Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Real-World Kubernetes Deployments @ OSCON 2016

Real-World Kubernetes Deployments @ OSCON 2016

Brandon Philips

May 16, 2016
Tweet

More Decks by Brandon Philips

Other Decks in Programming

Transcript

  1. Patches to the OS and kernel are hard Retest after

    updates No automation SECURITY Dependency breakage Uptime risk APPLICATION
  2. These regions can be physical or logical boundaries, and each

    has its own risks and challenges to architect for.
  3. Failure Feud - Machine Failure - Network/Disks/RAM/Processor/Power Supply - Rack

    Failure - Network/Power - Data Center Failure - Network/Power/Fire/Semi-trucks - Internet Failure - Network/Political/Natural
  4. Kid Hitting His Eye Failure Analysis - Failure is caused

    by human error - Celebration continues; eye unnecessary - Kid has two eyes can continue seeing - Brain elects new eye automatically
  5. etcd protects against - Machine Failure - Replication, automatic leader

    election - Flakey Disk Failure - CRC checksums on WAL files - Network Failure - Timeouts and linearized state machine
  6. etcd does not protect against - Denial of Service -

    Future work on proxies - Lying etcd Peers - We do a ton of functional testing a hedge - Buggy or Broken Clients - Client deleting all keys requires restore from backup
  7. Containers on CoreOS are powering ISE's high- throughput, low-latency financial

    exchange Running in production Bare metal & AWS Billions of transactions a day 150 million req/sec
  8. Thank you! Brandon Philips @brandonphilips | [email protected] | coreos.com We’re

    hiring in all departments! Email: [email protected] Positions: coreos.com/ careers