Successfully reported this slideshow.
We use your LinkedIn profile and activity data to personalize ads and to show you more relevant ads. You can change your ad preferences anytime.

Docker Networking with Container Orchestration Engines [Docker Meetup Santa Clara | April 2016]

243 views

Published on

The Docker container ecosystem is growing very fast and networking has taken an interesting direction with different networking models being introduced and it becomes even more interesting when container orchestration engines like Swarm, Mesos, Kubernetes have to implement networking for Docker containers. At this Meetup, we will talk about the networking capabilities for Docker, networking models like CNM (Container Network Model), how they fit into container orchestration frameworks, what's ready for production and what's in the design/discussion phase expected to be available in near future.

Published in: Technology
  • Be the first to comment

  • Be the first to like this

Docker Networking with Container Orchestration Engines [Docker Meetup Santa Clara | April 2016]

  1. 1. Docker Networking in Swarm, Mesos, Kubernetes April 2016 Fawad Khaliq - @fawadkhaliq
  2. 2. Copyright © PLUMgrid, Inc. 2011-2016 Introduction Speaker 2 Sr. Software Engineer at PLUMgrid Khaliq Fawad Twitter: @fawadkhaliq IRC: fawadkhaliq
  3. 3. Copyright © PLUMgrid, Inc. 2011-2016 • Introduction • Docker Orchestration Tools • Docker Swarm • Mesos • Kubernetes • Docker Networking • Early (host, bridge, container modes) • Modern (libnetwork) • PLUMgrid’s involvement in the Docker ecosystem • Demo Agenda 3
  4. 4. Orchestration Tools 4
  5. 5. Copyright © PLUMgrid, Inc. 2011-2016 • Scheduling • Scaling • Management • Upgrades • Availability • Service Discovery • Networking Docker Orchestration Tools 5
  6. 6. Copyright © PLUMgrid, Inc. 2011-2016 Docker Swarm 6
  7. 7. Copyright © PLUMgrid, Inc. 2011-2016 Mesos 7
  8. 8. Copyright © PLUMgrid, Inc. 2011-2016 Kubernetes 8
  9. 9. Networking 9
  10. 10. Copyright © PLUMgrid, Inc. 2011-2016 • Early • Bridge mode • Host mode • Container mode • Evolution • Container Network Model (CNM) Docker Networking Strategies 10
  11. 11. Copyright © PLUMgrid, Inc. 2011-2016 Docker’s interface between the docker daemon and the network Container Network Model (CNM)
 • Docker specific (Docker Swarm) • Network = Subnet • ‘Metadata’ to select group policies at the network level • Options: arbitrary key/value data libnetwork 11
  12. 12. Copyright © PLUMgrid, Inc. 2011-2016 docker network create Create a network connect Connect container to a network disconnect Disconnect container from a network inspect Display network information ls List all networks rm Remove a network Docker Network CLI 12
  13. 13. Copyright © PLUMgrid, Inc. 2011-2016 Container Network Interface Treats container / group (pod) of containers synonymous to Linux network namespaces Networks described on JSON based format for network and IPAM config in /etc/cni/net.d {
 "name": “test-net", "type": ”bridge”,#type of network plugin:bridge,macvlan,ipvlan,commercial "bridge": "cni0", "isGateway": true, "ipMasq": true, "ipam": { "type": “host-local", # can be pluggable IPAM "subnet": "10.22.0.0/16", "routes": [{ "dst": "0.0.0.0/0" }] }} Capable to providing networking for Docker containers as well Other networking options 13
  14. 14. Copyright © PLUMgrid, Inc. 2011-2016 Networking and Orchestration Tools Together 14 * In discussion phase ** In design/implementation phase
  15. 15. PLUMgrid’s Involvement in the Docker Ecosystem 15
  16. 16. Copyright © PLUMgrid, Inc. 2011-2016 • PLUMgrid and Docker Swarm • PLUMgrid libnetwork plugin • Available at https://github.com/plumgrid/libnetwork-plugin • Uses PLUMgrid Open Networking Suite • PLUMgrid and Mesos • Mesos Networking under Docker containerizer • Mesos Networking Isolators PLUMgrid in Docker Ecosystem 16
  17. 17. Copyright © PLUMgrid, Inc. 2011-2016 Docker Swarm and PLUMgrid Libnetwork (CNM) PLUMgrid Plugin Slave Node Container Container Container Container Docker Daemon Master Node Swarm Manager Consul / etcd / … Docker Daemon (in each slave) Daemon IOVisor PLUMgrid Director Cluster 17
  18. 18. Copyright © PLUMgrid, Inc. 2011-2016 Docker Swarm and PLUMgrid VD: t1 18
  19. 19. DEMO 19
  20. 20. Copyright © PLUMgrid, Inc. 2011-2016 Demo: Docker Swarm 20 Overview Network Creation w/ Docker Swarm (libnetwork) Containers on-boarded on PLUMgrid VDs Security Policies Use Case Micro-segmentation & Networking for Containers and microservices What to expect Changing Policies alters the traffic flow between containers Environment
  21. 21. (408) 800-7586 www.plumgrid.com 5155 Old Ironsides Dr. 
 Suite 200
 Santa Clara, CA 95054 THANK YOU! Keep in Touch and Contact Us

×