SpringOne Platform 2017 Tim Leong, Comcast Cloud Foundry was introduced in Comcast about three years ago and we are in a constant journey of expanding our environment. DevOps teams love Cloud Foundry and put strong pressure on our Cloud team to extend the platform with new features as well as maintain exponential capacity growth across multiple foundations. Join us for a deep-dive on how Comcast leverages BOSH, the Service Broker API and Custom Buildpacks to add critical functionality for our DevOps teams to deploy and maintain geographically dispersed applications.

1. Expand Cloud Foundry
for the Enterprise
By Tim Leong
Cloud Architect, Comcast
@PhillyTJL
1

2. Copyright 2017 Comcast 3
Enterprise Cloud

3. Copyright 2017 Comcast
Quick Facts
4
Foundations
2017201620152014
Developers
1,500+
2014 2017
8,300
19,000
Apps
AIs
Applications
Transactions
AWS
AWS
AWS
25 k / second
1.5 bn / day

4. Copyright 2017 Comcast
Enterprise Starter Pack
5
DR
change control
monitoring
security/compliance
backups

5. Isolation

6. Copyright 2017 Comcast
Isolation
Challenges
7
• Applications: Single Site Only
• Data: Shared Data, Data Replication
• Operators: Management / Consistency

7. Copyright 2017 Comcast
App Redundancy: BYOU and GSLB
• Marketplace Service for GSLB
• Custom URLs
• Health-check and Automated Failover
• Custom URLs and Certificates
8
cf create-
service BYOU
cf create-
service GSLB
West PCF East PCF
app.site1.com app.site2.com
app.site.com app.site.com
gslb

8. Copyright 2017 Comcast
BYOU
9
// Command Line
cf create-service c-byou shared my-byou -c
payload.json
// payload.json
{
"privateFQDN": ["my-app.site1.example.com", "my-
app.site2.example.com"],
"publicFQDN": "my-app.example.com",
"owner": "app-owner-ntid",
"description": "Requested by app-owner-name“,
"cert" :{
… CERT DETAILS …
}
}
// Command Line
cf create-service c-gslb shared my-gslb -c
payload.json
// payload.json
{
"publicFQDN": "my-app-name.example.com",
"gslb": "my-app-name.g.example.com",
"health": "/health"
}
GSLBaaS

9. Copyright 2017 Comcast
Isolation Challenges
Persistence
• Resilient Data = BYO
• Sharing Data Across Sites = BYO
• Solution = TBD
• Docker Based Container Orchestration (talk to us)
Management Plane
• CI/CD for CF Operators
11

10. Copyright 2017 Comcast
Enterprise Starter Pack
12
DR
change control
monitoring
security/compliance
backups

11. Compliance
--------
--------
--------

12. Copyright 2017 Comcast
Compliance
Challenges
14
• Multi-tenant Policy Enforcement
• Forensic Analysis on Dynamic IPs
• “What’s a PaaS?”--------
--------
--------

13. Copyright 2017 Comcast
Success Factors
15
• Education
• Reduce Attack Surface
• Don’t mix and match
• Application based Filtering
• PCF Add-Ons
• Logging / Auditing
• PCF Documentation
--------
--------
--------

14. Copyright 2017 Comcast
Enterprise Starter Pack
16
DR
change control
monitoring
security/compliance
backups

15. Monitoring and Metrics

16. Copyright 2017 Comcast
Monitoring
Challenges
18
• Total Stack KPI (App, Platform, Infrastructure)
• Status, Notification, Events, Trends
• Transparency
• Modular
• OpenSource Only

17. Copyright 2017 Comcast 19
git -- Available on github.com/comcast
Open Source
PCF
Commercial
Collection/
Alerting
Metrics DBData Refinement
Cloud Foundry
Telegraf AgentsJMX Bridge
EVENTS TRENDINGNOTIFICATION
System
Metrics
BOSH
telegraf
buildpack
CC API
CF Metrics
App
Metrics
VROPS
Infra.
Metrics
STATUS
staytus.co
slack.com
alerta.io grafana.com
BOSH Config
git
git

18. Copyright 2017 Comcast 20

19. Copyright 2017 Comcast 21

20. Copyright 2017 Comcast 22

21. Copyright 2017 Comcast
Enterprise Starter Pack
23
DR
change control
monitoring
security/compliance
backups

22. Copyright 2017 Comcast 24

23. Learn More. Stay Connected.
25
#springone@s1p
How Comcast Embraced Open
Nithya Ruff & Shilla Saebi
Wed 17:40 | Room 2010
Comcast Booth
@ The Hub
* Platform Operators *
* Application Owners *
* Open Source Promoters *
* Recruiting *
Keynote Panel with Comcast
Greg Otto
Thursday 09:35