The document discusses Baidu's implementation of a private cloud platform based on CloudFoundry, including reforms made to support Java and C/C++ applications, standardizing processes, and future plans. It describes practices around automating operations, unifying standards, and linking the platform to other systems through components like file persistence and monitoring. Key reforms involved adapting CloudFoundry to CentOS, enhancing health monitoring, and supporting features like RPC and JMX access.
Ariel Waizel discusses the Data Plane Development Kit (DPDK), an API for developing fast packet processing code in user space.
* Who needs this library? Why bypass the kernel?
* How does it work?
* How good is it? What are the benchmarks?
* Pros and cons
Ariel worked on kernel development at the IDF, Ben Gurion University, and several companies. He is interested in networking, security, machine learning, and basically everything except UI development. Currently a Solution Architect at ConteXtream (an HPE company), which specializes in SDN solutions for the telecom industry.
High Availability can be a curiously nebulous term, and most people probably don't care about it until they can't access their online banking service, or their plane crashes.
This presentation examines some of the considerations necessary when building highly available computer systems, then focuses on the HA infrastructure software currently available from the Corosync/OpenAIS, Linux-HA and Pacemaker projects.
Originally presented at Linux Users Victoria in April 2010 (http://luv.asn.au/2010/04/06)
Slides that accompanied a three-hour crash training course on sysadmin survival skills useful for sysadmins of Evergreen open source library software. Session led by Don McMorris, Equinox Software.
Ariel Waizel discusses the Data Plane Development Kit (DPDK), an API for developing fast packet processing code in user space.
* Who needs this library? Why bypass the kernel?
* How does it work?
* How good is it? What are the benchmarks?
* Pros and cons
Ariel worked on kernel development at the IDF, Ben Gurion University, and several companies. He is interested in networking, security, machine learning, and basically everything except UI development. Currently a Solution Architect at ConteXtream (an HPE company), which specializes in SDN solutions for the telecom industry.
High Availability can be a curiously nebulous term, and most people probably don't care about it until they can't access their online banking service, or their plane crashes.
This presentation examines some of the considerations necessary when building highly available computer systems, then focuses on the HA infrastructure software currently available from the Corosync/OpenAIS, Linux-HA and Pacemaker projects.
Originally presented at Linux Users Victoria in April 2010 (http://luv.asn.au/2010/04/06)
Slides that accompanied a three-hour crash training course on sysadmin survival skills useful for sysadmins of Evergreen open source library software. Session led by Don McMorris, Equinox Software.
Difference between cluster image package show-repository and system image getAshwin Pawar
How to copy firmware and software on the NetApp cluster without using web/HTTPs or ftp server. Also, find out the difference between cluster image package show-repository and system image get repository.
This information is available on request.
This presentation introduces Data Plane Development Kit overview and basics. It is a part of a Network Programming Series.
First, the presentation focuses on the network performance challenges on the modern systems by comparing modern CPUs with modern 10 Gbps ethernet links. Then it touches memory hierarchy and kernel bottlenecks.
The following part explains the main DPDK techniques, like polling, bursts, hugepages and multicore processing.
DPDK overview explains how is the DPDK application is being initialized and run, touches lockless queues (rte_ring), memory pools (rte_mempool), memory buffers (rte_mbuf), hashes (rte_hash), cuckoo hashing, longest prefix match library (rte_lpm), poll mode drivers (PMDs) and kernel NIC interface (KNI).
At the end, there are few DPDK performance tips.
Tags: access time, burst, cache, dpdk, driver, ethernet, hub, hugepage, ip, kernel, lcore, linux, memory, pmd, polling, rss, softswitch, switch, userspace, xeon
Avoiding Chaos: Methodology for Managing Performance in a Shared Storage A...brettallison
Scope - The primary focus of this presentation is on the methodology we use for managing performance in a very large shared Storage Area Network environment with a Primary focus on Distributed Systems and IBM Enterprise Storage Server. The focus on this presentation is methodology and NOT measurement. There are numerous excellent presentations already out there on measurement. However, there are several references in the back of the presentation to measurement tools.
Difference between cluster image package show-repository and system image getAshwin Pawar
How to copy firmware and software on the NetApp cluster without using web/HTTPs or ftp server. Also, find out the difference between cluster image package show-repository and system image get repository.
This information is available on request.
This presentation introduces Data Plane Development Kit overview and basics. It is a part of a Network Programming Series.
First, the presentation focuses on the network performance challenges on the modern systems by comparing modern CPUs with modern 10 Gbps ethernet links. Then it touches memory hierarchy and kernel bottlenecks.
The following part explains the main DPDK techniques, like polling, bursts, hugepages and multicore processing.
DPDK overview explains how is the DPDK application is being initialized and run, touches lockless queues (rte_ring), memory pools (rte_mempool), memory buffers (rte_mbuf), hashes (rte_hash), cuckoo hashing, longest prefix match library (rte_lpm), poll mode drivers (PMDs) and kernel NIC interface (KNI).
At the end, there are few DPDK performance tips.
Tags: access time, burst, cache, dpdk, driver, ethernet, hub, hugepage, ip, kernel, lcore, linux, memory, pmd, polling, rss, softswitch, switch, userspace, xeon
Avoiding Chaos: Methodology for Managing Performance in a Shared Storage A...brettallison
Scope - The primary focus of this presentation is on the methodology we use for managing performance in a very large shared Storage Area Network environment with a Primary focus on Distributed Systems and IBM Enterprise Storage Server. The focus on this presentation is methodology and NOT measurement. There are numerous excellent presentations already out there on measurement. However, there are several references in the back of the presentation to measurement tools.
This is the slideshow that accompanied my paper at the 2015 North American Conference on Video Game Music held at Texas Christian University. It includes hyperlinks and audio examples to break down the compositional techniques discussed. Click on words and images on the slides to explore and deconstruct the chiptune style!
Treatment of a Transaction depends on the duration of its effect, i.e Long term or short term. The long term effect transaction i.e Capital Transactions & the short term
Eranea's solution and technology for mainframe migration / transformation : d...Eranea
This presentation provides plenty of details about Eranea's technology for mainframe transformation / migration.
We do convert large Cobol / 3270 applications (millions of lines) to Java / web. Usually powered by Linux (private cloud), the new application is then optimal from a financial efficiency standpoint (usually, many millions saved each year) and based on state-of-the-art platform unleashing massive potential for further evolution.
Our very incremental amd fully riskless migration process is unique : using 100% automation and strict iso-functionnality, we transform the application / system in a very smooth manner so that your users remains undisturbed and fully productive.
For geeks, have a look at the second part : Complements > Tooling where we detail the large palette of tools that we propose to run the project in a fully industrial manner.
interested ? Get in touch !
email: contact@eranea.com
Also check out our website : www.eranea.com
The Enterprise IT Checklist for Docker Operations Nicola Kabar
Enterprises often have hundreds of legacy applications developed by development teams across multiple business units. This presents a series of challenges to IT teams as they architect and support a complex and diverse IT environment. Add to that Docker, containers, and cloud - going beyond the pilot environment to production requires both the technology and best practices. In this session, we will go through a checklist of considerations and best practices providing a framework for smooth Docker production operations.
Stephan Ewen - Experiences running Flink at Very Large ScaleVerverica
This talk shares experiences from deploying and tuning Flink steam processing applications for very large scale. We share lessons learned from users, contributors, and our own experiments about running demanding streaming jobs at scale. The talk will explain what aspects currently render a job as particularly demanding, show how to configure and tune a large scale Flink job, and outline what the Flink community is working on to make the out-of-the-box for experience as smooth as possible. We will, for example, dive into - analyzing and tuning checkpointing - selecting and configuring state backends - understanding common bottlenecks - understanding and configuring network parameters
WSO2 Customer Webinar: WEST Interactive’s Deployment Approach and DevOps Prac...WSO2
To view recording please use below URL:
http://wso2.com/library/webinars/2016/06/west-interactives-deployment-approach-and-devops-practices/
For nearly 30 years West Interactive Services has been creating communication solutions that empower enterprises worldwide to strengthen customer engagement. As a customer of WSO2 since 2012, WEST has built solutions using WSO2 API Manager, WSO2 Business Activity Monitor (WSO2 BAM), WSO2 Enterprise Service Bus (WSO2 ESB), WSO2 Data Services Server (WSO2 DSS), WSO2 Application Server and WSO2 Identity Server which facilitate nearly 300 million unique customer interactions each month.
The most recent deployment with WSO2 allows WEST interactive to expose client connections, data sources and application logic through a common protocol and messaging architecture. This is achieved using a combination of WSO2 API Manager, WSO2 ESB, WSO2 DSS, WSO2 Application Server and WSO2 Message Broker. This webinar will discuss the DevOps related theories and practices that have been followed by WEST during the process of designing, building and maintaining this part of the solution. These will address the following areas:
Design process of the solution
Deployment and production hardening practices
Runtime artifacts and lifecycle management
DevOps, virtualization and automation
Troubleshooting and debugging practices
Now that you've seen Base 1.0, what's ahead in HBase 2.0, and beyond—and why? Find out from this panel of people who have designed and/or are working on 2.0 features.
VMworld 2013: Architecting VMware Horizon Workspace for Scale and PerformanceVMworld
VMworld 2013
Jared Cook, VMware
Andrew Johnson, VMware
Kit Colbert, VMware
Learn more about VMworld and register at http://www.vmworld.com/index.jspa?src=socmed-vmworld-slideshare
Zero Downtime Architectures based on JEE platform. Almost every big enterprise with online business tries to design its applications in a way that they are always online. But is it also the case when we upgrade the database cluster? When we switch the whole data center? Based on a customer project we try to present common architecture principles that enable you to do all this without any service interruption and the most important: without any stress.
Oracle Drivers configuration for High Availability, is it a developer's job?Ludovico Caldara
UCP, GridLink, TAF, AC, TAC, FAN… The configuration of Oracle Drivers for application high availability is not an easy job. The developers often care about the minimal working configuration, while the DBAs are busy with the operations. In this session I will try to demystify application server’s connectivity to the database and give a direction toward the highest availability, using Real Application Clusters and new Oracle features like TAC and CMAN TDM.
Smart TV Buyer Insights Survey 2024 by 91mobiles.pdf91mobiles
91mobiles recently conducted a Smart TV Buyer Insights Survey in which we asked over 3,000 respondents about the TV they own, aspects they look at on a new TV, and their TV buying preferences.
GraphRAG is All You need? LLM & Knowledge GraphGuy Korland
Guy Korland, CEO and Co-founder of FalkorDB, will review two articles on the integration of language models with knowledge graphs.
1. Unifying Large Language Models and Knowledge Graphs: A Roadmap.
https://arxiv.org/abs/2306.08302
2. Microsoft Research's GraphRAG paper and a review paper on various uses of knowledge graphs:
https://www.microsoft.com/en-us/research/blog/graphrag-unlocking-llm-discovery-on-narrative-private-data/
Essentials of Automations: Optimizing FME Workflows with ParametersSafe Software
Are you looking to streamline your workflows and boost your projects’ efficiency? Do you find yourself searching for ways to add flexibility and control over your FME workflows? If so, you’re in the right place.
Join us for an insightful dive into the world of FME parameters, a critical element in optimizing workflow efficiency. This webinar marks the beginning of our three-part “Essentials of Automation” series. This first webinar is designed to equip you with the knowledge and skills to utilize parameters effectively: enhancing the flexibility, maintainability, and user control of your FME projects.
Here’s what you’ll gain:
- Essentials of FME Parameters: Understand the pivotal role of parameters, including Reader/Writer, Transformer, User, and FME Flow categories. Discover how they are the key to unlocking automation and optimization within your workflows.
- Practical Applications in FME Form: Delve into key user parameter types including choice, connections, and file URLs. Allow users to control how a workflow runs, making your workflows more reusable. Learn to import values and deliver the best user experience for your workflows while enhancing accuracy.
- Optimization Strategies in FME Flow: Explore the creation and strategic deployment of parameters in FME Flow, including the use of deployment and geometry parameters, to maximize workflow efficiency.
- Pro Tips for Success: Gain insights on parameterizing connections and leveraging new features like Conditional Visibility for clarity and simplicity.
We’ll wrap up with a glimpse into future webinars, followed by a Q&A session to address your specific questions surrounding this topic.
Don’t miss this opportunity to elevate your FME expertise and drive your projects to new heights of efficiency.
Dev Dives: Train smarter, not harder – active learning and UiPath LLMs for do...UiPathCommunity
💥 Speed, accuracy, and scaling – discover the superpowers of GenAI in action with UiPath Document Understanding and Communications Mining™:
See how to accelerate model training and optimize model performance with active learning
Learn about the latest enhancements to out-of-the-box document processing – with little to no training required
Get an exclusive demo of the new family of UiPath LLMs – GenAI models specialized for processing different types of documents and messages
This is a hands-on session specifically designed for automation developers and AI enthusiasts seeking to enhance their knowledge in leveraging the latest intelligent document processing capabilities offered by UiPath.
Speakers:
👨🏫 Andras Palfi, Senior Product Manager, UiPath
👩🏫 Lenka Dulovicova, Product Program Manager, UiPath
Slack (or Teams) Automation for Bonterra Impact Management (fka Social Soluti...Jeffrey Haguewood
Sidekick Solutions uses Bonterra Impact Management (fka Social Solutions Apricot) and automation solutions to integrate data for business workflows.
We believe integration and automation are essential to user experience and the promise of efficient work through technology. Automation is the critical ingredient to realizing that full vision. We develop integration products and services for Bonterra Case Management software to support the deployment of automations for a variety of use cases.
This video focuses on the notifications, alerts, and approval requests using Slack for Bonterra Impact Management. The solutions covered in this webinar can also be deployed for Microsoft Teams.
Interested in deploying notification automations for Bonterra Impact Management? Contact us at sales@sidekicksolutionsllc.com to discuss next steps.
GDG Cloud Southlake #33: Boule & Rebala: Effective AppSec in SDLC using Deplo...James Anderson
Effective Application Security in Software Delivery lifecycle using Deployment Firewall and DBOM
The modern software delivery process (or the CI/CD process) includes many tools, distributed teams, open-source code, and cloud platforms. Constant focus on speed to release software to market, along with the traditional slow and manual security checks has caused gaps in continuous security as an important piece in the software supply chain. Today organizations feel more susceptible to external and internal cyber threats due to the vast attack surface in their applications supply chain and the lack of end-to-end governance and risk management.
The software team must secure its software delivery process to avoid vulnerability and security breaches. This needs to be achieved with existing tool chains and without extensive rework of the delivery processes. This talk will present strategies and techniques for providing visibility into the true risk of the existing vulnerabilities, preventing the introduction of security issues in the software, resolving vulnerabilities in production environments quickly, and capturing the deployment bill of materials (DBOM).
Speakers:
Bob Boule
Robert Boule is a technology enthusiast with PASSION for technology and making things work along with a knack for helping others understand how things work. He comes with around 20 years of solution engineering experience in application security, software continuous delivery, and SaaS platforms. He is known for his dynamic presentations in CI/CD and application security integrated in software delivery lifecycle.
Gopinath Rebala
Gopinath Rebala is the CTO of OpsMx, where he has overall responsibility for the machine learning and data processing architectures for Secure Software Delivery. Gopi also has a strong connection with our customers, leading design and architecture for strategic implementations. Gopi is a frequent speaker and well-known leader in continuous delivery and integrating security into software delivery.
UiPath Test Automation using UiPath Test Suite series, part 4DianaGray10
Welcome to UiPath Test Automation using UiPath Test Suite series part 4. In this session, we will cover Test Manager overview along with SAP heatmap.
The UiPath Test Manager overview with SAP heatmap webinar offers a concise yet comprehensive exploration of the role of a Test Manager within SAP environments, coupled with the utilization of heatmaps for effective testing strategies.
Participants will gain insights into the responsibilities, challenges, and best practices associated with test management in SAP projects. Additionally, the webinar delves into the significance of heatmaps as a visual aid for identifying testing priorities, areas of risk, and resource allocation within SAP landscapes. Through this session, attendees can expect to enhance their understanding of test management principles while learning practical approaches to optimize testing processes in SAP environments using heatmap visualization techniques
What will you get from this session?
1. Insights into SAP testing best practices
2. Heatmap utilization for testing
3. Optimization of testing processes
4. Demo
Topics covered:
Execution from the test manager
Orchestrator execution result
Defect reporting
SAP heatmap example with demo
Speaker:
Deepak Rai, Automation Practice Lead, Boundaryless Group and UiPath MVP
LF Energy Webinar: Electrical Grid Modelling and Simulation Through PowSyBl -...DanBrown980551
Do you want to learn how to model and simulate an electrical network from scratch in under an hour?
Then welcome to this PowSyBl workshop, hosted by Rte, the French Transmission System Operator (TSO)!
During the webinar, you will discover the PowSyBl ecosystem as well as handle and study an electrical network through an interactive Python notebook.
PowSyBl is an open source project hosted by LF Energy, which offers a comprehensive set of features for electrical grid modelling and simulation. Among other advanced features, PowSyBl provides:
- A fully editable and extendable library for grid component modelling;
- Visualization tools to display your network;
- Grid simulation tools, such as power flows, security analyses (with or without remedial actions) and sensitivity analyses;
The framework is mostly written in Java, with a Python binding so that Python developers can access PowSyBl functionalities as well.
What you will learn during the webinar:
- For beginners: discover PowSyBl's functionalities through a quick general presentation and the notebook, without needing any expert coding skills;
- For advanced developers: master the skills to efficiently apply PowSyBl functionalities to your real-world scenarios.
Accelerate your Kubernetes clusters with Varnish CachingThijs Feryn
A presentation about the usage and availability of Varnish on Kubernetes. This talk explores the capabilities of Varnish caching and shows how to use the Varnish Helm chart to deploy it to Kubernetes.
This presentation was delivered at K8SUG Singapore. See https://feryn.eu/presentations/accelerate-your-kubernetes-clusters-with-varnish-caching-k8sug-singapore-28-2024 for more details.
Neuro-symbolic is not enough, we need neuro-*semantic*Frank van Harmelen
Neuro-symbolic (NeSy) AI is on the rise. However, simply machine learning on just any symbolic structure is not sufficient to really harvest the gains of NeSy. These will only be gained when the symbolic structures have an actual semantics. I give an operational definition of semantics as “predictable inference”.
All of this illustrated with link prediction over knowledge graphs, but the argument is general.
5. Objectives
Automation
Business life cycle management,for example, modification 、
monitor、fault handling and so on.
Resource utilization is elastic.
Standardization
Flow
Instance standard
System environment、runtime、framework
Unification
Integrate the third-party service,for example DB、Cache、log、FS
and so on.
Linkage with other system platform
TRANSLATED VERSION
8. 2. Practice and Reform(Part1)
Java,base on cf 1.0
TRANSLATED VERSION
9. Java Apps
• Number of Product Categories >100
• APP >200
• Instances>2000
• Average single-instance 10G(Memory)
• Average Daily total pv > 1billion
• The numbers of developers and testers for APP > 700
• Tomcat5/6/7、jdk1.5/1.6、Standalone
TRANSLATED VERSION
10. Implementation and Preparation
• Relevant modification based on CentOS
ü Deploy each CF component independently
⁺ Analyze BOSH、chef,implementation based on physical machine
ü OS environment initialization
⁺ apt-get is changed to yum
ü Ubuntu-cmd to CentOS
⁺ DEA(v1.0),agent.rb、secure.rb
yum install -y make gcc gcc-c++ kernel-devel.x86_64 openssl-devel.x86_64 libxml2.x86_64 libxml2-
devel.x86_64 libxslt.x86_64 libxslt-devel.x86_64 git.x86_64 sqlite.x86_64 ruby-sqlite3.x86_64 sqlite-
devel.x86_64 unzip.x86_64 zip.x86_64 ruby-devel.x86_64 ruby-mysql.x86_64 mysql-devel.x86_64 curl-
devel.x86_64 postgresql-libs.x86_64 postgresql-devel.x86_64 zlib-devel.x86_64 readline-devel.x86_64
ImageMagick.x86_64 ImageMagick-devel.x86_64 php-magickwand.x86_64
TRANSLATED VERSION
11. Cluster capacity assessment
• Number of instances,NATS capacity assessment
ü Number of instances hosted by single DEA(<100),the pressure to NATS-Server has little
effect
ü Single NATS-Server can host 330 DEAs by a conservative estimate,The number of single
instance is 5~30.
ü Multiple NATS-Server,extendable
Deplay
(ms)
Number of DEAs (10 ~ 340)
Number of Single DEA
instances(5 ~ 30)
Critical line
330 DEAs
TRANSLATED VERSION
12. In cluster, component redundant,
LB design
• NATS
ü Cluster,multiple NATS, synchronous heartbeat
ü Cache information from client side. If network is cut down,it
should keep to reconnect.
ü Multiple NATS does load balance(Client > 0.5.beta.6)
NATS-Server1 NATS-Server2
NATS-Client
(caching message)
NATS-Server1/2,
Random list
TRANSLATED VERSION
13. Multiple cluster redundant design
• Multiple independent cluster ,logic independent
ü The first layer’s switch,modify DNS A record,for multiple domain names(CNAME to this A
record), they will uniformly switch to to different clusters
ü The second layer’s switch,modify “interface layer”(For its application layer’s function ,it can be
simply understood as Nginx’s reverse proxy )
ü Ensure App (stateless) capacity,or expand the capacity quickly to prevent overload when the
traffic switch back
Baidu GateWay
Front End
Router
A记录
Baidu GateWay
Front End
Router
app1 app1
CNAME(formal domain
name)
CNAME(formal domain
name)
www.baidu.com CNAME www.a.shifen.com.
www.baidu.cn CNAME www.a.shifen.com.
www.a.shifen.com. A 119.75.218.77
www.a.shifen.com. A 119.75.217.56
TRANSLATED VERSION
16. New features
• Support RPC, Single instance with multiple
ports
ü One instance will open multiple ports,and provide API to search the
IP ,ports in real time
ü Linkage with “name service”,synchronize dynamic IP/port’s
relationship with name.
ü RPC caller will connect the instance directly according to name
TRANSLATED VERSION
17. DEA server
Support RPC、
Single instance with multiple ports
Instance01:port
Instance02:port
API Bridge
NS
server
TXT record
ip:port
ip:port
RPC caller
NS client
Domain
ip:port
ip:port
ip_local_port_range
10000 ~ 60000
Port pool(There is freeze
period after allocation)
61000 ~ 65000
TRANSLATED VERSION
18. New features
• Support JMX
ü API to search the IP and Jconsole port in real time, then implement to
collect JMX data in real time.
TRANSLATED VERSION
20. New features
• Enhancement to health monitor
ü Seven layers’ detection
ü Number of file handler detection
TRANSLATED VERSION
21. DEA Server
DEA agent.rb
Health Manger
instance
http
avali
abili
ty
instance
CPU MEM DISK ……
report
Enhancement to health monitor
hand
ler
TRANSLATED VERSION
22. DEA(v1.0), logical enhancement
• Ports Management
ü Description
⁺ Single DEA, multiple instance,parallel to assign and start the port,there is no
critical line,but there is the port competition issue
ü Solution
⁺ Reference DEA(v2.0)’s logic(Notes: it’s DEA_NG, not compatible with CF1.0)
⁺ Define ip_local_port_range as 10000~61000,it is dynamic ports’ range
⁺ Make 61001~65000 as DEA scheduling assigned ports
⁺ For assigned port,add “[release time、port num]” data structure
⁺ It resolve the port competition by delaying to release the port
ü Note
⁺ CF2.0 has resolved this problem by the same method above.
TRANSLATED VERSION
23. DEA(v1.0),logical enhancement
• Instance resource information management
ü Description
⁺ Du command takes long time to calculate the disk space, as a result, the
following commands’ calculation is not consistent
⁺ When calculate the CPU utilization, it doesn’t consider the number of cores
ü Solution
⁺ Adjust the related command’s order
⁺ When calculate the CPU utilization, it should be divided by the number of
cores
ü Notes
⁺ CF2.0 has resolved this problem.
TRANSLATED VERSION
24. New features
(Linkage with peripheral system)
• File persistent
ü Use MFS(Moose File System)
ü DEA deply MFS-Client and mount /mfs/path to let instance use
ü MFS service provide the HTTP interface to get the data
• Route based on URL,distinguish APP
ü foo.baidu.com/app1 à app1.foo.baidu.com
ü foo.baidu.com/app2 à app2.foo.baidu.com
• Monitor linkage
ü APP’s life cycle,to interact with external monitor system’s API, to implement the
monitor item’s automatic modification.
• The SDK
ü Automatic release(encapsulate vmc)
ü View file
TRANSLATED VERSION
25. Summary of key reform point(CF V1.0
• Relevant reform based on CentOS
• NATS-Cluster usage、NATS-Client retry and cache
• Support RPC、single instance with multiple ports
• Support dynamic JMX、Jconsole
• Enhance the health monitor
• Ports management
• Instance resource information management
• Peripheral component:File persistent、Monitor linkage、
URI Route、The SDK
TRANSLATED VERSION
26. 2. Practice and Reform(Part2)
C/C++,base on cf 2.0
TRANSLATED VERSION
27. Several key problems of C/C++ Apps
• Container’s runtime is isolated with resource
ü Kernel/GNU
ü Resource isolation
ü Snapshot,Core Dump
• Single instance, multiple processes
ü Health monitor
ü The order of processes’ execution
ü Communication within instance and among process
ü Multiple ports
ü The isomorphism of multiple instances
TRANSLATED VERSION
28. Several key problems of C/C++ Apps
• Big instance
ü Big instance number(100 thousands)
ü Large amount of data(single instance,2TB)
ü High memory usage(single instance,100G)
ü Long start time(30mins)
ü Large flow(single instance,daily total PV2 hundred million)
ü When drift,to prevent insufficient resources
• APP communication
ü Network layer communication,authorization、flow control
ü Output file,need to get from outside
ü Input file,need to push from outside
ü RPC,none-HTTP protocol,not containing PATH info,can’t route
TRANSLATED VERSION
29. Instance’s OS-Level
environment preparation
• Container’s runtime environment
ü Kernel is consistent with host machine
ü Make Container’s file environment
warden/warden/root/linux/rootfs/setup.sh
if grep -q -i centos /etc/issue
then
exec $(dirname $0)/centos.sh $@
fi
TRANSLATED VERSION
30. Relationship between Container
and host machine
Warden
Networking,Bridge / NAT / Firewall / FlowControl
DEA
init─┬─xxx
├─xxx─xxx
├─xxx
mount r usr/ lib/ etc/
mount rw xxx/
network interface(sub net)
Cgroup – CPU / MEM
Name space
init─┬─xxx
├─xxx─xxx
├─xxx
mount r usr/ lib/ etc/
mount rw xxx/
network interface(sub net)
Cgroup – CPU / MEM
Name space
TRANSLATED VERSION
31. Package management
• Buildpack API
ü detect , check
ü Compile,environment preparation
⁺ Directory structure
⁺ Program files,and relevant supporting program
⁺ Startup script, and ensure the startup order of process …
⁺ Monitor script,it can periodically execute and check the whole instance’s health
ü Release,information to publish
ü Procfile,parameter passing(e.g. port)
ü .profile.d,environment variable
TRANSLATED VERSION
32. Point to enhance health monitor
• Self-defined monitor scripts
ü self-defined monitor scripts, which is published together with instance and periodically
to modify the content of stat_file
ü DEA will check the stat_file periodically
Instance stat_file
monitor.sh
process-1
process-2
DEA
HM
TRANSLATED VERSION
33. Reform to APP
• For RPC,support NS Client
ü Dynamic configuration file to replace route
ü Port management,freeze time
• Input/Output file
ü Input file need to get from outside actively
ü Output file,pushed to the transit(e.g. cloud storage ),or service based on NS
• Multiple process management, startup scripts
ü Multiple processes,to control their startup order
ü Process control
• File persistent
ü Remote log
ü Use the cloud storage
TRANSLATED VERSION
35. Reform Summary(cf v2.0)
• Relevant reform based on the CentOS
• Container’s environment order
• Buildpack’s order
• Support RPC, single instance, multiple ports
• Enhance the health monitor
• Peripheral: file persistent, monitor linkage, URI Route, SDK
TRANSLATED VERSION
37. Working Process Description
Review
• Standard
• Capacity
• SLA
Access
• Org
relationship
• Name info
• Operation info
Process
approval
• Authorizatio
n apply
• Name apply
• Release opt
Release
update
• PreRelea
se
• Gray
scale
• Rollback
Failure
handling
• availabi
y
• Security
• Issue
mgmt
TRANSLATED VERSION
38. Standard and Capacity Example
• Standard information collection
ü App related name, related interface people(R&D, QA, operation,
related manager, and so on)
ü Runtime is isolated with container’s version
ü Stateless, RPC, URI Route
ü Dynamic and static files are isolated
ü File persistence
• Capacity information collection
ü PV、QPS
ü Single instance’s CPU, memory, disk, bandwidth, restarting time
ü Number of instances
TRANSLATED VERSION
39. SLA examples
• Service object
ü Java Application(“APP” for short in the following)
ü APP that conforms to the standard
• Servicing time
ü 24×365 all year round
• Way to communication
ü Mail、Tel、interface people information
• Stability related indicators
ü Core components,availability >99.99%(by month),MTTR<20mins,
MTBF>5days
ü Control services,availability >99.95%(the whole year)
ü APP’s self SLA, it won’t cause bad effect because of platform its self.
ü Notes:APP’s self problem,beyond the scope of SLA,for example,
bug, capacity forest error, external system’s failure(e.g. DB, Cache) and so on
TRANSLATED VERSION
40. Organization, Layer
• Product line(Org)
• Module(Space)
• Group(APP)
• Version (APP-*)
Product line -2
Product line-1 (Org)
Module-2
Module-1 (Space)
Group-1(A)
Group-2(B)
实例,版本-1
(APP-1-1)
实例,版本-2
(APP-1-2)
实例,版本-1
(APP-2-1)
实例,版本-2
(APP-2-2)
Instance,v1
(A-1)
Instance,V2
(A-2)
Instance,v1
(B-1)
Instance,V2
(B-2)It is one APP,but multiple
instances in the dashed frame.
TRANSLATED VERSION
41. Further encapsulation to CC
Product line(Org) OrgName
Module(Space) OrgName_SpaceName
Module group OrgName_SpaceName_GroupTag
Module version OrgName_SpaceName_GroupTag_VersionTag
Instance(Unique id) OrgName_SpaceName_GroupTag_VersionTag_Index
TRANSLATED VERSION
42. GroupTag、VersionTag
• GroupTag
• It can distinguish: configuration number、computer room、rack … from different dimension
• Version Tag
• It can distinguish:program, data, configuration file and so on
• Including: four version number, timestamp
• Instance full name,for example
• Org_Space_GroupA_1-1-1-1-438249600_1
• Org_Space_GroupB_1-1-1-1-438249600_1
TRANSLATED VERSION
43. Examination, approval and release
• Distribute form and approve
ü APP information(program version, capacity information, related
instruction and so on)
ü Approval(related manager, and the people who should know)
ü Operator、Operating time
ü Monitor information(Monitoring and controlling strategy、
Interface people and so on)
• Start to distribute operation, and add
monitor
ü Before release,related approval processes must pass
ü Operator, program version, MD5、time information and so on,it
must keep consistent with approval
ü It must be consistent and pass the processes,then it can
release
ü After successful release, add the monitor
Distribute
form
Approval
Release
APP
Add Monitor
TRANSLATED VERSION
45. Basic grays scale release
app_v1
instance01app_v1.paas.baidu.com
app_v1
instance02
app_v2
instance01
app_v2
instance02
app_v3
instance01
app_v3
instance02
app.baidu.com
1、Make one formal domain name point to multiple apps at the same time
2、Adjust the proportion of many instances’ number,then adjust the
proportion of traffic.
app.baidu.com
app_v2
instance03
By adjusting the proportion
of the many instance’s
number, to adjust the
proportion of gray scale
traffic
TRANSLATED VERSION
46. “The path to sermon”,
The platform popularization
• The medal, who own the other half ?
ü Support app
⁺ New service needs to follow the PaaS related standard and thought
⁺ Old service,need R&D to reform and QA to do regression test
ü Periphery support
⁺ DB, Cache, storage, interface, security, monitor and so on
• Clear the benefits,establish the win-win ecosystem
ü Deliver faster, save more resource, and make it more simple
ü One-stop and all-in-all service,hand in hand to popularize
TRANSLATED VERSION
47. Some solutions:
• Give users(APP developers) noble imperial
enjoyment
ü For important APP,do some specific service
ü For important managers,it should have a set of complete, timely communication, such
as reports, etc
ü The principle is “capitalism”, rather than “socialism”
• Event “marketing”
ü E.g. “struts2 0day”
⁺ Actively cooperate with R&D and QA to do the issues identification, repair and
implementation
⁺ Actively report the progress and do the event managment
⁺ Late,for this to actively promote and participate the discussion and make decision,
for example, security, and architecture group
⁺ The principle is “win-win”,rather than shirking the responsibility
TRANSLATED VERSION
49. Reform operation
“NoOps”
PaaS(and IaaS) overall functionality
>= Traditional operation work
Storage
Servers
Networking
O/S
Middleware
Virtualization
Data
Applications
Runtime
OP(SRE),
operation
PaaS (and IaaS)
TRANSLATED VERSION
50. How to reform,Example
• Automatic fault recovery
ü Add the health monitor mechanism based on the
traditional monitoring
ü Instance automatically restart and “drift”
ü Reduce the traditional alarm and man power
⁺ It will only alarm, when automatic recovery fail
Monitor
Whole instance
name_1
ip:port
… …
Health
monitor
AP
I
… …
Real instance_1
ip:port
Instance after drifting_1
• ”drift” is a normal phenomenon, it doesn’t alarm
• It only need the alarm, when “drift” fail
• It refinins to monitor instance,every time according t
name,detect and return ip:port
TRANSLATED VERSION
51. How to reform, Example
• More agile
ü Make developer forget the servers, instead of resource oriented
ü It has a complete configuration management and automatic deployment
function
ü Release, pre-release, rollback, extremely simple, and it doesn’t need the
extra complex deployment tool
ü Elastic extension, extremely simple
ü Use Buildpack,implement cloud compiling and run directly
• Experience of all in one and one-stop
ü From distribute form, release and modify the monitor,the working process is
totally automatic
ü Integrate the third-party service, unify the management entrance
TRANSLATED VERSION
53. Future plans
• Feedback to community
• For private cloud function,try best to encapsulate the native components(based
CF2.0) , then make the new component open source
• If affect the native components,try best to merge to the master branch
• Write more document and tips, and actively to participate in communication
• Development orientation
• For large application(big instance)related
• Intelligent scheduling related
• Information Security
• Further continuous integration
• UI
TRANSLATED VERSION
54. We are hiring !
@Weiyu Wang(王炜煜)
weibo.com/wwy1640
Thanks
TRANSLATED VERSION