Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Journey to GIFEE - Philly ETE 2016

Journey to GIFEE - Philly ETE 2016

Brandon Philips

May 31, 2016
Tweet

More Decks by Brandon Philips

Other Decks in Programming

Transcript

  1. Protect apps from each other Isolated network namespace Isolated file

    system namespace Mixed versions of dependencies eg. python 3.4 & python 2.7
  2. $ sudo rkt run coreos.com/etcd:v2.0.0 $ sudo rkt run coreos.com/etcd:v2.0.0

    \ --cpu=750m --memory=128M $ sudo rkt run --net=host coreos.com/etcd:v2.0.0 rkt run
  3. After scanning millions of containers we found that over 80%

    still had Heartbleed 80% Clair container security auditing
  4. Patches to the OS and kernel are hard Retest after

    updates No automation SECURITY Dependency breakage Uptime risk APPLICATION
  5. Patches to the OS and kernel are hard Retest after

    updates No automation SECURITY Dependency breakage Uptime risk APPLICATION
  6. Patches to the OS and kernel are hard No automation

    SECURITY Uptime risk APPLICATION
  7. pod env=prod app=web pod env=prod app=web pod env=prod app=web rc

    web-prod select(env=prod,app=web) count=1
  8. pod env=prod app=web pod env=prod app=web pod env=prod app=web rc

    web-prod select(env=prod,app=web) count=1
  9. pod env=prod app=web pod env=prod app=web pod env=prod app=web pod

    env=prod app=web pod env=prod app=web rc web-prod select(env=prod,app=web) count=5
  10. pod env=dev app=web pod env=test app=web pod env=prod app=web service

    test.example.com select(env=dev,app=web) service beta.example.com select(env=test,app=web) OR select(env=prod,app=web) service example.com select(env=prod,app=web)
  11. pod env=test app=web pod env=prod app=web pod env=prod app=web pod

    env=dev app=web pod env=test app=web pod env=prod app=web service test.example.com select(env=dev,app=web) service beta.example.com select(env=test,app=web) OR select(env=prod,app=web) service example.com select(env=prod,app=web)
  12. Containers on CoreOS are powering ISE's high- throughput, low-latency financial

    exchange Running in production Bare metal & AWS Billions of transactions a day 150 million req/sec
  13. Thank you! Brandon Philips @brandonphilips | [email protected] | coreos.com We’re

    hiring in all departments! Email: [email protected] Positions: coreos.com/ careers