Oracle Solaris Virtualization: From DevOps to Enterprise Duncan Hardie Principal Product Manager Oracle Solaris 17 th November 2015 Oracle Confidential Internal/Restricted/Highly Restricted
Safe Harbor Statement The following is intended to outline our general product direction. It is intended for information purposes only, and may not be incorporated into any contract. It is not a commitment to deliver any material, code, or functionality, and should not be relied upon in making purchasing decisions. The development, release, and timing of any features or functionality described for Oracle s products remains at the sole discretion of Oracle.
The Rise of DevOps, What Makes it Attractive? IMPROVED DEPLOYMENT FREQUENCY Dev lifecycle significantly reduced, smaller changes more frequently REMOVE ORGANISATIONAL BARRIERS Builds trust, encourages good information exchange LOWER FAILURE RATE AND QUICKER RECOVERY Incremental changes improve bug detection rate, smaller services start quickly
Some DevOps Challenges SECURITY Perception that some containers are not secure, solved with bespoke, build your own solutions NETWORKING Inflexible network infrastructure is very difficult to change, break or move INTEGRATION Lots of tools and solutions but this can cause confusion what do I pick?
Merging of DevOps and Enterprise Requirements DevOps Flexible Cloud Enterprise Secure Tooling Quick Release Cycle Open Standards Highly Available Efficient Compliant
Oracle Solaris the Secure Choice for DevOps Secure and Compliant: Up, down and across the datacenter Simple: sub-systems seamlessly integrated together Efficient: resources used in the most efficient way, total control, eliminate downtime Open: integrations with key tools and open APIs like (Docker and Openstack) Affordable: no waste, applications use what they need Dev Ops
Virtualization Options for DevOps/Cloud Today Native Containers Zones OS Virtualization OS Virtualization Kernel Zones OVM Hypervisor Server for SPARC Software Hybrid Partitioning Hypervisor Software Partitioning Physical Domains Domain Hardware Partitioning Hardware Partitioning 8
Virtualization Personalities Efficient Native Zones Sharing OS Virtualization Kernel Zones Hybrid Hypervisor OVM Server for SPARC Software Partitioning Physical Domain Hardware Partitioning Isolation Mobile 9
Application Requirements Drive Choices Native Zone Kernel Zone Zone in LDom SPARC & x86 SPARC & x86 Memory Isolation SPARC only Memory isolation Lightweight Independent kernel Live Migration Independent kernel Live Migration Instant resource sharing Instant resource sharing Suspend/Resume Resilience to control domain failure Dual I/O domains 10
Selected Key Parts of a DevOps/Enterprise Solution Security Co-location of tenants, moving environments, prevent mistakes Flexibility Create and destroy quickly, move resources around Efficiency No wasted resources, cost effective Cloud Manage and monitor the environment
Most Advanced Security Platform Defense in Depth Protect at every level: Environment: Unique Read Only virtualization Memory: Silicon Secured Memory on chip Network: Embedded network protection DATABASE WEBLOGIC SERVER Data at rest: ZFS encryption Data in motion: End to End Encryption PNIC VNIC Solaris Zone Solaris Zone VNIC PNIC No performance impact: Auto-offloading of CPU-intensive security functions ZFS Oracle Solaris Protect against malicious and unintentional acts 12
Protects Hypervisor and Guest Environments Locked down hypervisor and guests Stop malware before it gets in Prevent administrator mistakes Update and patch but unwritable by users, applications, or hackers Simple on/off with ready made security levels Firewall Immutable Guest Immutable Guest Oracle Solaris # 13
Integrated Virtualization, Engineered for DevOps Built-in virtualization at the core Tight integration with Compute Network Storage Lifecycle Management Security and Compliance Less to manage, best practice builtin more efficiencies Oracle Solaris Virtualization 14
Secure Live Migration with Kernel Zones Move Kernel Zones without outage Live migrate on SPARC and x86 No downtime host maintenance Perform load balancing across infrastructure Forward compatibility for Live Migration moves Oracle Solaris 11.3 or later required Solaris 11.3 Zone Oracle Solaris Solaris 11.3 Zone iscsi SAN NFS Oracle Solaris 15
Eliminates Vulnerability During Live Migration Encryption by default No performance impact hardware cryptographic offload Access via RESTful APIs Solaris Zone Solaris Zone Solaris Zone Solaris Zone Oracle Solaris Oracle Solaris 16
Moving from Virtualization to Self-Service Cloud European Auto Manufacturer Solaris Zone Solaris Zone Solaris Zone Solaris Zone Oracle Solaris Oracle Solaris Kernel Zones and live migration improve application uptime Saved 1M or 3.3x on storage space with ZFS compression Centralized OpenStack management Time to market reduced from days to minutes Optimized application clouds run side by side Solaris Integrated Load Balancer improves agility and savings 17
Ultimate Resource Flexibility and Efficiency Share Dynamic CPU, Memory, I/O Resources available everywhere, instantly Automatic assignment No need to partition I/O domains from compute domains Maximum efficiency for dynamic environments Share licenses across VMs Isolate Where necessary, control applications with isolated resources WEBLOGIC SERVER FUSION APPLICATIONS Solaris Zone Solaris Zone CPU Memory CPU Memory Network IO Network IO Storage IO DATABASE Solaris Zone CPU Memory Network IO 18
Adjust Without Service Interruptions Dynamic resource rebalancing Live reconfiguration changes active instances Respond instantly to growth Add devices on the fly Also available for Kernel Zones Independent Zone versions with Kernel Zones In place updates on single system Simpler to co-ordinate outage windows 50% REDUCTION IN PLANNED OUTAGES 19
Oracle OpenStack for Oracle Solaris Integrated with the Infrastructure Horizon Centralized Cloud Management Nova / Ironic Self-Service Compute and Bare Metal Neutron Software Defined Networking Cinder / Swift Cloud Scale Storage Heat / Glance Murano / Trove Platform as a Service Zones and Kernel Zones Elastic Virtual Switch and Open vswitch ZFS File System Unified Archives 20
Secure OpenStack-Based IaaS Secure services Minimum privileges Data at Rest ZFS Encryption Data in Motion Zone Zone Zone Zone Secure Migration Zone Zone Zone Network Zone Data link Protection Oracle Solaris Oracle Solaris Oracle Solaris Application Read only VM 21
Docker for Oracle Solaris Zones Docker open platform being brought to Oracle Solaris Zones Oracle joins Open Container Initiative create open industry standards Access to enterprise class security, resource isolation and analytics OCI Integrating Docker with Oracle Solaris Zones will bring a mature and proven container technology to Docker environments running in enterprise class clouds - Nick Stinemates, Vice President of Business Development & Technical Alliances for Docker 22
Docker and Oracle Solaris Combined Perfect Partnership DTrace N/work V12N SMF Security SOLARIS RAD ZFS IPS BEs Familiar Docker Experience Fast application dev lifecycle Huge ecosystem with proven benefits Leverage Oracle Solaris Key Features Secure, mature, built-in virtualization Secure virtual storage & network Zero downtime patching, instant rollback Secure remote administration & rolebased access control Observability, configuration management & audit
DevOps for the Enterprise Monitoring and Measurement Agile Development Continuous Integration Continuous Deployment 24
Develop Faster Applications Faster With Oracle Solaris Studio Up to 5x faster SPARC and x86 code Up to 50% higher developer efficiency Powerful observability tools for Java, C/C++ Java Mission Control HW counter overflow and clock-based profiling Rich set of performance data Low overhead, accurate Remote development and analysis from your laptop Monitor CPU, Memory and Thread usage in IDE Feature-rich language aware code editor 25
DevOps for the Enterprise Agile Development Continuous Integration Continuous Deployment YOUR APP YOUR APP Correlation of app and HW interactions, DTrace Memory protection in HW Optimized, remote IDE Rich performance monitoring tool Scalable Secure Multi-level fault-tolerant 26
Oracle Solaris 11.3 Security. Speed. Simplicity. Secure and Compliant Simple Efficient Open Affordable YOUR APP Your Enterprise Cloud 27
More Information Oracle Solaris resources oracle.com/solaris @ORCL_Solaris facebook.com/oraclesolaris Oracle Solaris Insider blogs.oracle.com/solaris youtube.com/oraclesolaris 28