2 for
More informationProject Kuryr. Here comes advanced services for containers networking. Antoni Segura
Project Kuryr Here comes advanced services for containers networking Mohammad Banikazemi @MBanikazemi Gal Sagie @GalSagie Antoni Segura Puimedon @celebdor Outline Motivation and Introduction Current state
More informationCONTAINERS AND MICROSERVICES WITH CONTRAIL
CONTAINERS AND MICROSERVICES WITH CONTRAIL Scott Sneddon Sree Sarva DP Ayyadevara Sr. Director Sr. Director Director Cloud and SDN Contrail Solutions Product Line Management This statement of direction
More informationUsing Network Virtualization in DevOps environments Yves Fauser, 22. March 2016 (Technical Product Manager VMware NSBU)
Using Network Virtualization in DevOps environments Yves Fauser, 22. March 2016 (Technical Product Manager VMware NSBU) 2014 VMware Inc. All rights reserved. Who is standing in front of you? Yves Fauser
More informationDan Williams Networking Services, Red Hat
Networking Containers with Kubernetes and OpenShift Dan Williams Networking Services, Red Hat Kubernetes Components Web UI Pod apiserver etcd Container 1 Container 2 scheduler controller Command-line interface
More informationSecuring Microservice Interactions in Openstack and Kubernetes
Securing Microservice Interactions in Openstack and Kubernetes Yoshio Turner & Jayanth Gummaraju Co- Founders @ Banyan https://www.banyanops.com Banyan Founded in the middle of 2015 In San Francisco, CA
More informationFully Scalable Networking with MidoNet
Fully Scalable ing with MidoNet Sandro Mathys Community Manager Sandro Mathys MidoNet Community Manager at Midokura Former Linux Systems Engineer Long standing contributor to Fedora & RDO Twitter / Freenode
More informationKubernetes made easy with Docker EE. Patrick van der Bleek Sr. Solutions Engineer NEMEA
Kubernetes made easy with Docker EE Patrick van der Bleek Sr. Solutions Engineer NEMEA Docker Enterprise Edition is More than Containers + Orchestration... DOCKER ENTERPRISE EDITION Kubernetes integration
More informationDisclaimer This presentation may contain product features that are currently under development. This overview of new technology represents no commitme
NET1522BE Kubernetes Networking with NSX-T Deep Dive Ali Al Idrees Yves Fauser #VMworld #NET1522BE Disclaimer This presentation may contain product features that are currently under development. This overview
More informationProject Calico v3.2. Overview. Architecture and Key Components. Project Calico provides network security for containers and virtual machine workloads.
Project Calico v3.2 Overview Benefits Simplicity. Traditional Software Defined Networks (SDNs) are complex, making them hard to deploy and troubleshoot. Calico removes that complexity, with a simplified
More informationKubernetes Integration Guide
Kubernetes Integration Guide Cloud-Native Security www.aporeto.com Aporeto Kubernetes Integration Guide The purpose of this document is to describe the features of Aporeto that secure application services
More informationLife of a Packet. KubeCon Europe Michael Rubin TL/TLM in GKE/Kubernetes github.com/matchstick. logo. Google Cloud Platform
logo Life of a Packet KubeCon Europe 2017 Michael Rubin TL/TLM in GKE/Kubernetes github.com/matchstick Google Cloud Platform Kubernetes is about clusters Because of that, networking
More informationDisclaimer This presentation may contain product features that are currently under development. This overview of new technology represents no commitme
NET1522BU Kubernetes Networking with NSX-T Deep Dive #VMworld #NET1522BU Disclaimer This presentation may contain product features that are currently under development. This overview of new technology
More informationRed Hat OpenShift Roadmap Q4 CY16 and H1 CY17 Releases. Lutz Lange Solution
Red Hat OpenShift Roadmap Q4 CY16 and H1 CY17 Releases Lutz Lange Solution Architect @AtomicContainer OpenShift Roadmap OpenShift Container Platform 3.2 Kubernetes 1.2 & Docker 1.9
More informationProject Calico v3.1. Overview. Architecture and Key Components
Project Calico v3.1 Overview Benefits Simplicity. Traditional Software Defined Networks (SDNs) are complex, making them hard to deploy and troubleshoot. Calico removes that complexity, with a simplified
More informationZero to Microservices in 5 minutes using Docker Containers. Mathew Lodge Weaveworks
Zero to Microservices in 5 minutes using Docker Containers Mathew Lodge (@mathewlodge) Weaveworks (@weaveworks) https://www.weave.works/ 2 Going faster with software delivery is now a business issue Software
More informationThe speed of containers, the security of VMs
* The speed of containers, the security of VMs Xu Wang, Hyper Samuel Ortiz, Intel *Other names and brands may be claimed as the property of others. Contents Project
More informationThe speed of containers, the security of VMs. KataContainers.io
* The speed of containers, the security of VMs KataContainers.io Contents Project Overview Technical Details Governance Get Involved History Intel Clear Containers * May 2015 Dec 2017 *Other names and
More informationOpenShift Dedicated 3 Release Notes
OpenShift Dedicated 3 Release Notes Last Updated: 2018-05-17 OpenShift Dedicated 3 Release Notes Legal Notice Copyright 2018 Red Hat, Inc. The text of and illustrations in this document are licensed by
More informationTEN LAYERS OF CONTAINER SECURITY
TEN LAYERS OF CONTAINER SECURITY Tim Hunt Kirsten Newcomer May 2017 ABOUT YOU Are you using containers? What s your role? Security professionals Developers / Architects Infrastructure / Ops Who considers
More informationRunning RHV integrated with Cisco ACI. JuanLage Principal Engineer - Cisco May 2018
Running RHV integrated with Cisco ACI JuanLage Principal Engineer - Cisco May 2018 Agenda Why we need SDN on the Data Center What problem are we solving? Introduction to Cisco Application Centric Infrastructure
More informationKubernetes 101. Doug Davis, STSM September, 2017
Kubernetes 101 Doug Davis, STSM September, 2017 Today's Agenda What is Kubernetes? How was Kubernetes created? Where is the Kubernetes community? Technical overview What's the current status of Kubernetes?
More informationWolfram Richter Red Hat. OpenShift Container Netzwerk aus Sicht der Workload
Wolfram Richter Red Hat OpenShift Container Netzwerk aus Sicht der Workload Why this session? OpenShift is great for web applications, but we want to do X will this work? X { Analytics, Non-HTTP, High-
More informationOpen Service Broker API: Creating a Cross-Platform Standard Doug Davis IBM Shannon Coen Pivotal
Open Service Broker API: Creating a Cross-Platform Standard Doug Davis IBM Shannon Coen Pivotal Motivations Application development teams require services From app dependencies to team enablement Managed
More informationHacking and Hardening Kubernetes
SESSION ID: HT-W02 Hacking and Hardening Kubernetes Jay Beale CTO InGuardians, Inc @jaybeale and @inguardians Adam Crompton Senior Security Analyst InGuardians, Inc. @3nc0d3r and @inguardians Table of
More informationImplementing Container Application Platforms with Cisco ACI
BRKDCN-2627 Implementing Container Application Platforms with Cisco ACI Andres Vega Product Manager, Engineering Cisco Spark How Questions? Use Cisco Spark to communicate with the speaker after the session
More informationRed Hat Atomic Details Dockah, Dockah, Dockah! Containerization as a shift of paradigm for the GNU/Linux OS
Red Hat Atomic Details Dockah, Dockah, Dockah! Containerization as a shift of paradigm for the GNU/Linux OS Daniel Riek Sr. Director Systems Design & Engineering In the beginning there was Stow... and
More informationApplication Centric Microservices Ken Owens, CTO Cisco Intercloud Services. Redhat Summit 2015
Application Centric Microservices Ken Owens, CTO Cisco Intercloud Services Redhat Summit 2015 Agenda Introduction Why Application Centric Application Deployment Options What is Microservices Infrastructure
More informationCloud & container monitoring , Lars Michelsen Check_MK Conference #4
Cloud & container monitoring 04.05.2018, Lars Michelsen Some cloud definitions Applications Data Runtime Middleware O/S Virtualization Servers Storage Networking Software-as-a-Service (SaaS) Applications
More informationStackube Documentation
Stackube Documentation Release Stackube development team Oct 29, 2017 Contents 1 Stackube Authors 3 2 Introduction 5 2.1 Stackube Architecture.......................................... 5 2.2 Stackube
More informationOpenShift 3 Technical Architecture. Clayton Coleman, Dan McPherson Lead Engineers
OpenShift 3 Technical Architecture Clayton Coleman, Dan McPherson Lead Engineers Principles The future of *aas Redefine the Application Networked components wired together Not just a web frontend anymore
More informationContrail Networking: Evolve your cloud with Containers
Contrail Networking: Evolve your cloud with Containers INSIDE Containers and Microservices Transformation of the Cloud Building a Network for Containers Juniper Networks Contrail Solution BUILD MORE THAN
More informationManaging Demand Spikes in a highly flexible and agile deployment
Managing Demand Spikes in a highly flexible and agile deployment Yuki Sato S2 (Akita, Japan) Jan Hilberath Midokura (Tokyo, Japan) Agenda Company Introduction Why SUSE OpenStack with MidoNet? MidoNet Introduction
More informationServices and Networking
This chapter contains the following topics: Load Balancing Kubernetes Services using NGINX, on page 1 Network Policies, on page 6 Load Balancer Services, on page 7 Load Balancing Kubernetes Services using
More informationKuber-what?! Learn about Kubernetes
DEVNET-1999 Kuber-what?! Learn about Kubernetes Ashley Roach, Principal Engineer Evangelist Agenda Objectives A brief primer on containers The problems with running containers at scale Orchestration systems
More informationIntroduction to Neutron. Network as a Service
Introduction to Neutron Network as a Service Assaf Muller, Associate Software Engineer, Cloud Networking, Red Hat assafmuller.wordpress.com, amuller@redhat.com, amuller on Freenode (#openstack) The Why
More informationBuild Cloud like Rackspace with OpenStack Ansible
Build Cloud like Rackspace with OpenStack Ansible https://etherpad.openstack.org/p/osa-workshop-01 Jirayut Nimsaeng DevOps & Cloud Architect 2nd Cloud OpenStack-Container Conference and Workshop 2016 Grand
More informationVirtualization Design
VMM Integration with UCS-B, on page 1 VMM Integration with AVS or VDS, on page 3 VMM Domain Resolution Immediacy, on page 6 OpenStack and Cisco ACI, on page 8 VMM Integration with UCS-B About VMM Integration
More informationCloudCenter for Developers
DEVNET-1198 CloudCenter for Developers Conor Murphy, Systems Engineer Data Centre Cisco Spark How Questions? Use Cisco Spark to communicate with the speaker after the session 1. Find this session in the
More informationKubernetes Container Networking with NSX-T Data Center Deep Dive
Kubernetes Container Networking with NSX-T Data Center Deep Dive Yasen Simeonov, VMware, Inc. #vmworld NET1677BU #NET1677BU Disclaimer This presentation may contain product features or functionality that
More informationVirtual Infrastructure: VMs and Containers
Virtual Infrastructure: VMs and Containers Andy Bavier and Gopinath Taget ONF CORD Build Nov. 7-9, 2017 An Operator Led Consortium CORD platform evolution Cutting edge innovate Initial CORD prototype (ONS
More informationContainers Infrastructure for Advanced Management. Federico Simoncelli Associate Manager, Red Hat October 2016
Containers Infrastructure for Advanced Management Federico Simoncelli Associate Manager, Red Hat October 2016 About Me Kubernetes Decoupling problems to hand out to different teams Layer of abstraction
More informationOpen Hybrid Cloud & Red Hat Products Announcements
Open Hybrid Cloud & Red Hat Products Announcements FREDERIK BIJLSMA Cloud BU EMEA Red Hat 14th December 2012 PERVASIVE NEW EXPECTATIONS AGILITY. EFFICIENCY. COST SAVINGS. PUBLIC CLOUDS 2 ENTERPRISE IT
More informationLayer-4 to Layer-7 Services
Overview, page 1 Tenant Edge-Firewall, page 1 LBaaS, page 2 FWaaS, page 4 Firewall Configuration, page 6 Overview Layer-4 through Layer-7 services support(s) end-to-end communication between a source and
More informationOverview of Container Management
Overview of Container Management Wyn Van Devanter @wynv Vic Kumar Agenda Why Container Management? What is Container Management? Clusters, Cloud Architecture & Containers Container Orchestration Tool Overview
More informationEASILY DEPLOY AND SCALE KUBERNETES WITH RANCHER
EASILY DEPLOY AND SCALE KUBERNETES WITH RANCHER 2 WHY KUBERNETES? Kubernetes is an open-source container orchestrator for deploying and managing containerized applications. Building on 15 years of experience
More informationMulti-Cloud and Application Centric Modeling, Deployment and Management with Cisco CloudCenter (CliQr)
Multi-Cloud and Application Centric Modeling, Deployment and Management with Cisco CloudCenter (CliQr) Jeremy Oakey - Sr. Director, Technical Marketing & Integrations BRKCLD-2008 Agenda Introduction Architecture
More informationRunning MarkLogic in Containers (Both Docker and Kubernetes)
Running MarkLogic in Containers (Both Docker and Kubernetes) Emma Liu Product Manager, MarkLogic Vitaly Korolev Staff QA Engineer, MarkLogic @vitaly_korolev 4 June 2018 MARKLOGIC CORPORATION Source: http://turnoff.us/image/en/tech-adoption.png
More informationUsing DC/OS for Continuous Delivery
Using DC/OS for Continuous Delivery DevPulseCon 2017 Elizabeth K. Joseph, @pleia2 Mesosphere 1 Elizabeth K. Joseph, Developer Advocate, Mesosphere 15+ years working in open source communities 10+ years
More informationKubernetes on Openstack
Kubernetes on Openstack Saverio Proto saverio.proto@switch.ch Lugano 2018 SWITCH 1 Infrastructure & Data Services Your added value Our customers Our offer 2018 SWITCH 2 Your added value SWITCH made Swiss
More informationMultiple Networks and Isolation in Kubernetes. Haibin Michael Xie / Principal Architect Huawei
Multiple Networks and Isolation in Kubernetes Haibin Michael Xie / Principal Architect Huawei Agenda CNI and network plug-ins Multiple network use cases, design and implementation Network multi-tenancy
More informationKUBERNETES IN A GROWN ENVIRONMENT AND INTEGRATION INTO CONTINUOUS DELIVERY
KUBERNETES IN A GROWN ENVIRONMENT AND INTEGRATION INTO CONTINUOUS DELIVERY Stephan Fudeus, Expert Continuous Delivery Dr. Sascha Mühlbach, Expert Infrastructure Architect United Internet / 1&1 Mail & Media
More informationDisclaimer This presentation may contain product features that are currently under development. This overview of new technology represents no commitme
CNA1142BE Developer-Ready Infrastructure from VMware and Pivotal Merlin Glynn (Vmware) Ramiro Salas (Pivotal) #VMworld #CNA1142BE Disclaimer This presentation may contain product features that are currently
More informationConvergence of VM and containers orchestration using KubeVirt. Chunfu Wen
Convergence of VM and containers orchestration using KubeVirt Chunfu Wen chwen@redhat.com Agenda Context Introduction What Is Kubevirt And How It Feel Kubevirt Architecture And Design Demo FIRST A LITTLE
More informationDisclaimer This presentation may contain product features that are currently under development. This overview of new technology represents no commitme
CNA1509BU Developer-Ready Infrastructure from VMware and Pivotal Merlin Glynn, VMware Ramiro Salas, Pivotal #VMworld #CNA1509BU Disclaimer This presentation may contain product features that are currently
More informationHybrid Cloud Solutions
Hybrid Cloud Solutions with Cisco and Microsoft Innovation Rob Tappenden, Technical Solution Architect rtappend@cisco.com March 2016 Today s industry and business challenges Industry Evolution & Data Centres
More informationLogging, Monitoring, and Alerting
Logging, Monitoring, and Alerting Logs are a part of daily life in the DevOps world In security, we focus on particular logs to detect security anomalies and for forensic capabilities A basic logging pipeline
More informationOpenStack and OVN What s New with OVS 2.7 OpenStack Summit -- Boston 2017
OpenStack and OVN What s New with OVS 2.7 OpenStack Summit -- Boston 2017 Russell Bryant (@russellbryant) Justin Pettit (@Justin_D_Pettit) Ben Pfaff (@Ben_Pfaff) Virtual Networking Overview Provides a
More informationRed Hat OpenStack Platform 10 Red Hat OpenDaylight Product Guide
Red Hat OpenStack Platform 10 Red Hat OpenDaylight Product Guide Overview of Red Hat OpenDaylight OpenStack Team Red Hat OpenStack Platform 10 Red Hat OpenDaylight Product Guide Overview of Red Hat OpenDaylight
More informationQuantum, network services for Openstack. Salvatore Orlando Openstack Quantum core developer
Quantum, network services for Openstack Salvatore Orlando sorlando@nicira.com Openstack Quantum core developer Twitter- @taturiello Caveats Quantum is in its teenage years: there are lots of things that
More information10 Kube Commandments
10 Kube Commandments We've been in the game for years That in itself is admirable There's rules to this biz We wrote y'all a manual A step-by-step conf talk for you to get... Your clusters on track And
More informationBest Practice Deployment of F5 App Services in Private Clouds. Henry Tam, Senior Product Marketing Manager John Gruber, Sr. PM Solutions Architect
Best Practice Deployment of F5 App Services in Private Clouds Henry Tam, Senior Product Marketing Manager John Gruber, Sr. PM Solutions Architect Agenda 1 2 3 4 5 The trend of data center, private cloud
More informationVMware Integrated OpenStack with Kubernetes Getting Started Guide. VMware Integrated OpenStack 4.1
VMware Integrated OpenStack with Kubernetes Getting Started Guide VMware Integrated OpenStack 4.1 You can find the most up-to-date technical documentation on the VMware website at: https://docs.vmware.com/
More informationBuenos Aires 31 de Octubre de 2018
Buenos Aires 31 de Octubre de 2018 VMware NSX Data Center & Containers in the Dell EMC Ecosystem Gonzalo Atienza Sr Systems Engineer, Network & Security Business Unit, VMware Containers are Here to stay!
More informationOPENSHIFT CONTAINER PLATFORM TECHNICAL OVERVIEW. Presenter Presenter s title Date
OPENSHIFT CONTAINER PLATFORM TECHNICAL OVERVIEW Presenter Presenter s title Date Self-Service Standards-based Multi-language Automation Collaboration Multi-tenant 2 Web-scale Open Source Enterprise Grade
More informationHow to build scalable, reliable and stable Kubernetes cluster atop OpenStack.
How to build scalable, reliable and stable Kubernetes cluster atop OpenStack Bo Wang HouMing Wang bo.wang@easystack.cn houming.wang@easystack.cn Cluster resources management Cluster data persistence Contents
More informationIntroduction to Software Defined Infrastructure SUSE OpenStack Cloud SUSE CaaS Platform
Introduction to Software Defined Infrastructure SUSE OpenStack Cloud SUSE CaaS Platform Matthias G. Eckermann Director Product Management SUSE Linux Enterprise Helsinki, 2018-03-08 SUSE Software-defined
More informationLinux Clusters Institute: OpenStack Neutron
Linux Clusters Institute: OpenStack Neutron Yale, August 13 th 17 th 2018 John Michael Lowe Senior Cloud Engineer Indiana University jomlowe@iu.edu Neutron SDN or not Network Namespaces Components Security
More informationDeploying a Private OpenStack Cloud at Scale. Matt Fischer & Clayton O Neill
Deploying a Private OpenStack Cloud at Scale Matt Fischer & Clayton O Neill Introduction Clayton O Neill clayton.oneill@twcable.com IRC: clayton Matt Fischer matt.fischer@twcable.com IRC: mfisch What Is
More informationDisclaimer This presentation may contain product features that are currently under development. This overview of new technology represents no commitme
NET1949BU Seamless Network Connectivity for Virtual and Bare-metal s with NSX Suresh Thiru Sridhar Subramanian VMworld 2017 Content: Not for publication VMworld 2017 - NET1949BU Disclaimer This presentation
More informationACCELERATE APPLICATION DELIVERY WITH OPENSHIFT. Siamak Sadeghianfar Sr Technical Marketing Manager, April 2016
ACCELERATE APPLICATION DELIVERY WITH Siamak Sadeghianfar Sr Technical Marketing Manager, OpenShift @siamaks April 2016 IT Must Evolve to Stay Ahead of Demands WA CPU R RAM isc tar SI Jar vm dk MSI nic
More informationBuilding Kubernetes cloud: real world deployment examples, challenges and approaches. Alena Prokharchyk, Rancher Labs
Building Kubernetes cloud: real world deployment examples, challenges and approaches Alena Prokharchyk, Rancher Labs Making a right choice is not easy The illustrated children guide to Kubernetes https://www.youtube.com/watch?v=4ht22rebjno
More informationCloud Native Networking
Webinar Series Cloud Native Networking January 12, 2017 Your Presenters Christopher Liljenstolpe CTO, Tigera / Founder, Project Calico Bryan Boreham Director of Engineering, WeaveWorks 2 Networking in
More informationExploring Cloud Security, Operational Visibility & Elastic Datacenters. Kiran Mohandas Consulting Engineer
Exploring Cloud Security, Operational Visibility & Elastic Datacenters Kiran Mohandas Consulting Engineer The Ideal Goal of Network Access Policies People (Developers, Net Ops, CISO, ) V I S I O N Provide
More informationgcp / gke / k8s microservices
gcp / gke / k8s microservices managing microservices with kubernetes 08.17.2016 Austin GCPUG Lou Scalpati CTO RxWiki microservices What are Microservices generally REST APIs returning json organized around
More informationImplementing SaaS on Kubernetes
Implementing SaaS on Kubernetes Multi-Tenancy and Tenant Isolation on Kubernetes Michael Knapp Senior Software Engineer October 11, 2018 Certified Kubernetes Administrator Andrew Gao Software Engineer
More informationNSX Data Center Load Balancing and VPN Services
NET2761BU NSX Data Center Load Balancing and VPN Services Derek Deukyoon Kang, VMware, Inc. Vinay Reddy, VMware, Inc. #vmworld #NET2761BU Disclaimer This presentation may contain product features or functionality
More informationMultitenancy Deep Dive
Multitenancy Deep Dive Thursday, December 7 2:00pm - 3:20pm David Oppenheimer (Google) davidopp@google.com Quinton Hoole (Huawei) quinton.hoole@huawei.com Agenda Presentations Discussion of topics of interest
More informationVMWARE PIVOTAL CONTAINER SERVICE
DATASHEET VMWARE PIVOTAL CONTAINER SERVICE AT A GLANCE VMware Pivotal Container Service (PKS) is a production-grade Kubernetes-based container solution equipped with advanced networking, a private container
More informationThink Small to Scale Big
Think Small to Scale Big Intro to Containers for the Datacenter Admin Pete Zerger Principal Program Manager, MVP pete.zerger@cireson.com Cireson Lee Berg Blog, e-mail address, title Company Pete Zerger
More informationCloud Native Security. OpenShift Commons Briefing
Cloud Native Security OpenShift Commons Briefing Amir Sharif Co-Founder amir@aporeto.com Cloud Native Applications Challenge Security Change Frequency x 10x 100x 1,000x Legacy (Pets) Servers VMs Cloud
More informationSTREAMLINING THE DELIVERY, PROTECTION AND MANAGEMENT OF VIRTUAL DESKTOPS. VMware Workstation and Fusion. A White Paper for IT Professionals
WHITE PAPER NOVEMBER 2016 STREAMLINING THE DELIVERY, PROTECTION AND MANAGEMENT OF VIRTUAL DESKTOPS VMware Workstation and Fusion A White Paper for IT Professionals Table of Contents Overview 3 The Changing
More informationovirt and Docker Integration
ovirt and Docker Integration October 2014 Federico Simoncelli Principal Software Engineer Red Hat 1 Agenda Deploying an Application (Old-Fashion and Docker) Ecosystem: Kubernetes and Project Atomic Current
More informationOPENSHIFT 3.7 and beyond
OPENSHIFT 3.7 and beyond Qu est qu un conteneur? APPLICATIONS INFRASTRUCTURE 2 Processus sur un système d exploitation Applications et toutes ses dépendances Plus simple, léger et dense des VMs Portable
More informationUP! TO DOCKER PAAS. Ming
UP! TO DOCKER PAAS Ming Jin(mjin@thoughtworks.com) March 15, 2015 1 WHO AM I Ming Jin Head of Cloud Solutions of ThoughtWorks China Architect, Agile Consulting Solutions and Consulting on DevOps & Cloud
More informationDisclaimer This presentation may contain product features that are currently under development. This overview of new technology represents no commitme
CNA1612BU Deploying real-world workloads on Kubernetes and Pivotal Cloud Foundry VMworld 2017 Fred Melo, Director of Technology, Pivotal Merlin Glynn, Sr. Technical Product Manager, VMware Content: Not
More informationKubernetes. Introduction
Kubernetes Introduction WOJCIECH BARCZYŃSKI (hiring) Senior Software Engineer Lead of Warsaw Team - SMACC System Engineer background Interests: working software Hobby: teaching software engineering BACKGROUND
More informationNeutron: peeking behind the curtains
Neutron: peeking behind the curtains (that is to say how Neutron builds virtual networks) Salvatore Orlando VMware Twitter: @taturiello IRC: salv-orlando Email: sorlando(at)vmware.com Before we start Make
More informationTitle DC Automation: It s a MARVEL!
Title DC Automation: It s a MARVEL! Name Nikos D. Anagnostatos Position Network Consultant, Network Solutions Division Classification ISO 27001: Public Data Center Evolution 2 Space Hellas - All Rights
More information개발자와운영자를위한 DevOps 플랫폼 OpenShift Container Platform. Hyunsoo Senior Solution Architect 07.Feb.2017
개발자와운영자를위한 DevOps 플랫폼 OpenShift Container Platform Hyunsoo Kim(hykim@redhat.com) Senior Solution Architect 07.Feb.2017 1 Agenda 1. What is DevOps? 2. Platform as a Service(PaaS) 3. Build & Deploy on PaaS
More informationSTRATEGIC WHITE PAPER. Securing cloud environments with Nuage Networks VSP: Policy-based security automation and microsegmentation overview
STRATEGIC WHITE PAPER Securing cloud environments with Nuage Networks VSP: Policy-based security automation and microsegmentation overview Abstract Cloud architectures rely on Software-Defined Networking
More informationK8s(Kubernetes) and SDN for Multi-access Edge Computing deployment
K8s(Kubernetes) and SDN for Multi-access Edge Computing deployment Open Source Summit Japan 2017.06.02 Red Hat Hyde SUGIYAMA Senior Principal Technologist NFV SDN ICT Red Hat APAC Office of Technology
More informationKuryr & Fuxi. OpenStack networking and storage for Docker Swarm containers. Hongbin Lu Antoni Segura Puimedon
Kuryr & Fuxi OpenStack networking and storage for Docker Swarm containers Hongbin Lu Antoni Segura Puimedon A bit of background Kuryr-libnetwork Fuxi Started during Liberty Brings Neutron Networking to
More informationMulti-Cloud and Application Centric Modeling, Deployment and Management with Cisco CloudCenter (CliQr)
Multi-Cloud and Application Centric Modeling, Deployment and Management with Cisco CloudCenter (CliQr) Jeremy Oakey Senior Director, Technical Marketing and Integrations Agenda Introduction Architecture
More informationBaremetal with Apache CloudStack
Baremetal with Apache CloudStack ApacheCon Europe 2016 Jaydeep Marfatia Cloud, IOT and Analytics Me Director of Product Management Cloud Products Accelerite Background Project lead for open source project
More informationVirtualizing 5G Infrastructure using Cloud VIM. Sangho Shin SK Telecom
Virtualizing 5G Infrastructure using Cloud VIM Sangho Shin SK Telecom NFV ETSI Standard T-MANO Cloud VIM Cloud VIM T-MANO 2 T-MANO In lined with SK Telecom s unified orchestration strategy, T-MANO provides
More informationWhat s New in Red Hat OpenShift Container Platform 3.4. Torben Jäger Red Hat Solution Architect
What s New in Red Hat OpenShift Container Platform 3.4 Torben Jäger Red Hat Solution Architect OpenShift Roadmap OpenShift Container Platform 3.2 Kubernetes 1.2 & Docker 1.9 Red Hat
More informationIntroduction to the Open Service Broker API. Doug Davis
Introduction to the Open Service Broker API Doug Davis IBM dug@us.ibm.com @duginabox A Brief History... u PaaS with a mission to make managing Cloud apps simple $ cf push myapp $ cf scale myapp -i 5 u
More informationDelivering Red Hat OpenShift at Ease on Red Hat OpenStack and RHV
Delivering Red Hat OpenShift at Ease on Red Hat OpenStack and RHV Subheading goes here Francesco Vollero - Specialist Solution Architect OpenStack Natale Vinto - Specialist Solution Architect OpenShift
More informationHow Container Runtimes matter in Kubernetes?
How Container Runtimes matter in Kubernetes? Kunal Kushwaha NTT OSS Center About me Works @ NTT Open Source Software Center Contributes to containerd and other related projects. Docker community leader,
More information