SlideShare a Scribd company logo
Demystifying Application Connectivity
with Kubernetes in the Docker Platform
Session #154945
Dir. Solution Architecture,Tigera
@worldhopper
Karthik Prabhakar
Solution Architect, Docker
@nicolakabar
Nicola Kabar
Quick Poll #1
Who is designing a Kubernetes Container
Platform ?
Quick Poll #2
Who is intimidated by Kubernetes
Networking?
...Then This Session is for You!
● Networking Design Considerations
● Calico CNI + Basics of K8S Networking
● Docker EE + Calico Integration Overview
● Application Deployment with Docker EE
● Takeaways
● Q&A
•Heterogeneous Infrastructure
•Diverse Application Portfolio
•Zero-Trust Security
Design Considerations
Let’s Start with K8S Connectivity Basics
Kubernetes Connectivity Concepts
Pod Networking
(CNI)
Ingress
Services
(Kube-proxy)
Network
Policy
Kube-DNS
Worker Nodes
UCP Manager/ K8s Master
Manager Nodes
Pod Creation: Kubelet
Node
apiserver scheduler
controller-
manager
Etcd
kubelet
Node
Pod
Node
Worker Nodes
UCP Manager/ K8s Master
Manager Nodes
Pod Network: Calico/CNI
apiserver scheduler
controller-
manager
Etcd
kubelet
Calico/CNI
Calico/IPAM
Worker Nodes
UCP Manager/ K8s Master
Manager Nodes
Pod Network: Calico/Node
apiserver scheduler
controller-
manager
Etcd
kubelet
Calico/CNI
Calico/IPAM
Calico/Node Calico/Node
Calico/CNI
Calico/IPAM
kubelet
Worker Nodes
UCP Manager/ K8s Master
Manager Nodes
Kubernetes Services: Kube-proxy
apiserver scheduler
controller-
manager
Etcd
kubelet
Calico/CNI
Calico/IPAM
Calico/Node Calico/Node
kube-proxy kube-proxy
Calico/CNI
Calico/IPAM
kubelet
> Cluster IP
> Node Port
> Load Balancer
UCP Manager/ K8s Master
Manager Nodes
Kubernetes Services: Ingress
apiserver scheduler
controller-
manager
Etcd
Worker NodesIngress Nodes
pod
svc
A
service-a.example.com
Worker Nodes
UCP Manager/ K8s Master
Manager Nodes
Network Policy
apiserver scheduler
controller-
manager
Etcd
kubelet
Calico/CNI
Calico/IPAM
Calico/Node Calico/Node
kube-proxy kube-proxy
Calico/CNI
Calico/IPAM
kubelet
Secure networking for the cloud-native era
Open source, maintained by Tigera with hundreds of
third party contributors
Batteries-included Container networking for Docker EE
Kubernetes
> Scalable, distributed control plane
> Policy-driven network security
> No overlay required
> Integrated with all major cloud platforms
> Widely deployed, proven at scale
TIGERA CALICO: WHY IT’S AWESOME
Docker Enterprise Edition 2.0 + Calico
Architecture Overview
Node
UCP Manager
Manager Nodes
Load Balancer (ucp.example.com)
Node Node
Node
UCP
worker
Worker Nodes
Node
UCP
worker
Node
UCP
worker
Node
DTR worker
DTR Nodes
Load Balancer (dtr.example.com)
Node
DTR worker
Node
DTR worker
DTR Storage (Azure Storage, NFS, etc.)
Logging Monitoring
Image storage
External CALDAP/AD
Add-ons
UCP Manager UCP Manager
Docker Enterprise Edition Overview
Load Balancer (app.example.com)
UCP Manager/ K8s Master
Manager Nodes
Worker Nodes
Docker Enterprise Edition 2.0 Calico Integration
kubelet
k8s-apiserver
calico-node
Appl Pod A
kubelet
UCP / k8s Worker A
kube-proxy
kube-dns
k8s-scheduler
calico-node
kube-proxy
calico-node
App Pod B
kubelet kube-proxy
UCP / k8s Worker B
Pod IP Connectivity
Peering
Native Host Routing
calico-kube-controller
k8s-controller
eth0 eth0
UCP Manager/
K8s Master
Manager Nodes
Load Balancer (ucp.example.com)
Node
UCP/K8S
worker
Worker Nodes
Node
UCP/K8S
worker
Node
UCP/K8S
worker
UCP Manager/
K8s Master
UCP Manager/
K8s Master
Calico Node Calico Node Calico Node
Calico Node Calico NodeCalico Node
App Pods App Pods App Pods
Demo 1: Docker EE + Calico Overview
UCP Manager/
K8s Master
Manager Nodes
Load Balancer (ucp.example.com)
Node
UCP/K8S
worker
Worker Nodes
Node
UCP/K8S
worker
Node
UCP/K8S
worker
UCP Manager/
K8s Master
UCP Manager/
K8s Master
Calico Node Calico Node Calico Node
Calico Node Calico NodeCalico Node
Client Pod Frontend Pod Backend Pod
Node
UCP/K8S
worker
Node
UCP/K8S
worker
Calico Node Calico Node
NGINXNGINX
Demo 2: Let’s Deploy a Sample Application
Ingress Nodes
Client Service
UI Service
Frontend Service Backend Service
Let’s revisit our
Design Considerations.
Heterogeneous Infrastructure
➔No Underlay Dependency = No Lock-In
➔Simple Zero-Touch Provisioning
➔Any Infrastructure, Any Cloud
◆ On-Prem ( VM, Bare)
◆ Cloud ( AWS, Azure, GCP)
◆ Hybrid
Connectivity Concept Out-of-the-Box Solution with Docker EE 2.0
Pod - Pod Calico CNI
Services ClusterIP
NodePort
LoadBalancer
Ingress NGINX Ingress Controller
DNS kube-dns
K8s Network Policy Calico
Diverse Application Portfolio
* Tigera CNX builds on Calico with enterprise security features: Hierarchical Policies, Policy RBAC, DevSecOps tools (Audit, Alerting, Compliance), etc.
Zero-Trust Security
•Declarative policy-driven isolation
•Fine-grained access control
•Dynamic, in lock step with Kubernetes
ComplianceStage/tier
separation
Tenant/namespace
isolation
Micro-
segmentation
Takeaway
Docker Enterprise Edition 2.0 seamlessly integrates Calico
as the default CNI providing choice of using native K8S
connectivity abstractions on any infrastructure all while
enforcing a dynamic policy-based microsegmentation.
Thank you! Questions?
Try Docker EE + Calico: trial.docker.com
community.docker.com
slack.projectcalico.org
@docker @projectcalico @tigeraio

More Related Content

What's hot (20)

PDF
Why I wish I'd Heard of Docker when I was 12 - Finnian Anderson
Docker, Inc.
 
PDF
Docker in Production, Look No Hands! by Scott Coulton
Docker, Inc.
 
PDF
Kubernetes Networking 101
Kublr
 
PDF
Docker for developers on mac and windows
Docker, Inc.
 
PDF
The Complexity to "Yes" in Analytics Software and the Possibilities with Dock...
Docker, Inc.
 
PPTX
Using the SDACK Architecture on Security Event Inspection by Yu-Lun Chen and ...
Docker, Inc.
 
PDF
DCSF 19 Building Your Development Pipeline
Docker, Inc.
 
PDF
DCSF19 Kubernetes Security with OPA
Docker, Inc.
 
PDF
A Story of Cultural Change: PayPal's 2 Year Journey to 150,000 Containers wit...
Docker, Inc.
 
PDF
Docker on docker leveraging kubernetes in docker ee
Docker, Inc.
 
PDF
Considerations for operating docker at scale
Docker, Inc.
 
PDF
Automated hardware testing using docker for space
Docker, Inc.
 
PDF
Continuous Delivery With Containers
All Things Open
 
PDF
DockerCon 18 Cool Hacks: solo.io
Docker, Inc.
 
PPTX
Learning the Alphabet: A/B, CD and [E-Z] in the Docker Datacenter by Brett Ti...
Docker, Inc.
 
PDF
Skynet vs. Planet of The Apes: Duel!
Docker, Inc.
 
PDF
DCEU 18: 5 Patterns for Success in Application Transformation
Docker, Inc.
 
PDF
Shipping and Shifting ~100 Apps with Docker EE
Docker, Inc.
 
PDF
DCEU 18: Docker Container Networking
Docker, Inc.
 
PDF
Taking Docker from Local to Production at Intuit JanJaap Lahpor, Intuit and H...
Docker, Inc.
 
Why I wish I'd Heard of Docker when I was 12 - Finnian Anderson
Docker, Inc.
 
Docker in Production, Look No Hands! by Scott Coulton
Docker, Inc.
 
Kubernetes Networking 101
Kublr
 
Docker for developers on mac and windows
Docker, Inc.
 
The Complexity to "Yes" in Analytics Software and the Possibilities with Dock...
Docker, Inc.
 
Using the SDACK Architecture on Security Event Inspection by Yu-Lun Chen and ...
Docker, Inc.
 
DCSF 19 Building Your Development Pipeline
Docker, Inc.
 
DCSF19 Kubernetes Security with OPA
Docker, Inc.
 
A Story of Cultural Change: PayPal's 2 Year Journey to 150,000 Containers wit...
Docker, Inc.
 
Docker on docker leveraging kubernetes in docker ee
Docker, Inc.
 
Considerations for operating docker at scale
Docker, Inc.
 
Automated hardware testing using docker for space
Docker, Inc.
 
Continuous Delivery With Containers
All Things Open
 
DockerCon 18 Cool Hacks: solo.io
Docker, Inc.
 
Learning the Alphabet: A/B, CD and [E-Z] in the Docker Datacenter by Brett Ti...
Docker, Inc.
 
Skynet vs. Planet of The Apes: Duel!
Docker, Inc.
 
DCEU 18: 5 Patterns for Success in Application Transformation
Docker, Inc.
 
Shipping and Shifting ~100 Apps with Docker EE
Docker, Inc.
 
DCEU 18: Docker Container Networking
Docker, Inc.
 
Taking Docker from Local to Production at Intuit JanJaap Lahpor, Intuit and H...
Docker, Inc.
 

Similar to Demystifying container connectivity with kubernetes in docker (20)

PPTX
Demystifying Application Connectivity with Kubernetes in the Docker Platform
Nicola Kabar
 
PDF
Networking in docker ee with kubernetes and swarm
Docker, Inc.
 
PDF
Introduction to Kubernetes Workshop
Bob Killen
 
PDF
Docker Dublin Meetup | 22 Feb 2018 | Docker + Kubernetes
Thomas Barlow
 
PDF
Kubernetes
Martin Podval
 
PDF
Kubernetes One-Click Deployment: Hands-on Workshop (Mainz)
QAware GmbH
 
PDF
Scaling Docker with Kubernetes
Carlos Sanchez
 
PDF
Cncf k8s_network_02
Erhwen Kuo
 
PPTX
Kubernetes day 2 Operations
Paul Czarkowski
 
PDF
Introduction to kubernetes
Gabriel Carro
 
PPTX
DockerCon EU 2018 Workshop: Container Networking for Swarm and Kubernetes in ...
Guillaume Morini
 
PPTX
Introduction+to+Kubernetes-Details-D.pptx
SantoshPandey160
 
PPTX
Develop and deploy Kubernetes applications with Docker - IBM Index 2018
Patrick Chanezon
 
PPTX
Introduction to Kubernetes
Paul Czarkowski
 
PDF
Kubernetes Networking 101 kubecon EU 2022
ssuser1490e8
 
PDF
Container network security
Daisuke Nakajima
 
PPTX
Kubernetes Services are sooo Yesterday!
CloudOps2005
 
PDF
Kubernetes from scratch at veepee sysadmins days 2019
🔧 Loïc BLOT
 
PDF
Containers, orchestration and security, oh my!
rhirschfeld
 
PDF
99cloud Docker Training module 2
Liang Bo
 
Demystifying Application Connectivity with Kubernetes in the Docker Platform
Nicola Kabar
 
Networking in docker ee with kubernetes and swarm
Docker, Inc.
 
Introduction to Kubernetes Workshop
Bob Killen
 
Docker Dublin Meetup | 22 Feb 2018 | Docker + Kubernetes
Thomas Barlow
 
Kubernetes
Martin Podval
 
Kubernetes One-Click Deployment: Hands-on Workshop (Mainz)
QAware GmbH
 
Scaling Docker with Kubernetes
Carlos Sanchez
 
Cncf k8s_network_02
Erhwen Kuo
 
Kubernetes day 2 Operations
Paul Czarkowski
 
Introduction to kubernetes
Gabriel Carro
 
DockerCon EU 2018 Workshop: Container Networking for Swarm and Kubernetes in ...
Guillaume Morini
 
Introduction+to+Kubernetes-Details-D.pptx
SantoshPandey160
 
Develop and deploy Kubernetes applications with Docker - IBM Index 2018
Patrick Chanezon
 
Introduction to Kubernetes
Paul Czarkowski
 
Kubernetes Networking 101 kubecon EU 2022
ssuser1490e8
 
Container network security
Daisuke Nakajima
 
Kubernetes Services are sooo Yesterday!
CloudOps2005
 
Kubernetes from scratch at veepee sysadmins days 2019
🔧 Loïc BLOT
 
Containers, orchestration and security, oh my!
rhirschfeld
 
99cloud Docker Training module 2
Liang Bo
 
Ad

More from Docker, Inc. (20)

PDF
Containerize Your Game Server for the Best Multiplayer Experience
Docker, Inc.
 
PDF
How to Improve Your Image Builds Using Advance Docker Build
Docker, Inc.
 
PDF
Build & Deploy Multi-Container Applications to AWS
Docker, Inc.
 
PDF
Securing Your Containerized Applications with NGINX
Docker, Inc.
 
PDF
How To Build and Run Node Apps with Docker and Compose
Docker, Inc.
 
PDF
Hands-on Helm
Docker, Inc.
 
PDF
Distributed Deep Learning with Docker at Salesforce
Docker, Inc.
 
PDF
The First 10M Pulls: Building The Official Curl Image for Docker Hub
Docker, Inc.
 
PDF
Monitoring in a Microservices World
Docker, Inc.
 
PDF
COVID-19 in Italy: How Docker is Helping the Biggest Italian IT Company Conti...
Docker, Inc.
 
PDF
Predicting Space Weather with Docker
Docker, Inc.
 
PDF
Become a Docker Power User With Microsoft Visual Studio Code
Docker, Inc.
 
PDF
How to Use Mirroring and Caching to Optimize your Container Registry
Docker, Inc.
 
PDF
Monolithic to Microservices + Docker = SDLC on Steroids!
Docker, Inc.
 
PDF
Kubernetes at Datadog Scale
Docker, Inc.
 
PDF
Labels, Labels, Labels
Docker, Inc.
 
PDF
Using Docker Hub at Scale to Support Micro Focus' Delivery and Deployment Model
Docker, Inc.
 
PDF
Build & Deploy Multi-Container Applications to AWS
Docker, Inc.
 
PDF
From Fortran on the Desktop to Kubernetes in the Cloud: A Windows Migration S...
Docker, Inc.
 
PDF
Developing with Docker for the Arm Architecture
Docker, Inc.
 
Containerize Your Game Server for the Best Multiplayer Experience
Docker, Inc.
 
How to Improve Your Image Builds Using Advance Docker Build
Docker, Inc.
 
Build & Deploy Multi-Container Applications to AWS
Docker, Inc.
 
Securing Your Containerized Applications with NGINX
Docker, Inc.
 
How To Build and Run Node Apps with Docker and Compose
Docker, Inc.
 
Hands-on Helm
Docker, Inc.
 
Distributed Deep Learning with Docker at Salesforce
Docker, Inc.
 
The First 10M Pulls: Building The Official Curl Image for Docker Hub
Docker, Inc.
 
Monitoring in a Microservices World
Docker, Inc.
 
COVID-19 in Italy: How Docker is Helping the Biggest Italian IT Company Conti...
Docker, Inc.
 
Predicting Space Weather with Docker
Docker, Inc.
 
Become a Docker Power User With Microsoft Visual Studio Code
Docker, Inc.
 
How to Use Mirroring and Caching to Optimize your Container Registry
Docker, Inc.
 
Monolithic to Microservices + Docker = SDLC on Steroids!
Docker, Inc.
 
Kubernetes at Datadog Scale
Docker, Inc.
 
Labels, Labels, Labels
Docker, Inc.
 
Using Docker Hub at Scale to Support Micro Focus' Delivery and Deployment Model
Docker, Inc.
 
Build & Deploy Multi-Container Applications to AWS
Docker, Inc.
 
From Fortran on the Desktop to Kubernetes in the Cloud: A Windows Migration S...
Docker, Inc.
 
Developing with Docker for the Arm Architecture
Docker, Inc.
 
Ad

Recently uploaded (20)

PDF
Planning the parliament of the future in greece – considerations for a data-d...
Dr. Fotios Fitsilis
 
PDF
Model Project Report_36DR_G&P.pdf for investors understanding
MeetAgrawal23
 
PPTX
presentation on legal and regulatory action
raoharsh4122001
 
PDF
Buy Verified Coinbase Accounts — The Ultimate Guide for 2025 (Rank #1 on Goog...
Buy Verified Cash App Accounts
 
PPTX
Unit 1, 2 & 3 - Pharmacognosy - Defn_history_scope.pptx
bagewadivarsha2024
 
PDF
Committee-Skills-Handbook---MUNprep.org.pdf
SatvikAgarwal9
 
PPTX
Melbourne_Keynote_June_19_2013_without_photos.pptx
BryInfanteRayos
 
PDF
Buy Verified Payoneer Accounts — The Ultimate Guide for 2025 (Rank #1 on Goog...
Buy Verified Cash App Accounts
 
PDF
Jotform Presentation Agents: Use Cases and Examples
Jotform
 
DOC
STABILITY INDICATING METHOD DEVELOPMENT AND VALIDATION FOR SIMULTANEOUS ESTIM...
jmkeans624
 
PDF
Jotform Presentation Agents: Features and Benefits
Jotform
 
PPTX
INTRO-TO-EMPOWERMENT-TECHNOLGY grade 11 lesson
ReyAcosta8
 
PPTX
Great-Books. Powerpoint presentation. files
tamayocrisgie
 
PPTX
STURGEON BAY WI AG PPT JULY 6 2025.pptx
FamilyWorshipCenterD
 
PDF
The Family Secret (essence of loveliness)
Favour Biodun
 
DOCX
How Digital Marketplaces are Empowering Emerging MedTech Brands
Ram Gopal Varma
 
PPTX
Lesson 1-3(Learners' copy).pptxucspctopi
KrizeAnneCorneja
 
PDF
The Origin - A Simple Presentation on any project
RishabhDwivedi43
 
PDF
The Impact of Game Live Streaming on In-Game Purchases of Chinese Young Game ...
Shibaura Institute of Technology
 
PDF
From Draft to DSN - How to Get your Paper In [DSN 2025 Doctoral Forum Keynote]
vschiavoni
 
Planning the parliament of the future in greece – considerations for a data-d...
Dr. Fotios Fitsilis
 
Model Project Report_36DR_G&P.pdf for investors understanding
MeetAgrawal23
 
presentation on legal and regulatory action
raoharsh4122001
 
Buy Verified Coinbase Accounts — The Ultimate Guide for 2025 (Rank #1 on Goog...
Buy Verified Cash App Accounts
 
Unit 1, 2 & 3 - Pharmacognosy - Defn_history_scope.pptx
bagewadivarsha2024
 
Committee-Skills-Handbook---MUNprep.org.pdf
SatvikAgarwal9
 
Melbourne_Keynote_June_19_2013_without_photos.pptx
BryInfanteRayos
 
Buy Verified Payoneer Accounts — The Ultimate Guide for 2025 (Rank #1 on Goog...
Buy Verified Cash App Accounts
 
Jotform Presentation Agents: Use Cases and Examples
Jotform
 
STABILITY INDICATING METHOD DEVELOPMENT AND VALIDATION FOR SIMULTANEOUS ESTIM...
jmkeans624
 
Jotform Presentation Agents: Features and Benefits
Jotform
 
INTRO-TO-EMPOWERMENT-TECHNOLGY grade 11 lesson
ReyAcosta8
 
Great-Books. Powerpoint presentation. files
tamayocrisgie
 
STURGEON BAY WI AG PPT JULY 6 2025.pptx
FamilyWorshipCenterD
 
The Family Secret (essence of loveliness)
Favour Biodun
 
How Digital Marketplaces are Empowering Emerging MedTech Brands
Ram Gopal Varma
 
Lesson 1-3(Learners' copy).pptxucspctopi
KrizeAnneCorneja
 
The Origin - A Simple Presentation on any project
RishabhDwivedi43
 
The Impact of Game Live Streaming on In-Game Purchases of Chinese Young Game ...
Shibaura Institute of Technology
 
From Draft to DSN - How to Get your Paper In [DSN 2025 Doctoral Forum Keynote]
vschiavoni
 

Demystifying container connectivity with kubernetes in docker

  • 1. Demystifying Application Connectivity with Kubernetes in the Docker Platform Session #154945
  • 2. Dir. Solution Architecture,Tigera @worldhopper Karthik Prabhakar Solution Architect, Docker @nicolakabar Nicola Kabar
  • 3. Quick Poll #1 Who is designing a Kubernetes Container Platform ?
  • 4. Quick Poll #2 Who is intimidated by Kubernetes Networking?
  • 5. ...Then This Session is for You! ● Networking Design Considerations ● Calico CNI + Basics of K8S Networking ● Docker EE + Calico Integration Overview ● Application Deployment with Docker EE ● Takeaways ● Q&A
  • 6. •Heterogeneous Infrastructure •Diverse Application Portfolio •Zero-Trust Security Design Considerations
  • 7. Let’s Start with K8S Connectivity Basics
  • 8. Kubernetes Connectivity Concepts Pod Networking (CNI) Ingress Services (Kube-proxy) Network Policy Kube-DNS
  • 9. Worker Nodes UCP Manager/ K8s Master Manager Nodes Pod Creation: Kubelet Node apiserver scheduler controller- manager Etcd kubelet Node Pod Node
  • 10. Worker Nodes UCP Manager/ K8s Master Manager Nodes Pod Network: Calico/CNI apiserver scheduler controller- manager Etcd kubelet Calico/CNI Calico/IPAM
  • 11. Worker Nodes UCP Manager/ K8s Master Manager Nodes Pod Network: Calico/Node apiserver scheduler controller- manager Etcd kubelet Calico/CNI Calico/IPAM Calico/Node Calico/Node Calico/CNI Calico/IPAM kubelet
  • 12. Worker Nodes UCP Manager/ K8s Master Manager Nodes Kubernetes Services: Kube-proxy apiserver scheduler controller- manager Etcd kubelet Calico/CNI Calico/IPAM Calico/Node Calico/Node kube-proxy kube-proxy Calico/CNI Calico/IPAM kubelet > Cluster IP > Node Port > Load Balancer
  • 13. UCP Manager/ K8s Master Manager Nodes Kubernetes Services: Ingress apiserver scheduler controller- manager Etcd Worker NodesIngress Nodes pod svc A service-a.example.com
  • 14. Worker Nodes UCP Manager/ K8s Master Manager Nodes Network Policy apiserver scheduler controller- manager Etcd kubelet Calico/CNI Calico/IPAM Calico/Node Calico/Node kube-proxy kube-proxy Calico/CNI Calico/IPAM kubelet
  • 15. Secure networking for the cloud-native era Open source, maintained by Tigera with hundreds of third party contributors Batteries-included Container networking for Docker EE Kubernetes > Scalable, distributed control plane > Policy-driven network security > No overlay required > Integrated with all major cloud platforms > Widely deployed, proven at scale TIGERA CALICO: WHY IT’S AWESOME
  • 16. Docker Enterprise Edition 2.0 + Calico Architecture Overview
  • 17. Node UCP Manager Manager Nodes Load Balancer (ucp.example.com) Node Node Node UCP worker Worker Nodes Node UCP worker Node UCP worker Node DTR worker DTR Nodes Load Balancer (dtr.example.com) Node DTR worker Node DTR worker DTR Storage (Azure Storage, NFS, etc.) Logging Monitoring Image storage External CALDAP/AD Add-ons UCP Manager UCP Manager Docker Enterprise Edition Overview Load Balancer (app.example.com)
  • 18. UCP Manager/ K8s Master Manager Nodes Worker Nodes Docker Enterprise Edition 2.0 Calico Integration kubelet k8s-apiserver calico-node Appl Pod A kubelet UCP / k8s Worker A kube-proxy kube-dns k8s-scheduler calico-node kube-proxy calico-node App Pod B kubelet kube-proxy UCP / k8s Worker B Pod IP Connectivity Peering Native Host Routing calico-kube-controller k8s-controller eth0 eth0
  • 19. UCP Manager/ K8s Master Manager Nodes Load Balancer (ucp.example.com) Node UCP/K8S worker Worker Nodes Node UCP/K8S worker Node UCP/K8S worker UCP Manager/ K8s Master UCP Manager/ K8s Master Calico Node Calico Node Calico Node Calico Node Calico NodeCalico Node App Pods App Pods App Pods Demo 1: Docker EE + Calico Overview
  • 20. UCP Manager/ K8s Master Manager Nodes Load Balancer (ucp.example.com) Node UCP/K8S worker Worker Nodes Node UCP/K8S worker Node UCP/K8S worker UCP Manager/ K8s Master UCP Manager/ K8s Master Calico Node Calico Node Calico Node Calico Node Calico NodeCalico Node Client Pod Frontend Pod Backend Pod Node UCP/K8S worker Node UCP/K8S worker Calico Node Calico Node NGINXNGINX Demo 2: Let’s Deploy a Sample Application Ingress Nodes Client Service UI Service Frontend Service Backend Service
  • 21. Let’s revisit our Design Considerations.
  • 22. Heterogeneous Infrastructure ➔No Underlay Dependency = No Lock-In ➔Simple Zero-Touch Provisioning ➔Any Infrastructure, Any Cloud ◆ On-Prem ( VM, Bare) ◆ Cloud ( AWS, Azure, GCP) ◆ Hybrid
  • 23. Connectivity Concept Out-of-the-Box Solution with Docker EE 2.0 Pod - Pod Calico CNI Services ClusterIP NodePort LoadBalancer Ingress NGINX Ingress Controller DNS kube-dns K8s Network Policy Calico Diverse Application Portfolio * Tigera CNX builds on Calico with enterprise security features: Hierarchical Policies, Policy RBAC, DevSecOps tools (Audit, Alerting, Compliance), etc.
  • 24. Zero-Trust Security •Declarative policy-driven isolation •Fine-grained access control •Dynamic, in lock step with Kubernetes ComplianceStage/tier separation Tenant/namespace isolation Micro- segmentation
  • 25. Takeaway Docker Enterprise Edition 2.0 seamlessly integrates Calico as the default CNI providing choice of using native K8S connectivity abstractions on any infrastructure all while enforcing a dynamic policy-based microsegmentation.
  • 26. Thank you! Questions? Try Docker EE + Calico: trial.docker.com community.docker.com slack.projectcalico.org @docker @projectcalico @tigeraio