Windows Networking at Parity with Linux for Kubernetes

Editor’s note: today’s post is by Jason Messer, Principal PM Manager at Microsoft, on improvements to the Windows network stack to support the Kubernetes CNI model.Since I last blogged about Kubernetes Networking for Windows four months ago, the Windows Core Networking team has made tremendous progress in both the platform and open source Kubernetes projects. With the updates, Windows is now on par with Linux in terms of networking. Customers can now deploy mixed-OS, Kubernetes clusters in any environment including Azure, on-premises, and on 3rd-party cloud stacks with the same network primitives and topologies supported on Linux without any workarounds, “hacks”, or 3rd-party switch extensions.”So what?”, you may ask. There are multiple application and infrastructure-related reasons why these platform improvements make a substantial difference in the lives of developers and operations teams wanting to run Kubernetes.  Read on to learn more!Tightly-Coupled CommunicationThese improvements enable tightly-coupled communication between multiple Windows Server containers (without Hyper-V isolation) within a single “Pod”. Think of Pods as the scheduling unit for the Kubernetes cluster, inside of which, one or more application containers are co-located and able to share storage and networking resources. All containers within a Pod shared the same IP address and port range and are able to communicate with each other using localhost. This enables applications to easily leverage “helper” programs for tasks such as monitoring, configuration updates, log management, and proxies. Another way to think of a Pod is as a compute host with the app containers representing processes.Simplified Network TopologyWe also simplified the network topology on Windows nodes in a Kubernetes cluster by reducing the number of endpoints required per container (or more generally, per pod) to one. Previously, Windows containers (pods) running in a Kubernetes cluster required two endpoints – one for external (internet) communication and a second for intra-cluster communication between other nodes or pods in the cluster. This was due to the fact that external communication from containers attached to a host network with local scope (i.e. not publicly routable) required a NAT operation which could only be provided through the Windows NAT (WinNAT) component on the host. Intra-cluster communication required containers to be attached to a separate network with “global” (cluster-level) scope through a second endpoint. Recent platform improvements now enable NAT”ing to occur directly on a container endpoint which is implemented with the Microsoft Virtual Filtering Platform (VFP) Hyper-V switch extension. Now, both external and intra-cluster traffic can flow through a single endpoint.Load-Balancing using VFP in Windows kernelKubernetes worker nodes rely on the kube-proxy to load-balance ingress network traffic to Service IPs between pods in a cluster. Previous versions of Windows implemented the Kube-proxy’s load-balancing through a user-space proxy. We recently added support for “Proxy mode: iptables” which is implemented using VFP in the Windows kernel so that any IP traffic can be load-balanced more efficiently by the Windows OS kernel. Users can also configure an external load balancer by specifying the externalIP parameter in a service definition. In addition to the aforementioned improvements, we have also added platform support for the following:Support for DNS search suffixes per container / Pod (Docker improvement – removes additional work previously done by kube-proxy to append DNS suffixes)[Platform Support] 5-tuple rules for creating ACLs (Looking for help from community to integrate this with support for K8s Network Policy)Now that Windows Server has joined the Windows Insider Program, customers and partners can take advantage of these new platform features today which accrue value to eagerly anticipated, new feature release later this year and new build after six months. The latest Windows Server insider build now includes support for all of these platform improvements.In addition to the platform improvements  for Windows, the team submitted code (PRs) for CNI, kubelet, and kube-proxy with the goal of mainlining Windows support into the Kubernetes v1.8 release. These PRs remove previous work-arounds required on Windows for items such as user-mode proxy for internal load balancing, appending additional DNS suffixes to each Kube-DNS request, and a separate container endpoint for external (internet) connectivity.https://github.com/kubernetes/kubernetes/pull/51063https://github.com/kubernetes/kubernetes/pull/51064These new platform features and work on kubelet and kube-proxy align with the CNI network model used by Kubernetes on Linux and simplify the deployment of a K8s cluster without additional configuration or custom (Azure) resource templates. To this end, we completed work on CNI network and IPAM plugins to create/remove endpoints and manage IP addresses. The CNI plugin works through kubelet to target the Windows Host Networking Service (HNS) APIs to create an ‘l2bridge’ network (analogous to macvlan on Linux) which is enforced by the VFP switch extension.The ‘l2bridge’ network driver re-writes the MAC address of container network traffic on ingress and egress to use the container host’s MAC address. This obviates the need for multiple MAC addresses (one per container running on the host) to be “learned” by the upstream network switch port to which the container host is connected. This preserves memory space in physical switch TCAM tables and relies on the Hyper-V virtual switch to do MAC address translation in the host to forward traffic to the correct container. IP addresses are managed by a default, Windows IPAM plug-in which requires that POD CIDR IPs be taken from the container host’s network IP space.The team demoed (link to video) these new platform features and open-source updates to the SIG-Windows group on 8/8. We are working with the community to merge the kubelet and kube-proxy PRs to mainline these changes in time for the Kubernetes v1.8 release due out this September. These capabilities can then be used on current Windows Server insider builds and the Windows Server, version 1709.Soon after RTM, we will also introduce these improvements into the Azure Container Service (ACS) so that Windows worker nodes and the containers hosted are first-class, Azure VNet citizens. An Azure IPAM plugin for Windows CNI will enable these endpoints to directly attach to Azure VNets with network policies for Windows containers enforced the same way as VMs.FeatureWindows Server 2016 (In-Market)Next Windows Server Feature Release, Semi-Annual ChannelLinuxMultiple Containers per Pod with shared network namespace (Compartment)One Container per Pod✔✔Single (Shared) Endpoint per PodTwo endpoints: WinNAT (External) + Transparent (Intra-Cluster)✔✔User-Mode, Load Balancing✔✔✔Kernel-Mode, Load Balancing Not Supported✔✔Support for DNS search suffixes per Pod (Docker update)Kube-Proxy  added multiple DNS suffixes to each request✔✔CNI Plugin Support Not Supported✔✔The Kubernetes SIG Windows group meets bi-weekly on Tuesdays at 12:30 PM ET. To join or view notes from previous meetings, check out this document.
Quelle: kubernetes

Secure Multi-Tenancy at Scale with Docker Enterprise Edition

With the latest release of Docker Enterprise Edition (EE), enterprise organizations are able to extend the benefits of containers across their entire application portfolio. Docker EE enables rapid modernization of traditional Windows and Linux applications as well as Linux applications running on IBM Z mainframes. By addressing all of these applications, Docker EE provides the opportunity to standardize around a common packaging format for greater portability, agility, and with an additional layer of security, resulting in more teams bringing their workloads into Docker EE.
The key to operating this diverse environment is to have a way to secure and isolate the applications and the multiple teams who build, ship, and deploy them. This release of Docker Enterprise Edition makes it possible for organizations to modernize traditional applications of every variety and to do so in a secure manner that aligns to complex organizational needs.
Building a Secure Software Supply Chain for Windows Applications
 

Windows applications make up about half of all enterprise applications. Docker has been working closely with Microsoft to ensure that the same security benefits that are available to Linux containers are also available to Windows Server containers. When Windows containers are managed with Docker EE, organizations get access to the same secure end-to-end software supply chain that is based on usable security features and trusted delivery across any infrastructure. For example, Docker EE security features like image signing and Windows Server security features like Windows Code Integrity combine to ensure the integrity of the applications that you deploy into production.
Docker and Microsoft have worked together to help our customers deliver safer apps. This joint effort is described in this new white paper, Delivering Safer Apps with Docker Enterprise Edition and Windows Server 2016. You can also read more about this in this Microsoft TechNet blog.  
Granular and Flexible Multi-Tenancy
Docker Enterprise Edition now includes the ability to define custom granular Role-based Access Controls (RBAC) down to the API operation level. This latest release also introduces a new resource control model that allows organizations to define resource collections which are granted to specific users, teams or orgs. These combine to deliver powerful access controls that align to any organization.

To learn more about these new capabilities, be sure to review the Docker Enterprise Edition documentation and register for the upcoming webinar Enhanced Access Controls with Docker Enterprise Edition delivered by Mark Church from our Customer Success team.

Check out these new #Docker assets to help you modernize your traditional applicationsClick To Tweet

Learn more about Docker Enterprise Edition:

Watch this video series about modernizing .NET applications
Read more about Docker Enterprise Edition
Register for other upcoming webinars

The post Secure Multi-Tenancy at Scale with Docker Enterprise Edition appeared first on Docker Blog.
Quelle: https://blog.docker.com/feed/

Docker in the Enterprise Showcased at VMworld 2017

Last week, in the blistering heat of Las Vegas, Docker had a chance to interact with thousands of VMworld attendees to talk about containers. The message we heard again and again was that those in charge of infrastructure and virtualization are now being asked to manage containers. Sometimes it is being driven by developer teams that are already using Docker, but sometimes it is the infrastructure teams who recognize the benefits of moving applications to containers for easier maintenance and operations as well as cost savings. With Docker Enterprise Edition (EE), we have a solution that is designed to let IT secure and manage containerized applications.
Learn More About Docker for VMware Admins
If you’re interested in learning more about how Docker EE allows IT to improve operations, move workloads to the cloud and increase application agility all while saving costs, we’re happy to be partnering with the VMware User Group (VMUG) to deliver a webcast tomorrow. Register now to see how Docker EE is being used by some of the world’s largest container deployments, how Docker works with Windows applications or to clarify any confusion you may have about how Docker containers and VMs work together.
Docker + vSphere: Two Great Tools That Work Great Together
Wednesday, September 6
12:00 PM Central / 10:00 AM Pacific
Experience Docker EE Yourself
Attendees were able to play with Docker EE through our in-booth hands-on demos at VMworld, but don’t worry if you missed the conference! You can get that same experience at home through the hosted trial environments at https://www.docker.com/trial. Without any software to install, you can get access within minutes to a full Docker EE Advanced environment complete with the primary administrative interface and private registry solution, Docker Trusted Registry. Once inside the environment, you can follow the provided guide or explore and learn on your own.

For more on Docker Enterprise Edition:

Read more about Docker Enterprise Edition
Watch this video series about the latest release of Docker EE
Register for other upcoming webinars
Visit Docker for IT Professionals site to learn how Docker is used by IT team

Register for tomorrow’s #VMUG webcast about how #Docker and #VMware can work togetherClick To Tweet

The post Docker in the Enterprise Showcased at VMworld 2017 appeared first on Docker Blog.
Quelle: https://blog.docker.com/feed/

Docker in Higher Education: Announcing Tools & Resources for Teachers

At the beginning of the summer we published a blog post announcing the Docker Student Developer Kit and Campus Ambassador program. The positive reception from students has been overwhelming and we were so excited to see hundreds of applications flood in!
Many teachers took notice of the enthusiasm of their students and began to reach out, asking us for tools, resources and support in using Docker in the classroom and adding Docker to their curriculum. To this end we have put together a free package for teachers!
Making use of this offer will enable teachers to effectively use and teach Docker in the classroom as we will be able to provide:

Free Tools: eliminating the need for students to install anything locally, thus saving you valuable class time
Resources: the most up to date presentations, hands-on labs, workshops etc. on every topic for every skill level
Support and recognition: you will have a dedicated contact at Docker to help you through the process and also be welcomed into the online Docker Teachers community where you can collaborate and learn from other educators

If you are a teacher at a higher-education institution who would like to unlock the benefits outlined above, please fill in this form and we will get in touch with next steps.
If you are still unsure about whether Docker is right for your classroom, Michael Irwin, Computer Science Instructor at Virginia Tech, has some wisdom to share. He believes that using Docker will save time and hassle in the classroom and show students that your course material is cutting edge:
“When a class starts up especially if it’s a language or a framework that they [the students] have never used before, they are spending the whole first day saying ‘Uugh.. How do I install everything? How do I configure the various pieces?’ … Using Docker allows more time for instruction and more time for the instructor to actually talk about the material itself rather than spending so much time on the periphery talking about ‘how do you set everything up?’”
“A lot of the time curriculum is written several years ago. Things have changed, but the documentation hasn’t been updated along with it.”
“Doing this kind of stuff shows them [the students] that we are playing with the latest and greatest. You can use Docker, you can use these containers and then you can use the right tool for the job to solve the problem at hand.”

To unlock Docker greatness in your classroom, please fill in this form.

#Docker unveils free tools, resources & support for teachers in higher educationClick To Tweet

The post Docker in Higher Education: Announcing Tools & Resources for Teachers appeared first on Docker Blog.
Quelle: https://blog.docker.com/feed/

What’s New in Docker Enterprise Edition Webinar Recap

The latest release of Docker Enterprise Edition (EE) allows organizations to modernize Windows, Linux, and Linux-on-mainframe applications—all with minimal disruption. The release also allows organizations to run containers at scale with advanced capabilities around secure multi-tenancy and policy-based automation.

In last week’s webinar, we walked through the key new features of this release and saw a demo of Docker EE in action. If you missed the webinar, you can watch it here:

Here are the top questions from the webinar:
Q: Can you provide more information about Windows support? Which version of Windows? Is this only available with Docker Enterprise Edition?
A: You can run Windows Docker containers either with Docker Community Edition for Windows (PC) which supports Windows 10 or Docker Enterprise Edition for Windows Server 2016 (including Nano Server). Docker EE Basic is included with the Windows Server 2016 license, and you also have the option to upgrade to EE Standard or EE Advanced for Windows Server 2016 to get complete lifecycle management capabilities, Docker Trusted Registry, and advanced security features like image signing and scanning.
Q: Is it possible to deploy the Windows containers on top of a native Linux host?
A: As a form of packaging an application, you can only deploy Windows containers on a Windows host as the application will need to access the underlying OS kernel and in this case, it would be a Windows OS kernel. With this release, it is possible to manage a Docker EE cluster that contains both Windows and Linux nodes as well as Linux on IBM Z nodes.
Q: Does Docker EE support legacy Windows applications?
A: The Docker engine runtime only works on Windows 10 and Windows Server 2016, but containerized Windows applications built on older stacks will still work as long as it is based on the same underlying kernel. As an example, .NET is backwards compatible allowing you to containerize a .NET 2.0 application. In the Linux world, the equivalent is running Ubuntu-based apps and RHEL-based apps on the same Docker host because it leverages the same underlying Linux kernel.
Q: Does image scanning look for known CVEs? Or do we have to provide scripts? Is that feature available in all plans?
A: Image scanning looks at the NIST CVE database of known vulnerabilities, but you can also add your own inputs from a .TAR file. Image scanning is available in Docker EE Advanced and does work for both Windows and Linux images.
Q: Is it recommended to run Dockerized e-commerce applications in production?
A: Many of our customers leverage Docker for production e-commerce apps. Docker works very well with Java and .NET/IIS apps.
Q: How many containers can run on a single Docker host?
A: It depends on a number of factors. It will depend on if you’re running bare metal or in a virtual machine, what resources are available (CPU/memory) and the size of the containers. If you’re dealing with larger monolithic apps or microservices, the size of your containers can vary greatly.
Q: The use case of modernizing traditional apps – does that mean rewriting the application or just containerizing the application as it is? If the latter, wouldn’t that go against the “theoretical” best practices of keeping containers small?
A: Docker supports the containerizing of applications as they are, meaning you can containerize a monolithic application without reworking the code. While the resulting container may be larger than a microservice, it will still receive some of the same benefits in terms of portability, easier maintenance and faster deployments. Organizations can also see significant cost savings from decreased infrastructure requirements. You can learn more about the core benefits of this by signing up here: https://www.docker.com/mta

What’s new in #Docker Enterprise Edition? @TechGalJenny recaps the latest featuresClick To Tweet

Dive Deeper with Docker Enterprise Edition:

Read more about Docker Enterprise Edition
Test drive Docker EE without installing any software
Watch this video series about the latest release of Docker EE
Register for other upcoming webinars

The post What’s New in Docker Enterprise Edition Webinar Recap appeared first on Docker Blog.
Quelle: https://blog.docker.com/feed/

An Inside Look at the Docker Captains Program

Since launching the Docker Captains over a year ago, we’ve received a lot of questions: What is a Docker Captain? What do Captains do? How do I become a Captain? So who better to answer that than the Docker Captains themselves? At DockerCon Austin, we asked the Docker Captains to share their favorite thing about wearing the Captain’s hat.

What is a Captain?
Captains are Docker experts that are leaders in their communities, organizations or ecosystems. As Docker advocates, they are committed to sharing their knowledge and do so every chance they get!
What do Captains do?
Captains are advisors, ambassadors, coders, contributors, creators, tool builders, speakers, mentors, maintainers and super users and are required to be active stewards of Docker in order to remain in the program.
In addition to sharing their knowledge with the community, Captains provide insight and feedback to Docker. They have direct access to our technical teams, and are first to hear about and try upcoming features, product releases and big announcements.

What do Captains get? 
In return for their efforts, Captains get access to the existing captains community and Docker staff. They get ongoing training, private briefings and Slack chat channels where Captains have real-time access to each other and the Docker team. Docker amplifies the efforts of Captains by sharing their activities on social media, in the Docker Weekly, and through speaking opportunities. They also get additional training and resources at Docker events like DockerCon. Oh and SWAG… lots of SWAG!
How do I follow what the Captains are up to?
Follow all of the Captains on twitter. Also check out the Captains GitHub repo to see what projects they have been working on.

How can I learn more about each Captain?
Docker Captains are eager to bring their technical expertise to new audiences both offline and online around the world – don’t hesitate to reach out to them via the social links on their Captain profile pages. You can filter the captains by location, expertise, and more.
What does Docker look for when selecting Captains?
Captains were nominated as candidates for the program because their passion for inspiring and educating others about Docker translates into creating incredible value for Docker’s users. Specifically, Captains meet some or all of the following criteria:

Technical: Captains are Docker practitioners – they use Docker and stay up to date with the latest Docker features and releases.
Innovators: Captains have created some amazing projects and are constantly inspired by the way they push the envelope:

Play with Docker – A sandbox training playground that allows users to immediately test Docker and related projects with no setup.
Open FaaS Project – OpenFaaS is a framework for building serverless functions with Docker which has first class support for metrics.

Creators: Captains create content to educate and support the Docker community, they respond to questions in forums and chat, and speak in public at meetups and conferences about Docker.
Influencers: Captains are leaders in their community, organization or ecosystem and focus on advancing the adoption and proper use of Docker technology.
Credible: Captains know their way around the container lifecycle and its applied uses, they’ve tried and worked with other technologies, and they share their findings. They are passionate about Docker as a solution, but the first to tell us we haven’t gotten something quite right.

How do I become a Captain?
We are actively looking to add additional leaders that inspire and educate the Docker community. Sign up for community.docker.com, let Captains know of your interest, share your activities on social media and hashtag #Docker, get involved in a local meetup as a speaker or organizer and continue to share your knowledge of Docker in your community and organization.

What does it mean to be a #DockerCaptain? @TheBurce shares an inside look at the programClick To Tweet

The post An Inside Look at the Docker Captains Program appeared first on Docker Blog.
Quelle: https://blog.docker.com/feed/

Video Series: Modernizing .NET Apps for IT Pros

 
This is a new 5-part video series in Docker’s Modernize Traditional Apps (MTA) program, aimed at Microsoft IT Pros. The video series shows you how to move a .NET 3.5 app from Windows Server to a Windows Docker container and deploy it to a scalable, highly-available environment in the cloud – without any changes to the app.
Part 1 introduces the series, explaining what is meant by “traditional” apps and the problems they present. Traditional apps are built to run on a server, rather than on a modern application platform. They have common traits, like being complex to manage and difficult to deploy. A portfolio of traditional applications tends to under-utilize its infrastructure, and over-utilize the humans who manage it. Docker Enterprise Edition (EE) fixes that, giving you a consistent way to package, release and manage all your apps, without having to re-write them.

Part 2 shows how easy it is to move traditional apps to Docker EE. I start with an ASP.NET 3.5 WebForms application running on Windows Server 2003, and use Image2Docker to extract the app and package it as a Docker image. Then I run the application in a Docker Windows container on my Windows 10 workstation. I do that without changing the app, and without needing to access the original source code.

Part 3 covers the upgrade workflow in Docker EE. I build a new version of the Docker image for my app, using an updated version of the Windows Server Docker image. That’s how you roll out Windows updates and application updates in Docker EE, building a new version of the image and replacing running containers with the new version. I push the image to a private Docker registry and run the app in a VM on Azure. With minimal effort I’ve moved my traditional app from Windows Server 2003 to Windows Server 2016 in the cloud.

Part 4 demonstrates a highly-available staging environment, using Docker Cloud to spin up a multi-node Docker swarm in Azure. I deploy my app to the staging environment, running the website and a SQL Server database in Docker Windows containers. Then I add monitoring to the app, publishing the .NET and IIS Performance Counters from the container and collecting them with Prometheus, an open-source monitoring system which is popular in the Docker ecosystem.

Part 5 walks through Docker in production, using Docker Enterprise Edition Advanced. Docker EE can be deployed in the cloud or in the datacenter, and it gives you a production-grade Containers-as-a-Service (CaaS) solution. I show the security in Docker EE, with role-based access control and a secure software supply chain. I digitally sign my application images and store them in Docker Trusted Registry, then deploy the app to a production Docker cluster running Universal Control Plane.

Migrating traditional apps to Docker EE gives you increased efficiency, portability and security. If you’re planning a move to the cloud, or upgrading to modern infrastructure – or if you just want to consolidate workloads on existing infrastructure – Docker makes it easy.

IT Pros – learn how to modernize #dotnet apps with #Docker in a new video series from @EltonStonemanClick To Tweet

Find out more with the following links:

Learn about Docker’s MTA program for Docker EE
YouTube playlist for the Microsoft IT Pro MTA Series
Self-paced labs for IT Pros to modernize .NET apps

The post Video Series: Modernizing .NET Apps for IT Pros appeared first on Docker Blog.
Quelle: https://blog.docker.com/feed/

Moby Project and Open Source Summit North America

Docker will be at Open Source Summit from to highlight new development with the Moby Project and it’s various components: containerd, LinuxKit, InfraKit, Notary, etc.
Come see us at Booth #510 to learn more about:

The different uses cases for the Moby Projects and components
The difference between Docker and the Moby Project
How to get started with each component

As part of the OSS NA, Docker is also organizing a Moby Summit on September 14, 2017. Following the success of the previous editions, we’ll keep the same format which consists of short technical talks / demos in the morning and Birds-of-a-Feather in the afternoon.

 We have an excellent line up of speakers in store for you and are excited to share the agenda below. We hope that these sessions inspire you to come participate in the Moby community and register for this Moby summit.
For those of you who can’t attend the summit we recommend the following sessions as part of the main event / tracks:
 
Building specialized container-based systems with Moby: a few use cases
Speaker: Patrick Chanezon

This talk will explain how you can leverage the Moby project to assemble your own specialized container-based system, whether for IoT, cloud or bare metal scenarios. We will cover Moby itself, the framework, and tooling around the project, as well as many of it’s components: LinuxKit, InfraKit, containerd, SwarmKit, Notary. Then we will present a few use cases and demos of how different companies have leveraged Moby and some of the Moby components to create their own container-based systems.
Easier, faster, better testing with LinuxKit
Speaker: Justin Cormack (Docker) and Gianluca Arbezzano (InfluxData)
LinuxKit is a new toolkit for building custom Linux builds quickly and easily. It will build an immutable image containing applications built in as containers, and the build and boot process take under a minute. While it was primarily built at Docker for running container orchestration systems, it is also ideal as a tool for testing. In particular we use it to test across wide ranges of kernel versions in order to test support for different setups customers may be using.
From this talk, attendees should get a practical overview of how they can use LinuxKit in their own testing workflows. It will be illustrated with real world examples from projects that are using LinuxKit for testing, with all the CI code being open source and available to be adapted to other use cases. We hope to encourage people to test more and in more depth and breadth, by making it easier.
Unikernels: where are they now?
Speaker: Amir Chaudhry
In this talk we’ll review the progress in the unikernel ecosystem and highlight the advances of the most active open-source projects:
– MirageOS, which has improved the dev experience and supports new cloud targets.
– HaLVM, which created a product to help detect network intrusions.
– IncludeOS, which has made rapid progress and introduced POSIX compatibility.
We’ll also discuss how the underlying ideas behind unikernels, of minimalism, composability, and security, have found their way into other projects and products, and the questions this poses for building maintainable systems.
Container Orchestration from Theory to Practice
Speakers: Laura Frank
Join Laura Frank and Aaron Lehmann as they explain and examine technical concepts behind container orchestration systems, like distributed consensus, object models, and node topology. These concepts build the foundation of every modern orchestration system, and each technical explanation will be illustrated using Docker’s SwarmKit as a real-world example. Gain a deeper understanding of how orchestration systems like SwarmKit work in practice, and walk away with more insights into your production applications.
From 0 to Serverless in 60 Seconds
Speaker: Alex Ellis
This talk gives an overview of Serverless – an architectural pattern which lets us focus on building, discreet, and reusable chunks of code. A key use-case is integration with third party services and applications. You will see demos of functions with the Amazon Alexa voice assistant, Twitter and Slack.
Functions as a Service (FaaS) is an open-source framework for building serverless functions through Docker’s API and native orchestration, and meaning you can be up and running in less than a minute. Any code can be packaged as a function enabling you to consume a range of web events without repetitive boilerplate coding and Prometheus metrics allows functions to scale to demand. With Docker Swarm you can run your code anywhere which is important for businesses with compliance needs and existing systems.
 
Containerd Internals: Building a core container runtime
Phil Estes, Stephen Day
Containerd is the core container runtime used in Docker to execute containers and distribute images. It was designed from the ground up to support the OCI image and runtime specifications. The design of containerd is carefully crafted to fit the use cases of modern container orchestrators like Kubernetes and Swarm. In this talk, we dive into design decisions that help containerd meet a diverse set of requirements for a growing container world. Developing an understanding of the decoupled components will provide attendees a grasp where they can leverage functionality in their platforms. By slicing the components of a container runtime into the right pieces, integrators can choose only what they need.

Docker will be at #OSSUmmit in LA to highlight new development w/ the @Moby Project and…Click To Tweet

The post Moby Project and Open Source Summit North America appeared first on Docker Blog.
Quelle: https://blog.docker.com/feed/

Announcing new DockerCon Europe tracks, sessions, speakers and website!

The DockerCon Europe website has a fresh look and new sessions added. The DockerCon Review Committee is still working through announcing final sessions in each breakout track, but below is an overview of the tracks and content you’ll find this year in Copenhagen. To view abstracts in more detail check out the Agenda Page.
In case you missed it, we have two summits happening on Thursday, October 19th. The Moby Summit, a hands-on collaborative event for advanced container users who are actively maintaining, contributing or generally interested in the design and development of the Moby Project and it’s components. The Enterprise Summit, a full day event for enterprise IT practitioners who want to learn how they can embrace the journey to hybrid IT and implement a new strategy to help fund their modernization efforts.

We have an excellent line up of speakers in store for you and are excited to share the agenda below. We hope that these sessions inspire you to register to DockerCon Europe.
Using Docker
Using Docker sessions are introductory sessions for Docker users, dev and ops alike. Filled with practical advice, learnings, and insight, these sessions will help you get started with Docker or better implement Docker into your workflow.

Creating Effective Images by Abby Fuller, AWS
Docker?!?! But I’m a SysAdmin by Mike Coleman, Docker
Modernizing .NET Apps by Elton Stoneman, Docker & Iris Classon, Konstrukt
Modernizing Java Apps by Arun Gupta, AWS
Road to Docker Production: What You Need to Know and Decide by Bret Fisher, Independent Consultant
Tips and Tricks of the Docker Captains by Adrian Mouat, Container Solutions
Learning Docker From Square One by Chloe Condon, CodeFresh
Practical Design Patterns in Docker Networking by Mark Church, Docker

 Docker Advanced
Docker Advanced sessions provide a deeper dive into Docker tooling, implementation and real world production use recommendations. If you are ready to get to the next level with your Docker usage, join Docker Advanced for best practices from the Docker team.

Sessions to be announced soon!

 Use Case
Use case sessions highlight how companies are using Docker to modernize their infrastructure and build, ship and run distributed applications. These sessions are heavy on business value, ROI and production implementation advice and learnings.

Back To The Future: Containerize Legacy Applications by Brandon Royal, Docker
Using Docker For Product Testing and CI at Splunk by Mike Dickey, Splunk & Harish Jayakumar, Docker
Shipping and Shifting ~100 Apps with Docker by Sune Keller, Alm Brand
How Docker Helps Open Doors At Assa Abloy by Jan Hëdstrom, Assa Abloy &
Patrick van der Bleek, Docker

 Black Belt
Black Belt talks are code and demo heavy and light on the slides. Experts in the Docker ecosystem cover a deeply technical topic by diving way down deeper. Container connoisseurs, prepare to learn and be delighted.  

What Have Syscalls Done For You Lately? by Liz Rice, Aqua Security
A Deeper Dive Into Docker Overlay Networks by Laurent Bernaille, D2SI
Container-relevant Upstream Kernel Developments by Tycho Andersen, Docker
The Truth Behind Serverless by Erica Windisch, IOpipe

 Edge [NEW!]
The Edge track shows how containers are redefining our technology toolbox, from solving old problems in a new way to pushing the boundaries of what we can accomplish with software. Sessions in this track provide a glimpse into the new container frontier.  

Take Control Of Your Maps With Docker by Petr Pridal, Klokan Technologies GmbH
Panel: Modern App Security Requires Containers moderated by Sean Michael Kerner
Skynet vs Planet of The Apes, Duel! by Adrien Blind, Societe Generale
How to Secure the Journey to Microservices – Fraud Management at Arvato by Tobias Gurtzick, Arvato

 Transform [NEW!]
The transform track focuses on the impact that change has on organizations, individuals and communities. Filled with inspiration, insights and new perspectives, these stories will leave you energized and equipped to drive innovation.

Learn Fast, Fail Fast, Deliver Fast: The ModSquad Way by Tim Tyler, Metlife
The Value of Diverse Experiences by Nandhini Santhanam, Docker
We Need To Talk: How Communication Helps Code by Lauri Apple, Zalando
My Journey To Go by Ashley McNamara, Microsoft
A Strong Belief, Loosely Held: Bringing Empathy to IT by Nirmal Mehta, Booz Allen Hamilton

 Community Theater
Located in the main conference hall, the Community Theater will feature lightning talks and cool hacks from the Docker community and ecosystem.

Looking Under The Hood: containerD by Scott Coulton, Puppet
From Zero to Serverless in 60 Seconds, Anywhere by Alex Ellis, ADP
Deploying Software Containers on Heterogeneous IoT Devices by Daniel Bruzual, Aalto University
Android Meets Docker by Jing Li, Viacom
Cluster Symphony by Anton Weiss, Otomato Software
Containerizing Hardware Accelerated Applications by Chelsea Mafrica
Empowering Docker with Linked Data Principles by Riccardo Tommasini, Politecnico di Milano
Tales of Training: Scaling CodeLabs with Swarm Mode and Docker-Compose by Damien Duportal, CloudBees
Experience the Swarm API in Virtual Reality by Leigh Capili, Beatport
Repainting the Past with Distributed Machine Learning and Docker by Finnian Anderson, Student & Oli Callaghan, Student

 Ecosystem
Ecosystem Track showcases work done by sponsoring partners at DockerCon. Ecosystem sessions include a diverse range of topics and opportunity to learn more about the variety of solutions available in the Docker ecosystem.

Sessions to be announced soon!

We hope you can join us in Copenhagen for an amazing event! Tickets have sold out each year, so make sure to register soon!

Announcing new @DockerCon tracks, sessions, speakers and website!  Click To Tweet

The post Announcing new DockerCon Europe tracks, sessions, speakers and website! appeared first on Docker Blog.
Quelle: https://blog.docker.com/feed/

Test Drive Docker Enterprise Edition at VMworld 2017

Docker will be at VMworld 2017 next week (August 27-31) in Las Vegas to highlight new developments with Docker Enterprise Edition (EE), the only Container as a Service (CaaS) platform for managing and securing Windows, Linux and mainframe applications across any infrastructure, both on premises and in the cloud.
Stop by Booth #1206 to learn more about:

How VMs and containers work together for improved application lifecycle management
How containers and Docker EE can help IT with day-to-day maintenance and operations tasks
How IT can lead modernization efforts with Docker EE and become drivers of innovation in their organizations

Just as VMware vSphere simplified the management of VMs and made virtualization the de facto standard inside the data center, Docker is driving containerization of your entire application portfolio with Docker EE and helping organizations like yours to achieve their cloud and app modernization goals without requiring you to change how you operate.
Test Drive Docker EE in the Booth
Don’t miss the chance to get hands-on experience with Docker with our in-booth labs. Led by Docker experts, you will get to see for yourself how Docker brings all applications—traditional and cloud-native, Windows and Linux, on-prem and in the cloud—into a single experience for IT. Learn how standard IT tasks like patching and rolling updates are 10x easier with Docker EE and see how you can centralize security and access control through Docker EE’s management interface.
Pre-register here to sign up for one of the lab sessions and get a free Docker t-shirt when you show up!

Monday, August 28th @ 1:15pm
Tuesday, August 29th @ 1:15pm
Wednesday, August 30th @ 1:15pm

Congrats to 2017 vExperts!
We didn’t forget you! Come by our booth to collect special vExpert swag or better yet, sign up for our vExpert challenge! Special prizes in store for winners of our challenge.
Register here for special vExpert Challenge time slots and compete against fellow vExperts for some great Docker swag.

Monday, August 28th @ 3:10pm
Tuesday, August 29th @ 3:10pm

Sign up for a #Docker in-booth lab at #VMworld 2017Click To Tweet

To learn more about Docker solutions for IT:

Visit IT Starts with Docker and sign up for ongoing alerts
Learn more about Docker Enterprise Edition
Start a hosted trial
Sign up for upcoming webinars

The post Test Drive Docker Enterprise Edition at VMworld 2017 appeared first on Docker Blog.
Quelle: https://blog.docker.com/feed/