Consul by Mitchell - HashiCorp Meetup

•

3 likes•926 views

This document discusses service networking challenges in modern heterogeneous environments and how Consul addresses these challenges through service registry and discovery, a service mesh, and network modernization features. It describes Consul Connect's use of mutual TLS and service intentions to securely connect services across datacenters, as well as progressive delivery using canaries and feature flags. Key Consul capabilities for service networking include service routing, traffic splitting, custom resolution, and integration with Kubernetes.

Technology

Mixed Technologies
Mainframe Bare Metal Virtual Machine Container Serverless

Mixed Technologies
Network
Mainframe Bare Metal Virtual Machine Container Serverless

Multi-Datacenter
WebWeb Web
DB DB
VPN
Kubernetes
K/V

Modern Datacenter
K8S
CF
VMs
Metal
K8S
CF
VMs
Metal
K8S
ECS
VMs
FaaS
K8S
PaaS
VMs
FaaS

Body slide 
3 line max.
Service Registry & Discovery
Service Mesh
Solving Service
Networking
▪ Service Registry & Discovery
▪ Service Mesh

Network Modernization
Technology
Process
Centralized Hardware Centralized Hardware Centralized Software Distributed Software
Manual Update Load Balancers Dynamic Discovery Progressive Delivery
Service Discovery Service Mesh

IP2IP1
IP1 IP2
MUTUAL TLS
PLAIN TCP
Web
DB
API

10.0.2.1/2410.0.1.1/24
IP2IP1
Web
DB
API X

10.0.2.1/2410.0.1.1/24
IP2IP1
Web
DB
API X
Requires complex, manual network configuration to make work.

10.0.2.1/2410.0.1.1/24
IP2IP1
Web
DB
API
Mesh  
Gateway
Mesh  
Gateway

Security
▪ Gateways cannot decrypt payloads
– Do not have keys, only end service has
the private key
– Works by inspecting SNI headers
▪ Intentions enforced across datacenters

10.0.2.1/2410.0.1.1/24
IP2IP1
Web
DB
API
Allow "API" to "DB" 
Deny "Web" to "DB"
Connect  
Mesh  
Gateway
Connect  
Mesh  
Gateway

Progressive 
Delivery
▪ The idea that we need to limit risk when
rolling out new software.
▪ Canary, feature ﬂags, rolling deploys, etc.
▪ A requirement of modern application
delivery as the number of applications
grow.

HTTP Routing
Traffic
Splitting
Custom
Resolution
"web.service.consul"

HTTP Routing
▪ Path (exact, preﬁx, regex)
▪ Header
▪ Query Params
▪ HTTP Methods

/admin =>
service: "admin" 
path: "/"
HTTP Routing
Traffic
Splitting
Custom
Resolution
"web.service.consul"

/admin =>
service: "admin" 
path: "/"
Subset: "v2"
HTTP Routing
Traffic
Splitting
Custom
Resolution
"web.service.consul"

/admin =>
service: "admin" 
path: "/"
Subset: "v2" Meta.Version == 2
HTTP Routing
Traffic
Splitting
Custom
Resolution
"web.service.consul"
v2
v1
v2

Kubernetes
▪ Discovery: kube-dns, kube-proxy
▪ Conﬁguration: ConﬁgMaps
▪ Segmentation: NetworkPolicy +
Controller
▪ ... but only for single-cluster
Kubernetes workloads.

Consul
Unifies
Everything
▪ Kubernetes, Cloud, VMs, Bare Metal
▪ Multi-Datacenter, Multi-Cloud, Multi-
Platform
▪ Consistent

Consul +
Kubernetes
Features
▪ Helm Chart
▪ Auto-join Provider
▪ Catalog Sync
▪ Connect Auto-inject
▪ K8S Service
Account Auth
▪ Automatic TLS
▪ Mesh Gateways!

Découvrez les dernières tendances de Kubernetes et comment NGINX résout les défis courants dans Kubernetes. Ce webinar vous permettra de découvrir une solution apportant des réponses à vos défis liés à Kubernetes. Rejoignez ce webinaire pour apprendre : • Découvrir les avantages des différentes architectures • Comment utiliser NGINX Ingress Controller pour sécuriser, renforcer et faire évoluer vos environnements Kubernetes • Comment déployer NGINX nativement dans Kubernetes • Effectuer un équilibrage de charges, de l’authentification et une sécurisation de manière transparente dans Kubernetes • La duplication des services d'application, à la fois à l'intérieur et à l'extérieur de Kubernetes • Optimiser la sécurisation des applications dans Kubernetes avec NGINX App Protect

Envoy @ Lyft: Developer Productivity

Jose Ulises Nino Rivera

RedisConf17 - Amadeus - Redis-Cluster operator

Redis Labs

This document discusses making Redis cluster deployments easier using an operator on OpenShift. It motivates using Redis cluster for session handling and improved performance. It describes prototypes that deployed Redis cluster but lacked features like simple deployment, updating topology, and rolling updates. The document then presents a Redis manager application that automates cluster operations on OpenShift and proposes developing a Redis operator to improve lifecycle management and support multiple clusters. It concludes by discussing open sourcing the Redis manager and developing it further as an operator.

OSMC 2018 | Current State of Icinga by Bernd Erk

NETWAYS

- Bernd Erk introduced the current state of Icinga including the Icinga stack, core components like Icinga2 and Director, and new products like the x509 and vSphere modules. - Recent updates to Icinga2 focus on stability, namespaces, and syntax highlighting while Director added support for multiple instances and configuration baskets. - Icinga DB is targeted for Q1 2019 and will replace IDO with improved performance, flexibility and a new schema. - The presentation demonstrated the Icinga modules for vSphere and x509 as well as integrating Icinga with Node-RED for IoT use cases.

Extending HashiCorp Nomad with Plugins

Mitchell Pronschinske

From Code to Customer with F5 and NGNX London Nov 19

NGINX, Inc.

Presentations by Vincent Laverne, Miles Martin, David Luke, Dan Henley and Owen Garrett and at ‘From Code to Customer with F5 and NGNX’ Lunch and Learn in the Shangri-La Hotel, At The Shard, London. Presentations provide tips and insight into how customers are using F5 and the NGINX Application Delivery Platform to drive a transformational agenda that supports their current environments & immediate application requirements in addition to laying the foundational building blocks for a world of cloud-based microservices applications. Solution areas covered will include Load Balancing, API Management & Service Mesh implementation options.

On-Demand Link: https://www.nginx.com/resources/webinars/service-mesh/ About the Webinar Join us for a special launch webinar as we introduce you to NGINX Service Mesh, our new offering as part of the NGINX product suite. In this webinar, you’ll learn about using NGINX Plus and NGINX Controller as part of your microservices journey, why your organization may need a service mesh to improve performance and reliability of your applications, and how NGINX Service Mesh can help you meet these needs. Our presenter(s) will also provide a demonstration of NGINX Service Mesh, giving you an insight into the new experience that awaits you and your team.

Demystifying Terraform 012

Stenio Ferreira

This document provides an overview of Terraform 0.12, including improvements to the HashiCorp Configuration Language (HCL). Key updates include first class expressions, for expressions, generalized splat operators, improved conditionals, dynamic blocks, rich value types, improved template syntax, and more reliable JSON syntax. The presentation agenda includes a company overview, digital transformation trends, products overview, and focuses on demystifying changes in Terraform 0.12.

Securing Kubernetes Clusters with NGINX Plus Ingress Controller & NAP

Olivia LaMar

NGINX Basics: Ask Me Anything – EMEA

NGINX, Inc.

NGINX powers over half of the world’s busiest sites and applications. Attend this NGINX Basics webinar to hear answers to questions about NGINX and NGINX Plus. https://www.nginx.com/resources/webinars/nginx-basics-ask-anything-emea/ Watch this webinar to: - The answers to your questions on NGINX - About how others use NGINX and NGINX Plus - About common application delivery design patterns - Key insights from the presenter' more than 20 years of industry experience

Сергей Сверчков "Want to build a secure private cloud for IoT with high avail...

Tanya Denisyuk

We will share first-hand experience in how to build secure, highly available, and scalable private clouds for IoT industries, using OpenStack and Amazon Web Services. Join the talk to learn about unique techniques for connecting private customer networks to the cloud and providing support for WebSocket, TCP, and HTTP devices. This discussion will also cover Cloud Foundry, an open source cloud-native platform for rapid development of 12-factor applications.

WTF Do We Need a Service Mesh?

Anton Weiss

Service meshes are all the buzz in cloud-native world. How come only yesterday we didn't know such a thing existed and now everybody seems to want one? If you're already running a microservice-based system or only starting out with one — you may be asking yourself: "Do I also need a mesh?" In this session we'll try to answer what the mesh is good for, what problems it solves, what new questions it poses. More specifically we will: explore the SMI Spec; understand why everybody wants a mesh; see how the mesh helps with progressive delivery; discuss if it's time for you to get into the mesh.

The Challenges of Becoming Cloud Native

Ben Hall

Orchestrating Shared Networks, Physical Load Balancer and DNS on CloudStack

Silvano Buback

The adoption of Cloud Computing Solutions in datacenters worldwide has proven to be the right path, as it reduces costs, automates operation tasks and improve time-to-market for newly developed applications. However, cloud solutions are still in an early stage and do not meet all requirements for company environments, especially those with high capacity With that in mind, Globo.com embraced an open cloud solutions, Cloudstack, and began developing together with the community to fulfill all its high availability, high capacity and high throughput requirements. Integration between Cloudstack and Globo.com’s infrastructure happens in all levels, with an special attention to network equipment management, DNS automation and load balancing In this presentation, Globo.com will show the challenges in adopting cloud computing for its services and how these challenges were met with newly develop

Replacing and Augmenting F5 BIG-IP with NGINX Plus - EMEA

NGINX, Inc.

The way we build applications has changed a lot since 1996, when F5 BIG-IP was released. Companies that use F5 BIG-IP complain of high cost and lack of agility. In this webinar we describe how to replace or augment your F5 BIG-IP deployment with NGINX Plus for cost savings and greater agility. Watch this webinar to learn: - A brief history of F5 Networks and the BIG-IP, from initial release to early success - About five industry trends that are disrupting F5 and making F5 BIG-IP a hindrance to the modern enterprise looking for agility - Three ways to gracefully replace or augment F5 BIG-IP with NGINX Plus, without having to rip and replace - About application architectures possible with NGINX Plus, but not with F5 BIG-IP, such as API gateways https://www.nginx.com/resources/webinars/replacing-augmenting-f5-big-ip-nginx-plus-emea/

RedisConf17 - Dynomite - Making Non-distributed Databases Distributed

Redis Labs

Dynomite is a framework that makes non-distributed databases distributed by adding a proxy layer, auto-sharding, replication across datacenters, and more. It is used at Netflix to power various services by sitting on top of Redis and providing high availability, scalability, and tunable consistency. Conductor is a workflow orchestration engine used by Netflix that stores workflow definitions and state in Dynomite to allow reusable and controllable workflow processes.

Secure and Convenient Workflows: Integrating HashiCorp Vault with Pivotal Clo...

Stenio Ferreira

The document discusses using Vault to securely manage secrets for applications deployed to Pivotal Cloud Foundry (PCF). It describes the typical Vault workflow, how Spring Cloud Vault can integrate Vault with PCF applications, and challenges with this approach. It then introduces the Vault PCF Service Broker, which solves issues by binding applications to Vault upon deployment, generating unique policies and tokens, and injecting credentials as environment variables. It demonstrates the service broker configuration and usage, and discusses limitations including that apps are still responsible for interacting with Vault and bootstrapping secrets.

NGINX DevSecOps Workshop

NGINX, Inc.

This document provides an agenda and overview for an NGINX App Protect workshop. It includes: 1. An overview of NGINX and its application platform capabilities for developing and delivering digital experiences. 2. A demonstration and overview of the hands-on lab where attendees can get experience with NGINX App Protect. 3. The hands-on lab itself which attendees participate in for a live experience securing applications with NGINX App Protect.

NGINX Basics and Best Practices Workshop

NGINX, Inc.

NGINX Plus R20 Webinar

NGINX, Inc.

What’s New in NGINX Plus R20? Join our webinar to discover the latest updates in NGINX Plus R20, with a walkthrough of new capabilities and security measures. Join this webinar to learn: - How to get the most from real-time monitoring and logging of rate-limited traffic - About recent enhancements to connection limiting - How to designate DNS servers for upstream groups - About changes that improve HTTP/2 traffic security https://www.nginx.com/resources/webinars/whats-new-nginx-plus-r20/

Control Kubernetes Ingress and Egress Together with NGINX

NGINX, Inc.

On-Demand Recording https://www.nginx.com/resources/webinars/control-kubernetes-ingress-egress-together-nginx/ About the Webinar Join our resident Kubernetes and modern apps experts in a discussion of the challenges of Kubernetes traffic management in today’s technology landscape. While Kubernetes Ingress gets most of the attention, how you handle egress traffic is just as important. Egress isn’t just about traffic leaving a cluster, either, but also concerns traffic among managed and unmanaged services within the cluster. We demo a solution using NGINX Service Mesh and NGINX Ingress Controller to control egress from the cluster and between NGINX Service Mesh and unmanaged services. Whether you’re new to modern application architectures, or looking to improve your current microservices deployment, this webinar is for you. Speakers: Amir Rawdat Technical Marketing Engineer F5 Faisal Memon Software Engineer F5

Global Server Load Balancing with NS1 and NGINX

NGINX, Inc.

On-Demand Link: https://www.nginx.com/resources/webinars/global-server-load-balancing-ns1-nginx/ About the Webinar How do you improve performance and high availability across your data centers or points of presence (PoPs)? By entrusting your DNS, DHCP, and IP address management (DDI) to NS1. Built on a modern API-first architecture that acts on real-time data, NS1’s DDI platform is an intelligent, efficient, and automated system. Deployed behind NS1 or F5, NGINX is an all-in-one software load balancer, content cache, web server, reverse proxy, and API gateway. Attend this webinar to learn about how NGINX integrates with NS1 to improve reliability and resilience.

What's new in NGINX Plus R19

NGINX, Inc.

Test rate limits in dry-run mode and monitor NGINX Plus using advanced metrics with NGINX Plus R19. On-Demand Link: https://www.nginx.com/resources/webinars/whats-new-nginx-plus-r19/ Watch this webinar to learn: - How to monitor your NGINX Plus ecosystem with fine-grained insights using advanced metrics - About dynamically blacklisting IP address ranges in the key-value Store - How to apply different bandwidth limits based on attributes of incoming traffic - About testing rate limits in dry-run mode

Bridging Your Business Across the Enterprise and Cloud with MongoDB and NetApp

MongoDB

This document discusses how NetApp solutions can help businesses bridge their MongoDB databases across on-premises and cloud environments. It provides an introduction to NetApp and describes how their storage solutions and data fabric can enable hybrid cloud for MongoDB. Specific solutions and technologies discussed include NetApp ONTAP for storage management and provisioning, FlexClone for development/testing, and SolidFire for high performance MongoDB deployments. Customer examples and performance benefits are also summarized.

Virtualizing the Network to enable a Software Defined Infrastructure (SDI)

Odinot Stanislas

Support of containerized workloads in ONAP

Victor Morales

What's hot

RedisConf17 - Smartwaiver - Using Redis for Kiosk Registration Command and Co...

Redis Labs

Vault 1.5 Overview

Mitchell Pronschinske

Data Plane Matters! A Deep Dive and Demo on NGINX Service Mesh

NGINX, Inc.

Demystifying Terraform 012

Stenio Ferreira

Securing Kubernetes Clusters with NGINX Plus Ingress Controller & NAP

Olivia LaMar

NGINX Basics: Ask Me Anything – EMEA

NGINX, Inc.

Сергей Сверчков "Want to build a secure private cloud for IoT with high avail...

Tanya Denisyuk

WTF Do We Need a Service Mesh?

Anton Weiss

The Challenges of Becoming Cloud Native

Ben Hall

Orchestrating Shared Networks, Physical Load Balancer and DNS on CloudStack

Silvano Buback

Replacing and Augmenting F5 BIG-IP with NGINX Plus - EMEA

NGINX, Inc.

RedisConf17 - Dynomite - Making Non-distributed Databases Distributed

Redis Labs

Secure and Convenient Workflows: Integrating HashiCorp Vault with Pivotal Clo...

Stenio Ferreira

NGINX DevSecOps Workshop

NGINX, Inc.

NGINX Basics and Best Practices Workshop

NGINX, Inc.

NGINX Plus R20 Webinar

NGINX, Inc.

Control Kubernetes Ingress and Egress Together with NGINX

NGINX, Inc.

Global Server Load Balancing with NS1 and NGINX

NGINX, Inc.

What's new in NGINX Plus R19

NGINX, Inc.

Bridging Your Business Across the Enterprise and Cloud with MongoDB and NetApp

MongoDB

What's hot (20)

RedisConf17 - Smartwaiver - Using Redis for Kiosk Registration Command and Co...

Vault 1.5 Overview

Data Plane Matters! A Deep Dive and Demo on NGINX Service Mesh

Demystifying Terraform 012

Securing Kubernetes Clusters with NGINX Plus Ingress Controller & NAP

NGINX Basics: Ask Me Anything – EMEA

Сергей Сверчков "Want to build a secure private cloud for IoT with high avail...

WTF Do We Need a Service Mesh?

The Challenges of Becoming Cloud Native

Orchestrating Shared Networks, Physical Load Balancer and DNS on CloudStack

Replacing and Augmenting F5 BIG-IP with NGINX Plus - EMEA

RedisConf17 - Dynomite - Making Non-distributed Databases Distributed

Secure and Convenient Workflows: Integrating HashiCorp Vault with Pivotal Clo...

NGINX DevSecOps Workshop

NGINX Basics and Best Practices Workshop

NGINX Plus R20 Webinar

Control Kubernetes Ingress and Egress Together with NGINX

Global Server Load Balancing with NS1 and NGINX

What's new in NGINX Plus R19

Bridging Your Business Across the Enterprise and Cloud with MongoDB and NetApp

Similar to Consul by Mitchell - HashiCorp Meetup

Virtualizing the Network to enable a Software Defined Infrastructure (SDI)

Odinot Stanislas

Support of containerized workloads in ONAP

Victor Morales

#IBMEdge: "Not all Networks are Equal"

Brocade

Not all networks are created equal. Brocade Ethernet Fabrics, as joined in the IBM Flex EN4023 embedded switch, revolutionizes by automating and optimizing your network, enabling you to reduce total cost of ownership, not just capital expenses. Lab tests have validated the Opex and Capex advantages of VCS Ethernet Fabrics over traditional networking. Learn how customers have reduced network infrastructure requirements by 25% and increases the networks performance by up to 30%. See how Dynamic Ports on Demand can save hardware costs. Learn the dramatic Operational impact VCS Fabric switches have on decreasing time to deploy the network by 79% and decreasing the time to implement network changes by 85%.

VMworld 2013: Advanced VMware NSX Architecture

VMworld

#VMUGMTL - Xsigo Breakout

1CloudRoad.com

The document provides an overview of I/O virtualization and how it enables cloud computing by connecting any server to any storage or network device quickly and flexibly. It discusses how I/O virtualization addresses challenges like inefficient resource utilization and high costs. It also explains how I/O virtualization completes the cloud model by allowing dynamic allocation of network and storage resources to virtual machines.

HP Virtual Connect technical fundamental101 v2.1

ผู้ชาย แห่งสายลม

The document discusses challenges with traditional server blade networking approaches that require many cables or switches. It introduces the HP Virtual Connect solution which simplifies networking through the following: - Reduces cables without adding switches to manage by connecting servers to logical networks defined in software rather than physical network infrastructure. - Cleanly separates server enclosure connections from LANs and SANs, allowing fast addition, movement, or replacement of servers without affecting networks. - Eliminates the need for network/storage teams to manage server connections by handling MAC/WWN assignments internally through profile management.

Understanding network and service virtualization

SDN Hub

This document discusses network and service virtualization technologies. It begins with an overview of challenges with current network architectures and how virtualization addresses them. It then covers three key trends: 1) network virtualization using SDN to program networks dynamically, 2) service virtualization using NFV to virtualize network functions, and 3) new infrastructure tools like Open vSwitch, OpenDaylight, and Docker networking. Finally, it discusses approaches to deploying network and service virtualization and provides a vendor landscape.

Colt's L3 VPN Evolution: Towards Hybrid MPLS and SD WAN

Colt Technology Services

Colt is evolving its VPN portfolio towards a hybrid of MPLS and SD WAN to address customer challenges around needs for higher bandwidth, faster network delivery, and more network agility. It is initially focusing on an SD WAN minimum viable product to directly address new market demand. Longer term, Colt aims to develop a unified, automated on-demand platform powered by network virtualization, orchestration, and artificial intelligence to further optimize services.

AWS re:Invent 2016: Optimizing Network Performance for Amazon EC2 Instances (...

Amazon Web Services

Many customers are using Amazon EC2 instances to run applications with high performance networking requirements. In this session, we provide an overview of Amazon EC2 network performance features (enhanced networking, ENA, placement groups, etc.), and discuss how we are innovating on behalf of our customers to improve networking performance in a scalable and cost-efficient manner. We share best practices and performance tips for getting the best networking performance out of your Amazon EC2 instances.

Hyper v and live migration on cisco unified computing system - virtualized on...

Louis Göhl

Banv meetup-contrail

nvirters

This hands on workshop for OpenContrail will be led by Sreelakshmi Sarva & Aniket Daptari. This is a labs session so we will have hard RSVP limits. Please RSVP only if you are confident that you will be able to attend. About Sreelakshmi Sarva Sree is currently working as part of solution engineering team at Juniper’s Contrail team. She is responsible for delivering & managing SDN solutions & partnerships relating to Contrail. She has been with Juniper for the last 13 years working on various Routing, Switching, Network programmability & virtualization platforms. Prior to Juniper, She worked at Nortel networks in the Systems Engineering group. Sree received her Masters in Computer Science from University of Texas at Dallas and Bachelor’s in Computer Science from India. About Aniket Daptari Aniket is currently working as part of Juniper Networks' Contrail Cloud Solutions team. He is responsible for delivering SDN solutions and technology partnerships related to Contrail. He has been with Juniper for the last 3 years working on various Network programmability & virtualization platforms. Prior to Juniper, he worked at Cisco Systems in the Internet Systems Business Unit (Catalyst 6500). Aniket received his Masters in Computer Science from University of Southern California and a graduate certificate in Management Science and Engineering from Stanford University. Course Abstract This session will be the first of a series of OpenContrail hands-on tutorials for developers who want to get deep into OpenContrail code. This “Basic OpenContrail Programming” Hands-on Session will focus on making developers proficient in writing and contributing code for our OpenContrail Project. Session will cover the following areas 1) Contrail Overview · Use Cases · Architecture recap 2) Contrail Hands on · Demo + Hands on - Configuration , VN, VM, Network Policies etc · DevStack introduction

Banv meetup 04162014

ozkan01

Contrail is an SDN and NFV solution that provides network virtualization and automation capabilities. It allows for the agile deployment of virtualized network functions and services. This accelerates time to revenue and lowers total cost of ownership by improving infrastructure utilization and reducing operational expenses through centralized management. Contrail is open source and integrates with OpenStack and other open standards-based platforms. It also supports third party virtualized network functions and analytics tools.

Simplify Networking for Containers

LinuxCon ContainerCon CloudOpen China

Presentation given at the 2017 LinuxCon China With the booming of Container technology, it brings obvious advantages for cloud: simple and faster deployment, portability and lightweight cost. But the networking challenges are significant. Users need to restructure their network and support container deployment with current cloud framework, like container and VMs. In this presentation, we will introduce new container networking solution, which provides one management framework to work with different network componenets through Open/friendly modelling mechnism. iCAN can simplify network deployment and management with most orchestration systems and a variety of data plane components, and design extendsible architect to define and validate Service Level Agreement(SLA) for cloud native applications, which is important factor for enterprise to deliver successful and stable service via containers.

PLNOG16: Automatyzacja kreaowania usług operatorskich w separacji od rodzaju ...

PROIDEA

VMworld 2013: Designing Network Virtualization for Data-Centers: Greenfield D...

VMworld

Iaas on xcp

The Linux Foundation

The document discusses building an Infrastructure as a Service (IaaS) cloud using the Xen Cloud Platform (XCP). It describes the key components required, including hardware, networking, storage, hypervisor, service management, and user interface/API. It then outlines VMOps' cloud stack built on XCP, including its multi-site redundant deployment architecture and network and storage virtualization approaches. Finally, it notes some limitations of using XCP and opportunities for future enhancements.

Colt SD-WAN experience learnings and future plans

Colt Technology Services

Load Balancing in the Cloud using Nginx & Kubernetes

Lee Calcote

Atf 3 q15-3 - transitioning to an automated

Mason Mei

CloudVision provides a network-wide control point for real-time provisioning and orchestration across Arista's EOS platforms. It offers turnkey workflow automation, network services, and integration with third party controllers. CloudVision extends Arista's EOS platforms to enable software-driven cloud networking through network-wide visibility, automation of operations, and open APIs for partners.

Colt's evolution from MPLS to Cloud Networking

Colt Technology Services

This document provides a summary of Colt's evolution from MPLS to cloud networking. It discusses Colt's transformation to deliver services via software-defined networking and network functions virtualization technologies. This allows services to be provisioned in minutes rather than days and offers dynamic, pay-as-you-use commercial models. Colt is developing platforms like Novitas for network orchestration and Stratus for network virtualization to enable its On Demand services and automation. Future initiatives involve using artificial intelligence for closed-loop automation and intelligent service management.

Similar to Consul by Mitchell - HashiCorp Meetup (20)

Virtualizing the Network to enable a Software Defined Infrastructure (SDI)

Support of containerized workloads in ONAP

#IBMEdge: "Not all Networks are Equal"

VMworld 2013: Advanced VMware NSX Architecture

#VMUGMTL - Xsigo Breakout

HP Virtual Connect technical fundamental101 v2.1

Understanding network and service virtualization

Colt's L3 VPN Evolution: Towards Hybrid MPLS and SD WAN

AWS re:Invent 2016: Optimizing Network Performance for Amazon EC2 Instances (...

Hyper v and live migration on cisco unified computing system - virtualized on...

Banv meetup-contrail

Banv meetup 04162014

Simplify Networking for Containers

PLNOG16: Automatyzacja kreaowania usług operatorskich w separacji od rodzaju ...

VMworld 2013: Designing Network Virtualization for Data-Centers: Greenfield D...

Iaas on xcp

Colt SD-WAN experience learnings and future plans

Load Balancing in the Cloud using Nginx & Kubernetes

Atf 3 q15-3 - transitioning to an automated

Colt's evolution from MPLS to Cloud Networking

Recently uploaded

Session 1 - Intro to Robotic Process Automation.pdf

UiPathCommunity

👉 Check out our full 'Africa Series - Automation Student Developers (EN)' page to register for the full program: https://bit.ly/Automation_Student_Kickstart In this session, we shall introduce you to the world of automation, the UiPath Platform, and guide you on how to install and setup UiPath Studio on your Windows PC. 📕 Detailed agenda: What is RPA? Benefits of RPA? RPA Applications The UiPath End-to-End Automation Platform UiPath Studio CE Installation and Setup 💻 Extra training through UiPath Academy: Introduction to Automation UiPath Business Automation Platform Explore automation development with UiPath Studio 👉 Register here for our upcoming Session 2 on June 20: Introduction to UiPath Studio Fundamentals: https://community.uipath.com/events/details/uipath-lagos-presents-session-2-introduction-to-uipath-studio-fundamentals/

GraphRAG for LifeSciences Hands-On with the Clinical Knowledge Graph

Neo4j

What is an RPA CoE? Session 1 – CoE Vision

DianaGray10

AppSec PNW: Android and iOS Application Security with MobSF

Ajin Abraham

Mobile Security Framework - MobSF is a free and open source automated mobile application security testing environment designed to help security engineers, researchers, developers, and penetration testers to identify security vulnerabilities, malicious behaviours and privacy concerns in mobile applications using static and dynamic analysis. It supports all the popular mobile application binaries and source code formats built for Android and iOS devices. In addition to automated security assessment, it also offers an interactive testing environment to build and execute scenario based test/fuzz cases against the application. This talk covers: Using MobSF for static analysis of mobile applications. Interactive dynamic security assessment of Android and iOS applications. Solving Mobile app CTF challenges. Reverse engineering and runtime analysis of Mobile malware. How to shift left and integrate MobSF/mobsfscan SAST and DAST in your build pipeline.

Mutation Testing for Task-Oriented Chatbots

Pablo Gómez Abajo

Conversational agents, or chatbots, are increasingly used to access all sorts of services using natural language. While open-domain chatbots - like ChatGPT - can converse on any topic, task-oriented chatbots - the focus of this paper - are designed for specific tasks, like booking a flight, obtaining customer support, or setting an appointment. Like any other software, task-oriented chatbots need to be properly tested, usually by defining and executing test scenarios (i.e., sequences of user-chatbot interactions). However, there is currently a lack of methods to quantify the completeness and strength of such test scenarios, which can lead to low-quality tests, and hence to buggy chatbots. To fill this gap, we propose adapting mutation testing (MuT) for task-oriented chatbots. To this end, we introduce a set of mutation operators that emulate faults in chatbot designs, an architecture that enables MuT on chatbots built using heterogeneous technologies, and a practical realisation as an Eclipse plugin. Moreover, we evaluate the applicability, effectiveness and efficiency of our approach on open-source chatbots, with promising results.

inQuba Webinar Mastering Customer Journey Management with Dr Graham Hill

LizaNolte

HERE IS YOUR WEBINAR CONTENT! 'Mastering Customer Journey Management with Dr. Graham Hill'. We hope you find the webinar recording both insightful and enjoyable. In this webinar, we explored essential aspects of Customer Journey Management and personalization. Here’s a summary of the key insights and topics discussed: Key Takeaways: Understanding the Customer Journey: Dr. Hill emphasized the importance of mapping and understanding the complete customer journey to identify touchpoints and opportunities for improvement. Personalization Strategies: We discussed how to leverage data and insights to create personalized experiences that resonate with customers. Technology Integration: Insights were shared on how inQuba’s advanced technology can streamline customer interactions and drive operational efficiency.

Taking AI to the Next Level in Manufacturing.pdf

ssuserfac0301

Read Taking AI to the Next Level in Manufacturing to gain insights on AI adoption in the manufacturing industry, such as: 1. How quickly AI is being implemented in manufacturing. 2. Which barriers stand in the way of AI adoption. 3. How data quality and governance form the backbone of AI. 4. Organizational processes and structures that may inhibit effective AI adoption. 6. Ideas and approaches to help build your organization's AI strategy.

"$10 thousand per minute of downtime: architecture, queues, streaming and fin...

Fwdays

Direct losses from downtime in 1 minute = $5-$10 thousand dollars. Reputation is priceless. As part of the talk, we will consider the architectural strategies necessary for the development of highly loaded fintech solutions. We will focus on using queues and streaming to efficiently work and manage large amounts of data in real-time and to minimize latency. We will focus special attention on the architectural patterns used in the design of the fintech system, microservices and event-driven architecture, which ensure scalability, fault tolerance, and consistency of the entire system.

9 CEO's who hit $100m ARR Share Their Top Growth Tactics Nathan Latka, Founde...

saastr

A Deep Dive into ScyllaDB's Architecture

ScyllaDB

Astute Business Solutions | Oracle Cloud Partner |

AstuteBusiness

zkStudyClub - LatticeFold: A Lattice-based Folding Scheme and its Application...

Alex Pruden

Folding is a recent technique for building efficient recursive SNARKs. Several elegant folding protocols have been proposed, such as Nova, Supernova, Hypernova, Protostar, and others. However, all of them rely on an additively homomorphic commitment scheme based on discrete log, and are therefore not post-quantum secure. In this work we present LatticeFold, the first lattice-based folding protocol based on the Module SIS problem. This folding protocol naturally leads to an efficient recursive lattice-based SNARK and an efficient PCD scheme. LatticeFold supports folding low-degree relations, such as R1CS, as well as high-degree relations, such as CCS. The key challenge is to construct a secure folding protocol that works with the Ajtai commitment scheme. The difficulty, is ensuring that extracted witnesses are low norm through many rounds of folding. We present a novel technique using the sumcheck protocol to ensure that extracted witnesses are always low norm no matter how many rounds of folding are used. Our evaluation of the final proof system suggests that it is as performant as Hypernova, while providing post-quantum security. Paper Link: https://eprint.iacr.org/2024/257

Connector Corner: Seamlessly power UiPath Apps, GenAI with prebuilt connectors

DianaGray10

Join us to learn how UiPath Apps can directly and easily interact with prebuilt connectors via Integration Service--including Salesforce, ServiceNow, Open GenAI, and more. The best part is you can achieve this without building a custom workflow! Say goodbye to the hassle of using separate automations to call APIs. By seamlessly integrating within App Studio, you can now easily streamline your workflow, while gaining direct access to our Connector Catalog of popular applications. We’ll discuss and demo the benefits of UiPath Apps and connectors including: Creating a compelling user experience for any software, without the limitations of APIs. Accelerating the app creation process, saving time and effort Enjoying high-performance CRUD (create, read, update, delete) operations, for seamless data management. Speakers: Russell Alfeche, Technology Leader, RPA at qBotic and UiPath MVP Charlie Greenberg, host

"Frontline Battles with DDoS: Best practices and Lessons Learned", Igor Ivaniuk

Fwdays

At this talk we will discuss DDoS protection tools and best practices, discuss network architectures and what AWS has to offer. Also, we will look into one of the largest DDoS attacks on Ukrainian infrastructure that happened in February 2022. We'll see, what techniques helped to keep the web resources available for Ukrainians and how AWS improved DDoS protection for all customers based on Ukraine experience

[OReilly Superstream] Occupy the Space: A grassroots guide to engineering (an...

Jason Yip

The typical problem in product engineering is not bad strategy, so much as “no strategy”. This leads to confusion, lack of motivation, and incoherent action. The next time you look for a strategy and find an empty space, instead of waiting for it to be filled, I will show you how to fill it in yourself. If you’re wrong, it forces a correction. If you’re right, it helps create focus. I’ll share how I’ve approached this in the past, both what works and lessons for what didn’t work so well.

Dandelion Hashtable: beyond billion requests per second on a commodity server

Antonios Katsarakis

This slide deck presents DLHT, a concurrent in-memory hashtable. Despite efforts to optimize hashtables, that go as far as sacrificing core functionality, state-of-the-art designs still incur multiple memory accesses per request and block request processing in three cases. First, most hashtables block while waiting for data to be retrieved from memory. Second, open-addressing designs, which represent the current state-of-the-art, either cannot free index slots on deletes or must block all requests to do so. Third, index resizes block every request until all objects are copied to the new index. Defying folklore wisdom, DLHT forgoes open-addressing and adopts a fully-featured and memory-aware closed-addressing design based on bounded cache-line-chaining. This design offers lock-free index operations and deletes that free slots instantly, (2) completes most requests with a single memory access, (3) utilizes software prefetching to hide memory latencies, and (4) employs a novel non-blocking and parallel resizing. In a commodity server and a memory-resident workload, DLHT surpasses 1.6B requests per second and provides 3.5x (12x) the throughput of the state-of-the-art closed-addressing (open-addressing) resizable hashtable on Gets (Deletes).

How to Interpret Trends in the Kalyan Rajdhani Mix Chart.pdf

Chart Kalyan

Freshworks Rethinks NoSQL for Rapid Scaling & Cost-Efficiency

ScyllaDB

Nordic Marketo Engage User Group_June 13_ 2024.pptx

MichaelKnudsen27

Y-Combinator seed pitch deck template PP

c5vrf27qcz

Recently uploaded (20)

Session 1 - Intro to Robotic Process Automation.pdf

GraphRAG for LifeSciences Hands-On with the Clinical Knowledge Graph

What is an RPA CoE? Session 1 – CoE Vision

AppSec PNW: Android and iOS Application Security with MobSF

Mutation Testing for Task-Oriented Chatbots

inQuba Webinar Mastering Customer Journey Management with Dr Graham Hill

Taking AI to the Next Level in Manufacturing.pdf

"$10 thousand per minute of downtime: architecture, queues, streaming and fin...

9 CEO's who hit $100m ARR Share Their Top Growth Tactics Nathan Latka, Founde...

A Deep Dive into ScyllaDB's Architecture

Astute Business Solutions | Oracle Cloud Partner |

zkStudyClub - LatticeFold: A Lattice-based Folding Scheme and its Application...

Connector Corner: Seamlessly power UiPath Apps, GenAI with prebuilt connectors

"Frontline Battles with DDoS: Best practices and Lessons Learned", Igor Ivaniuk

[OReilly Superstream] Occupy the Space: A grassroots guide to engineering (an...

Dandelion Hashtable: beyond billion requests per second on a commodity server

How to Interpret Trends in the Kalyan Rajdhani Mix Chart.pdf

Freshworks Rethinks NoSQL for Rapid Scaling & Cost-Efficiency

Nordic Marketo Engage User Group_June 13_ 2024.pptx

Y-Combinator seed pitch deck template PP

Consul by Mitchell - HashiCorp Meetup

2. Service Networking Challenge

3. Mixed Technologies Mainframe Bare Metal Virtual Machine Container Serverless

4. Mixed Technologies Network Mainframe Bare Metal Virtual Machine Container Serverless

5. Traditional Datacenter WebWeb Web DB

6. Multi-Datacenter WebWeb Web DB DB VPN Kubernetes K/V

7. Modern Datacenter K8S CF VMs Metal K8S CF VMs Metal K8S ECS VMs FaaS K8S PaaS VMs FaaS

9. Body slide  3 line max. Service Registry & Discovery Service Mesh Solving Service Networking ▪ Service Registry & Discovery ▪ Service Mesh

10. Network Modernization Technology Process Centralized Hardware Centralized Hardware Centralized Software Distributed Software Manual Update Load Balancers Dynamic Discovery Progressive Delivery Service Discovery Service Mesh

11. Consul Connect

12. IP1 IP2 PLAIN TCP

13. IP2IP1 IP1 IP2 MUTUAL TLS PLAIN TCP Web DB API

14. 10.0.1.1/24 IP2IP1 Web DB API

15. 10.0.2.1/2410.0.1.1/24 IP2IP1 Web DB API X

16. 10.0.2.1/2410.0.1.1/24 IP2IP1 Web DB API X Requires complex, manual network configuration to make work.

17.

18. Mesh Gateways

19. 10.0.2.1/2410.0.1.1/24 IP2IP1 Web DB API X

20. 10.0.2.1/2410.0.1.1/24 IP2IP1 Web DB API Mesh   Gateway Mesh   Gateway

21. GWGWGW

22. Security ▪ Gateways cannot decrypt payloads – Do not have keys, only end service has the private key – Works by inspecting SNI headers ▪ Intentions enforced across datacenters

23. 10.0.2.1/2410.0.1.1/24 IP2IP1 Web DB API Allow "API" to "DB"  Deny "Web" to "DB" Connect   Mesh   Gateway Connect   Mesh   Gateway

24. Progressive  Delivery ▪ The idea that we need to limit risk when rolling out new software. ▪ Canary, feature ﬂags, rolling deploys, etc. ▪ A requirement of modern application delivery as the number of applications grow.

25. Connect Layer 7 Features

26. "web.service.consul"

27. HTTP Routing Traffic Splitting Custom Resolution "web.service.consul"

28. HTTP Routing Traffic Splitting Custom Resolution "web.service.consul"

29. HTTP Routing ▪ Path (exact, preﬁx, regex) ▪ Header ▪ Query Params ▪ HTTP Methods

30. /admin => service: "admin"  path: "/" HTTP Routing Traffic Splitting Custom Resolution "web.service.consul"

31. /admin => service: "admin"  path: "/" Subset: "v2" HTTP Routing Traffic Splitting Custom Resolution "web.service.consul"

32. /admin => service: "admin"  path: "/" Subset: "v2" Meta.Version == 2 HTTP Routing Traffic Splitting Custom Resolution "web.service.consul" v2 v1 v2

33. Consul + Kubernetes

34. Kubernetes ▪ Discovery: kube-dns, kube-proxy ▪ Conﬁguration: ConﬁgMaps ▪ Segmentation: NetworkPolicy + Controller ▪ ... but only for single-cluster Kubernetes workloads.

35. Consul Unifies Everything ▪ Kubernetes, Cloud, VMs, Bare Metal ▪ Multi-Datacenter, Multi-Cloud, Multi- Platform ▪ Consistent

36. Consul + Kubernetes Features ▪ Helm Chart ▪ Auto-join Provider ▪ Catalog Sync ▪ Connect Auto-inject ▪ K8S Service Account Auth ▪ Automatic TLS ▪ Mesh Gateways!

Consul by Mitchell - HashiCorp Meetup

Recommended

Recommended

More Related Content

What's hot

What's hot (20)

Similar to Consul by Mitchell - HashiCorp Meetup

Similar to Consul by Mitchell - HashiCorp Meetup (20)

Recently uploaded

Recently uploaded (20)

Consul by Mitchell - HashiCorp Meetup