Banking and Docker Datacenter - How Containers Drive Agility
•Download as PPTX, PDF•
0 likes•589 views
Banks are a museum of technologies, Technology diversity is prevalent. When you containerize the container becomes the common unit of management and operations making management much simpler.
Recommended
More Related Content
What's hot
What's hot (20)
Viewers also liked
Viewers also liked (20)
Similar to Banking and Docker Datacenter - How Containers Drive Agility
Similar to Banking and Docker Datacenter - How Containers Drive Agility (20)
Recently uploaded
Recently uploaded (20)
Banking and Docker Datacenter - How Containers Drive Agility
- 1. sendachi.com Banking and Docker Datacenter: How containers drive agility Matt Saunders Principal Consultant Sendachi
- 2. sendachi.com Sendachi • Formed in 2016 • Merging Clutch (US) and Contino (UK) • VC Funded Services Company • Docker Premier Partner
- 3. sendachi.com Sendachi • Enterprise Focus • DevOps & Continuous Delivery • Containerisation & Virtualisation • Microservices • Security, Reliability & Resilience • Cloud Architecture
- 5. sendachi.com The Case… • … for Change in Banking • … for Containers • … for Docker Data Center
- 6. sendachi.com The Case for Change in Banking
- 7. sendachi.com The Need “The digital agenda means there is an increasing need to innovate and ship even more high quality software more frequently than before into this complex technology environment”
- 8. sendachi.com Challenges in Banking • Disruption: Need to Innovate • Complicated Legacy • Regulatory Changes
- 13. sendachi.com Complicated Legacy • Legacy Apps often using older architecture • Complex interdependencies • Every technology under the sun • Thousands of servers • A need for modernisation • Containerisation can hasten adoption
- 14. sendachi.com Regulatory Requirements • Tedious auditability requirements • Manual records
- 16. sendachi.com Containerisation Benefits (1/2) • Container abstraction layer • Platform Portability • Resilience with Clustering • Provenance and Traceability
- 17. sendachi.com Containerisation Benefits (2/2) • Environment Consistency • Improved Compute Density • Multi-Tenancy • Remove the Virtualisation Tax
- 18. sendachi.com Container Abstraction Layer • Common point of entry for containers • Run diverse technology stacks • HTTP with RESTful Interfaces work well • Microservices • 12 Factor Applications
- 19. sendachi.com Platform Portability • Move applications easily between servers • Private and public cloud • Everything is contained
- 20. sendachi.com Resilience with Clustering • Higher-order clustering options • Built specifically for Docker • Docker Swarm itself is a containerised application
- 21. sendachi.com Provenance and Traceability • Container builds can be automated • Cryptographic signing available • Docker registry comms are encrypted • Proof that the image is as-built
- 22. sendachi.com Environment Consistency • Applications run purely inside containers • Environment information stored outside containers • The same unaltered container runs in all environments • Environmental drift is minimised
- 23. sendachi.com Improved Compute Density • Applications can be limited by memory and CPU • Pre-allocation of resources isn’t necessary • Intelligent scheduling of workloads with Swarm • Run larger Docker host servers without virtualisation
- 24. sendachi.com Multi-Tenancy • Docker containers are insulated from each other • Containers can’t interfere or interact with each other • Enables greater density
- 25. sendachi.com Remove the Virtualisation Tax • Docker machine can run on bare metal • Swarm orchestration optimally places containers • Swarm will replace containers on failed nodes • Any need for virtualisation?
- 27. sendachi.com Docker Adoption 5.6 million pulls/day $1 billion valuation 2 billion + pulls to date
- 31. sendachi.com Docker Datacenter • Integrated Pipeline of Tools • Build • Ship • Run
- 33. sendachi.com Docker Datacenter • Docker Toolbox • Run a Docker environment locally • Build containers • Cryptographic signing
- 34. sendachi.com Docker Datacenter • Docker Universal Control Plane • Container Management • Container Deployment • Security • RBAC • Enterprise Integration
- 35. sendachi.com Docker Datacenter • Docker Trusted Registry • Hosts your images • Fine-grained RBAC • Cryptographic signing
- 36. sendachi.com Docker Datacenter • Docker Content Trust • Cryptographic Guarantees • Signed with keys • Establishes trust • Valid Signatures required
- 37. sendachi.com Docker Datacenter • Docker Swarm • Orchestration • Scaling • Powerful Clustering Tool
- 39. sendachi.com Container Strategy • Tooling and Technology • Strategy and Governance
- 40. sendachi.com Tooling and Technology • Proof of Concept • Training and Upskilling • Tooling Implementation • Operational Readiness
- 41. sendachi.com Strategy and Governance • Reference Architecture • Identifying good fit applications and teams • Standards and Best Practice • Education and consensus around Docker • Audit and control
- 43. sendachi.com Sendachi • Enterprise Focus • DevOps & Continuous Delivery • Containerisation & Virtualisation • Microservices • Security, Reliability & Resilience • Cloud Architecture
- 44. sendachi.com Sendachi • Formed in 2016 • Merging Clutch (US) and Contino (UK) • VC Funded Services Company • Docker Premier Partner
Editor's Notes
- Containers and the Docker Datacenter stack are an incredibly powerful toolset which makes it easier to build, ship and run applications. By leveraging these tools, banks can solve the challenge of needing to innovate against a complex, interconnected legacy software environment.
- The challenging environment of digital disruption potentially impacting the banks, and the need to speed up software deployment cycles in response to this; The complex, interconnected, legacy application stacks which make up modern banking platforms;
- For the first time, banks are at risk of genuine disruption, with industry insiders talking about an “Uber moment” where startups with less technology legacy and better ability to execute have the potential to disrupt long established business models
- Abstraction layer: Banks are a museum of technologies, Technology diversity is prevalent. But when you containerise the container becomes the common unit of management and operations, whatever is encapsulated within it – either Weblogic or Websphere or another Java application, or a NodeJS application. Management becomes much simpler
- Platform portability: containers add a powerful layer of portability – once an app is containerised it is packaged up with all its dependencies, so it can be moved around different environments within the data centre, or between private and public clouds. This reduces the platform risk
- Resilience and robustness: containers allow you to solve resilience at a platform level – using clustering tools like Swarm which will restart containers on another host if the original one goes away
- Provenance and traceability: for regulatory reasons, banks need to know exactly what’s running – which versions, where they came from, who deployed the code and when. Docker Datacenter gives us all of this – a full audit trail of who did what and when, and also cryptographic signing of container images to prove they are what we thought they were
- Environment consistency: because we are packaging up the entire application with all its dependencies, we need only inject the bare minimum of environment data – perhaps a database and cache hostname – everything else is contained within the container. This dramatically reduces environment complexity
- Compute Density: we’re used to overprovisioning infrastructure to deal with peak loads, but scheduling algorhythms in Docker Swarm allow containers to be scheduled more efficiently than in a virtualised world, including scale-up techniques that make the most of the available compute resources
- Multi-Tenancy: Docker contains process isolation features which prevent processes from interfering with each other – this means that different teams could share host servers with proper isolation, whilst increasing compute density
- Virtualisation Tax: given the process isolation available, and the improvements in compute density, there’s an argument to run containers on bare metal – removing the need to run a virtualisation hypervisor. Docker Engine itself is something of a mixture between a jail and a virtual machine, with enough isolation and security to justify removing the virtualisation layer entirely
- Docker is about more than just containers however. Docker Inc, the commercial entity behind Docker, have an integrated stack of tooling which supports the entire lifecycle of building, shipping and running Docker containers. Together, this tooling is integrated into what is called the Docker Datacenter.
- Docker is about more than just containers however. Docker Inc, the commercial entity behind Docker, have an integrated stack of tooling which supports the entire lifecycle of building, shipping and running Docker containers. Together, this tooling is integrated into what is called the Docker Datacenter.
- Docker toolbox which encapsulates the development tools and develop experience for building containers. It allows the developer to provision Docker environments on their laptops, and a set of tools for building containers and signing them.
- Universal Control Plane for managing the containers, including versioning and management of them through a GUI interface which incorporates role based access control.
- Docker Trusted Registry for the management and versioning of the images. This incorporates a workflow called Content Trust which allows us to sign and verify our images as they move between environments and machines.
- strong cryptographic guarantees over what code and what versions of software are being run in your infrastructure. This is an absolute necessity for secure and auditable production deployments. When images are pushed to a repository, they are signed with private keys held by the content publisher. When a user interacts with the image for the first time, they establish trust with that publisher and then all subsequent interactions require a valid signature verification from that same publisher.
- Swarm. This manages the orchestration and scaling of containers when they are deployed into the production environment. We can deploy our containers into Swarm, and Swarm will handle the scaling and deployment of them across the nodes.
- So, how do you implement Docker and Docker Datacenter in your large financial enterprise?
- Two streams – tooling and technology is very similar across multiple industry verticals, although overall strategy and governance attempts to cover the tougher questions in financial institutions
- Proof Of Concept: Identifying and delivering an appropriate PoC in a real productionised application according to operational and secure best practices. Upskilling: Upskilling developers and operations engineers in the use, deployment and run of a Dockerised application through a tailored combination of classroom based training, workshops and pairing. Tooling: Deploying and con guring the tools that support the Docker datacenter - the Docker toolbox, the daemon, the registry and the Universal Control Plane. ‘Operational Readiness: Understanding and articulating how you will ensure the necessary resilience, robustness and scalability of your containerised applications in a production setting.
- Reference Architecture: Developing a reference architecture which incorporates operational and secure best practices which other teams in the bank can use in future. Deployment Roadmap: Align on where and how containers should be used within the application portfolio, identifying which applications and platforms are most suited for incorporating containers. Standards and Best Practices: Developing standards and best practices in a reusable and accessible format which makes it easy to adopt Docker in a consistent way according to operational and secure best practices. Education: Educating management, enterprise architects, developers, operations and other senior stakeholders on what Docker is and the implications of adopting the technology. It is disruptive and will need changes to your working practices to get the most out of it Governance: Develop a control and governance model around the use of containers incorporating development, deployment, management and operations considerations. Audit: Supporting Docker and supporting toolsets through any internal audit or acceptance processes.
- We’ve worked with large enterprises to help them deploy Docker, both in the financial sector and elsewhere. Sendachi understands the balance between change needed across people, process and technology to land a technology like Docker in an organisation that generally resists change. I hope I’ve described why the financial sector needs to change the way they develop and deploy software, and how Docker and their commercial products help to do that
- We have a stand outside in the expo area, and I’ll be around for a while to answer any questions too. I know I’m keeping you from lunch – are there any questions?