SlideShare a Scribd company logo
Cisco Contiv:
Network Policies for Microservices
Luca Relandini @lucarelandini
ROME 24-25 MARCH 2017
Introduction:
Microservices and Containers...
Though you already know them
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
Containers and Microservices
container
Your code
Your startup scripts
Code dependencies
Should deploy with exactly
the same behavior on any
host/VM that can run
containers
Orders
Wishlist
Payment
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
Cloud Native
FROM
TO
Microservices - Impact on IT Operations
DevOps
Shared Responsibility
Common Incentives,
Tools, Process and Culture
Not My Problem
Separate Tools,
Varied Incentives, Opaque Process
Continuous Delivery
Release Early and Often
Higher Quality of Code
Release Once Every 6 Months
More Bugs in Production
Microservices
Loosely Coupled Components
Automated Deploy Without Waiting on Individual
Components
Tightly Coupled Components
Slow Deployment Cycles Waiting
on Integrated Tests Teams
Traditional IT

Recommended for you

Kubecon US 2019: Kubernetes Multitenancy WG Deep Dive
Kubecon US 2019: Kubernetes Multitenancy WG Deep DiveKubecon US 2019: Kubernetes Multitenancy WG Deep Dive
Kubecon US 2019: Kubernetes Multitenancy WG Deep Dive

This document provides an overview and agenda for a presentation on secure multitenancy in Kubernetes. It discusses what Kubernetes multitenancy is, available solutions, architectural models for multitenancy including namespace grouping and virtual Kubernetes clusters. It also covers community initiatives for multitenancy control plane including tenant controllers and hierarchical namespaces. The document outlines benchmarking categories and a proposed baseline reference implementation for multitenancy including control plane, data plane, and network isolation techniques.

kuberneteskubeconmultitenancy
12 Factor App
12 Factor App12 Factor App
12 Factor App

The document describes the twelve-factor app methodology for building software-as-a-service applications. The twelve factors are: codebase, dependencies, configuration, backing services, build-release-run, processes, port binding, concurrency, disposability, logs, admin processes, and dev/prod parity. The methodology advocates designing apps that are optimal to deploy on modern cloud platforms by separating an app from its infrastructure, using declarative formats for setup automation, and enabling continuous deployment for maximum agility.

twelve-factor appsaas
StripeCon 2021: A Cloud-Native approach to running Silverstripe on Google Clo...
StripeCon 2021: A Cloud-Native approach to running Silverstripe on Google Clo...StripeCon 2021: A Cloud-Native approach to running Silverstripe on Google Clo...
StripeCon 2021: A Cloud-Native approach to running Silverstripe on Google Clo...

This document is a presentation on running the Silverstripe content management system on Google Cloud Platform (GCP) using cloud-native principles. It discusses the history of web hosting, defines cloud-native approaches, and provides step-by-step instructions for deploying a basic Silverstripe project on GCP. Specifically, it covers using Cloud Storage for assets, Cloud SQL for the database, and App Engine for hosting the application. The presentation emphasizes automation, scalability, and removing the need for manual infrastructure management that cloud-native approaches provide.

© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
Containers Help to Achieve Agile App Development
Stage/
Production
TestDevelopment
Version
Control
SysAdmin
QA/QEDeveloper
BRKDCT-2023 7
Different players in the game
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
8
But... There are Concerns in Containers Adoption
What slows an organization’s use of containers?
75% 71% 64% 62% 61%
Security Networking Performance Integration Management
Source: n= 124 to-date, IDC custom survey, study commissioned by Cisco
Need for production-grade infrastructure
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
HW Integration
Can not leverage performance
and security by natively
integrating with HW
Networking In The New Container World
Physical Network
HypervisorHypervisor
Physical Network
Virtual Switching or
Overlay Network
C1 Cn
Guest OS -
Bridged
Overlay Network - VXLAN
Physical Network
Hypervisor Hypervisor
Host 1 Host 2
Host 2Host 1
VM1
C1 Cn
Guest OS -
Bridged
VM2
C1 Cn
Guest OS -
Bridged
Overlay Network - VXLAN
C1 Cn
Guest OS -
Bridged
Connectivity
Network services, e.g.
Load balancer, Firewall
Performance
Encap over encap over encap
affects performance
VM1 VM2
9
Bare Metal VM Containers in VM
Container Networking Abstractions:
only 3 slides 

Recommended for you

Kubernetes für Workstations Edge und IoT Devices
Kubernetes für Workstations Edge und IoT DevicesKubernetes für Workstations Edge und IoT Devices
Kubernetes für Workstations Edge und IoT Devices

Continuous Lifecycle | ContainerConf, November 2020, Vortrag von Mario-Leander Reimer (@LeanderReimer, Chief Software Architect bei QAware) === Dokument bitte herunterladen, falls unscharf! Please download slides if blurred! === Abstract: Wenn es darum geht, Kubernetes auf Hardware mit eingeschränkten Ressourcen wie einer lokalen Entwickler-Workstation oder Edge- und IoT-Geräten zu betreiben, ist eine volle Kubernetes-Distribution nicht die ideale Wahl. Viel besser dafür geeignet ist stattdessen eine neue Generation von leichten und dennoch zertifizierten K8s-Distributionen. In diesem Vortrag werden wir uns zwei beliebte Optionen genauer ansehen: MicroK8s und K3s. Nach einem kurzen Überblick der jeweiligen Funktionen unterziehen wir beide Kandidaten einem Live-Praxistest auf realer Hardware. Dieser Vortrag ist Hands-on und unterhaltsam zugleich, und zeigt, dass man als Entwickler keinen Doktortitel in K8s Clusterology benötigt.

cloud computingcloud native applicationscloud native architecture
CNCF Introduction - Feb 2018
CNCF Introduction - Feb 2018CNCF Introduction - Feb 2018
CNCF Introduction - Feb 2018

CNCF general introduction to beginners at openstack meetup Pune & Bangalore February 2018. Covers broadly the activities and structure of the Cloud Native Computing Foundation.

cncf ambassadorcncf meetup bangalorecncf introduction
Api more than payload (2021 Update)
Api more than payload (2021 Update)Api more than payload (2021 Update)
Api more than payload (2021 Update)

This presentation is an updated look at what isn't typically covered in an API description (improved edition of an older API design presentation).

apipayloaddesign
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
VM or BM
Basics of Container Networking
Minimally it provides:
- IP Connectivity in Container’s
Network Namespace
- IPAM, and Network Device
Creation (eth0)
- Route Advertisement or Host
NAT for external connectivity
Container
eth0
Container
eth0
Physical Network
Linux/Windows OS Networking
ensp0
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
Container Network Model (CNM)
Docker Container
Endpoint
Network
Sandbox
Green Network
Docker Container
Endpoint
Network
Sandbox
Blue Network
• Proposed by Docker to provide
networking abstractions/API for container
networking
• Sandbox contains configuration of a
container's network stack (Linux network
namespace)
• An endpoint is a container's interface into
a network (veth pair)
• A network is collection of arbitrary
endpoints that can communicate with
each other
• A container can belong to multiple
endpoints (and therefore multiple
networks)
CNM provides Driver APIs for IPAM and
Endpoint creation/deletion
IPAM Driver APIs:
- Create/Delete Pool,
- Allocate/Free IP Address
Network Driver APIs:
- Network Create/Delete,
- Endpoint Create/Delete/Join/Leave
eth0 eth1
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
Container Network Interface (CNI)
• Proposed by CoreOS as part of appc
specification, used also by Kubernetes
• Common interface between container run time
and network plugin
• Gives driver freedom to manipulate network
namespace
• Network described by JSON config
• Plugins support two commands:
- Add Container to Network
- Remove Container from Network
Container
Network
namespace
Driver
plumbing
Differences (from CNM):
- Gives Driver freedom to manipulate network namespace
- Provide Container Id, Params to drivers
- Just 2 API: Add Container to Network, Delete Container from Network
Introduction – Why Contiv?

Recommended for you

Comparing Microsoft SQL Server 2019 Performance Across Various Kubernetes Pla...
Comparing Microsoft SQL Server 2019 Performance Across Various Kubernetes Pla...Comparing Microsoft SQL Server 2019 Performance Across Various Kubernetes Pla...
Comparing Microsoft SQL Server 2019 Performance Across Various Kubernetes Pla...

With the growing adoption of Kubernetes, organizations want to take advantage of containerized Microsoft SQL Server 2019 to optimize transactional performance and accelerate time-to-insights from their business-critical data. However, as enterprises embrace hybrid cloud strategy, they need to consider several aspects based on the performance, cost and data protection requirements for running enterprise-grade SQL Server databases. In this webinar, we will compare and contrast various cloud-native platforms for SQL Server that would help CIOs, DevOps engineers, database administrators and applications architects to determine the most suitable platform that fits their business needs. Join us as we explore some exciting results from a recent performance benchmark study conducted by McKnight Consulting Group, an independent consulting firm, to compare the performance of Microsoft SQL Server 2019 on the best possible configurations of the following Kubernetes platforms: Diamanti Enterprise Kubernetes Platform Amazon Web Services Elastic Kubernetes Service (AWS EKS) Azure Kubernetes Service (AKS) Topics will include: Platform considerations and requirements for running Microsoft SQL Server 2019 Performance comparison and analysis of running SQL Server on various platform Best practices for running containerized SQL Server databases in Kubernetes environment

diamantimicrosoftkubernetes
ITCamp 2017 - Raffaele Rialdi - Adopting .NET Core in Mainstream Projects
ITCamp 2017 - Raffaele Rialdi - Adopting .NET Core in Mainstream ProjectsITCamp 2017 - Raffaele Rialdi - Adopting .NET Core in Mainstream Projects
ITCamp 2017 - Raffaele Rialdi - Adopting .NET Core in Mainstream Projects

Last year we tasted the very first bits of the NET Core platform. The RTM is out and we are close to the next 2.0 version. Is this the right moment to adopt the platform? What are the changes of the new project system brought from Visual Studio 2017? What is new in the tools, sdk and packaging? Adopting the new NET Core doesn’t necessarily mean migrating everything in a single step but mixing it with the regular .NET Framework thanks to the new net standard which is evolving to the 2.0 version as well. During this code-first session, we will try to see the developer’s and architect’s perspectives in a variety of scenarios, including the cross-platform and Raspberry.

itcamp 2017itcamp
Docker adventures in Continuous Delivery - Alex Vranceanu
Docker adventures in Continuous Delivery - Alex VranceanuDocker adventures in Continuous Delivery - Alex Vranceanu
Docker adventures in Continuous Delivery - Alex Vranceanu

Implementing CI with Docker are the baby steps. The tricky one is CD through several environments. Architecture, demo and lessons learned. Target audience: 80% technical, 20% PM/architects/leaders

itcamp 2017alex vranceanu
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
Today’s Infrastructure Needs
BRKDCT-2023
Mike, IT AdminSally, Dev/Test
1. Develop and test fast
2. Agility and Elasticity
3. Does not care about other users
1. Manage infrastructure
2. Stability and Security
3. Isolation and Compliance
Challenge: Conflicting goals and priorities
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 17BRKDCT-2023
How can we achieve these goals?
Key: Policy-based Container Networking
Declarative Tags (simpler)
Manage Groups instead of single objects (faster)
What is Contiv?
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
Containerized Apps on Shared Infrastructure
Application
Intent
Compute Compute
Operational
Intent
Contiv Is an Open Source Solution to Define and
Enforce Distributed Policies Across Infrastructure
NETWORK
Compute

Recommended for you

Pivotal Container Service (PKS) at SF Cloud Foundry Meetup
Pivotal Container Service (PKS) at SF Cloud Foundry MeetupPivotal Container Service (PKS) at SF Cloud Foundry Meetup
Pivotal Container Service (PKS) at SF Cloud Foundry Meetup

Overview of Pivotal Container Service (PKS), built on the open source Cloud Foundry Container Runtime (CFCR). Covers what Kubernetes is, how PKS presents a complete platform that includes Kubernetes and much more, and key cloud principles. Presented at the San Francisco-Bay Area Cloud Foundry meetup.

kubernetescloud foundrycloud patterns
KubeCon China June 2019 - Survey of Kubernetes related solutions for IoT and ...
KubeCon China June 2019 - Survey of Kubernetes related solutions for IoT and ...KubeCon China June 2019 - Survey of Kubernetes related solutions for IoT and ...
KubeCon China June 2019 - Survey of Kubernetes related solutions for IoT and ...

KubeCon China Kubernetes IoT and Edge Working Group session - survey of Kubernetes distributions and open source tools

kubernetesiotedge
Operator development made easy with helm
Operator development made easy with helmOperator development made easy with helm
Operator development made easy with helm

- Operators are applications that extend Kubernetes to manage complex stateful applications. They use custom resource definitions (CRDs) to configure and automate tasks. - Helm is a good starting point for creating operators as it is widely used and easy to learn. Operators created with Helm can later be used to manage resources in other operators. - The demo showed creating a Helm operator from a Nginx chart and combining two operators with ArgoCD to deploy example apps based on custom resources.

helmkubernetesopenshift
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
Application Intent with Operation Intent
PLACEHOLDER
version: '2'
services:
web:
build: .
label:
- tier: web
volumes:
- .:/code
networks:
- front-tier
- back-tier
db:
image: mysql
App Intent
PLACEHOLDER
web:
environment: prod
networks:
security: -
allow ports: 5000, 443
bandwidth: 5gbps
lb selector:
- tier: web
db:
networks:
security:
allow ports: 3306 from web
Ops Intent (e.g. Contiv Intent*)
Operation Intent Provides Operational Requirements and Policies for Applications
* Shown in yaml for better visualization
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
Contiv: How everything fits together
Operational Policy Management
Developer Operations
Application
Scheduler
Node 1 Node 2 Node-n
Contiv Distributed Policy Layer
...
Contiv Elements
Contiv UI/CLI/API to manage
and monitor policies/usage
Distributed policy enforcement for
network
Integration with physical
infrastructure
Integrated with popular
container schedulers
Contiv Automatically Integrates and Enforces Developer and Operations Policies
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
100% Open Source
The Most Powerful Container Networking Fabric
L2, L3, Overlay or ACI
Rich Policies
DevOps IT Admin
Any NetworkingAny Platform
Any Infrastructure
Application
Intent
Rich Policy Model
Declarative
Simple Install
GUI + CLI
LDAP/RBAC
Contiv
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
Contiv Integration with Underlying DC Infrastructure
Application-Centric Infrastructure (ACI)
• Containers integrated with APIC policies
• Physical services integration
Nexus Standalone or Any Network
• VLAN handoff
• BGP interop (standard routing protocol)
Contiv Leverages Underlying Infrastructure Capabilities

Recommended for you

Craig McLuckie at VMware Tanzu Public Sector Connect 2021
Craig McLuckie at VMware Tanzu Public Sector Connect 2021Craig McLuckie at VMware Tanzu Public Sector Connect 2021
Craig McLuckie at VMware Tanzu Public Sector Connect 2021

Kubernetes allows organizations to achieve economies of scope by providing consistent operations and a developer experience across infrastructure. It enables a shift from operator-driven IT to intent-driven IT managed through APIs rather than tickets. Kubernetes can function both as a platform for modern applications and as a modern application platform by providing the highest level of abstraction while allowing for lower-level configurations. This decouples systems and teams with APIs serving as the unit of collaboration, effectively delivering software as a service. However, adoption may be limited by skills, accessibility, and inertia within organizations.

Deploying Spring Boot apps on Kubernetes
Deploying Spring Boot apps on KubernetesDeploying Spring Boot apps on Kubernetes
Deploying Spring Boot apps on Kubernetes

The document discusses deploying Spring Boot applications on Kubernetes. It provides an overview of Kubernetes architecture and resources like pods, services, configmaps and secrets. It then demonstrates deploying a simple Hello World Spring Boot app on Kubernetes. It also covers building microservices using Spring Boot and deploying them on Kubernetes, including using configmaps and secrets for configuration and service discovery. It discusses concerns like externalized configuration, circuit breakers, distributed tracing and logging for microservices on Kubernetes.

springone platformspringone platform 2017
8.cncf en
8.cncf  en8.cncf  en
8.cncf en

This document summarizes Filip Pohronský's presentation on Meetup CNCF - Observability and Analysis. It discusses what CNCF is and its cloud native definition. CNCF seeks to drive adoption of cloud native technologies through open source projects. Reasons for organizations adopting cloud native include better efficiency, higher development velocity, and support for multi-cloud. The presentation provides information on joining the CNCF community and plans for future meetups in Bratislava, Slovakia.

cncfkubernetes
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
Introducing Contiv 1.0
What’s New:
LDAP+
RBAC
All New User
Experience
and Workflow
Kubernetes
1.4 Support
Docker 1.12
Support
OpenShift
Integration
Simple Install
1
Commercially
Supported Contiv
will be announced shortly
Cisco Advances
Services
Cisco Solutions
Support
100% Open Source at contiv.github.io
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
Contiv’s Approach to Containers
Scale
Route and
Policy Distribution
Speed
Automated Scale-Out
Layer of Network
Flat Networks
High Performance
Application-Centric
Integrated with
App Blueprint
Shared Resources
Policies for
Resource Acquisition
Hybrid Cloud
Consistent Policies
Security
Tenant Isolation
Security Policies
Telemetry/Diagnostics
Application Statistics
Data Export
25
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
Contiv Network Components
Contiv CLI/UI
Node 1
Contiv Agent
...Node 2
Contiv Agent
Node-n
Contiv Agent
Contiv Elements
Container networking for:
• Kubernetes, Mesos, Nomad, and Swam
Route distribution using BGP or JSON RPC
Custom OpenFlow pipeline for host networking
• Allows implementing various features (details later)
Exports data about: App connectivity, stats, peer
Distributed, cluster-wide function
Stateless: Useful in node failure/restart, upgrade
Implements cluster-wide network and policy
Manage global resources: IPAM, VLAN/VXLAN pools
Tools to manipulate Contiv objects
Implements CRUD using REST I/F
Expected to be used by infra/ops teams
RBAC
26
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
Contiv Network
High-Level Architecture
Host-1
.…
Host Plug-In
Distributed
KV Store
Plug-In Logic
Contiv Host Agent
Host-n
Linux Host
Routing/Switching
To Physical Network
ARP/DNS
Responder
Service LB
Route Distribution
[ BGP | RPC ]
Container
Runtime
(e.g., Docker)
[ K8s| Swarm | Mesos | Nomad ]
Master-DBPolicy Engine
REST
Server
IPAM/
Res-Mgmt
HA
Heartbeat
Distributed
KV Store
[ Etcd | Consul ]
REST client (e.g. netctl)
API Calls to
External
Orchestration
Systems e.g,.
ACI, Schedulers
Health Monitoring
Contiv Master Cluster
.……
.…

Recommended for you

Fully Orchestrating Applications, Microservices and Enterprise Services with ...
Fully Orchestrating Applications, Microservices and Enterprise Services with ...Fully Orchestrating Applications, Microservices and Enterprise Services with ...
Fully Orchestrating Applications, Microservices and Enterprise Services with ...

As a multi-national bank, Societe General IT infrastructure has thousands of apps, almost every bit of technology deployed and compliance requirements. Our vision is to broadly transform traditional bank IT to be agile and fast. Speed is critical in a digital economy and at Societe Generale we are building a new execution platform with Docker that provides IT containers, middleware and infrastructure as a service and orchestration. In this session we will share the technical and organizational steps of our journey from how we defined and architected a PaaS for our entity; with service catalog, service topologies, ambassadors with Docker Datacenter, continuous integration and what’s next.

discoverypaasucp
Seriously Open Cloud Native Java Microservices
Seriously Open Cloud Native Java MicroservicesSeriously Open Cloud Native Java Microservices
Seriously Open Cloud Native Java Microservices

With the involvement of over a dozen vendors and Java user groups, 140 individual contributors and over half a dozen independent implementations, Eclipse MicroProfile is leading the way in seriously open cloud-native Java technologies. With MicroProfile, OpenJ9 and Open Liberty you can have fully open stack solution that is enterprise grade, perfectly compatible with microservice architecture and easy to use. Come to this session to learn how you can apply MicroProfile to build robust and scalable microservices without locking yourself into a single vendor.

javacloudmicroservices
Triangle Kubernetes Meetup: Container cloud networking - Contiv for K8S & Ope...
Triangle Kubernetes Meetup: Container cloud networking - Contiv for K8S & Ope...Triangle Kubernetes Meetup: Container cloud networking - Contiv for K8S & Ope...
Triangle Kubernetes Meetup: Container cloud networking - Contiv for K8S & Ope...

Presentation + demo at Triangle Kubernetes and Openshift Meetup June 2017. Architecture overview and live demo of Contiv open container networking project working with Red Hat Openshift Container platform.

contivcontainer networkingkubernetes
Demo
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
Tutorial on Docker and Contiv - do it yourself ;-)
A normal docker network (without Contiv) looks like it:
It’s online at http://contiv.github.io
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 32Presentation ID
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
33Presentation ID
Let’s create a Contiv network

Recommended for you

Brkaci 1090
Brkaci 1090Brkaci 1090
Brkaci 1090

The document discusses multi-level policy and management architectures for integrating data center and campus fabrics. It describes how Cisco Application Centric Infrastructure (ACI) and DNA Campus fabrics use policy abstractions and control plane integration to provide segmentation, mobility, and security across data center and campus networks. The document also discusses how ACI and DNA fabrics can be interconnected while preserving segmentation and group-based policies.

Luca Relandini - Microservices and containers networking: Contiv, deep dive a...
Luca Relandini - Microservices and containers networking: Contiv, deep dive a...Luca Relandini - Microservices and containers networking: Contiv, deep dive a...
Luca Relandini - Microservices and containers networking: Contiv, deep dive a...

Contiv provides a higher level of networking abstraction for microservices: it provides built-in service discovery and service routing for scale out services, working with schedulers like Docker Swarm, Kubernetes, Mesos and Openshift. A powerful policy-based management that makes networking on large scale easy. We will see some code examples, use cases and an easy tutorial on the web. This session is a follow up to the successful sessions at Codemotion Rome and Amsterdam in 2016: we'll go deeper into the architecture and the use cases.

codemotion milan 2017
Docker Enterprise Networking and Cisco Contiv - Cisco Live 2017 BRKSDN-2256
Docker Enterprise Networking and Cisco Contiv - Cisco Live 2017 BRKSDN-2256Docker Enterprise Networking and Cisco Contiv - Cisco Live 2017 BRKSDN-2256
Docker Enterprise Networking and Cisco Contiv - Cisco Live 2017 BRKSDN-2256

An overview of Docker networking and how the network is impacted by the deployment of containers. This dives into the specifics of how container networking works and also how the Cisco Contiv networking plugin integrates Cisco networking policies with Docker Enterprise.

dockercontainersnetworking
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
How Docker sees a Contiv network
Let’s attach a new container to the new network:
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
35Presentation ID
Networks are isolated
Let’s create one more container on contiv-net:
We have many containers now (contiv-c1 and contiv-c5 are on the same network):
Ping works here
(same if the container is
on a different host/VM)
Ping does not work here
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
Tenants in Contiv
Two different networks, they don’t communicate
Tenants are isolated worlds, to avoid conflicts.
They have separate namespaces for resources.
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 37Presentation ID
Applying policies between containers with Contiv
Contiv provide a way to apply isolation policies between containers groups
(regardless of the tenants, eventually within the tenants).
For this, we create a simple policy called db-policy, and add some rules to it to
define which ports are allowed.

Recommended for you

OpenStack and the Transformation of the Data Center - Lew Tucker
OpenStack and the Transformation of the Data Center - Lew TuckerOpenStack and the Transformation of the Data Center - Lew Tucker
OpenStack and the Transformation of the Data Center - Lew Tucker

This document summarizes a presentation by Lew Tucker of Cisco on OpenStack and the transformation of the data center. The key points are: 1) OpenStack is heralding the creation of a new software layer that spans the entire data center and provides a unified compute, storage, and networking infrastructure. 2) Networking is evolving in OpenStack from simple flat networking in Nova to the separate Neutron networking service, which is designed to abstract specific vendor implementations. 3) Neutron is being extended through projects like Network Functions Virtualization (NFV) and group-based policy abstractions to provide dynamically scalable network services and allow developers to control network access and traffic through policy definitions.

openstack
Enabling Production Grade Containerized Applications through Policy Based Inf...
Enabling Production Grade Containerized Applications through Policy Based Inf...Enabling Production Grade Containerized Applications through Policy Based Inf...
Enabling Production Grade Containerized Applications through Policy Based Inf...

This session covers the solution addressing the needs of enabling product-grade containerized applications. You will learn how operations teams running containerized applications in a shared infrastructure can define and enforce policies to provide security, monitoring, and performance for network, storage, and computing. You will learn about Contiv and Mantl, open source projects that create a framework for cloud native application development and infrastructure with application intent and operational policies. Contiv integrates Cisco infrastructure (UCS, Nexus, and ACI) with Docker Datacenter to help enterprises adopt containers at a larger scale.

containerized applicationsdockercondockercon sponsor
Cisco Live 2017: Container networking deep dive with Docker Enterprise Editio...
Cisco Live 2017: Container networking deep dive with Docker Enterprise Editio...Cisco Live 2017: Container networking deep dive with Docker Enterprise Editio...
Cisco Live 2017: Container networking deep dive with Docker Enterprise Editio...

Container networking with Docker Enterprise Edition (EE) and Cisco Contiv allows for: 1) Defining network policies and security controls across virtual and container workloads using Contiv's open source software. 2) Deploying containerized applications on Docker EE across a swarm of nodes using network and security policies defined in Contiv. 3) Integrating Contiv with underlying data center infrastructure like Cisco Application Centric Infrastructure (ACI) to leverage physical network services and policy enforcement.

container networkingkubernetescisco
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
Policies are applied among Groups
Finally, we associate the policy with a group (a group is an arbitrary collection of
containers, e.g. a tier for a microservice) and then run some containers that
belong to db group
Let’s create two more containers:
The policy db-policy (ports open and closed) is applied to all the 3 containers:
Managing many end points as a single object makes it easy and fast, think about
auto-scaling (especially when integrated with Swarm, Kubernetes, etc.)
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
Contiv is Microservices Ready
• Support for grouping Applications
• Allows scale-out instances of container applications to be grouped together
• Policies specified on a micro-service tier, rather than individual container workloads
• Efficient forwarding between Microservice tiers
• Allows a fixed (DNS published) VIP for a micro-service
• Containers within the micro-services can come and go
• Their IP addresses are mapped to the service IP for east-west traffic
• Eliminates single point of forwarding (proxy) between micro-service tiers
• Application visibility at service levels (across the cluster)
Web
Group
App
Group
DB
Group
Allow grouping of
containers/pods
Specify Policies
between groups
or from outside
the network
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
Elements of Contiv Networking
Cluster-wide Connectivity
Truly Multi-tenant
Network Isolation
Traffic Prioritization
App-Composers Integrated
Network Monitoring
Scalable
Physical Network Integration: ACI | Nexus Standalone
Micro Services Ready
Leverages NIC
IPAM, Service Discovery
Contiv
Networking
High Throughput
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
Contiv Value Proposition

Recommended for you

automation via ansible ffjeefjewfhewjkfhrfjrefhekjrhfernn
automation via ansible ffjeefjewfhewjkfhrfjrefhekjrhfernnautomation via ansible ffjeefjewfhewjkfhrfjrefhekjrhfernn
automation via ansible ffjeefjewfhewjkfhrfjrefhekjrhfernn

information

4. Kubernetes - Application centric infrastructure kubernetes, contiv
4. Kubernetes - Application centric infrastructure  kubernetes, contiv4. Kubernetes - Application centric infrastructure  kubernetes, contiv
4. Kubernetes - Application centric infrastructure kubernetes, contiv

This document discusses the advantages of using the Cisco Application Centric Infrastructure (ACI) Container Network Interface (CNI) plugin with Kubernetes and Contiv. It provides an overview of ACI and how it maps Kubernetes objects like clusters, namespaces, deployments to ACI objects like tenants, application profiles, endpoint groups. It also describes how the CNI plugin provides network isolation, load balancing, visibility and solves challenges in areas like storage access, network operations and security policy enforcement for container workloads.

contivcloud nativecncf
ACI Hands-on Lab
ACI Hands-on LabACI Hands-on Lab
ACI Hands-on Lab

Cisco® Application Centric Infrastructure (ACI) is an innovative architecture that radically simplifies, optimizes, and accelerates the entire application deployment lifecycle. Cloud, mobility, and big data applications are causing a shift in the data center model. Cisco ACI redefines the power of IT, enabling IT to be more responsive to changing business and application needs, enhancing agility, and adding business value. Cisco ACI delivers a transformational operating model for next-generation data center and cloud applications. This Cisco ACI hands lab will step you through from the ACI Fabric concepts to deployment. • Cisco ACI Overview • ACI Fabric Discovery • ACI Building Basic Network Constructs • ACI Building Policy Filters and Contracts • : Deploying a 3-Tier Application Network Profile • ACI Integrating with VMware • Deploying a Service Graph with Application Network Profile • Exploring Monitoring and Troubleshooting

cisco connect toronto 2016
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
Go and test it (easy!): http://contiv.github.io
Contiv releases - github.com/contiv/install/releases
Documents - contiv.github.io
Join Contiv Slack - contiv.herokuapp.com
Contiv Blogs - blogs.cisco.com/tag/contiv
Recorded demo - https://www.youtube.com/watch?v=55s4wAVbTM4
Cisco DevNet community - https://developer.cisco.com/site/contiv/videos/index.gsp
Contiv on Docker Store - https://store.docker.com/plugins/803eecee-0780-401a-a454-
e9523ccf86b3?tab=description

More Related Content

What's hot

From Monolith to K8s - Spring One 2020
From Monolith to K8s - Spring One 2020From Monolith to K8s - Spring One 2020
From Monolith to K8s - Spring One 2020
Mauricio (Salaboy) Salatino
 
Kubernetes - Cloud Native Application Orchestration - Catalin Jora
Kubernetes - Cloud Native Application Orchestration - Catalin JoraKubernetes - Cloud Native Application Orchestration - Catalin Jora
Kubernetes - Cloud Native Application Orchestration - Catalin Jora
ITCamp
 
Microservices and containers networking: Contiv, an industry leading open sou...
Microservices and containers networking: Contiv, an industry leading open sou...Microservices and containers networking: Contiv, an industry leading open sou...
Microservices and containers networking: Contiv, an industry leading open sou...
Codemotion
 
Kubecon US 2019: Kubernetes Multitenancy WG Deep Dive
Kubecon US 2019: Kubernetes Multitenancy WG Deep DiveKubecon US 2019: Kubernetes Multitenancy WG Deep Dive
Kubecon US 2019: Kubernetes Multitenancy WG Deep Dive
Sanjeev Rampal
 
12 Factor App
12 Factor App12 Factor App
12 Factor App
Erkan Erol
 
StripeCon 2021: A Cloud-Native approach to running Silverstripe on Google Clo...
StripeCon 2021: A Cloud-Native approach to running Silverstripe on Google Clo...StripeCon 2021: A Cloud-Native approach to running Silverstripe on Google Clo...
StripeCon 2021: A Cloud-Native approach to running Silverstripe on Google Clo...
Jon Su
 
Kubernetes für Workstations Edge und IoT Devices
Kubernetes für Workstations Edge und IoT DevicesKubernetes für Workstations Edge und IoT Devices
Kubernetes für Workstations Edge und IoT Devices
QAware GmbH
 
CNCF Introduction - Feb 2018
CNCF Introduction - Feb 2018CNCF Introduction - Feb 2018
CNCF Introduction - Feb 2018
Krishna-Kumar
 
Api more than payload (2021 Update)
Api more than payload (2021 Update)Api more than payload (2021 Update)
Api more than payload (2021 Update)
Phil Wilkins
 
Comparing Microsoft SQL Server 2019 Performance Across Various Kubernetes Pla...
Comparing Microsoft SQL Server 2019 Performance Across Various Kubernetes Pla...Comparing Microsoft SQL Server 2019 Performance Across Various Kubernetes Pla...
Comparing Microsoft SQL Server 2019 Performance Across Various Kubernetes Pla...
DevOps.com
 
ITCamp 2017 - Raffaele Rialdi - Adopting .NET Core in Mainstream Projects
ITCamp 2017 - Raffaele Rialdi - Adopting .NET Core in Mainstream ProjectsITCamp 2017 - Raffaele Rialdi - Adopting .NET Core in Mainstream Projects
ITCamp 2017 - Raffaele Rialdi - Adopting .NET Core in Mainstream Projects
ITCamp
 
Docker adventures in Continuous Delivery - Alex Vranceanu
Docker adventures in Continuous Delivery - Alex VranceanuDocker adventures in Continuous Delivery - Alex Vranceanu
Docker adventures in Continuous Delivery - Alex Vranceanu
ITCamp
 
Pivotal Container Service (PKS) at SF Cloud Foundry Meetup
Pivotal Container Service (PKS) at SF Cloud Foundry MeetupPivotal Container Service (PKS) at SF Cloud Foundry Meetup
Pivotal Container Service (PKS) at SF Cloud Foundry Meetup
cornelia davis
 
KubeCon China June 2019 - Survey of Kubernetes related solutions for IoT and ...
KubeCon China June 2019 - Survey of Kubernetes related solutions for IoT and ...KubeCon China June 2019 - Survey of Kubernetes related solutions for IoT and ...
KubeCon China June 2019 - Survey of Kubernetes related solutions for IoT and ...
Steve Wong
 
Operator development made easy with helm
Operator development made easy with helmOperator development made easy with helm
Operator development made easy with helm
ConSol Consulting & Solutions Software GmbH
 
Craig McLuckie at VMware Tanzu Public Sector Connect 2021
Craig McLuckie at VMware Tanzu Public Sector Connect 2021Craig McLuckie at VMware Tanzu Public Sector Connect 2021
Craig McLuckie at VMware Tanzu Public Sector Connect 2021
VMware Tanzu
 
Deploying Spring Boot apps on Kubernetes
Deploying Spring Boot apps on KubernetesDeploying Spring Boot apps on Kubernetes
Deploying Spring Boot apps on Kubernetes
VMware Tanzu
 
8.cncf en
8.cncf  en8.cncf  en
8.cncf en
Juraj Hantak
 
Fully Orchestrating Applications, Microservices and Enterprise Services with ...
Fully Orchestrating Applications, Microservices and Enterprise Services with ...Fully Orchestrating Applications, Microservices and Enterprise Services with ...
Fully Orchestrating Applications, Microservices and Enterprise Services with ...
Docker, Inc.
 
Seriously Open Cloud Native Java Microservices
Seriously Open Cloud Native Java MicroservicesSeriously Open Cloud Native Java Microservices
Seriously Open Cloud Native Java Microservices
Jamie Coleman
 

What's hot (20)

From Monolith to K8s - Spring One 2020
From Monolith to K8s - Spring One 2020From Monolith to K8s - Spring One 2020
From Monolith to K8s - Spring One 2020
 
Kubernetes - Cloud Native Application Orchestration - Catalin Jora
Kubernetes - Cloud Native Application Orchestration - Catalin JoraKubernetes - Cloud Native Application Orchestration - Catalin Jora
Kubernetes - Cloud Native Application Orchestration - Catalin Jora
 
Microservices and containers networking: Contiv, an industry leading open sou...
Microservices and containers networking: Contiv, an industry leading open sou...Microservices and containers networking: Contiv, an industry leading open sou...
Microservices and containers networking: Contiv, an industry leading open sou...
 
Kubecon US 2019: Kubernetes Multitenancy WG Deep Dive
Kubecon US 2019: Kubernetes Multitenancy WG Deep DiveKubecon US 2019: Kubernetes Multitenancy WG Deep Dive
Kubecon US 2019: Kubernetes Multitenancy WG Deep Dive
 
12 Factor App
12 Factor App12 Factor App
12 Factor App
 
StripeCon 2021: A Cloud-Native approach to running Silverstripe on Google Clo...
StripeCon 2021: A Cloud-Native approach to running Silverstripe on Google Clo...StripeCon 2021: A Cloud-Native approach to running Silverstripe on Google Clo...
StripeCon 2021: A Cloud-Native approach to running Silverstripe on Google Clo...
 
Kubernetes für Workstations Edge und IoT Devices
Kubernetes für Workstations Edge und IoT DevicesKubernetes für Workstations Edge und IoT Devices
Kubernetes für Workstations Edge und IoT Devices
 
CNCF Introduction - Feb 2018
CNCF Introduction - Feb 2018CNCF Introduction - Feb 2018
CNCF Introduction - Feb 2018
 
Api more than payload (2021 Update)
Api more than payload (2021 Update)Api more than payload (2021 Update)
Api more than payload (2021 Update)
 
Comparing Microsoft SQL Server 2019 Performance Across Various Kubernetes Pla...
Comparing Microsoft SQL Server 2019 Performance Across Various Kubernetes Pla...Comparing Microsoft SQL Server 2019 Performance Across Various Kubernetes Pla...
Comparing Microsoft SQL Server 2019 Performance Across Various Kubernetes Pla...
 
ITCamp 2017 - Raffaele Rialdi - Adopting .NET Core in Mainstream Projects
ITCamp 2017 - Raffaele Rialdi - Adopting .NET Core in Mainstream ProjectsITCamp 2017 - Raffaele Rialdi - Adopting .NET Core in Mainstream Projects
ITCamp 2017 - Raffaele Rialdi - Adopting .NET Core in Mainstream Projects
 
Docker adventures in Continuous Delivery - Alex Vranceanu
Docker adventures in Continuous Delivery - Alex VranceanuDocker adventures in Continuous Delivery - Alex Vranceanu
Docker adventures in Continuous Delivery - Alex Vranceanu
 
Pivotal Container Service (PKS) at SF Cloud Foundry Meetup
Pivotal Container Service (PKS) at SF Cloud Foundry MeetupPivotal Container Service (PKS) at SF Cloud Foundry Meetup
Pivotal Container Service (PKS) at SF Cloud Foundry Meetup
 
KubeCon China June 2019 - Survey of Kubernetes related solutions for IoT and ...
KubeCon China June 2019 - Survey of Kubernetes related solutions for IoT and ...KubeCon China June 2019 - Survey of Kubernetes related solutions for IoT and ...
KubeCon China June 2019 - Survey of Kubernetes related solutions for IoT and ...
 
Operator development made easy with helm
Operator development made easy with helmOperator development made easy with helm
Operator development made easy with helm
 
Craig McLuckie at VMware Tanzu Public Sector Connect 2021
Craig McLuckie at VMware Tanzu Public Sector Connect 2021Craig McLuckie at VMware Tanzu Public Sector Connect 2021
Craig McLuckie at VMware Tanzu Public Sector Connect 2021
 
Deploying Spring Boot apps on Kubernetes
Deploying Spring Boot apps on KubernetesDeploying Spring Boot apps on Kubernetes
Deploying Spring Boot apps on Kubernetes
 
8.cncf en
8.cncf  en8.cncf  en
8.cncf en
 
Fully Orchestrating Applications, Microservices and Enterprise Services with ...
Fully Orchestrating Applications, Microservices and Enterprise Services with ...Fully Orchestrating Applications, Microservices and Enterprise Services with ...
Fully Orchestrating Applications, Microservices and Enterprise Services with ...
 
Seriously Open Cloud Native Java Microservices
Seriously Open Cloud Native Java MicroservicesSeriously Open Cloud Native Java Microservices
Seriously Open Cloud Native Java Microservices
 

Similar to Microservices and containers networking: Contiv, an industry leading open source solution from Cisco - Luca Relandini - Codemotion Rome 2017

Triangle Kubernetes Meetup: Container cloud networking - Contiv for K8S & Ope...
Triangle Kubernetes Meetup: Container cloud networking - Contiv for K8S & Ope...Triangle Kubernetes Meetup: Container cloud networking - Contiv for K8S & Ope...
Triangle Kubernetes Meetup: Container cloud networking - Contiv for K8S & Ope...
Sanjeev Rampal
 
Brkaci 1090
Brkaci 1090Brkaci 1090
Brkaci 1090
almaz tt
 
Luca Relandini - Microservices and containers networking: Contiv, deep dive a...
Luca Relandini - Microservices and containers networking: Contiv, deep dive a...Luca Relandini - Microservices and containers networking: Contiv, deep dive a...
Luca Relandini - Microservices and containers networking: Contiv, deep dive a...
Codemotion
 
Docker Enterprise Networking and Cisco Contiv - Cisco Live 2017 BRKSDN-2256
Docker Enterprise Networking and Cisco Contiv - Cisco Live 2017 BRKSDN-2256Docker Enterprise Networking and Cisco Contiv - Cisco Live 2017 BRKSDN-2256
Docker Enterprise Networking and Cisco Contiv - Cisco Live 2017 BRKSDN-2256
Mark Church
 
OpenStack and the Transformation of the Data Center - Lew Tucker
OpenStack and the Transformation of the Data Center - Lew TuckerOpenStack and the Transformation of the Data Center - Lew Tucker
OpenStack and the Transformation of the Data Center - Lew Tucker
Lew Tucker
 
Enabling Production Grade Containerized Applications through Policy Based Inf...
Enabling Production Grade Containerized Applications through Policy Based Inf...Enabling Production Grade Containerized Applications through Policy Based Inf...
Enabling Production Grade Containerized Applications through Policy Based Inf...
Docker, Inc.
 
Cisco Live 2017: Container networking deep dive with Docker Enterprise Editio...
Cisco Live 2017: Container networking deep dive with Docker Enterprise Editio...Cisco Live 2017: Container networking deep dive with Docker Enterprise Editio...
Cisco Live 2017: Container networking deep dive with Docker Enterprise Editio...
Sanjeev Rampal
 
automation via ansible ffjeefjewfhewjkfhrfjrefhekjrhfernn
automation via ansible ffjeefjewfhewjkfhrfjrefhekjrhfernnautomation via ansible ffjeefjewfhewjkfhrfjrefhekjrhfernn
automation via ansible ffjeefjewfhewjkfhrfjrefhekjrhfernn
HussnBnMssd
 
4. Kubernetes - Application centric infrastructure kubernetes, contiv
4. Kubernetes - Application centric infrastructure  kubernetes, contiv4. Kubernetes - Application centric infrastructure  kubernetes, contiv
4. Kubernetes - Application centric infrastructure kubernetes, contiv
Juraj Hantak
 
ACI Hands-on Lab
ACI Hands-on LabACI Hands-on Lab
ACI Hands-on Lab
Cisco Canada
 
08 sdn system intelligence short public beijing sdn conference - 130828
08 sdn system intelligence   short public beijing sdn conference - 13082808 sdn system intelligence   short public beijing sdn conference - 130828
08 sdn system intelligence short public beijing sdn conference - 130828
Mason Mei
 
Cisco Connect 2018 Indonesia - software-defined access-a transformational ap...
Cisco Connect 2018 Indonesia -  software-defined access-a transformational ap...Cisco Connect 2018 Indonesia -  software-defined access-a transformational ap...
Cisco Connect 2018 Indonesia - software-defined access-a transformational ap...
NetworkCollaborators
 
Cisco Connect 2018 Malaysia - SDNNFV telco data center transformation
Cisco Connect 2018 Malaysia - SDNNFV telco data center transformationCisco Connect 2018 Malaysia - SDNNFV telco data center transformation
Cisco Connect 2018 Malaysia - SDNNFV telco data center transformation
NetworkCollaborators
 
Как развернуть кампусную сеть Cisco за 10 минут? Новые технологии для автомат...
Как развернуть кампусную сеть Cisco за 10 минут? Новые технологии для автомат...Как развернуть кампусную сеть Cisco за 10 минут? Новые технологии для автомат...
Как развернуть кампусную сеть Cisco за 10 минут? Новые технологии для автомат...
Cisco Russia
 
Application Centric Infrastructure (ACI), the policy driven data centre
Application Centric Infrastructure (ACI), the policy driven data centreApplication Centric Infrastructure (ACI), the policy driven data centre
Application Centric Infrastructure (ACI), the policy driven data centre
Cisco Canada
 
StampedeCon 2015 Keynote
StampedeCon 2015 KeynoteStampedeCon 2015 Keynote
StampedeCon 2015 Keynote
Ken Owens
 
How Cisco Migrated from MapReduce Jobs to Spark Jobs - StampedeCon 2015
How Cisco Migrated from MapReduce Jobs to Spark Jobs - StampedeCon 2015How Cisco Migrated from MapReduce Jobs to Spark Jobs - StampedeCon 2015
How Cisco Migrated from MapReduce Jobs to Spark Jobs - StampedeCon 2015
StampedeCon
 
Cisco SDN/NVF Innovations (SDN NVF Day ITB 2016)
Cisco SDN/NVF Innovations (SDN NVF Day ITB 2016)Cisco SDN/NVF Innovations (SDN NVF Day ITB 2016)
Cisco SDN/NVF Innovations (SDN NVF Day ITB 2016)
SDNRG ITB
 
The Data Center Network Evolution
The Data Center Network EvolutionThe Data Center Network Evolution
The Data Center Network Evolution
Cisco Canada
 
Cloud Computing and the Promise of Everything as a Service
Cloud Computing and the Promise of Everything as a ServiceCloud Computing and the Promise of Everything as a Service
Cloud Computing and the Promise of Everything as a Service
Lew Tucker
 

Similar to Microservices and containers networking: Contiv, an industry leading open source solution from Cisco - Luca Relandini - Codemotion Rome 2017 (20)

Triangle Kubernetes Meetup: Container cloud networking - Contiv for K8S & Ope...
Triangle Kubernetes Meetup: Container cloud networking - Contiv for K8S & Ope...Triangle Kubernetes Meetup: Container cloud networking - Contiv for K8S & Ope...
Triangle Kubernetes Meetup: Container cloud networking - Contiv for K8S & Ope...
 
Brkaci 1090
Brkaci 1090Brkaci 1090
Brkaci 1090
 
Luca Relandini - Microservices and containers networking: Contiv, deep dive a...
Luca Relandini - Microservices and containers networking: Contiv, deep dive a...Luca Relandini - Microservices and containers networking: Contiv, deep dive a...
Luca Relandini - Microservices and containers networking: Contiv, deep dive a...
 
Docker Enterprise Networking and Cisco Contiv - Cisco Live 2017 BRKSDN-2256
Docker Enterprise Networking and Cisco Contiv - Cisco Live 2017 BRKSDN-2256Docker Enterprise Networking and Cisco Contiv - Cisco Live 2017 BRKSDN-2256
Docker Enterprise Networking and Cisco Contiv - Cisco Live 2017 BRKSDN-2256
 
OpenStack and the Transformation of the Data Center - Lew Tucker
OpenStack and the Transformation of the Data Center - Lew TuckerOpenStack and the Transformation of the Data Center - Lew Tucker
OpenStack and the Transformation of the Data Center - Lew Tucker
 
Enabling Production Grade Containerized Applications through Policy Based Inf...
Enabling Production Grade Containerized Applications through Policy Based Inf...Enabling Production Grade Containerized Applications through Policy Based Inf...
Enabling Production Grade Containerized Applications through Policy Based Inf...
 
Cisco Live 2017: Container networking deep dive with Docker Enterprise Editio...
Cisco Live 2017: Container networking deep dive with Docker Enterprise Editio...Cisco Live 2017: Container networking deep dive with Docker Enterprise Editio...
Cisco Live 2017: Container networking deep dive with Docker Enterprise Editio...
 
automation via ansible ffjeefjewfhewjkfhrfjrefhekjrhfernn
automation via ansible ffjeefjewfhewjkfhrfjrefhekjrhfernnautomation via ansible ffjeefjewfhewjkfhrfjrefhekjrhfernn
automation via ansible ffjeefjewfhewjkfhrfjrefhekjrhfernn
 
4. Kubernetes - Application centric infrastructure kubernetes, contiv
4. Kubernetes - Application centric infrastructure  kubernetes, contiv4. Kubernetes - Application centric infrastructure  kubernetes, contiv
4. Kubernetes - Application centric infrastructure kubernetes, contiv
 
ACI Hands-on Lab
ACI Hands-on LabACI Hands-on Lab
ACI Hands-on Lab
 
08 sdn system intelligence short public beijing sdn conference - 130828
08 sdn system intelligence   short public beijing sdn conference - 13082808 sdn system intelligence   short public beijing sdn conference - 130828
08 sdn system intelligence short public beijing sdn conference - 130828
 
Cisco Connect 2018 Indonesia - software-defined access-a transformational ap...
Cisco Connect 2018 Indonesia -  software-defined access-a transformational ap...Cisco Connect 2018 Indonesia -  software-defined access-a transformational ap...
Cisco Connect 2018 Indonesia - software-defined access-a transformational ap...
 
Cisco Connect 2018 Malaysia - SDNNFV telco data center transformation
Cisco Connect 2018 Malaysia - SDNNFV telco data center transformationCisco Connect 2018 Malaysia - SDNNFV telco data center transformation
Cisco Connect 2018 Malaysia - SDNNFV telco data center transformation
 
Как развернуть кампусную сеть Cisco за 10 минут? Новые технологии для автомат...
Как развернуть кампусную сеть Cisco за 10 минут? Новые технологии для автомат...Как развернуть кампусную сеть Cisco за 10 минут? Новые технологии для автомат...
Как развернуть кампусную сеть Cisco за 10 минут? Новые технологии для автомат...
 
Application Centric Infrastructure (ACI), the policy driven data centre
Application Centric Infrastructure (ACI), the policy driven data centreApplication Centric Infrastructure (ACI), the policy driven data centre
Application Centric Infrastructure (ACI), the policy driven data centre
 
StampedeCon 2015 Keynote
StampedeCon 2015 KeynoteStampedeCon 2015 Keynote
StampedeCon 2015 Keynote
 
How Cisco Migrated from MapReduce Jobs to Spark Jobs - StampedeCon 2015
How Cisco Migrated from MapReduce Jobs to Spark Jobs - StampedeCon 2015How Cisco Migrated from MapReduce Jobs to Spark Jobs - StampedeCon 2015
How Cisco Migrated from MapReduce Jobs to Spark Jobs - StampedeCon 2015
 
Cisco SDN/NVF Innovations (SDN NVF Day ITB 2016)
Cisco SDN/NVF Innovations (SDN NVF Day ITB 2016)Cisco SDN/NVF Innovations (SDN NVF Day ITB 2016)
Cisco SDN/NVF Innovations (SDN NVF Day ITB 2016)
 
The Data Center Network Evolution
The Data Center Network EvolutionThe Data Center Network Evolution
The Data Center Network Evolution
 
Cloud Computing and the Promise of Everything as a Service
Cloud Computing and the Promise of Everything as a ServiceCloud Computing and the Promise of Everything as a Service
Cloud Computing and the Promise of Everything as a Service
 

More from Codemotion

Fuzz-testing: A hacker's approach to making your code more secure | Pascal Ze...
Fuzz-testing: A hacker's approach to making your code more secure | Pascal Ze...Fuzz-testing: A hacker's approach to making your code more secure | Pascal Ze...
Fuzz-testing: A hacker's approach to making your code more secure | Pascal Ze...
Codemotion
 
Pompili - From hero to_zero: The FatalNoise neverending story
Pompili - From hero to_zero: The FatalNoise neverending storyPompili - From hero to_zero: The FatalNoise neverending story
Pompili - From hero to_zero: The FatalNoise neverending story
Codemotion
 
Pastore - Commodore 65 - La storia
Pastore - Commodore 65 - La storiaPastore - Commodore 65 - La storia
Pastore - Commodore 65 - La storia
Codemotion
 
Pennisi - Essere Richard Altwasser
Pennisi - Essere Richard AltwasserPennisi - Essere Richard Altwasser
Pennisi - Essere Richard Altwasser
Codemotion
 
Michel Schudel - Let's build a blockchain... in 40 minutes! - Codemotion Amst...
Michel Schudel - Let's build a blockchain... in 40 minutes! - Codemotion Amst...Michel Schudel - Let's build a blockchain... in 40 minutes! - Codemotion Amst...
Michel Schudel - Let's build a blockchain... in 40 minutes! - Codemotion Amst...
Codemotion
 
Richard Süselbeck - Building your own ride share app - Codemotion Amsterdam 2019
Richard Süselbeck - Building your own ride share app - Codemotion Amsterdam 2019Richard Süselbeck - Building your own ride share app - Codemotion Amsterdam 2019
Richard Süselbeck - Building your own ride share app - Codemotion Amsterdam 2019
Codemotion
 
Eward Driehuis - What we learned from 20.000 attacks - Codemotion Amsterdam 2019
Eward Driehuis - What we learned from 20.000 attacks - Codemotion Amsterdam 2019Eward Driehuis - What we learned from 20.000 attacks - Codemotion Amsterdam 2019
Eward Driehuis - What we learned from 20.000 attacks - Codemotion Amsterdam 2019
Codemotion
 
Francesco Baldassarri - Deliver Data at Scale - Codemotion Amsterdam 2019 -
Francesco Baldassarri  - Deliver Data at Scale - Codemotion Amsterdam 2019 - Francesco Baldassarri  - Deliver Data at Scale - Codemotion Amsterdam 2019 -
Francesco Baldassarri - Deliver Data at Scale - Codemotion Amsterdam 2019 -
Codemotion
 
Martin Förtsch, Thomas Endres - Stereoscopic Style Transfer AI - Codemotion A...
Martin Förtsch, Thomas Endres - Stereoscopic Style Transfer AI - Codemotion A...Martin Förtsch, Thomas Endres - Stereoscopic Style Transfer AI - Codemotion A...
Martin Förtsch, Thomas Endres - Stereoscopic Style Transfer AI - Codemotion A...
Codemotion
 
Melanie Rieback, Klaus Kursawe - Blockchain Security: Melting the "Silver Bul...
Melanie Rieback, Klaus Kursawe - Blockchain Security: Melting the "Silver Bul...Melanie Rieback, Klaus Kursawe - Blockchain Security: Melting the "Silver Bul...
Melanie Rieback, Klaus Kursawe - Blockchain Security: Melting the "Silver Bul...
Codemotion
 
Angelo van der Sijpt - How well do you know your network stack? - Codemotion ...
Angelo van der Sijpt - How well do you know your network stack? - Codemotion ...Angelo van der Sijpt - How well do you know your network stack? - Codemotion ...
Angelo van der Sijpt - How well do you know your network stack? - Codemotion ...
Codemotion
 
Lars Wolff - Performance Testing for DevOps in the Cloud - Codemotion Amsterd...
Lars Wolff - Performance Testing for DevOps in the Cloud - Codemotion Amsterd...Lars Wolff - Performance Testing for DevOps in the Cloud - Codemotion Amsterd...
Lars Wolff - Performance Testing for DevOps in the Cloud - Codemotion Amsterd...
Codemotion
 
Sascha Wolter - Conversational AI Demystified - Codemotion Amsterdam 2019
Sascha Wolter - Conversational AI Demystified - Codemotion Amsterdam 2019Sascha Wolter - Conversational AI Demystified - Codemotion Amsterdam 2019
Sascha Wolter - Conversational AI Demystified - Codemotion Amsterdam 2019
Codemotion
 
Michele Tonutti - Scaling is caring - Codemotion Amsterdam 2019
Michele Tonutti - Scaling is caring - Codemotion Amsterdam 2019Michele Tonutti - Scaling is caring - Codemotion Amsterdam 2019
Michele Tonutti - Scaling is caring - Codemotion Amsterdam 2019
Codemotion
 
Pat Hermens - From 100 to 1,000+ deployments a day - Codemotion Amsterdam 2019
Pat Hermens - From 100 to 1,000+ deployments a day - Codemotion Amsterdam 2019Pat Hermens - From 100 to 1,000+ deployments a day - Codemotion Amsterdam 2019
Pat Hermens - From 100 to 1,000+ deployments a day - Codemotion Amsterdam 2019
Codemotion
 
James Birnie - Using Many Worlds of Compute Power with Quantum - Codemotion A...
James Birnie - Using Many Worlds of Compute Power with Quantum - Codemotion A...James Birnie - Using Many Worlds of Compute Power with Quantum - Codemotion A...
James Birnie - Using Many Worlds of Compute Power with Quantum - Codemotion A...
Codemotion
 
Don Goodman-Wilson - Chinese food, motor scooters, and open source developmen...
Don Goodman-Wilson - Chinese food, motor scooters, and open source developmen...Don Goodman-Wilson - Chinese food, motor scooters, and open source developmen...
Don Goodman-Wilson - Chinese food, motor scooters, and open source developmen...
Codemotion
 
Pieter Omvlee - The story behind Sketch - Codemotion Amsterdam 2019
Pieter Omvlee - The story behind Sketch - Codemotion Amsterdam 2019Pieter Omvlee - The story behind Sketch - Codemotion Amsterdam 2019
Pieter Omvlee - The story behind Sketch - Codemotion Amsterdam 2019
Codemotion
 
Dave Farley - Taking Back “Software Engineering” - Codemotion Amsterdam 2019
Dave Farley - Taking Back “Software Engineering” - Codemotion Amsterdam 2019Dave Farley - Taking Back “Software Engineering” - Codemotion Amsterdam 2019
Dave Farley - Taking Back “Software Engineering” - Codemotion Amsterdam 2019
Codemotion
 
Joshua Hoffman - Should the CTO be Coding? - Codemotion Amsterdam 2019
Joshua Hoffman - Should the CTO be Coding? - Codemotion Amsterdam 2019Joshua Hoffman - Should the CTO be Coding? - Codemotion Amsterdam 2019
Joshua Hoffman - Should the CTO be Coding? - Codemotion Amsterdam 2019
Codemotion
 

More from Codemotion (20)

Fuzz-testing: A hacker's approach to making your code more secure | Pascal Ze...
Fuzz-testing: A hacker's approach to making your code more secure | Pascal Ze...Fuzz-testing: A hacker's approach to making your code more secure | Pascal Ze...
Fuzz-testing: A hacker's approach to making your code more secure | Pascal Ze...
 
Pompili - From hero to_zero: The FatalNoise neverending story
Pompili - From hero to_zero: The FatalNoise neverending storyPompili - From hero to_zero: The FatalNoise neverending story
Pompili - From hero to_zero: The FatalNoise neverending story
 
Pastore - Commodore 65 - La storia
Pastore - Commodore 65 - La storiaPastore - Commodore 65 - La storia
Pastore - Commodore 65 - La storia
 
Pennisi - Essere Richard Altwasser
Pennisi - Essere Richard AltwasserPennisi - Essere Richard Altwasser
Pennisi - Essere Richard Altwasser
 
Michel Schudel - Let's build a blockchain... in 40 minutes! - Codemotion Amst...
Michel Schudel - Let's build a blockchain... in 40 minutes! - Codemotion Amst...Michel Schudel - Let's build a blockchain... in 40 minutes! - Codemotion Amst...
Michel Schudel - Let's build a blockchain... in 40 minutes! - Codemotion Amst...
 
Richard Süselbeck - Building your own ride share app - Codemotion Amsterdam 2019
Richard Süselbeck - Building your own ride share app - Codemotion Amsterdam 2019Richard Süselbeck - Building your own ride share app - Codemotion Amsterdam 2019
Richard Süselbeck - Building your own ride share app - Codemotion Amsterdam 2019
 
Eward Driehuis - What we learned from 20.000 attacks - Codemotion Amsterdam 2019
Eward Driehuis - What we learned from 20.000 attacks - Codemotion Amsterdam 2019Eward Driehuis - What we learned from 20.000 attacks - Codemotion Amsterdam 2019
Eward Driehuis - What we learned from 20.000 attacks - Codemotion Amsterdam 2019
 
Francesco Baldassarri - Deliver Data at Scale - Codemotion Amsterdam 2019 -
Francesco Baldassarri  - Deliver Data at Scale - Codemotion Amsterdam 2019 - Francesco Baldassarri  - Deliver Data at Scale - Codemotion Amsterdam 2019 -
Francesco Baldassarri - Deliver Data at Scale - Codemotion Amsterdam 2019 -
 
Martin Förtsch, Thomas Endres - Stereoscopic Style Transfer AI - Codemotion A...
Martin Förtsch, Thomas Endres - Stereoscopic Style Transfer AI - Codemotion A...Martin Förtsch, Thomas Endres - Stereoscopic Style Transfer AI - Codemotion A...
Martin Förtsch, Thomas Endres - Stereoscopic Style Transfer AI - Codemotion A...
 
Melanie Rieback, Klaus Kursawe - Blockchain Security: Melting the "Silver Bul...
Melanie Rieback, Klaus Kursawe - Blockchain Security: Melting the "Silver Bul...Melanie Rieback, Klaus Kursawe - Blockchain Security: Melting the "Silver Bul...
Melanie Rieback, Klaus Kursawe - Blockchain Security: Melting the "Silver Bul...
 
Angelo van der Sijpt - How well do you know your network stack? - Codemotion ...
Angelo van der Sijpt - How well do you know your network stack? - Codemotion ...Angelo van der Sijpt - How well do you know your network stack? - Codemotion ...
Angelo van der Sijpt - How well do you know your network stack? - Codemotion ...
 
Lars Wolff - Performance Testing for DevOps in the Cloud - Codemotion Amsterd...
Lars Wolff - Performance Testing for DevOps in the Cloud - Codemotion Amsterd...Lars Wolff - Performance Testing for DevOps in the Cloud - Codemotion Amsterd...
Lars Wolff - Performance Testing for DevOps in the Cloud - Codemotion Amsterd...
 
Sascha Wolter - Conversational AI Demystified - Codemotion Amsterdam 2019
Sascha Wolter - Conversational AI Demystified - Codemotion Amsterdam 2019Sascha Wolter - Conversational AI Demystified - Codemotion Amsterdam 2019
Sascha Wolter - Conversational AI Demystified - Codemotion Amsterdam 2019
 
Michele Tonutti - Scaling is caring - Codemotion Amsterdam 2019
Michele Tonutti - Scaling is caring - Codemotion Amsterdam 2019Michele Tonutti - Scaling is caring - Codemotion Amsterdam 2019
Michele Tonutti - Scaling is caring - Codemotion Amsterdam 2019
 
Pat Hermens - From 100 to 1,000+ deployments a day - Codemotion Amsterdam 2019
Pat Hermens - From 100 to 1,000+ deployments a day - Codemotion Amsterdam 2019Pat Hermens - From 100 to 1,000+ deployments a day - Codemotion Amsterdam 2019
Pat Hermens - From 100 to 1,000+ deployments a day - Codemotion Amsterdam 2019
 
James Birnie - Using Many Worlds of Compute Power with Quantum - Codemotion A...
James Birnie - Using Many Worlds of Compute Power with Quantum - Codemotion A...James Birnie - Using Many Worlds of Compute Power with Quantum - Codemotion A...
James Birnie - Using Many Worlds of Compute Power with Quantum - Codemotion A...
 
Don Goodman-Wilson - Chinese food, motor scooters, and open source developmen...
Don Goodman-Wilson - Chinese food, motor scooters, and open source developmen...Don Goodman-Wilson - Chinese food, motor scooters, and open source developmen...
Don Goodman-Wilson - Chinese food, motor scooters, and open source developmen...
 
Pieter Omvlee - The story behind Sketch - Codemotion Amsterdam 2019
Pieter Omvlee - The story behind Sketch - Codemotion Amsterdam 2019Pieter Omvlee - The story behind Sketch - Codemotion Amsterdam 2019
Pieter Omvlee - The story behind Sketch - Codemotion Amsterdam 2019
 
Dave Farley - Taking Back “Software Engineering” - Codemotion Amsterdam 2019
Dave Farley - Taking Back “Software Engineering” - Codemotion Amsterdam 2019Dave Farley - Taking Back “Software Engineering” - Codemotion Amsterdam 2019
Dave Farley - Taking Back “Software Engineering” - Codemotion Amsterdam 2019
 
Joshua Hoffman - Should the CTO be Coding? - Codemotion Amsterdam 2019
Joshua Hoffman - Should the CTO be Coding? - Codemotion Amsterdam 2019Joshua Hoffman - Should the CTO be Coding? - Codemotion Amsterdam 2019
Joshua Hoffman - Should the CTO be Coding? - Codemotion Amsterdam 2019
 

Recently uploaded

How RPA Help in the Transportation and Logistics Industry.pptx
How RPA Help in the Transportation and Logistics Industry.pptxHow RPA Help in the Transportation and Logistics Industry.pptx
How RPA Help in the Transportation and Logistics Industry.pptx
SynapseIndia
 
DealBook of Ukraine: 2024 edition
DealBook of Ukraine: 2024 editionDealBook of Ukraine: 2024 edition
DealBook of Ukraine: 2024 edition
Yevgen Sysoyev
 
20240702 QFM021 Machine Intelligence Reading List June 2024
20240702 QFM021 Machine Intelligence Reading List June 202420240702 QFM021 Machine Intelligence Reading List June 2024
20240702 QFM021 Machine Intelligence Reading List June 2024
Matthew Sinclair
 
Advanced Techniques for Cyber Security Analysis and Anomaly Detection
Advanced Techniques for Cyber Security Analysis and Anomaly DetectionAdvanced Techniques for Cyber Security Analysis and Anomaly Detection
Advanced Techniques for Cyber Security Analysis and Anomaly Detection
Bert Blevins
 
7 Most Powerful Solar Storms in the History of Earth.pdf
7 Most Powerful Solar Storms in the History of Earth.pdf7 Most Powerful Solar Storms in the History of Earth.pdf
7 Most Powerful Solar Storms in the History of Earth.pdf
Enterprise Wired
 
How to Build a Profitable IoT Product.pptx
How to Build a Profitable IoT Product.pptxHow to Build a Profitable IoT Product.pptx
How to Build a Profitable IoT Product.pptx
Adam Dunkels
 
WPRiders Company Presentation Slide Deck
WPRiders Company Presentation Slide DeckWPRiders Company Presentation Slide Deck
WPRiders Company Presentation Slide Deck
Lidia A.
 
Choose our Linux Web Hosting for a seamless and successful online presence
Choose our Linux Web Hosting for a seamless and successful online presenceChoose our Linux Web Hosting for a seamless and successful online presence
Choose our Linux Web Hosting for a seamless and successful online presence
rajancomputerfbd
 
RPA In Healthcare Benefits, Use Case, Trend And Challenges 2024.pptx
RPA In Healthcare Benefits, Use Case, Trend And Challenges 2024.pptxRPA In Healthcare Benefits, Use Case, Trend And Challenges 2024.pptx
RPA In Healthcare Benefits, Use Case, Trend And Challenges 2024.pptx
SynapseIndia
 
What’s New in Teams Calling, Meetings and Devices May 2024
What’s New in Teams Calling, Meetings and Devices May 2024What’s New in Teams Calling, Meetings and Devices May 2024
What’s New in Teams Calling, Meetings and Devices May 2024
Stephanie Beckett
 
find out more about the role of autonomous vehicles in facing global challenges
find out more about the role of autonomous vehicles in facing global challengesfind out more about the role of autonomous vehicles in facing global challenges
find out more about the role of autonomous vehicles in facing global challenges
huseindihon
 
What's New in Copilot for Microsoft365 May 2024.pptx
What's New in Copilot for Microsoft365 May 2024.pptxWhat's New in Copilot for Microsoft365 May 2024.pptx
What's New in Copilot for Microsoft365 May 2024.pptx
Stephanie Beckett
 
20240705 QFM024 Irresponsible AI Reading List June 2024
20240705 QFM024 Irresponsible AI Reading List June 202420240705 QFM024 Irresponsible AI Reading List June 2024
20240705 QFM024 Irresponsible AI Reading List June 2024
Matthew Sinclair
 
Quantum Communications Q&A with Gemini LLM
Quantum Communications Q&A with Gemini LLMQuantum Communications Q&A with Gemini LLM
Quantum Communications Q&A with Gemini LLM
Vijayananda Mohire
 
Implementations of Fused Deposition Modeling in real world
Implementations of Fused Deposition Modeling  in real worldImplementations of Fused Deposition Modeling  in real world
Implementations of Fused Deposition Modeling in real world
Emerging Tech
 
TrustArc Webinar - 2024 Data Privacy Trends: A Mid-Year Check-In
TrustArc Webinar - 2024 Data Privacy Trends: A Mid-Year Check-InTrustArc Webinar - 2024 Data Privacy Trends: A Mid-Year Check-In
TrustArc Webinar - 2024 Data Privacy Trends: A Mid-Year Check-In
TrustArc
 
Transcript: Details of description part II: Describing images in practice - T...
Transcript: Details of description part II: Describing images in practice - T...Transcript: Details of description part II: Describing images in practice - T...
Transcript: Details of description part II: Describing images in practice - T...
BookNet Canada
 
Cookies program to display the information though cookie creation
Cookies program to display the information though cookie creationCookies program to display the information though cookie creation
Cookies program to display the information though cookie creation
shanthidl1
 
Recent Advancements in the NIST-JARVIS Infrastructure
Recent Advancements in the NIST-JARVIS InfrastructureRecent Advancements in the NIST-JARVIS Infrastructure
Recent Advancements in the NIST-JARVIS Infrastructure
KAMAL CHOUDHARY
 
Paradigm Shifts in User Modeling: A Journey from Historical Foundations to Em...
Paradigm Shifts in User Modeling: A Journey from Historical Foundations to Em...Paradigm Shifts in User Modeling: A Journey from Historical Foundations to Em...
Paradigm Shifts in User Modeling: A Journey from Historical Foundations to Em...
Erasmo Purificato
 

Recently uploaded (20)

How RPA Help in the Transportation and Logistics Industry.pptx
How RPA Help in the Transportation and Logistics Industry.pptxHow RPA Help in the Transportation and Logistics Industry.pptx
How RPA Help in the Transportation and Logistics Industry.pptx
 
DealBook of Ukraine: 2024 edition
DealBook of Ukraine: 2024 editionDealBook of Ukraine: 2024 edition
DealBook of Ukraine: 2024 edition
 
20240702 QFM021 Machine Intelligence Reading List June 2024
20240702 QFM021 Machine Intelligence Reading List June 202420240702 QFM021 Machine Intelligence Reading List June 2024
20240702 QFM021 Machine Intelligence Reading List June 2024
 
Advanced Techniques for Cyber Security Analysis and Anomaly Detection
Advanced Techniques for Cyber Security Analysis and Anomaly DetectionAdvanced Techniques for Cyber Security Analysis and Anomaly Detection
Advanced Techniques for Cyber Security Analysis and Anomaly Detection
 
7 Most Powerful Solar Storms in the History of Earth.pdf
7 Most Powerful Solar Storms in the History of Earth.pdf7 Most Powerful Solar Storms in the History of Earth.pdf
7 Most Powerful Solar Storms in the History of Earth.pdf
 
How to Build a Profitable IoT Product.pptx
How to Build a Profitable IoT Product.pptxHow to Build a Profitable IoT Product.pptx
How to Build a Profitable IoT Product.pptx
 
WPRiders Company Presentation Slide Deck
WPRiders Company Presentation Slide DeckWPRiders Company Presentation Slide Deck
WPRiders Company Presentation Slide Deck
 
Choose our Linux Web Hosting for a seamless and successful online presence
Choose our Linux Web Hosting for a seamless and successful online presenceChoose our Linux Web Hosting for a seamless and successful online presence
Choose our Linux Web Hosting for a seamless and successful online presence
 
RPA In Healthcare Benefits, Use Case, Trend And Challenges 2024.pptx
RPA In Healthcare Benefits, Use Case, Trend And Challenges 2024.pptxRPA In Healthcare Benefits, Use Case, Trend And Challenges 2024.pptx
RPA In Healthcare Benefits, Use Case, Trend And Challenges 2024.pptx
 
What’s New in Teams Calling, Meetings and Devices May 2024
What’s New in Teams Calling, Meetings and Devices May 2024What’s New in Teams Calling, Meetings and Devices May 2024
What’s New in Teams Calling, Meetings and Devices May 2024
 
find out more about the role of autonomous vehicles in facing global challenges
find out more about the role of autonomous vehicles in facing global challengesfind out more about the role of autonomous vehicles in facing global challenges
find out more about the role of autonomous vehicles in facing global challenges
 
What's New in Copilot for Microsoft365 May 2024.pptx
What's New in Copilot for Microsoft365 May 2024.pptxWhat's New in Copilot for Microsoft365 May 2024.pptx
What's New in Copilot for Microsoft365 May 2024.pptx
 
20240705 QFM024 Irresponsible AI Reading List June 2024
20240705 QFM024 Irresponsible AI Reading List June 202420240705 QFM024 Irresponsible AI Reading List June 2024
20240705 QFM024 Irresponsible AI Reading List June 2024
 
Quantum Communications Q&A with Gemini LLM
Quantum Communications Q&A with Gemini LLMQuantum Communications Q&A with Gemini LLM
Quantum Communications Q&A with Gemini LLM
 
Implementations of Fused Deposition Modeling in real world
Implementations of Fused Deposition Modeling  in real worldImplementations of Fused Deposition Modeling  in real world
Implementations of Fused Deposition Modeling in real world
 
TrustArc Webinar - 2024 Data Privacy Trends: A Mid-Year Check-In
TrustArc Webinar - 2024 Data Privacy Trends: A Mid-Year Check-InTrustArc Webinar - 2024 Data Privacy Trends: A Mid-Year Check-In
TrustArc Webinar - 2024 Data Privacy Trends: A Mid-Year Check-In
 
Transcript: Details of description part II: Describing images in practice - T...
Transcript: Details of description part II: Describing images in practice - T...Transcript: Details of description part II: Describing images in practice - T...
Transcript: Details of description part II: Describing images in practice - T...
 
Cookies program to display the information though cookie creation
Cookies program to display the information though cookie creationCookies program to display the information though cookie creation
Cookies program to display the information though cookie creation
 
Recent Advancements in the NIST-JARVIS Infrastructure
Recent Advancements in the NIST-JARVIS InfrastructureRecent Advancements in the NIST-JARVIS Infrastructure
Recent Advancements in the NIST-JARVIS Infrastructure
 
Paradigm Shifts in User Modeling: A Journey from Historical Foundations to Em...
Paradigm Shifts in User Modeling: A Journey from Historical Foundations to Em...Paradigm Shifts in User Modeling: A Journey from Historical Foundations to Em...
Paradigm Shifts in User Modeling: A Journey from Historical Foundations to Em...
 

Microservices and containers networking: Contiv, an industry leading open source solution from Cisco - Luca Relandini - Codemotion Rome 2017

  • 1. Cisco Contiv: Network Policies for Microservices Luca Relandini @lucarelandini ROME 24-25 MARCH 2017
  • 3. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public Containers and Microservices container Your code Your startup scripts Code dependencies Should deploy with exactly the same behavior on any host/VM that can run containers Orders Wishlist Payment
  • 4. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public Cloud Native FROM TO Microservices - Impact on IT Operations DevOps Shared Responsibility Common Incentives, Tools, Process and Culture Not My Problem Separate Tools, Varied Incentives, Opaque Process Continuous Delivery Release Early and Often Higher Quality of Code Release Once Every 6 Months More Bugs in Production Microservices Loosely Coupled Components Automated Deploy Without Waiting on Individual Components Tightly Coupled Components Slow Deployment Cycles Waiting on Integrated Tests Teams Traditional IT
  • 5. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public Containers Help to Achieve Agile App Development Stage/ Production TestDevelopment Version Control SysAdmin QA/QEDeveloper BRKDCT-2023 7 Different players in the game
  • 6. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 8 But... There are Concerns in Containers Adoption What slows an organization’s use of containers? 75% 71% 64% 62% 61% Security Networking Performance Integration Management Source: n= 124 to-date, IDC custom survey, study commissioned by Cisco Need for production-grade infrastructure
  • 7. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public HW Integration Can not leverage performance and security by natively integrating with HW Networking In The New Container World Physical Network HypervisorHypervisor Physical Network Virtual Switching or Overlay Network C1 Cn Guest OS - Bridged Overlay Network - VXLAN Physical Network Hypervisor Hypervisor Host 1 Host 2 Host 2Host 1 VM1 C1 Cn Guest OS - Bridged VM2 C1 Cn Guest OS - Bridged Overlay Network - VXLAN C1 Cn Guest OS - Bridged Connectivity Network services, e.g. Load balancer, Firewall Performance Encap over encap over encap affects performance VM1 VM2 9 Bare Metal VM Containers in VM
  • 9. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public VM or BM Basics of Container Networking Minimally it provides: - IP Connectivity in Container’s Network Namespace - IPAM, and Network Device Creation (eth0) - Route Advertisement or Host NAT for external connectivity Container eth0 Container eth0 Physical Network Linux/Windows OS Networking ensp0
  • 10. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public Container Network Model (CNM) Docker Container Endpoint Network Sandbox Green Network Docker Container Endpoint Network Sandbox Blue Network • Proposed by Docker to provide networking abstractions/API for container networking • Sandbox contains configuration of a container's network stack (Linux network namespace) • An endpoint is a container's interface into a network (veth pair) • A network is collection of arbitrary endpoints that can communicate with each other • A container can belong to multiple endpoints (and therefore multiple networks) CNM provides Driver APIs for IPAM and Endpoint creation/deletion IPAM Driver APIs: - Create/Delete Pool, - Allocate/Free IP Address Network Driver APIs: - Network Create/Delete, - Endpoint Create/Delete/Join/Leave eth0 eth1
  • 11. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public Container Network Interface (CNI) • Proposed by CoreOS as part of appc specification, used also by Kubernetes • Common interface between container run time and network plugin • Gives driver freedom to manipulate network namespace • Network described by JSON config • Plugins support two commands: - Add Container to Network - Remove Container from Network Container Network namespace Driver plumbing Differences (from CNM): - Gives Driver freedom to manipulate network namespace - Provide Container Id, Params to drivers - Just 2 API: Add Container to Network, Delete Container from Network
  • 13. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public Today’s Infrastructure Needs BRKDCT-2023 Mike, IT AdminSally, Dev/Test 1. Develop and test fast 2. Agility and Elasticity 3. Does not care about other users 1. Manage infrastructure 2. Stability and Security 3. Isolation and Compliance Challenge: Conflicting goals and priorities
  • 14. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 17BRKDCT-2023 How can we achieve these goals? Key: Policy-based Container Networking Declarative Tags (simpler) Manage Groups instead of single objects (faster)
  • 16. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public Containerized Apps on Shared Infrastructure Application Intent Compute Compute Operational Intent Contiv Is an Open Source Solution to Define and Enforce Distributed Policies Across Infrastructure NETWORK Compute
  • 17. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public Application Intent with Operation Intent PLACEHOLDER version: '2' services: web: build: . label: - tier: web volumes: - .:/code networks: - front-tier - back-tier db: image: mysql App Intent PLACEHOLDER web: environment: prod networks: security: - allow ports: 5000, 443 bandwidth: 5gbps lb selector: - tier: web db: networks: security: allow ports: 3306 from web Ops Intent (e.g. Contiv Intent*) Operation Intent Provides Operational Requirements and Policies for Applications * Shown in yaml for better visualization
  • 18. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public Contiv: How everything fits together Operational Policy Management Developer Operations Application Scheduler Node 1 Node 2 Node-n Contiv Distributed Policy Layer ... Contiv Elements Contiv UI/CLI/API to manage and monitor policies/usage Distributed policy enforcement for network Integration with physical infrastructure Integrated with popular container schedulers Contiv Automatically Integrates and Enforces Developer and Operations Policies
  • 19. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 100% Open Source The Most Powerful Container Networking Fabric L2, L3, Overlay or ACI Rich Policies DevOps IT Admin Any NetworkingAny Platform Any Infrastructure Application Intent Rich Policy Model Declarative Simple Install GUI + CLI LDAP/RBAC Contiv
  • 20. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public Contiv Integration with Underlying DC Infrastructure Application-Centric Infrastructure (ACI) • Containers integrated with APIC policies • Physical services integration Nexus Standalone or Any Network • VLAN handoff • BGP interop (standard routing protocol) Contiv Leverages Underlying Infrastructure Capabilities
  • 21. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public Introducing Contiv 1.0 What’s New: LDAP+ RBAC All New User Experience and Workflow Kubernetes 1.4 Support Docker 1.12 Support OpenShift Integration Simple Install 1 Commercially Supported Contiv will be announced shortly Cisco Advances Services Cisco Solutions Support 100% Open Source at contiv.github.io
  • 22. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public Contiv’s Approach to Containers Scale Route and Policy Distribution Speed Automated Scale-Out Layer of Network Flat Networks High Performance Application-Centric Integrated with App Blueprint Shared Resources Policies for Resource Acquisition Hybrid Cloud Consistent Policies Security Tenant Isolation Security Policies Telemetry/Diagnostics Application Statistics Data Export 25
  • 23. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public Contiv Network Components Contiv CLI/UI Node 1 Contiv Agent ...Node 2 Contiv Agent Node-n Contiv Agent Contiv Elements Container networking for: • Kubernetes, Mesos, Nomad, and Swam Route distribution using BGP or JSON RPC Custom OpenFlow pipeline for host networking • Allows implementing various features (details later) Exports data about: App connectivity, stats, peer Distributed, cluster-wide function Stateless: Useful in node failure/restart, upgrade Implements cluster-wide network and policy Manage global resources: IPAM, VLAN/VXLAN pools Tools to manipulate Contiv objects Implements CRUD using REST I/F Expected to be used by infra/ops teams RBAC 26
  • 24. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public Contiv Network High-Level Architecture Host-1 .… Host Plug-In Distributed KV Store Plug-In Logic Contiv Host Agent Host-n Linux Host Routing/Switching To Physical Network ARP/DNS Responder Service LB Route Distribution [ BGP | RPC ] Container Runtime (e.g., Docker) [ K8s| Swarm | Mesos | Nomad ] Master-DBPolicy Engine REST Server IPAM/ Res-Mgmt HA Heartbeat Distributed KV Store [ Etcd | Consul ] REST client (e.g. netctl) API Calls to External Orchestration Systems e.g,. ACI, Schedulers Health Monitoring Contiv Master Cluster .…… .…
  • 25. Demo
  • 26. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public Tutorial on Docker and Contiv - do it yourself ;-) A normal docker network (without Contiv) looks like it: It’s online at http://contiv.github.io
  • 27. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 32Presentation ID
  • 28. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 33Presentation ID Let’s create a Contiv network
  • 29. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public How Docker sees a Contiv network Let’s attach a new container to the new network:
  • 30. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 35Presentation ID Networks are isolated Let’s create one more container on contiv-net: We have many containers now (contiv-c1 and contiv-c5 are on the same network): Ping works here (same if the container is on a different host/VM) Ping does not work here
  • 31. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public Tenants in Contiv Two different networks, they don’t communicate Tenants are isolated worlds, to avoid conflicts. They have separate namespaces for resources.
  • 32. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 37Presentation ID Applying policies between containers with Contiv Contiv provide a way to apply isolation policies between containers groups (regardless of the tenants, eventually within the tenants). For this, we create a simple policy called db-policy, and add some rules to it to define which ports are allowed.
  • 33. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public Policies are applied among Groups Finally, we associate the policy with a group (a group is an arbitrary collection of containers, e.g. a tier for a microservice) and then run some containers that belong to db group Let’s create two more containers: The policy db-policy (ports open and closed) is applied to all the 3 containers: Managing many end points as a single object makes it easy and fast, think about auto-scaling (especially when integrated with Swarm, Kubernetes, etc.)
  • 34. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public Contiv is Microservices Ready • Support for grouping Applications • Allows scale-out instances of container applications to be grouped together • Policies specified on a micro-service tier, rather than individual container workloads • Efficient forwarding between Microservice tiers • Allows a fixed (DNS published) VIP for a micro-service • Containers within the micro-services can come and go • Their IP addresses are mapped to the service IP for east-west traffic • Eliminates single point of forwarding (proxy) between micro-service tiers • Application visibility at service levels (across the cluster) Web Group App Group DB Group Allow grouping of containers/pods Specify Policies between groups or from outside the network
  • 35. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public Elements of Contiv Networking Cluster-wide Connectivity Truly Multi-tenant Network Isolation Traffic Prioritization App-Composers Integrated Network Monitoring Scalable Physical Network Integration: ACI | Nexus Standalone Micro Services Ready Leverages NIC IPAM, Service Discovery Contiv Networking High Throughput
  • 36. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public Contiv Value Proposition
  • 37. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public Go and test it (easy!): http://contiv.github.io Contiv releases - github.com/contiv/install/releases Documents - contiv.github.io Join Contiv Slack - contiv.herokuapp.com Contiv Blogs - blogs.cisco.com/tag/contiv Recorded demo - https://www.youtube.com/watch?v=55s4wAVbTM4 Cisco DevNet community - https://developer.cisco.com/site/contiv/videos/index.gsp Contiv on Docker Store - https://store.docker.com/plugins/803eecee-0780-401a-a454- e9523ccf86b3?tab=description

Editor's Notes

  1. Speak to each
  2. An endpoint is container's interface into a network A network is collection of arbitrary endpoints A container can belong to multiple endpoints (and therefore multiple networks) CNM allows for co-existence of multiple drivers, with a network managed by one driver Provides Driver APIs for IPAM and Endpoint creation/deletion IPAM Driver APIs: Create/Delete Pool, Allocate/Free IP Address Network Driver APIs: Network Create/Delete, Endpoint Create/Delete/Join/Leave Used by docker engine, docker swarm, and docker compose Also works with other schedulers that runs standard docker containers e.g. Nomad or Mesos docker containerizer
  3. Provide Container Create/Delete events Provides access to network namespace to the driver to plumb networking Provides container id (uuid) for which network interface is being created No separate IPAM Driver Container Create returns the IAPM information along with other data Used by Kubernetes i.e. supported by various Kubernetes network plugins
  4. n/w enables decomposition of applications, allowing them to run across a cluster as if it was a single machine container technology makes this easier easier leads to more adoption, hence more network traffic managing the app requires managing the n/w!
  5. App person – hook up the components of my app so it works Ops person – make sure an app does not bring down my dc!
  6. Developer defines app blue print Ops sets the policy Scheduler/framework keeps the components running Contiv keeps the components connected, according to the policy All of these need to be in sync
  7. Add simplification of installer, documentation, OpenShift below Docker – One click install, 100% open source