2015-6-3 2015-6-3 云原生应用平台架构解析 张海宁 (Henry Zhang ) 云应用平台资深架构师 VMware中国研发中心 About Me  Lead Architect in China R&D for Cloud Native App Solutions  One of the first China evangelists of Cloud Foundry  Full stack engineer     Cloud architect – PaaS, IaaS iOS developer – top free app and top 10 paid apps in China App Store Operator of 10M PV web sites 10 years experience on containers Agenda 1 The Rise of Cloud Native Applications 2 Cloud Native Key Technologies 2.1 Container optimized Linux 2.2 Developer Tooling 2.3 Secure Container Runtime 2.4 Microservices governance Mobile-Cloud Era = Increased Customer Expectations Everything On-Demand Fully Functional, All the Time Accessible Everywhere Applications must be more resilient than ever! 7 Market Expectations drive Operational Changes for Customers IT decisions moving to LOB and application developers Applications broken into microservices Continuous Delivery Several times a day Do everything faster 8 Changing Infrastructure Needs Workload Consolidation Application Distribution Workload 2 Application Workload 1 Workload 3 Server Server Server Server 9 The Cloud Native Application Leverage elastic infrastructure to Cloud Native Applications •Provision instances of itself •Scale up and down •Detect and work around Server Server Server failures Cloud Native Application Characteristics Distributed and Scale-out Application •Microservices oriented •Container packaged •Dynamically managed Server Server Server A New Application Architecture is Emerging Properties of a Microservice Small code base Easy to scale, deploy and throw away Autonomous Resilient Monolithic/Layered Micro Services Benefits of a microservices architecture A highly resilient, scalable and resource efficient application Enables smaller development teams Teams free to use the right languages and tools for the job Rapid application development 12 Microservices with Containers Userspace OS File system App process App process App process Container App process App process App process App process Container Conatiners Exist for Many Years • Solaris Zones, FreeBSD Jails, OpenVZ, LXC Why Containers? • Process isolation with good performance isolation • Reproducible environment • Enables management at scale OS Kernel Hardware 13 13 13 It’s a Challenging Jump to Cloud Native Application Ecosystems to be harmonized Hidden Costs • Management overheads Containers DO NOT provide: Security isolation Data Persistence • Container sprawl • Governance challenges Guaranteed Overcommit and Resources rebalancing 14 Agenda 15 1 The Rise of Cloud Native Applications 2 Cloud Native Key Technologies 2.1 Container optimized Linux 2.2 Developer Tooling 2.3 Secure Container Runtime 2.4 Microservices governance Developer is a First-Class User of the Cloud • Build technologies that span the app lifecycle • Empower operations teams to manage CloudNative applications • Build to and support open systems and standards 16 Cloud Native Platform – Dev & Production Stack, DevOps Process Management App Definition, Policies, and Provisioning Container Cluster Scheduler Developer Tools Container Packaging Linux Optional: Type 2 Hypervisor Container Repositories Container Packaging Container-optimized Linux Dev’s Laptop Infrastructure (Hypervisor, storage, networking, etc) Developer Production 17 Agenda 18 1 The Rise of Cloud Native Applications 2 Cloud Native Key Technologies 2.1 Container optimized Linux 2.2 Developer Tooling 2.3 Secure Container Runtime 2.4 Microservices governance 3 Summary Container Developer Stack e.g. Hashicorp Vagrant Developer Tools Container Packaging Linux Optional: Type 2 Hypervisor Container Repositories e.g. OCF, Docker images/Docker Hub e.g. Photon OS, CoreOS, Atomic, RancherOS e.g. Fusion, Workstation, VMPlayer, VirtualBox Dev’s Laptop Developer 19 19 Container Developer Stack – Container Runtime Developer Tools Container Packaging Linux Container Repositories e.g. Photon OS, CoreOS, Atomic, RancherOS Optional: Type 2 Hypervisor Dev’s Laptop Developer 20 20