The document discusses Docker networking using Clocker and Project Calico. It describes how Clocker spins up and manages Docker clouds, serves containers on demand, and manages composite application deployments on Docker. It then discusses how Project Calico provides software-defined networking capabilities needed for seamless provisioning and host-to-host communication between containers. Specific networking providers like Project Calico and Weave are pluggable in Clocker's orchestration.

1. Container Camp SF; April 2015
Andrew Kennedy @grkvlt
Docker Networking
Using Clocker and Project Calico

3. @grkvlt
What does it do?
1. Spins up and Manages Docker
Clouds
2. Serves up Containers on Demand
3. Manages Composite Application
Deployments on Docker

4. @grkvlt
What does it provide?
• Multi Host and Multi Container Applications
• Seamless Networking
– Communication Between Services
• Orchestration and Clustering
– Control of Containers
– Container Management

5. @grkvlt
Apache Brooklyn
• Application Management Platform
• Deploy, Manage and Monitor Blueprints
• Provisioning, Installation and Customization
• Management
– AutoScaling, Resilience, Performance, Security

6. @grkvlt
Apache jclouds
• Java Cloud Library
• API Agnostic
• Create Virtual Machines
• Docker Driver by @turlinux
• Virtual Container

7. @grkvlt
Docker
• Popular
• Containers
– Isolation
– Performance
– Composable
– Complex
– The Future...

8. @grkvlt
Software-­‐defined Networking
• Pluggable providers
• Weave
• Project Calico
• New in 0.8.x
• DOVE
• Write your own!

9. @grkvlt
Clocker Orchestration
Docker
Engine
Virtual
Machine
ContainerClocker
Network
Segment
SDN
Cloud

10. @grkvlt
Software-­‐Defined Networking
• Needed for Seamless Provisioning
• Host to Host Communication
– Same LAN Segment
– No Port Forwarding
– Natural Application Configuration
• Initial Driver was EPMD Applications

11. @grkvlt
Networking Providers
• Implementation Agnostic
– L2 over L3 over L2 over L8 over whatever etc.
– Similar to Hypervisor in Clouds
• Generic Interfaces
– Host Component
– Service Component (or Endpoint)

12. @grkvlt
Metaswitch Project Calico
• SDN for Bare Metal, VMs and Containers
– Layer 3 (with adorable kittens)
– Uses OS IP routing and forwarding
• Configuration in an etcd Cluster
• Version 0.3.2 now available
– Uses profiles for container ACL
– Supported in Clocker 0.8.1

13. @grkvlt
Networking Capabilities
• Provide Multiple Networks
– Single Application or Shared
– Private Addresses
– Segmented by CIDR
• Docker Port Forwarding Access
– Debug Mechanism

14. @grkvlt
Web Resources
http://clocker.io/
http://brooklyn.io/
http://docker.io/
http://projectcalico.org/
http://weave.works/
http://abstractvisitorpattern.co.uk/