Top Banner
CNA1699BU #VMworld #CNA1699BU Running Docker on your Existing Infrastructure with vSphere Integrated Containers VMworld 2017 Content: Not for publication or distribution
33

CNA1699BU Running Docker on your Existing Infrastructure or …€¦ · Running Docker on your Existing Infrastructure with vSphere Integrated Containers VMworld 2017 Content: Not

May 20, 2020

Download

Documents

dariahiddleston
Welcome message from author
This document is posted to help you gain knowledge. Please leave a comment to let me know what you think about it! Share it to your friends and learn new things together.
Transcript
Page 1: CNA1699BU Running Docker on your Existing Infrastructure or …€¦ · Running Docker on your Existing Infrastructure with vSphere Integrated Containers VMworld 2017 Content: Not

CNA1699BU

#VMworld #CNA1699BU

Running Docker on your Existing Infrastructure with vSphere Integrated Containers

VMworld 2017 Content: Not fo

r publication or distri

bution

Page 2: CNA1699BU Running Docker on your Existing Infrastructure or …€¦ · Running Docker on your Existing Infrastructure with vSphere Integrated Containers VMworld 2017 Content: Not

Martijn BaeckePatrick Daigle

CNA1699BU

#VMworld #CNA1699BU

Running Docker on your Existing Infrastructure with vSphere Integrated Containers

VMworld 2017 Content: Not fo

r publication or distri

bution

Page 3: CNA1699BU Running Docker on your Existing Infrastructure or …€¦ · Running Docker on your Existing Infrastructure with vSphere Integrated Containers VMworld 2017 Content: Not

• This presentation may contain product features that are currently under development.

• This overview of new technology represents no commitment from VMware to deliver these features in any generally available product.

• Features are subject to change, and must not be included in contracts, purchase orders, or sales agreements of any kind.

• Technical feasibility and market demand will affect final delivery.

• Pricing and packaging for any new technologies or features discussed or presented have not been determined.

Disclaimer

3#CNA1699BU CONFIDENTIAL

VMworld 2017 Content: Not fo

r publication or distri

bution

Page 4: CNA1699BU Running Docker on your Existing Infrastructure or …€¦ · Running Docker on your Existing Infrastructure with vSphere Integrated Containers VMworld 2017 Content: Not

Patrick@pdaigle

Martijn@baecke

4#CNA1699BU CONFIDENTIAL

VMworld 2017 Content: Not fo

r publication or distri

bution

Page 5: CNA1699BU Running Docker on your Existing Infrastructure or …€¦ · Running Docker on your Existing Infrastructure with vSphere Integrated Containers VMworld 2017 Content: Not

Agenda

1 Why are containers relevant?

2 What is Docker?

3 Containers on SDDC – Use Cases

4 Developer Self-Service

5 Live Demo

6 Q&A

5#CNA1699BU CONFIDENTIAL

VMworld 2017 Content: Not fo

r publication or distri

bution

Page 6: CNA1699BU Running Docker on your Existing Infrastructure or …€¦ · Running Docker on your Existing Infrastructure with vSphere Integrated Containers VMworld 2017 Content: Not

Not Too Long Ago Life Was Easy…

Apps!

Access to

virtual machine

for coding!

Users Developers

6#CNA1699BU CONFIDENTIAL

VMworld 2017 Content: Not fo

r publication or distri

bution

Page 7: CNA1699BU Running Docker on your Existing Infrastructure or …€¦ · Running Docker on your Existing Infrastructure with vSphere Integrated Containers VMworld 2017 Content: Not

Digital Transformation Drives Change…

Apps!

Access to

virtual machine

for coding!

Users Developers

Apps! Apps! More

Apps! Apps!

New features!

Apps! NOW!

APIs! DevOps!

Containers!

Control the

infrastructure!

7#CNA1699BU CONFIDENTIAL

VMworld 2017 Content: Not fo

r publication or distri

bution

Page 8: CNA1699BU Running Docker on your Existing Infrastructure or …€¦ · Running Docker on your Existing Infrastructure with vSphere Integrated Containers VMworld 2017 Content: Not

Developers’ Pyramid of Needs

Performance

Scalability

Availability

Security

Manageability

Functional Differentiation

What the developer today care about – i.e. functional differentiation

What the platform should provide to applications - i.e. the things that deliver service level

8#CNA1699BU CONFIDENTIAL

VMworld 2017 Content: Not fo

r publication or distri

bution

Page 9: CNA1699BU Running Docker on your Existing Infrastructure or …€¦ · Running Docker on your Existing Infrastructure with vSphere Integrated Containers VMworld 2017 Content: Not

DevOps

Digital Transformation

Business Applications Infrastructure

9#CNA1699BU CONFIDENTIAL

VMworld 2017 Content: Not fo

r publication or distri

bution

Page 10: CNA1699BU Running Docker on your Existing Infrastructure or …€¦ · Running Docker on your Existing Infrastructure with vSphere Integrated Containers VMworld 2017 Content: Not

App

DataAnalysis

The Speed of This Makes a Competitive Advantage

10#CNA1699BU CONFIDENTIAL

VMworld 2017 Content: Not fo

r publication or distri

bution

Page 11: CNA1699BU Running Docker on your Existing Infrastructure or …€¦ · Running Docker on your Existing Infrastructure with vSphere Integrated Containers VMworld 2017 Content: Not

The Perfect Storm : Confluence of Four Forces

11#CNA1699BU CONFIDENTIAL

VMworld 2017 Content: Not fo

r publication or distri

bution

Page 12: CNA1699BU Running Docker on your Existing Infrastructure or …€¦ · Running Docker on your Existing Infrastructure with vSphere Integrated Containers VMworld 2017 Content: Not

Docker 101 : The Basics

12#CNA1699BU CONFIDENTIAL

VMworld 2017 Content: Not fo

r publication or distri

bution

Page 13: CNA1699BU Running Docker on your Existing Infrastructure or …€¦ · Running Docker on your Existing Infrastructure with vSphere Integrated Containers VMworld 2017 Content: Not

Docker Adoption

13#CNA1699BU CONFIDENTIAL

VMworld 2017 Content: Not fo

r publication or distri

bution

Page 14: CNA1699BU Running Docker on your Existing Infrastructure or …€¦ · Running Docker on your Existing Infrastructure with vSphere Integrated Containers VMworld 2017 Content: Not

What is Docker?

~# docker build my_app

~# docker push my_app

~#

“Docker is an open-source project that automates the deployment of applications inside software containers”

14#CNA1699BU CONFIDENTIAL

VMworld 2017 Content: Not fo

r publication or distri

bution

Page 15: CNA1699BU Running Docker on your Existing Infrastructure or …€¦ · Running Docker on your Existing Infrastructure with vSphere Integrated Containers VMworld 2017 Content: Not

Why Developers Love Docker?!

LightPortable FastPortable Lightweight Fast

… Standard Format That Integrates with Developer Tooling

15#CNA1699BU CONFIDENTIAL

VMworld 2017 Content: Not fo

r publication or distri

bution

Page 16: CNA1699BU Running Docker on your Existing Infrastructure or …€¦ · Running Docker on your Existing Infrastructure with vSphere Integrated Containers VMworld 2017 Content: Not

Docker Architecture

Docker Toolbox

docker (cli)

docker-machine

Linux

docker (engine)

c c c c

Docker Hub(Registry)

docker

images

16#CNA1699BU CONFIDENTIAL

VMworld 2017 Content: Not fo

r publication or distri

bution

Page 17: CNA1699BU Running Docker on your Existing Infrastructure or …€¦ · Running Docker on your Existing Infrastructure with vSphere Integrated Containers VMworld 2017 Content: Not

From Nothing to Running App in 3 Commands

Docker Toolbox

docker (cli)

docker-machine

Linux

docker (engine)

n

g

i

n

x

Docker Hub

docker

images

nginxnginx

docker-machine env default

docker pull nginx

docker run -d -p 8000:80 nginx

1

1

2

3

2

3

17#CNA1699BU CONFIDENTIAL

VMworld 2017 Content: Not fo

r publication or distri

bution

Page 18: CNA1699BU Running Docker on your Existing Infrastructure or …€¦ · Running Docker on your Existing Infrastructure with vSphere Integrated Containers VMworld 2017 Content: Not

But What Does Ops Need?

Security & Isolation

RichSLAsData

GovernanceGuaranteedResources

ManagementTooling

18#CNA1699BU CONFIDENTIAL

VMworld 2017 Content: Not fo

r publication or distri

bution

Page 19: CNA1699BU Running Docker on your Existing Infrastructure or …€¦ · Running Docker on your Existing Infrastructure with vSphere Integrated Containers VMworld 2017 Content: Not

OS

Hardware

Virtual Machine

Container

Solution for Dev Problem

Solution for Ops Problem

vSphere

Virtual Machine the Foundation for Containers

Best of both worlds

• Isolated & Secure• Flexibility• Manageable• Separation of duties

App

19#CNA1699BU CONFIDENTIAL

VMworld 2017 Content: Not fo

r publication or distri

bution

Page 20: CNA1699BU Running Docker on your Existing Infrastructure or …€¦ · Running Docker on your Existing Infrastructure with vSphere Integrated Containers VMworld 2017 Content: Not

20#CNA1699BU CONFIDENTIAL

VMworld 2017 Content: Not fo

r publication or distri

bution

Page 21: CNA1699BU Running Docker on your Existing Infrastructure or …€¦ · Running Docker on your Existing Infrastructure with vSphere Integrated Containers VMworld 2017 Content: Not

+

21#CNA1699BU CONFIDENTIAL

VMworld 2017 Content: Not fo

r publication or distri

bution

Page 22: CNA1699BU Running Docker on your Existing Infrastructure or …€¦ · Running Docker on your Existing Infrastructure with vSphere Integrated Containers VMworld 2017 Content: Not

NSX ESXi vSAN

Virtual Container Hosts Docker Container Hosts

Provisioning / Scheduling

Physical Infrastructure

Secu

rity

/ M

icro

-segm

ent

ation

Reg

istr

y

Secu

rity

Ma

nagem

ent C

Docker Engine

Linux Kernel

C C

Linux Kernel

C

Linux Kernel

C

Linux Kernel

C

vSphere Integrated Containers

• Docker API Compliant• Containers run as VMs• Application repackaging use case

• Self Service Docker Hosts• Simple micro services development and deployment

22#CNA1699BU CONFIDENTIAL

VMworld 2017 Content: Not fo

r publication or distri

bution

Page 23: CNA1699BU Running Docker on your Existing Infrastructure or …€¦ · Running Docker on your Existing Infrastructure with vSphere Integrated Containers VMworld 2017 Content: Not

Consumers & Providers in IT

Physical Infrastructure

VirtualInfrastructure

IaaS

PlatformServices

ApplicationDevelopers

Consumer

Provider

Docker Endpoint

Virtual Container Host Net

| Sec | Ops Visibility

23#CNA1699BU CONFIDENTIAL

VMworld 2017 Content: Not fo

r publication or distri

bution

Page 24: CNA1699BU Running Docker on your Existing Infrastructure or …€¦ · Running Docker on your Existing Infrastructure with vSphere Integrated Containers VMworld 2017 Content: Not

Docker compatible interface

Container management portal

Enterprise-class container registry

Familiarity of vSphere

No new tooling or technologies

Full enterprise-grade power of

Software-Defined Data Center

vSphere Integrated Containers – Enabling the Best of Both Worlds

vSphere Integrated Containers

24#CNA1699BU CONFIDENTIAL

VMworld 2017 Content: Not fo

r publication or distri

bution

Page 25: CNA1699BU Running Docker on your Existing Infrastructure or …€¦ · Running Docker on your Existing Infrastructure with vSphere Integrated Containers VMworld 2017 Content: Not

VCH

Container Endpoint

vSphere Integrated Containers – Operating Model

ESXi ESXi ESXi ESXi ESXi

VSAN

vCenter Server

NSX

C-VM

Container VM

nginx process

Linux Kernel

vic-machine-linux createdocker run –d –p 80:80 nginx

ESXi ESXiESXi

vSphere Cluster

C-VM

VM VM

VM VM

25

VMworld 2017 Content: Not fo

r publication or distri

bution

Page 26: CNA1699BU Running Docker on your Existing Infrastructure or …€¦ · Running Docker on your Existing Infrastructure with vSphere Integrated Containers VMworld 2017 Content: Not

Containers on SDDCUse Cases

VMworld 2017 Content: Not fo

r publication or distri

bution

Page 27: CNA1699BU Running Docker on your Existing Infrastructure or …€¦ · Running Docker on your Existing Infrastructure with vSphere Integrated Containers VMworld 2017 Content: Not

Containers on SDDC: Use Cases

• Modernize traditional apps• No refactoring

• Develop new 12-factor apps• App refactoring

Application Repackaging Cloud Native

• Enable developer agility• Self-service portal

Developer Sandbox

27#CNA1699BU CONFIDENTIAL

VMworld 2017 Content: Not fo

r publication or distri

bution

Page 28: CNA1699BU Running Docker on your Existing Infrastructure or …€¦ · Running Docker on your Existing Infrastructure with vSphere Integrated Containers VMworld 2017 Content: Not

Use Case Example:Developer Sandbox

Use Case Description:

• Ticketless development environment with IT governance and control

VMware Value Proposition:

• Enable developer agility on vSphere

• Efficient utilization via resource pools

• Simplified container framework deployment

• Enterprise-class registry (AD/LDAP, replication, content trust, scanning)

• Unified enterprise tooling with logging, monitoring

Customer Benefits:

• Enable developer agility

• Faster application time to market

• Docker and Kubernetes

28#CNA1699BU CONFIDENTIAL

VMworld 2017 Content: Not fo

r publication or distri

bution

Page 29: CNA1699BU Running Docker on your Existing Infrastructure or …€¦ · Running Docker on your Existing Infrastructure with vSphere Integrated Containers VMworld 2017 Content: Not

Developer Sandbox – Real-world Example

• Developer self-service with VI Admin governance

– Developer consumes resources via Docker API/CLI

• Provides developers with self-service for applications not yet in the enterprise service catalog

– Rapid prototyping

• Run a full-fledged docker engine as a ContainerVM using vSphere Integrated Containers and the Docker API/CLI

– DCH are packaged in a docker image and can be instantiated on VIC like any other container

– DCH provides command-line options to enable/disable features of the docker engine

– All DCH packages are based on PhotonOS

• Source, dockerfiles and documentation available at github.com/vmware/vic-product

Docker Container Host

VIC Engine

C

Docker Engine

Linux Kernel

C C

docker run –p 12375:2375 –d vmware/dch-photon

29#CNA1699BU CONFIDENTIAL

VMworld 2017 Content: Not fo

r publication or distri

bution

Page 30: CNA1699BU Running Docker on your Existing Infrastructure or …€¦ · Running Docker on your Existing Infrastructure with vSphere Integrated Containers VMworld 2017 Content: Not

Live DemoEnd-user (developer) workflow

VMworld 2017 Content: Not fo

r publication or distri

bution

Page 31: CNA1699BU Running Docker on your Existing Infrastructure or …€¦ · Running Docker on your Existing Infrastructure with vSphere Integrated Containers VMworld 2017 Content: Not

#CNA1699BU CONFIDENTIAL31

Questions?

VMworld 2017 Content: Not fo

r publication or distri

bution

Page 32: CNA1699BU Running Docker on your Existing Infrastructure or …€¦ · Running Docker on your Existing Infrastructure with vSphere Integrated Containers VMworld 2017 Content: Not

VMworld 2017 Content: Not fo

r publication or distri

bution

Page 33: CNA1699BU Running Docker on your Existing Infrastructure or …€¦ · Running Docker on your Existing Infrastructure with vSphere Integrated Containers VMworld 2017 Content: Not

VMworld 2017 Content: Not fo

r publication or distri

bution