DockerCon SF 2015: Faster, Cheaper, Safer
9 likes5,208 views
This document discusses how Docker can help organizations achieve faster, cheaper, and safer development and operations. It outlines how Docker enables microservices architectures and continuous delivery for faster development. Using Docker allows consolidating resources for cheaper and more efficient infrastructure. Following security best practices like immutable deployments and role-based access helps ensure safer applications. The document provides examples of how different types of workloads can benefit from Docker in production environments.
1 of 36
Downloaded 55 times
Recommended
DockerCon SF 2015: Interconnecting Containers at Scale w/ NGINX
DockerCon SF 2015: Interconnecting Containers at Scale w/ NGINXDocker, Inc. The document discusses how NGINX can help with interconnecting microservices at scale using containers. It provides an example docker-compose configuration that sets up Consul for service discovery, Registrator to register services with Consul, and NGINX Plus to load balance requests across multiple containers and automatically generate its configuration from Consul. The live demo shows how scaling a service results in new containers being automatically registered with Consul and load balanced by NGINX.
DockerCon SF 2015 : Reliably shipping containers in a resource rich world usi...
DockerCon SF 2015 : Reliably shipping containers in a resource rich world usi...Docker, Inc. Slides from Diptanu Choudhury's talk at DockerCon SF 2015
Talk Description:
Netflix has a complex micro-services architecture that is operated in an active-active manner from multiple geographies on top of AWS. Amazon gives us the flexibility to tap into massive amounts of resources, but how we use and manage those is a constantly evolving and ever-growing task. We have developed Titan to make cluster management, application deployments using Docker and process supervision much more robust and efficient in terms of CPU/memory utilization across all of our servers in different geographies.
Titan, a combination of Docker and Apache Mesos, is an application infrastructure gives us a highly resilient and dynamic PAAS, that is native to public clouds and runs across multiple geographies. It makes it easy for us to manage applications in our complex infrastructure and gives us the ability to make changes in the IAAS layer without impacting developer productivity or sacrificing insight into our production infrastructure.
DockerCon SF 2015: Resilient Routing and Discovery
DockerCon SF 2015: Resilient Routing and DiscoveryDocker, Inc. This document discusses resilient routing and discovery in large distributed systems. It describes Shopify's experience building reliable systems from unreliable components by focusing on resiliency, service discovery, routing and orchestration. It provides examples of techniques used like circuit breakers and failure injection tools. It also discusses the tradeoffs of different discovery solutions and Shopify's current approach of using DNS with Zookeeper for orchestration.
Docker Serverless
Docker ServerlessBrian Christner Presentation covering the serverless landscape with Docker. Serverless Benefits, Challenges, and current Docker Serverless projects.
Containers: Life Beyond Microservices? by Sushil Kumar, Robin Systems
Containers: Life Beyond Microservices? by Sushil Kumar, Robin SystemsDocker, Inc. The document discusses containers and how they can be used for stateless and stateful applications. It notes that while containers provide CPU and memory isolation, traditional storage systems cannot handle the scale and performance needs of containerized applications. The Robin Containerization Platform aims to address these issues with its container-aware storage layer that can support large volumes of variable sized volumes, quickly create and destroy snapshots and clones, and provide end-to-end performance isolation and QoS controls from applications to storage. It also decouples compute and storage to allow independent scaling and portability without data loss.
Terrascan - Cloud Native Security Tool 
Terrascan - Cloud Native Security Tool sangam biradar This presentation presented at GDG Bangalore meetup
give a star :- https://github.com/accurics/terrascan
DCSF 19 Microservices API: Routing Across Any Infrastructure
DCSF 19 Microservices API: Routing Across Any InfrastructureDocker, Inc. Alex Hokanson + Brett Inman, Docker
Microservice architectures can be difficult to implement. Specifically how to route to the a service correctly and ensure that traffic is spread across all instances of that service. What happens in a cloud environment where it is normal to lose and gain service instances as a part of daily operations? How do you configure something to be able to consistently route to your service when you don’t even know where your service is running!? At Docker, we developed our own highly available and automated API server on top of HAProxy with deep integration with Consul. Our API server acts as a service discovery and load balancing service to ensure availability in a highly dynamic environment. In addition to running such a complex application, we need to support thousands of requests per second while being able to monitor every request that comes through--that is no small feat!
In addition to running a highly available API server, we also recently migrated it from running natively on Ubuntu 14.04 to run all components inside of containers by using Kubernetes with Docker Enterprise. With the containerization journey came some benefits along with new challenges that were not foreseen.
Proof of Concept: Serverless with Swarm by Nirmal Mehta, Booz Allen Hamilton 
Proof of Concept: Serverless with Swarm by Nirmal Mehta, Booz Allen Hamilton Docker, Inc. The document discusses serverless computing with Docker containers. It provides definitions of serverless and functions-as-a-service. It then summarizes several serverless platforms like Serverless.com, Iron.io IronWorker, and iopipe Dockaless and how they integrate Docker containers or allow running code on multiple clouds. It demonstrates running a simple Docker container function locally using the Dockaless library. In conclusion, while serverless is still early, Docker containers provide a way to build serverless applications that are infrastructure agnostic.
DockerCon 18 Cool Hacks: Cloud Native ML with Docker Enterprise Edition
DockerCon 18 Cool Hacks: Cloud Native ML with Docker Enterprise EditionDocker, Inc. In their talk, David and Michelle showed building an app using Kubeflow first with Docker Desktop and then on Docker Enterprise in the cloud. And they even took advantage of Google Cloud Tensorflow Processing Units native to the platform.
Empower Your Docker Containers with Watson - DockerCon 2017 Austin
Empower Your Docker Containers with Watson - DockerCon 2017 AustinPhil Estes A community theater talk given at DockerCon in Austin, Texas on April 18th, 2017 by Lin Sun and Phil Estes from IBM Cloud. This talk first describes the growth of Watson cognitive services and APIs since its origin beating human participants in Jeopardy years ago, and then takes a simple containerized application and adds cognitive capability by using the Watson Conversation service.
Using Rancher and Docker with RightScale at Industrie IT 
Using Rancher and Docker with RightScale at Industrie IT RightScale Many early Docker users are also now looking at clustering solutions such as Rancher. Industrie IT is using Docker, Rancher, and RightScale to help clients build digital applications using continuous integration (CI) and continuous delivery (CD) practices.
Azure Service Fabric: The road ahead for microservices
Azure Service Fabric: The road ahead for microservicesMicrosoft Tech Community Service Fabric is the foundational technology powering core Azure infrastructure and large-scale Microsoft services such as Azure Cosmos DB, Azure SQL Database, Dynamics 365, and Cortana. Come to this session for a developer’s tour and dives into the latest and greatest of Service Fabric capabilities, including containers, low-latency data processing, .NET Core 2.0 and VS 2017 integration. We are also going to immerse you with our future roadmap that makes building containerized microservice applications much easier.
Using the SDACK Architecture on Security Event Inspection by Yu-Lun Chen and ...
Using the SDACK Architecture on Security Event Inspection by Yu-Lun Chen and ...Docker, Inc. The SDACK architecture stands for Spark, Docker, Akka, Cassandra, and Kafka. At TrendMicro, we adopted the SDACK architecture to implement a security event inspection platform for APT attack analysis. In this talk, we will introduce SDACK stack with Spark lambda architecture, Akka and Kafka for streaming data pipeline, Cassandra for time series data, and Docker for microservices. Specifically, we will show you how we Dockerize each SDACK component to facilitate the RD team of algorithms development, help the QA team test the product easily, and use the Docker as a Service strategy to ship our products to customers. Next, we will show you how we monitor each Docker container and adjust the resource usage based on monitoring metrics. And then, we will share our Docker security policy which ensures our products are safety before shipping to customers. After that, we'll show you how we develop an all-in-one Docker based data product and scale it out to multi-host Docker cluster to solve the big data problem. Finally, we will share some challenges we faced during the product development and some lesson learned.
Container DevOps in Azure
Container DevOps in AzureMicrosoft Tech Community This document discusses DevOps practices and container technologies like Docker and Kubernetes. It provides an overview of containers as an application delivery mechanism and how Docker and Kubernetes can be used to deploy and manage containerized applications at scale. It also summarizes key benefits of containers like speed, efficiency, and portability as well as how Docker and Kubernetes address challenges like application deployment, scaling, networking, and reliability.
Can I Contain This?
Can I Contain This?Eficode The document provides an overview of containerization and Kubernetes. It discusses how containerization can help with software delivery, running polyglot applications, encapsulation, repeatability, provenance, and microservice architectures. It addresses common questions around containerizing applications and mapping application architectures to Kubernetes. It also highlights how OpenShift can help build containers, reuse Dockerfiles, and manage the Kubernetes lifecycle from development to production.
20 mins to Faking the DevOps Unicorn by Matt williams, Datadog
20 mins to Faking the DevOps Unicorn by Matt williams, DatadogDocker, Inc. Something changed in job ads over the last few years: everyone wants the DevOps Unicorn. What is that and why did this happen? You probably have a good amount of what is in that description, but is there an easy way to fill in the rest of the 100%? It turns out that it is possible to fake your way to being a DevOps Unicorn. All that you need is a way to know which metrics are the most important. And to know that you need a framework that applies everywhere. No really, it's easier than you think. There is some work needed on your part, but just a few minutes is enough to get started. In this 20 minute session, we will cover what changed in the market, what the framework looks like, and how to apply it to all of the containerized applications you need to monitor.
XCloudLabs- AWS Overview 
XCloudLabs- AWS Overview sangam biradar This document provides an overview of AWS networking services including Virtual Private Cloud, Amazon Route 53, AWS Direct Connect, VPN, and Elastic Load Balancing. It describes each service's purpose such as Virtual Private Cloud allowing users to launch AWS resources in a virtual private network and Amazon Route 53 providing scalable and available cloud DNS. The document also defines networking terminology like scalability, fault tolerance, elasticity, durability, and availability.
DevOps with Kubernetes and Helm - OSCON 2018
DevOps with Kubernetes and Helm - OSCON 2018Jessica Deen This document discusses DevOps with Kubernetes and Helm. It begins with an introduction from Jessica Deen and then discusses the need for digital transformation in organizations. It outlines challenges for both developers and IT and how DevOps addresses stress points through containers, microservices, and automation. Key DevOps practices and benefits are listed. Kubernetes is introduced as an open source container orchestrator and Helm is presented as a package manager for Kubernetes that helps define, install and upgrade complex applications on Kubernetes through the use of charts. The document concludes with a demo of building, packaging, testing and deploying a sample application to a Kubernetes cluster.
Tectonic Summit 2016: Multi-Cluster Kubernetes: Planning for Unknowns
Tectonic Summit 2016: Multi-Cluster Kubernetes: Planning for UnknownsCoreOS - Concur is a travel and expense management company with 6500+ employees and offices worldwide. They process over 70 million transactions and $50 billion in travel and expense spend annually.
- The presenter is a Principal Architect at Concur who has been working with Kubernetes since 2015. He discusses why Concur chose Kubernetes and CoreOS for container orchestration.
- Concur runs multiple Kubernetes clusters across different regions for high availability. A custom tool called kube2cnqr manages load balancing between clusters.
NetflixOSS and ZeroToDocker Talk
NetflixOSS and ZeroToDocker Talkaspyker Andrew Spyker presented on the Netflix Cloud Platform and ZeroToDocker project. The following key points were discussed:
- ZeroToDocker provides Docker images of Netflix OSS projects like Eureka, Zuul and Asgard to more easily evaluate the technologies. However, the images are not intended for direct production use.
- A demo showed running a microservices application and supporting Netflix OSS services like Eureka and Zuul using Docker containers on a single machine.
- While Docker aids development and evaluation, additional tooling is needed to operationalize containers at production scale across multiple hosts for tasks like networking, security, logging and scheduling. Competing ecosystems are emerging to address these needs.
Digital Transformation with Docker, Cloud, and DevOps: How JCPenney Handles B...
Digital Transformation with Docker, Cloud, and DevOps: How JCPenney Handles B...Docker, Inc. At JCPenney, Black Friday is one of our most critical shopping periods, both in stores and increasingly online. Hundreds of millions of dollars are on the line for us in a narrow shopping window so scaling to handle the traffic and being able to deploy promotions and fix issues without disruption to the website and our business are critical. Our prior way of delivering applications was built on a waterfall model, locked in to a set of ISV vendor dependencies, with rigid silos. It was too slow and expensive to deploy changes and keep pace with our business. We needed an application delivery platform that can handle the scale of Black Friday, and allow us to adapt our systems as our business continues to evolve. In our DockerCon session, we will tell you how we are transforming JCPenney’s omnichannel business with Docker and open solutions like Jenkins, Spring cloud, Netflix OSS and Ansible. We went live in our first iteration in just two months, and then on-boarded over 30 services in the first 6 months. We learned quite a bit along the way and you'll hear why we made an important decision to switch from Docker Community Edition to Docker Enterprise Edition. Our new cloud-native, Dockerized systems handle over 100,000 deployments per year and can scale to handle events like Black Friday with zero issues.
DCEU 18: From Monolith to Microservices
DCEU 18: From Monolith to MicroservicesDocker, Inc. Jeff Nickoloff - Co-founder, Topple
Growth can be challenging to address once monolithic systems begin to fail under strain or internal software development processes begin to slow the release cadence. Many organizations are looking to microservices architecture to solve these application issues, whether they plan to write new applications or rewrite the monoliths into microservices. This talk will highlight the common technical and cultural issues that will make microservice architectures a challenge to adopt and maintain. Issues include impact of Dunbar's Number and Conway's Law, build-time vs runtime continuous integration, evolution of testability, API versioning impact, logistics overhead, artifact management, and strategies for iteration in a distributed environment. Attendees will learn: - How and why microservice architectures and ownership end up falling along organizational lines (and why that is a good thing) - How we can learn from monolith tooling to inform our tooling in a microservice environment - How you can achieve operational excellence at scale taking a logistical approach with Docker.
DCSF19 Kubernetes Security with OPA 
DCSF19 Kubernetes Security with OPA Docker, Inc. The document discusses using Open Policy Agent (OPA) to enforce guardrails and security policies in Kubernetes clusters. It provides examples of sample policies for OPA that restrict which image registries pods can use and prevent conflicting ingress hosts. It also summarizes key features of OPA such as its declarative policy language, sidecar deployment model, and community support from many major companies using it for admission control, authorization, risk management and other use cases.
Cloud Native & Docker
Cloud Native & DockerBrian Christner This presentation covers the Cloud Native standards for building applications and enforces how important Docker & Containers are when builiing Cloud Native Applications/Architecture. Next, we cover how to use Docker to build a Serverless infrastrucutre.
.NET microservices with Azure Service Fabric
.NET microservices with Azure Service FabricDavide Benvegnù “Microservices” have become a trendy development strategy. Hosting and running such services used to be pretty painful... but here comes Service Fabric! Let’s take a closer look at this platform, its different development models and all the features it offers, and not only for microservices!
DCSF 19 Docker Enterprise Platform and Architecture
DCSF 19 Docker Enterprise Platform and ArchitectureDocker, Inc. Docker Enterprise is an enterprise container platform for developers and IT admins building and managing container applications. The platform includes integrated orchestration (Swarm and Kubernetes), advanced private image registry, and a centralized admin console to secure, troubleshoot, and manage containerized applications. This talk will focus on the Docker Enterprise technical architecture, key features and use cases it is designed to support. Key areas covered in this session:
Latest features and enhancements
Security and Compliance - how to ensure oversight and validate applications for different compliance regulations
Operational Insight - how to identify and troubleshoot issues in your container environment
Integrated Technology - the technologies are supported and can be run with Docker Enterprise
Policy-based Automation - how to scale container environments through automated policies
The container ecosystem @ Microsoft A story of developer productivity
The container ecosystem @ Microsoft A story of developer productivityNills Franssens By 2020, more than 50% of enterprises will run mission-critical, containerized cloud-native applications in production, up from less than 5% today. Containers provide a standard way to package applications that can run on any infrastructure and be moved between environments. Containers isolate applications from each other and the underlying infrastructure while sharing operating system resources to improve efficiency.
Make Java Microservices Resilient with Istio - Mangesh - IBM - CC18
Make Java Microservices Resilient with Istio - Mangesh - IBM - CC18CodeOps Technologies LLP This presentation was made by Mangesh Patankar (Developer Advocate - IBM Cloud) as part of Container Conference 2018: www.containerconf.in.
"How do we make microservices resilient and fault-tolerant? How do we enforce policy decisions, such as fine-grained access control and rate limits? How do we enable timeouts/retries, health checks, etc.?
A service-mesh architecture attempts to resolve these issues by extracting the common resiliency features needed by a microservices framework away from the applications and frameworks and into the platform itself. Istio provides an easy way to create this service mesh."
Scaling Traffic from 0 to 139 Million Unique Visitors
Scaling Traffic from 0 to 139 Million Unique VisitorsYelp Engineering This document summarizes the traffic history and infrastructure changes at Yelp from 2005 to the present. It outlines the key milestones and technology changes over time as Yelp grew from handling around 200k searches per day with 1 database in 2005-2007 to serving traffic across 29 countries in 2014 with a distributed, scalable infrastructure utilizing technologies like Elasticsearch, Kafka, and Pyleus for real-time processing.
DockerCon SF 2015: Enabling Microservices @Orbitz
DockerCon SF 2015: Enabling Microservices @OrbitzDocker, Inc. The slides from Steve Hoffman and Rick Fast's presentation at DockerCon SF 2015 -
Talk Description:
In this talk we will discuss how we enabled decomposition of one of our 250+ system components into a continously deployed microservice cluster.
This includes building a standardized Docker server composed of various local companion services along side the Docker daemon including: dynamic service discovery via Consul, a log relay to a centralized Elasticsearch cluster, and forwarding/batching of Dropwizard metrics to Graphite.
Building on this we'll cover our Jenkins driven automated pipeline for building Docker images and rolling deployments via Ansible using static placement on existing infrastructure while prototyping dynamic placement using Docker + Apache Mesos.
More Related Content
What's hot (20)
DockerCon 18 Cool Hacks: Cloud Native ML with Docker Enterprise Edition
DockerCon 18 Cool Hacks: Cloud Native ML with Docker Enterprise EditionDocker, Inc. In their talk, David and Michelle showed building an app using Kubeflow first with Docker Desktop and then on Docker Enterprise in the cloud. And they even took advantage of Google Cloud Tensorflow Processing Units native to the platform.
Empower Your Docker Containers with Watson - DockerCon 2017 Austin
Empower Your Docker Containers with Watson - DockerCon 2017 AustinPhil Estes A community theater talk given at DockerCon in Austin, Texas on April 18th, 2017 by Lin Sun and Phil Estes from IBM Cloud. This talk first describes the growth of Watson cognitive services and APIs since its origin beating human participants in Jeopardy years ago, and then takes a simple containerized application and adds cognitive capability by using the Watson Conversation service.
Using Rancher and Docker with RightScale at Industrie IT
Using Rancher and Docker with RightScale at Industrie IT RightScale Many early Docker users are also now looking at clustering solutions such as Rancher. Industrie IT is using Docker, Rancher, and RightScale to help clients build digital applications using continuous integration (CI) and continuous delivery (CD) practices.
Azure Service Fabric: The road ahead for microservices
Azure Service Fabric: The road ahead for microservicesMicrosoft Tech Community Service Fabric is the foundational technology powering core Azure infrastructure and large-scale Microsoft services such as Azure Cosmos DB, Azure SQL Database, Dynamics 365, and Cortana. Come to this session for a developer’s tour and dives into the latest and greatest of Service Fabric capabilities, including containers, low-latency data processing, .NET Core 2.0 and VS 2017 integration. We are also going to immerse you with our future roadmap that makes building containerized microservice applications much easier.
Using the SDACK Architecture on Security Event Inspection by Yu-Lun Chen and ...
Using the SDACK Architecture on Security Event Inspection by Yu-Lun Chen and ...Docker, Inc. The SDACK architecture stands for Spark, Docker, Akka, Cassandra, and Kafka. At TrendMicro, we adopted the SDACK architecture to implement a security event inspection platform for APT attack analysis. In this talk, we will introduce SDACK stack with Spark lambda architecture, Akka and Kafka for streaming data pipeline, Cassandra for time series data, and Docker for microservices. Specifically, we will show you how we Dockerize each SDACK component to facilitate the RD team of algorithms development, help the QA team test the product easily, and use the Docker as a Service strategy to ship our products to customers. Next, we will show you how we monitor each Docker container and adjust the resource usage based on monitoring metrics. And then, we will share our Docker security policy which ensures our products are safety before shipping to customers. After that, we'll show you how we develop an all-in-one Docker based data product and scale it out to multi-host Docker cluster to solve the big data problem. Finally, we will share some challenges we faced during the product development and some lesson learned.
Container DevOps in Azure
Container DevOps in AzureMicrosoft Tech Community This document discusses DevOps practices and container technologies like Docker and Kubernetes. It provides an overview of containers as an application delivery mechanism and how Docker and Kubernetes can be used to deploy and manage containerized applications at scale. It also summarizes key benefits of containers like speed, efficiency, and portability as well as how Docker and Kubernetes address challenges like application deployment, scaling, networking, and reliability.
Can I Contain This?
Can I Contain This?Eficode The document provides an overview of containerization and Kubernetes. It discusses how containerization can help with software delivery, running polyglot applications, encapsulation, repeatability, provenance, and microservice architectures. It addresses common questions around containerizing applications and mapping application architectures to Kubernetes. It also highlights how OpenShift can help build containers, reuse Dockerfiles, and manage the Kubernetes lifecycle from development to production.
20 mins to Faking the DevOps Unicorn by Matt williams, Datadog
20 mins to Faking the DevOps Unicorn by Matt williams, DatadogDocker, Inc. Something changed in job ads over the last few years: everyone wants the DevOps Unicorn. What is that and why did this happen? You probably have a good amount of what is in that description, but is there an easy way to fill in the rest of the 100%? It turns out that it is possible to fake your way to being a DevOps Unicorn. All that you need is a way to know which metrics are the most important. And to know that you need a framework that applies everywhere. No really, it's easier than you think. There is some work needed on your part, but just a few minutes is enough to get started. In this 20 minute session, we will cover what changed in the market, what the framework looks like, and how to apply it to all of the containerized applications you need to monitor.
XCloudLabs- AWS Overview
XCloudLabs- AWS Overview sangam biradar This document provides an overview of AWS networking services including Virtual Private Cloud, Amazon Route 53, AWS Direct Connect, VPN, and Elastic Load Balancing. It describes each service's purpose such as Virtual Private Cloud allowing users to launch AWS resources in a virtual private network and Amazon Route 53 providing scalable and available cloud DNS. The document also defines networking terminology like scalability, fault tolerance, elasticity, durability, and availability.
DevOps with Kubernetes and Helm - OSCON 2018
DevOps with Kubernetes and Helm - OSCON 2018Jessica Deen This document discusses DevOps with Kubernetes and Helm. It begins with an introduction from Jessica Deen and then discusses the need for digital transformation in organizations. It outlines challenges for both developers and IT and how DevOps addresses stress points through containers, microservices, and automation. Key DevOps practices and benefits are listed. Kubernetes is introduced as an open source container orchestrator and Helm is presented as a package manager for Kubernetes that helps define, install and upgrade complex applications on Kubernetes through the use of charts. The document concludes with a demo of building, packaging, testing and deploying a sample application to a Kubernetes cluster.
Tectonic Summit 2016: Multi-Cluster Kubernetes: Planning for Unknowns
Tectonic Summit 2016: Multi-Cluster Kubernetes: Planning for UnknownsCoreOS - Concur is a travel and expense management company with 6500+ employees and offices worldwide. They process over 70 million transactions and $50 billion in travel and expense spend annually.
- The presenter is a Principal Architect at Concur who has been working with Kubernetes since 2015. He discusses why Concur chose Kubernetes and CoreOS for container orchestration.
- Concur runs multiple Kubernetes clusters across different regions for high availability. A custom tool called kube2cnqr manages load balancing between clusters.
NetflixOSS and ZeroToDocker Talk
NetflixOSS and ZeroToDocker Talkaspyker Andrew Spyker presented on the Netflix Cloud Platform and ZeroToDocker project. The following key points were discussed:
- ZeroToDocker provides Docker images of Netflix OSS projects like Eureka, Zuul and Asgard to more easily evaluate the technologies. However, the images are not intended for direct production use.
- A demo showed running a microservices application and supporting Netflix OSS services like Eureka and Zuul using Docker containers on a single machine.
- While Docker aids development and evaluation, additional tooling is needed to operationalize containers at production scale across multiple hosts for tasks like networking, security, logging and scheduling. Competing ecosystems are emerging to address these needs.
Digital Transformation with Docker, Cloud, and DevOps: How JCPenney Handles B...
Digital Transformation with Docker, Cloud, and DevOps: How JCPenney Handles B...Docker, Inc. At JCPenney, Black Friday is one of our most critical shopping periods, both in stores and increasingly online. Hundreds of millions of dollars are on the line for us in a narrow shopping window so scaling to handle the traffic and being able to deploy promotions and fix issues without disruption to the website and our business are critical. Our prior way of delivering applications was built on a waterfall model, locked in to a set of ISV vendor dependencies, with rigid silos. It was too slow and expensive to deploy changes and keep pace with our business. We needed an application delivery platform that can handle the scale of Black Friday, and allow us to adapt our systems as our business continues to evolve. In our DockerCon session, we will tell you how we are transforming JCPenney’s omnichannel business with Docker and open solutions like Jenkins, Spring cloud, Netflix OSS and Ansible. We went live in our first iteration in just two months, and then on-boarded over 30 services in the first 6 months. We learned quite a bit along the way and you'll hear why we made an important decision to switch from Docker Community Edition to Docker Enterprise Edition. Our new cloud-native, Dockerized systems handle over 100,000 deployments per year and can scale to handle events like Black Friday with zero issues.
DCEU 18: From Monolith to Microservices
DCEU 18: From Monolith to MicroservicesDocker, Inc. Jeff Nickoloff - Co-founder, Topple
Growth can be challenging to address once monolithic systems begin to fail under strain or internal software development processes begin to slow the release cadence. Many organizations are looking to microservices architecture to solve these application issues, whether they plan to write new applications or rewrite the monoliths into microservices. This talk will highlight the common technical and cultural issues that will make microservice architectures a challenge to adopt and maintain. Issues include impact of Dunbar's Number and Conway's Law, build-time vs runtime continuous integration, evolution of testability, API versioning impact, logistics overhead, artifact management, and strategies for iteration in a distributed environment. Attendees will learn: - How and why microservice architectures and ownership end up falling along organizational lines (and why that is a good thing) - How we can learn from monolith tooling to inform our tooling in a microservice environment - How you can achieve operational excellence at scale taking a logistical approach with Docker.
DCSF19 Kubernetes Security with OPA
DCSF19 Kubernetes Security with OPA Docker, Inc. The document discusses using Open Policy Agent (OPA) to enforce guardrails and security policies in Kubernetes clusters. It provides examples of sample policies for OPA that restrict which image registries pods can use and prevent conflicting ingress hosts. It also summarizes key features of OPA such as its declarative policy language, sidecar deployment model, and community support from many major companies using it for admission control, authorization, risk management and other use cases.
Cloud Native & Docker
Cloud Native & DockerBrian Christner This presentation covers the Cloud Native standards for building applications and enforces how important Docker & Containers are when builiing Cloud Native Applications/Architecture. Next, we cover how to use Docker to build a Serverless infrastrucutre.
.NET microservices with Azure Service Fabric
.NET microservices with Azure Service FabricDavide Benvegnù “Microservices” have become a trendy development strategy. Hosting and running such services used to be pretty painful... but here comes Service Fabric! Let’s take a closer look at this platform, its different development models and all the features it offers, and not only for microservices!
DCSF 19 Docker Enterprise Platform and Architecture
DCSF 19 Docker Enterprise Platform and ArchitectureDocker, Inc. Docker Enterprise is an enterprise container platform for developers and IT admins building and managing container applications. The platform includes integrated orchestration (Swarm and Kubernetes), advanced private image registry, and a centralized admin console to secure, troubleshoot, and manage containerized applications. This talk will focus on the Docker Enterprise technical architecture, key features and use cases it is designed to support. Key areas covered in this session:
Latest features and enhancements
Security and Compliance - how to ensure oversight and validate applications for different compliance regulations
Operational Insight - how to identify and troubleshoot issues in your container environment
Integrated Technology - the technologies are supported and can be run with Docker Enterprise
Policy-based Automation - how to scale container environments through automated policies
The container ecosystem @ Microsoft A story of developer productivity
The container ecosystem @ Microsoft A story of developer productivityNills Franssens By 2020, more than 50% of enterprises will run mission-critical, containerized cloud-native applications in production, up from less than 5% today. Containers provide a standard way to package applications that can run on any infrastructure and be moved between environments. Containers isolate applications from each other and the underlying infrastructure while sharing operating system resources to improve efficiency.
Make Java Microservices Resilient with Istio - Mangesh - IBM - CC18
Make Java Microservices Resilient with Istio - Mangesh - IBM - CC18CodeOps Technologies LLP This presentation was made by Mangesh Patankar (Developer Advocate - IBM Cloud) as part of Container Conference 2018: www.containerconf.in.
"How do we make microservices resilient and fault-tolerant? How do we enforce policy decisions, such as fine-grained access control and rate limits? How do we enable timeouts/retries, health checks, etc.?
A service-mesh architecture attempts to resolve these issues by extracting the common resiliency features needed by a microservices framework away from the applications and frameworks and into the platform itself. Istio provides an easy way to create this service mesh."
Viewers also liked (20)
Scaling Traffic from 0 to 139 Million Unique Visitors
Scaling Traffic from 0 to 139 Million Unique VisitorsYelp Engineering This document summarizes the traffic history and infrastructure changes at Yelp from 2005 to the present. It outlines the key milestones and technology changes over time as Yelp grew from handling around 200k searches per day with 1 database in 2005-2007 to serving traffic across 29 countries in 2014 with a distributed, scalable infrastructure utilizing technologies like Elasticsearch, Kafka, and Pyleus for real-time processing.
DockerCon SF 2015: Enabling Microservices @Orbitz
DockerCon SF 2015: Enabling Microservices @OrbitzDocker, Inc. The slides from Steve Hoffman and Rick Fast's presentation at DockerCon SF 2015 -
Talk Description:
In this talk we will discuss how we enabled decomposition of one of our 250+ system components into a continously deployed microservice cluster.
This includes building a standardized Docker server composed of various local companion services along side the Docker daemon including: dynamic service discovery via Consul, a log relay to a centralized Elasticsearch cluster, and forwarding/batching of Dropwizard metrics to Graphite.
Building on this we'll cover our Jenkins driven automated pipeline for building Docker images and rolling deployments via Ansible using static placement on existing infrastructure while prototyping dynamic placement using Docker + Apache Mesos.
Why Docker
Why DockerdotCloud Configuration management tools like Chef, Puppet, and Ansible aim to reduce inconsistencies by imposing and managing consistent configurations across environments. However, they do not fully address issues related to dependencies, isolation, and portability. Docker containers build on these tools by adding standard interfaces and a lightweight virtualization layer that encapsulates code and dependencies, allowing applications and their environments to be packaged together and run consistently on any infrastructure while also providing isolation.
Docker introduction
Docker introductiondotCloud Docker is a system for running applications in isolated containers. It addresses issues with traditional virtual machines by providing lightweight containers that share resources and allow applications to run consistently across different environments. Docker eliminates inconsistencies in development, testing and production environments. It allows applications and their dependencies to be packaged into a standardized unit called a container that can run on any Linux server. This makes applications highly portable and improves efficiency across the entire development lifecycle.
How to Build Cloud-based Microservice Environments with Docker and VoltDB
How to Build Cloud-based Microservice Environments with Docker and VoltDBVoltDB In this webinar Rusty Ross, Solutions Architect, Full 360, Inc. and Peter Vescuso, CMO, VoltDB present a case study of the fast data infrastructure developed for one of the largest and most successful loyalty programs in the world. Using Docker, the solution leverages AWS Elastic Load Balancing to automatically distribute incoming application needs without manual intervention. The result was an integrated, highly scalable 10 million-person loyalty program that can turn data into deployed services quickly and easily; enabling them to respond rapidly to changing needs and insights. To view the webinar recording click here: http://learn.voltdb.com/WRFull360Docker.html
Service Orchestrierung mit Apache Mesos
Service Orchestrierung mit Apache MesosRalf Ernst Herausforderungen beim Betrieb von Docker-Containern und Microservice Architekturen
TransitioningToMicroServonDocker_MS
TransitioningToMicroServonDocker_MSLana Kalashnyk Lana Kalashnyk presented on transitioning to Java microservices on Docker. Key points included:
- Microservices involve breaking applications into small, independent services that communicate via APIs. Docker containers help deploy and manage microservices.
- The presentation demonstrated a Java microservice that polls a Bitcoin node for block height updates. It was packaged into a Docker container using Wildfly Swarm and exposed via REST APIs.
- A React web page displayed the data from the microservice. This illustrated how microservices and containers could replace outdated .NET web services.
- Benefits of microservices include independent deployability, fault isolation, and infrastructure automation using containers. Challenges include managing transactions and data
MicroService and MicroContainer with Apache Camel
MicroService and MicroContainer with Apache CamelCharles Moulliard This document discusses designing a REST microservice using Apache Camel technology. It covers integrating systems using Camel, implementing enterprise integration patterns with Camel, using different Camel DSLs like Java, XML, and REST. It demonstrates running the Camel application as a microservice in a Docker container and deploying it on Kubernetes and OpenShift using Fabric8 tools.
Introduction to Docker and Linux Containers @ Cloud Computing Rhein Main
Introduction to Docker and Linux Containers @ Cloud Computing Rhein MainPuja Abbassi The document discusses Docker, an open-source project that allows users to create lightweight isolated containers. It describes how Docker uses namespaces and cgroups to provide isolation and resource management. It also provides an overview of getting started with Docker by installing it, running sample containers, and building Dockerfiles. The benefits of Docker for development workflows are presented, focusing on portability and treating infrastructure as code.
2015 03-11_todd-fritz_devnexus_2015
2015 03-11_todd-fritz_devnexus_2015Todd Fritz DevNexus 2015
Docker: containerizing a monolithic app into a microservice-based PaaS
Convert a monolithic application into a microservice-based PaaS using Docker and related, containerization technologies. This will be the third presentation of a series of presentations that began greater than one year ago to evangelize the benefits of Docker. The scope of content spans from a development environment to a hybrid PaaS, and how Containerization is an enabler of architectural choice, innovation, scalability, and polyglot solutions.
The basics of Docker will be examined including repositories, brief discussion about managing and monitoring Docker containers, service discovery, and security. New and emerging technologies will be a constant theme, particularly about microservices, in addition to the ongoing evolution of the market and what the future may bring. Common organizational issues (and tactical solutions) that may impede successful decomposition and migration of legacy monoliths will be discussed, including security, DevOps and refactoring.
Hypothetical architectures will be described for building progressively more robust and complex applications and deployment models. The goal is to highlight the power, flexibility and scalability that containers enable.
Examples will start simple, from a local development environment, that is a simple two container setup that encapsulate a database and application tier. Subsequent discussion will involve progressively more complex and robust deployments that include features such as service discovery, automatic load balancing, and abstractions to simplify linking of containers including service gateways. With the stopping point of a hybrid PaaS.
Dockerize node.js application
Dockerize node.js applicationSeokjun Kim This document discusses how to dockerize a Node.js application. Some key points include:
- Docker makes environment setup easier by allowing applications and dependencies to be bundled into a single image file that can run anywhere without configuration.
- Docker images allow applications to fully utilize multi-core systems by running processes as separate containers that can be easily scaled.
- Docker provides virtualization that makes it easier to manage environments for development, staging, and production with consistent configurations across systems.
- Rolling back changes is faster and easier with Docker as new images can be built and deployed without modifying the underlying system.
Import golang; struct microservice - Codemotion Rome 2015
Import golang; struct microservice - Codemotion Rome 2015Giorgio Cefaro The document discusses microservices and the use of Golang for building microservices. Some key points:
- Microservices are small, independent services that work together, organized around business capabilities. Golang is well-suited for building microservices due to its static compilation, concurrency features, and standard library support for web development.
- The document discusses why the authors chose Golang for microservices, highlighting Golang's static compilation, lack of external dependencies, easy concurrency with goroutines, and standard library support for networking, JSON, protocols, and more.
- It provides examples of building simple microservices in Golang, including a hello world service and a basic HTTP server, and discusses how middleware
Full lifecycle of a microservice
Full lifecycle of a microserviceLuigi Bennardis Full lifecycle of a microservice: how to
realize a fault-tolerant and reliable
architecture and deliver it as a Docker
container or in a Cloud environment
Microservices architecture examples
Microservices architecture examplesChanny Yun This document summarizes several companies' approaches to microservices architecture. It describes how companies like Twitter, Gilt, and Hailo implement microservices for configuration, tooling, discovery, routing, and observability. It also notes that the microservices ecosystem is rapidly evolving, with many choices for development and operational tools, orchestration, and datastores. Next-generation applications may assemble components from a Docker Hub "app store" and leverage ephemeral, orchestrated, or database-as-a-service solutions.
A microservice approach for legacy modernisation
A microservice approach for legacy modernisationluisw19 Very large portion of the world’s business critical systems are considered to be ‘legacy’ –and so is the code underpinning them (ie COBOL, PASCAL, C, to name a few). Although in many cases it is the case that these systems are robust, stable and fit for the main purpose they were originally built, they aren’t flexible and scalable enough to support emerging requirements mainly derived from a more demanding ‘always on the move’ and ‘always connected’ user.
These systems struggle to meet these demands mainly because of the ‘monolithic’ approach on which they were built and the complexity hidden in millions of lines of code that is only understood a very few hand-full of people that still remain active from the teams that several years ago developed these systems.
In almost an equal amount there have also been thousands of failed attempts to modernise these legacy systems. The ‘eating the elephant’ in one go approach certainly didn’t work, and the traditional SOA approach alone although worked till certain extend, it also fell short when it came down to addressing specific requirements around scalability and platform/service inter-dependencies.
In this presentation I will talk about how a legacy modernisation framework based on Microservice Architecture (MSA) in conjunction with some other known SOA patterns (ie. ESB, API Gateway), can be applied to ‘eat the elephant one piece at the time’ but most importantly ‘without getting indigestion’
Write microservice in golang
Write microservice in golangBo-Yi Wu * What are Microservices?
* Why Microservices?
* Golang Introduction
* Golang Testing Tool
* Golang Deployment with Docker
Building and deploying microservices with event sourcing, CQRS and Docker (QC...
Building and deploying microservices with event sourcing, CQRS and Docker (QC...Chris Richardson In this talk we share our experiences developing and deploying a microservices-based application. You will learn about the distributed data management challenges that arise in a microservices architecture. We will describe how we solved them using event sourcing to reliably publish events that drive eventually consistent workflows and pdate CQRS-based views. You will also learn how we build and deploy the application using a Jenkins-based deployment pipeline that creates Docker images that run on Amazon EC2.
Deploying Spring Boot applications with Docker (east bay cloud meetup dec 2014)
Deploying Spring Boot applications with Docker (east bay cloud meetup dec 2014)Chris Richardson This presentation describes how to deploy a Spring Boot-based microservice using Docker.
See http://plainoldobjects.com/2014/11/16/deploying-spring-boot-based-microservices-with-docker/
Service discovery in a microservice architecture using consul
Service discovery in a microservice architecture using consulJos Dirksen Presentation I gave at Nextbuild 2016. Gives an overview of how Consul can be used in microservice architecture. Accompanying examples and demo can be found here: https://github.com/josdirksen/next-build-consul
Microservice Architecture on AWS using AWS Lambda and Docker Containers
Microservice Architecture on AWS using AWS Lambda and Docker ContainersDanilo Poccia This document summarizes microservice architecture on AWS using AWS Lambda and Docker containers. It discusses why organizations adopt microservices and how to design smaller loosely coupled services. It then covers how to use AWS services like EC2 Container Service, Lambda, ECS, and others to build and deploy microservices. Specific topics covered include distributed systems, security, testing, monitoring, discovery, deployment pipelines and more. Examples of Netflix and Hailo architectures on AWS are also mentioned.
Similar to DockerCon SF 2015: Faster, Cheaper, Safer (20)
Dockercon 2015 - Faster Cheaper Safer
Dockercon 2015 - Faster Cheaper SaferAdrian Cockcroft It's clear that Docker speeds up development and makes testing and deployment more efficient. As Docker moves into production new use cases and patterns are emerging that address availability and security concerns. With microservices, safety is part of the architecture that developers need to understand and build for. It's no longer good enough to wrap a firewall around an entire app when it goes to production, and have a cold standby in case it breaks.
AWS live hack: Docker + Snyk Container on AWS
AWS live hack: Docker + Snyk Container on AWSEric Smalling Slides from session 3 of the Snyk AWS live hack series
Dec 15, 2021 with Eric Smalling, Dev Advocate at Snyk, and Peter McKee, Head of Dev Relations & Community at Docker.
Let's banish "it works on my machine"
Let's banish "it works on my machine"Stephanie Locke Between spending hours (or days!) making sure you can code and test locally and the difficulties of keeping remote environments up to date, sometimes we find ourselves falling back on "It works on my machine!". Getting rid of the difficulties in making new development environments and maintaining testing infrastructure is really key to banishing the dreaded phrase. In this session, we'll take you through some of the recent tools and techs that will not only make your life easier but will mean you never have to say "works on my machine" ever again.
ABN AMRO DevSecOps Journey
ABN AMRO DevSecOps JourneyDerek E. Weeks This document summarizes ABN AMRO's DevSecOps journey and initiatives. It discusses their implementation of continuous integration and delivery pipelines to improve software quality, reduce lead times, and increase developer productivity. It also covers their work to incorporate security practices like open source software management, container security, and credentials management into the development lifecycle through techniques like dependency scanning, security profiling, and a centralized secrets store. The presentation provides status updates on these efforts and outlines next steps to further mature ABN AMRO's DevSecOps capabilities.
Implementing Fast IT Deploying Applications at the Pace of Innovation 
Implementing Fast IT Deploying Applications at the Pace of Innovation Cisco DevNet Fast innovation requires Fast IT: the new model for IT that transforms the way we deliver new business application capabilities to our clients.
Cisco IT has created solutions that enable automated provisioning of environments and fast deployment of cloud applications through “Software Development-as-a-Service”.
In this session, we’ll provide a hands-on experience of how application teams use an automated toolset to combine quality and agility, while reducing operational expense. We’ll also provide a view of the key technologies that enable this solution.
Finally, there’s a quick glimpse into what’s next: containerization and IOE Application Enablement.
Erik Baardse - Bringing Agility to Traditional application by docker
Erik Baardse - Bringing Agility to Traditional application by dockerAgile Impact Conference The document discusses containers and Docker Enterprise Edition (EE). It notes that by 2020, over 50% of organizations will be running containers in production. Containers simplify infrastructure by allowing applications to run on any infrastructure. Docker EE provides additional capabilities for enterprises like security features, automation, and support that are required beyond the open source Docker Engine. It highlights customer examples where Docker EE helped accelerate projects, increase scalability, and migrate applications to the cloud. The document promotes Docker services to help customers develop a containerization strategy and achieve benefits like cost savings, agility, and productivity gains.
Containerization Strategy
Containerization StrategyBalaji Mariyappan How to introduce containers in your organization and how to approach and make the team adopt the technology
Applying lean, dev ops, and cloud for better business outcomes
Applying lean, dev ops, and cloud for better business outcomesKartik Kanakasabesan 1) Adopting DevOps, Lean, and cloud approaches can help government agencies deliver better citizen services with fewer resources by accelerating delivery of new features and getting faster feedback.
2) A DevOps approach involves applying Lean principles to get new ideas into production fast, get people to use new features, and get feedback in order to continuously improve. This allows agencies to change faster, which is an asset rather than an anchor.
3) Adopting cloud technologies helps remove bottlenecks around environment availability and provisioning, allowing standardized, lower cost, and faster delivery of applications and services.
AWS live hack: Atlassian + Snyk OSS on AWS
AWS live hack: Atlassian + Snyk OSS on AWSEric Smalling The document discusses securing modern applications in AWS. It begins with an overview of the risk profile of modern applications, noting that they often incorporate a large amount of open source code and are deployed rapidly using containers and infrastructure as code. It then demonstrates how to "live hack" an application running on AWS. Next, it discusses how Snyk can help prevent such exploits by empowering developers, automating fixes, and providing security throughout the entire codebase. It also outlines additional security practices like minimizing container footprints, using secrets safely, and implementing network policies. Finally, it promotes attending additional security sessions and provides references for further reading.
Shifting security to the left with kubernetes, azure, and istio
Shifting security to the left with kubernetes, azure, and istioChristian Melendez This document discusses securing DevOps pipelines and Kubernetes clusters. It recommends practices like using multi-stage Docker builds to minimize images, running as non-root users, signing images, scanning for vulnerabilities, using Kubernetes namespaces and secrets safely, and implementing a service mesh like Istio for traffic management and encryption between services. The document emphasizes limiting attack surfaces by securing access to secrets, pods and cluster metadata, and implementing network policies and circuit breakers to control traffic.
CI and CD with Spinnaker
CI and CD with SpinnakerVMware Tanzu This document discusses continuous delivery using Spinnaker, an open source continuous delivery platform. It provides an overview of Spinnaker, including how it supports continuous integration and delivery goals like shipping faster and reducing risk. Spinnaker allows automated deployment pipelines across multiple cloud providers and supports features like zero-downtime deployments, rollbacks, and automated canary analysis. The document also describes how Spinnaker integrates with platforms like Cloud Foundry and CI systems like Concourse.
CSC AWS re:Invent Enterprise DevOps session
CSC AWS re:Invent Enterprise DevOps sessionTom Laszewski Enterprise DevOps is different then DevOps in startups and smaller companies. This session how AWS/CSC address this. How AWS IaaS level automation via CloudFormation, UserData, Console, APIS and some PaaS OpsWorks/Beanstalk is complimented by CSC Agility Platform. CSC Agility adds application compliance and security to the AWS infrastructure compliance and security. CSC Agility allows for the creation of architecture blueprints for predefined application offerings.
Sukumar Nayak-Agile-DevOps-Cloud Management
Sukumar Nayak-Agile-DevOps-Cloud ManagementSukumar Nayak The document provides an overview of Agile, DevOps and Cloud Management from a security, risk management and audit compliance perspective. It discusses how the IT industry paradigm is shifting towards microservices, containers, continuous delivery and cloud platforms. DevOps is described as development and operations engineers participating together in the entire service lifecycle. Key differences in DevOps include changes to configuration management, release and change management, and event monitoring. Factors for DevOps success include culture, collaboration, eliminating waste, unified processes, tooling and automation.
Cloud Innovation Tour - Design Track
Cloud Innovation Tour - Design TrackLaurenWendler This document provides an agenda and information for the IBM Cloud Tour Design Track on hybrid cloud infrastructure choices. The agenda includes lightning talks on various hybrid cloud topics, roundtable discussions, and demos. Several IBM experts are listed as presenting on topics like hybrid cloud infrastructure choices, building cloud object storage, starting an API journey, and managing hybrid deployments. The document promotes IBM Cloud as providing choices to meet varied app and data needs with security, cognitive solutions, powerful data/analytics, hybrid integration, DevOps productivity, and consistency across options. It encourages attendees to provide feedback and continue discussions at the roundtables and demos.
Md Zahir Uddin
Md Zahir UddinMd Zahir Uddin An extremely motivated and proficient individual with overall 4 years of experience in Build/ Release with DevOps & Development, AWS CSA, MCSE(Azure) and JIRA Administrator in IT industry.
Democratizing security
Democratizing securitySanjeev Sharma This document discusses democratizing security as the next frontier for DevSecOps adoption in enterprises. It covers evolving delivery practices like Agile, DevOps, and SRE. Democratizing involves making capabilities self-service, granting permission to act with guardrails, and building trust. This includes democratizing infrastructure, software delivery, data, and security by making them technology agnostic, self-service, and including them in the DevSecOps toolchain to improve applications, platforms, processes, and culture. Security chaos engineering and value stream mapping are also discussed as ways to identify vulnerabilities and inefficiencies to continuously improve operational readiness and adoption.
Implementing Enterprise Identity and Access Management in a microservices wor...
Implementing Enterprise Identity and Access Management in a microservices wor...Judy Breedlove A Lighthouse presentation, presented Dec 6, 2017 in Boston at Red Hat's "Navigating Microservices Architectures" event
DevOps On AWS - Deep Dive on Continuous Delivery
DevOps On AWS - Deep Dive on Continuous DeliveryMikhail Prudnikov Deep dive on DevOps, continuous delivery pipelines, and AWS tools that help to accelerate software delivery process
Microsoft Ignite 2018 BRK3192 Container DevOps on Azure
Microsoft Ignite 2018 BRK3192 Container DevOps on AzureJessica Deen This document provides an overview of DevOps concepts and tools. It discusses containers and container orchestration with Kubernetes. It also mentions Azure DevOps and Azure Kubernetes Service (AKS) as tools that can help with DevOps practices like continuous integration/delivery (CI/CD). Helm charts are presented as a way to define and manage complex Kubernetes applications and services. Some best practices for Kubernetes are also listed.
2011 NASA Open Source Summit - Forge.mil
2011 NASA Open Source Summit - Forge.milNASA Open Government Initiative Forge.mil is a collaborative software development platform that aims to overcome siloed development, reduce duplication of effort, and enable cross-program sharing of software and services. It provides application lifecycle management services and tools for collaborative development within a shared, multi-tenant environment for Department of Defense programs and partners. Forge.mil has grown to support over 2700 software releases from various DoD projects across different services since its initial launch in 2009.
More from Docker, Inc. (20)
Containerize Your Game Server for the Best Multiplayer Experience 
Containerize Your Game Server for the Best Multiplayer Experience Docker, Inc. Raymond Arifianto, AccelByte and
Mark Mandel, Google -
We have been deploying containerized micro-services for our Game Backend Services for a while. Now we are tackling the challenge to scale up fleets of game dedicated servers in multiple regions, multiple data centers and multiple providers - some in bare metal, some in Cloud. So we leverage docker containerization to deploy Game Servers to achieve Portability, Fast Deployment and Predictability, enabling us to scale up to thousands of servers, on demand, without a sweat.
How to Improve Your Image Builds Using Advance Docker Build
How to Improve Your Image Builds Using Advance Docker BuildDocker, Inc. Nicholas Dille, Haufe-Lexware + Docker Captain -
Docker continues to be the standard tool for building container images. For more than a year Docker ships with BuildKit as an alternative image builder, providing advanced features for secret and cache management. These features help to make image builds faster and more secure. In this session, Docker Captain Nicholas Dille will teach you how to use Buildkit features to your advantage.
Build & Deploy Multi-Container Applications to AWS
Build & Deploy Multi-Container Applications to AWSDocker, Inc. Lukonde Mwila, Entelect -
As the cloud-native approach to development and deployment becomes more prevalent, it's an exciting time for software engineers to be equipped on how to dockerize multi-container applications and deploy them to the cloud.
In this talk, Lukonde Mwila, Software Engineer at Entelect, will cover the following topics:
- Docker Compose
- Containerizing an Nginx Server
- Containerizing an React App
- Containerizing an Node.JS App
- Containerizing anMongoDB App
- Runing Multi-Container App Locally
- Creating a CI/CD Pipeline
- Adding a build stage to test containers and push images to Docker Hub
- Deploying Multi-Container App to AWS Elastic Beanstalk
Lukonde will start by giving an overview of how Docker Compose works and how it makes it very easy and straightforward to startup multiple Docker containers at the same time and automatically connect them together with some form of networking.
After that, Lukonde will take a hands on approach to containerize an Nginx server, a React app, a NodeJS app and a MongoDB instance to demonstrate the power of Docker Compose. He'll demonstrate usage of two Docker files for an application, one production grade and the other for local development and running of tests. Lastly, he'll demonstrate creating a CI/CD pipeline in AWS to build and test our Docker images before pushing them to Docker Hub or AWS ECR, and finally deploying our multi-container application AWS Elastic Beanstalk.
Securing Your Containerized Applications with NGINX
Securing Your Containerized Applications with NGINXDocker, Inc. The document summarizes Kevin Jones' presentation on securing containerized applications with NGINX. It discusses the benefits of using a reverse proxy for security, NGINX best practices for TLS configuration, and deploying NGINX in Docker containers. It also provides code examples and configurations for setting up NGINX as a reverse proxy, optimizing TLS, and using NGINX as a sidecar proxy.
How To Build and Run Node Apps with Docker and Compose
How To Build and Run Node Apps with Docker and ComposeDocker, Inc. Kathleen Juell, Digital Ocean -
Containers are an essential part of today's microservice ecosystem, as they allow developers and operators to maintain standards of reliability and reproducibility in fast-paced deployment scenarios. And while there are best practices that extend across stacks in containerized environments, there are also things that make each stack distinct, starting with the application image itself.
This talk will dive into some of these particularities, both at the image and service level, while also covering general best practices for building and running Node applications with database backends using Docker and Compose.
Hands-on Helm 
Hands-on Helm Docker, Inc. Jessica Deen, Microsoft -
Helm 3 is here; let's go hands-on! In this demo-fueled session, I'll walk you through the differences between Helm 2 and Helm 3. I'll offer tips for a successful rollout or upgrade, go over how to easily use charts created for Helm 2 with Helm 3 (without changing your syntax), and review opportunities where you can participate in the project's future.
Distributed Deep Learning with Docker at Salesforce
Distributed Deep Learning with Docker at SalesforceDocker, Inc. Jeff Hajewski, Salesforce -
There is a wealth of information on building deep learning models with PyTorch or TensorFlow. Anyone interested in building a deep learning model is only a quick search away from a number of clear and well written tutorials that will take them from zero knowledge to having a working image classifier. But what happens when you need to deploy these models in a production setting? At Salesforce, we use TensorFlow models to help us provide customers with insights into their data, and we do this as close to real-time as possible. Designing these systems in a scalable manner requires overcoming a number of design challenges, but the core component is Docker. Docker enables us to design highly scalable systems by allowing us to focus on service interactions, rather than how our services will interact with the hardware. Docker is also at the core of our test infrastructure, allowing developers and data scientists to build and test the system in an end to end manner on their local machines. While some of this may sound complex, the core message is simplicity - Docker allows us to focus on the aspects of the system that matter, greatly simplifying our lives.
The First 10M Pulls: Building The Official Curl Image for Docker Hub
The First 10M Pulls: Building The Official Curl Image for Docker HubDocker, Inc. James Fuller, webcomposite s.r.o. -
Curl is the venerable (yet very modern) 'swiss army knife' command line tool and library for transferring data with URLs. Recently we (the Curl team) decided to build a release for Docker Hub. This talk will outline our current development workflow with respect to the docker image and provide insights on what it takes to build a docker image for mass public consumption. We are also keen to learn from users and other developers how we might improve and enhance the official curl docker image.
Monitoring in a Microservices World
Monitoring in a Microservices WorldDocker, Inc. Fabian Stäber, Instana -
In recent years, we saw a great paradigm shift in software engineering away from static monolithic applications towards dynamic distributed horizontally scalable architectures. Docker is one of the key technologies enabling this development. This shift poses a lot of new challenges for application monitoring, ranging from practical issues (need for automation) to technical challenges (Docker networking) to organizational topics (blurring line between software engineers and operations) to fundamental questions (define what is an application). In this talk we show how Docker changed the way we do monitoring, how modern application monitoring systems work, and what future developments we expect.
COVID-19 in Italy: How Docker is Helping the Biggest Italian IT Company Conti...
COVID-19 in Italy: How Docker is Helping the Biggest Italian IT Company Conti...Docker, Inc. Clemente Biondo, Engineering Ingegneria Informatica -
When the COVID 19 pandemic started, Engineering Ingegneria Informatica Group (1.25 billion euros of revenues, 65 offices around the world, 12.000 employees) was forced to put their digital transformation to the test in order to maintain operational continuity. In this session, Clemente Biondo, the Tech Lead of the Information Systems Department, will share how his company is reacting to this unforeseeable scenario and how Docker-driven digital transformation had paved the path for work to continue remotely. Clemente will discuss learnings moving from colocated teams, manual approaches, email based-business processes, and a monolithic application to a mature DevOps culture characterized by a distributed autonomous workforce and a continuous deployment process that deploys backward-compatible Docker containerized microservices into hybrid multi cloud datacenters an average of twice a day with zero-downtime. He will detail how they use Docker to unify dev, test and production environments, and as an efficient and automated mechanism for deploying applications. Lastly, Clemente shares how, in our darkest hour, he and others are working to shine their brightest light.
Predicting Space Weather with Docker
Predicting Space Weather with DockerDocker, Inc. The document discusses how NOAA's Space Weather Prediction Center transitioned from a monolithic architecture to microservices using Docker. It describes how they started with a small verification project, then replaced their critical GOES satellite data source. This improved developers' morale and delivery speed. They encountered some security issues initially but learned from them. The transition was very successful and allowed them to quickly expand their mission to forecast aviation impacts using scientists' models packaged as Docker services.
Become a Docker Power User With Microsoft Visual Studio Code
Become a Docker Power User With Microsoft Visual Studio CodeDocker, Inc. Brian Christner, 56k + Docker Captain -
In this session, we will unlock the full potential of using Microsoft Visual Studio Code (VS Code) and Docker Desktop to turn you into a Docker Power User. When we expand and utilize the VS Code Docker plugin, we can take our projects and Docker skills to the next level. In addition to using VS Code, we streamline our Docker Desktop development workflow with less context switching and built-in shortcuts. You will learn how to bootstrap new projects, quickly write Dockerfiles utilizing templates, build, run, and interact with containers all from VS Code.
How to Use Mirroring and Caching to Optimize your Container Registry
How to Use Mirroring and Caching to Optimize your Container RegistryDocker, Inc. Brandon Mitchell, Boxboat + Docker Captain -
How do you make your builds more performant? This talk looks at options to configure caching and mirroring of images that you need to save on bandwidth costs and to keep running even if something goes down upstream.
Monolithic to Microservices + Docker = SDLC on Steroids!
Monolithic to Microservices + Docker = SDLC on Steroids!Docker, Inc. Ashish Sharma, SS&C Eze -
SS&C Eze provides various products in the stock market domain. We spent the last couple of years building Eclipse which is an investment suite born in cloud. The journey so far has been very interesting. The very first version of the product were a bunch of monolithic windows services and deployed using Octopus tool. We successfully managed to bring all the monolithic problem to the cloud and created a nightmare for ourselves. We then started applying microservices architecture principles and started breaking the monolithic into small services. Very soon we realized that we need a better packaging/deployment tool. Docker looked like a magical solution to our problem. Since its adoption, It has not only solved the deployment problem for us but has made a deep impact on different aspects of SDLC. It allowed us to use heterogeneous technology stacks, simplified development environment setup, simplified our testing strategy, improved our speed of delivery, and made our developers more productive. In this talk I would like to share our experience of using Docker and its positive impact on our SDLC.
Kubernetes at Datadog Scale
Kubernetes at Datadog ScaleDocker, Inc. Kubernetes networking can be complex to scale due to issues like growing iptables rules, but newer solutions are helping. Pod networking uses CNI plugins like flannel or Calico to assign each pod an IP and allow communication. Service networking uses kube-proxy and iptables or IPVS for load balancing to pods. DNS is used to resolve service names to IPs. While Kubernetes networking brings flexibility, operators must learn the nuances of their specific CNI plugin and issues can arise, but the ecosystem adapts quickly to new needs and changes don't impact all workloads.
Labels, Labels, Labels 
Labels, Labels, Labels Docker, Inc. Andy Clemenko, StackRox -
One underutilized, and amazing, thing about the docker image scheme is labels. Labels are a built in way to document all aspects about the image itself. Think about all the information that the tags inside your clothing carry. If you care to look you can find out everything about the garment. All that information can be very valuable. Now think about how we can leverage labels to carry similar information. We can even use the labels to contain Docker Compose or even Kubernetes Yaml. We can even include labels into the CI/CD process making things more secure and smoother. Come find out some fun techniques on how to leverage labels to do some fun and amazing things.
Using Docker Hub at Scale to Support Micro Focus' Delivery and Deployment Model
Using Docker Hub at Scale to Support Micro Focus' Delivery and Deployment ModelDocker, Inc. Micro Focus uses Docker Hub at scale to support its software delivery and deployment model. Some key points:
- Docker Hub is used as the registry service for Micro Focus container images
- It allows for optimized, secure, reliable and cost-effective software delivery through deployments and updates of container images to customers and partners
- Micro Focus leverages features like private repositories, offline/online access, signing and scanning of images, and integration with CI/CD pipelines
- Over 1,650 organizations, 450 repositories, and 18 teams are used on Docker Hub to manage access and deliver software from Micro Focus
Build & Deploy Multi-Container Applications to AWS
Build & Deploy Multi-Container Applications to AWSDocker, Inc. Lukonde Mwila, Entelect
As the cloud-native approach to development and deployment becomes more prevalent, it's an exciting time for software engineers to be equipped on how to dockerize multi-container applications and deploy them to the cloud.
In this talk, Lukonde Mwila, Software Engineer at Entelect, will cover the following topics:
- Docker Compose
- Containerizing an Nginx Server
- Containerizing an React App
- Containerizing an Node.JS App
- Containerizing anMongoDB App
- Runing Multi-Container App Locally
- Creating a CI/CD Pipeline
- Adding a build stage to test containers and push images to Docker Hub
- Deploying Multi-Container App to AWS Elastic Beanstalk
Lukonde will start by giving an overview of how Docker Compose works and how it makes it very easy and straightforward to startup multiple Docker containers at the same time and automatically connect them together with some form of networking.
After that, Lukonde will take a hands on approach to containerize an Nginx server, a React app, a NodeJS app and a MongoDB instance to demonstrate the power of Docker Compose. He'll demonstrate usage of two Docker files for an application, one production grade and the other for local development and running of tests. Lastly, he'll demonstrate creating a CI/CD pipeline in AWS to build and test our Docker images before pushing them to Docker Hub or AWS ECR, and finally deploying our multi-container application AWS Elastic Beanstalk.
From Fortran on the Desktop to Kubernetes in the Cloud: A Windows Migration S...
From Fortran on the Desktop to Kubernetes in the Cloud: A Windows Migration S...Docker, Inc. Elton Stoneman, Docker Captain + Container Consultant and Trainer
How do you provide a SaaS offering when your product is a 10-year old Fortran app, currently built to run on Windows 10? With Docker and Kubernetes of course - and you can do it in a week (... to prototype level at least).
In this session I'll walk through the processes and practicalities of taking an older Windows app, making it run in containers with Kubernetes, and then building a simple API wrapper to host the whole stack as a cloud-based SaaS product.
There's a lot of technology here from a real world case study, and I'll focus on:
- running Windows apps in Docker containers
- building a .NET Core API which can run in Linux or Windows containers
- running the stack in Kubernetes with Docker Desktop locally and AKS in the cloud
- configuring AKS workloads in Azure to burst out to Azure Container Instances
And there's a core theme to this session: Docker and Kubernetes are complex technologies, but they're the key to modern development. If you invest time learning them, they make projects like this simple, portable, fast and fun.
Developing with Docker for the Arm Architecture
Developing with Docker for the Arm ArchitectureDocker, Inc. This virtual meetup introduces the concepts and best practices of using Docker containers for software development for the Arm architecture across a variety of hardware systems. Using Docker Desktop on Windows or Mac, Amazon Web Services (AWS) A1 instances, and embedded Linux, we will demonstrate the latest Docker features to build, share, and run multi-architecture images with transparent support for Arm.
DockerCon SF 2015: Faster, Cheaper, Safer
- 1. Faster, Cheaper, Safer Secure Microservice Architectures using Docker Adrian Cockcroft @adrianco Technology Fellow - Battery Ventures June 2015
- 2. Key Goals of the CIO? Align IT with the business Develop products faster Try not to get breached
- 3. Security Blanket Failure Insecure applications hidden behind firewalls make you feel safe until the breach happens… http://peanuts.wikia.com/wiki/Linus'_security_blanket
- 7. “You build it, you run it.” Werner Vogels 2006
- 8. DevOps Continuous Delivery No meetings, no tickets Self service tools and APIs
- 9. DeveloperDeveloper Developer Run What You Wrote Micro service Micro service Micro service Micro service Micro service Micro service Micro service Developer Developer Manager Manager VP Engineering Site Reliability Monitoring Tools Availability Metrics 99.95% customer success rate
- 10. Observe Orient Decide Act Land grab opportunity Competitive Move Customer Pain Point Analysis JFDI Plan Response Share Plans Incremental Features Automatic Deploy Launch AB Test Model Hypotheses BIG DATA INNOVATION CULTURE CLOUD Measure Customers Continuous Delivery
- 11. Low Cost of Change Using Docker Fast tooling supports continuous delivery of many tiny changes Developers • Compile/Build • Seconds Extend container • Package dependencies • Seconds PaaS deploy Container • Docker startup • Seconds
- 12. Change One Thing at a Time!
- 13. What Happened? Rate of change increased Cost and size and risk of change reduced
- 14. Cheaper - Lean
- 16. Fail early and often Instrument everything Hypothesis driven development Efficient and autoscaled
- 17. Efficiency Gains: Virtualization consolidates CPUs Docker consolidates CPU and RAM
- 18. With Docker a test environment should only exist for the few seconds it takes to run a test
- 19. Autoscale production to consume just the resources you need, by the second
- 20. Safer - Rugged
- 22. What can developers do about the threats?
- 23. External Threats Build using penetration test tools Manage image supply chain Hardened immutable services Service roles and security groups
- 24. Internal Threats Assume employees are compromised User roles, minimum privilege Audit logs for everything Encrypt data at rest
- 26. In Production https://www.docker.com/resources/usecases/ and many more….
- 29. Immutable deployments Automated penetration testing Role based identity and access Trusted container supply chain Continuous audit
- 30. Workloads
- 31. Need for Speed CPU and IO Intensive workloads Hadoop, streaming, datastores Bare metal for efficiency Well isolated for security
- 32. Cutting the Cost Many similar containers per VM Saving on RAM, oversubscribe CPU Deploy with Swarm, Mesos, ECS, GKE VM based single tenant security
- 33. Playing it Safe One critical container per VM Extra security for exposed services Deploy as immutable VM image Docker adds to VM security
- 34. Tooling for Docker and many more….
- 35. Docker in Production 2014 - DIY frameworks 2015 - Hardening and best practices 2016 - Mature production tooling
- 36. Thanks ! Continue the discussion on Twitter @adrianco Adrian Cockcroft Technology Fellow - Battery Ventures June 2015 Disclosure: some of the companies mentioned may be Battery Ventures Portfolio Companies See www.battery.com for a list of portfolio investments