Uploaded byAxel Fontaine
Immutable Infrastructure: the new App Deployment
The document discusses the concept of immutable infrastructure and its advantages for application deployment, contrasting traditional practices with modern approaches. It emphasizes the importance of treating server instances as disposable, ensuring consistency across environments, and utilizing cloud benefits for scalability and cost management. The speaker, Axel Fontaine, highlights the need for automation, configuration management, and maintaining simplicity in system architecture for efficient deployment processes.
More Related Content
Similar to Immutable Infrastructure: the new App Deployment
![谷歌留痕技术教程[ 𝙩𝙤𝙥 𝟮𝟯𝟯. 𝙘 𝙤𝙢 ]](https://cdn.slidesharecdn.com/ss_thumbnails/top233-260130173900-2eb784f9-thumbnail.jpg?width=640&height=640&fit=bounds)
Immutable Infrastructure: the new App Deployment
- 1. Immutable Infrastructure The NewApp Deployment AXEL FONTAINE @axelfontaine axel@boxfuse.com
- 2. About Axel Fontaine •Founder and CEO of Boxfuse • Over 15 years industry experience • Continuous Delivery expert • Regular speaker at tech conferences • JavaOne RockStar in 2014 @axelfontaine
- 3.
- 4.
- 5. Let’s start witha small story
- 6.
- 7. Heater that givesoff a little bit of light Light that gives off a little bit of heat
- 9.
- 10. Simple, stable, standards-compliant interface with aclear contract My responsibility The electricity company’s responsibility
- 11. Simple, stable, standards-compliant interface with aclear contract Room For Innovation Undifferentiated Heavy Lifting
- 12. back to ITinfrastructure …
- 13. POLL: what type ofinfrastructure are you running on? • On Premise • Colocation • Root Server • Cloud
- 14. How did thisevolve ?
- 15. sometime in the20th century …
- 17.
- 19. +=ON PREM + Challenges • Power, Network,Cooling • Physical Security • Physical Space • Procurement, Vendor Management • Capacity Planning • Financing • OS + Patches • App + Updates
- 20.
- 21.
- 22. +=COLO + Simple, stable, standards-compliant interface: (19”Rack, AC Power, Ethernet, …)
- 23. Can change as longas it complies with the interface contract +=COLO + Undifferentiated Heavy Lifting Our responsibility
- 24. =ROOT SERVER + Undifferentiated Heavy Lifting Our responsibility Canchange as long as it complies with the interface contract
- 25. =ROOT SERVER + Undifferentiated Heavy Lifting Simple,stable, standards- compliant interface Software <-> Hardware
- 26. Room For Innovation + Undifferentiated Heavy Lifting Couldthis be our industry’s Edison Screw? Simple, stable, standards- compliant interface
- 27. Let’s talk aboutsoftware
- 28. POLL: which level ofautomation are you at? • Build • Unit Tests • Continuous Integration • Acceptance Tests • Continuous Deployment (Code) • Continuous Deployment (Code + DB + Configuration) • Infrastructure
- 29.
- 30. • One immutableunit • Regenerated after every change • Promoted from Environment to Environment Classic Mistake: Build per Environment
- 31.
- 32.
- 33. why aren’t wedoing the same for the layers this is running on ???
- 34. what could possiblygo wrong in these other layers ???
- 35.
- 36.
- 37.
- 38.
- 39.
- 40. what aren’t weholding our servers to the same standards as our applications ???
- 42.
- 43.
- 44. OS Kernel Libraries Language App Server App OSKernel Libraries Language App Server App OS Kernel Libraries Language App Server App Multiple instances in multiple Environments
- 45. OS Kernel Libraries Language App Server App Multipleinstances in multiple Environments • All instances should be as similar as possible (any difference is a potential source of errors) • That also includes your local Dev environment! • Must be able to reliably provision new ones (and recreate existing ones from scratch)
- 46. OS Kernel Libraries Language App Server App OSKernel Libraries Language App Server App OS Kernel Libraries Language App Server App Updates UpdatesUpdates Sysadmin
- 47. If I hadasked my customers what they wanted they would have said a faster horse. Henry Ford
- 48. OS Kernel Libraries Language App Server App OSKernel Libraries Language App Server App OS Kernel Libraries Language App Server App Updates UpdatesUpdates Sysadmin
- 49. OS Kernel Libraries Language App Server App OSKernel Libraries Language App Server App OS Kernel Libraries Language App Server App Updates UpdatesUpdates Automated Sysadmin
- 50. fast forward to2015 …
- 51. Every day, AWSadds enough server capacity to power the whole $5B enterprise Amazon.com was in 2003. Weekends included.
- 52. "Advanced Test Reactor"by Argonne National Laboratory - originally posted to Flickr as Advanced Test Reactor core, Idaho National LaboratoryUploaded using F2ComButton. Licensed under CC BY-SA 2.0 via Wikimedia Commons - http://commons.wikimedia.org/wiki/File:Advanced_Test_Reac tor.jpg#mediaviewer/File:Advanced_Test_Reactor.jpg "RIAN archive 341194 Kursk Nuclear Power Plant" by RIA Novosti archive, image #341194 / Sergey Pyatakov / CC-BY-SA 3.0. Licensed under CC BY-SA 3.0 via Wikimedia Commons - http://commons.wikimedia.org/wiki/File:RIAN_archive_341194_ Kursk_Nuclear_Power_Plant.jpg#mediaviewer/File:RIAN_archi ve_341194_Kursk_Nuclear_Power_Plant.jpg Control Plane Data Plane
- 53. Control Plane DataPlane
- 54. • Shift toa world of abundance (no more resource scarcity) • Clean Control Plane/Data Plane split with API-based provisioning • Cost-based Architectures with the ability to turn infrastructure off Benefits of the cloud
- 55. it is timeto rethink the faster horse
- 56.
- 57. App OS Kernel Libraries Language App Server BuildTest Undifferentiated Heavy lifting
- 58.
- 59. App Machine Image OS Kernel Libraries Language App Server BuildTest Machine Image
- 60. OS Kernel Libraries Language App Server App OSKernel Libraries Language App Server App OS Kernel Libraries Language App Server App Updates
- 61.
- 62. but there isone big problem left …
- 63.
- 64.
- 65. Running servers in productionshould be like going backpacking. You take the bare minimum with you. Anything else is going to hurt. A Wise Man
- 66. what is reallyadding business value ???
- 67.
- 68. Editors Daemons OS Kernel Libraries Utilities Drivers App AppServer Package Mgr Compilers SSH Firewall Compatibility Man Pages Language Log Files Users Shells Network Cable
- 69.
- 70.
- 71.
- 72. who is thisfor ???
- 73.
- 74.
- 75. What are theimplications ???
- 76. Focus shift Individual instancesbecome disposable Instance Service
- 77. Treat servers likecattle instead of pets
- 78. high uptime isa liability The longer an instance is up, the harder it becomes to recreate exactly (and it will fail eventually!)
- 79. How to solveservice discovery ? Use a stable entry point with an internal registry Bootable App Bootable App Bootable App ? Elastic Load Balancer
- 80. What about security? When was the last time your toaster got hacked?
- 81. What about security? • Smallest possible attack surface • Vastly reduced implications due to low uptime and transient nature of instances • Very difficult to exploit other systems because essential tooling is missing
- 82. • Bake asmuch configuration as possible for all environments directly in the Bootable App • Use environment detection and auto-configuration • Pass remaining configuration at startup and expose it as environment variables what about configuration ???
- 83. what about thedatabase ???
- 84. Bootable App what about thedatabase ???
- 85. what about thedatabase ??? • Keep all persistent state, including the database, out of the instance • Many good hosted solutions available like Amazon RDS or Google Cloud SQL • Use a database migration tool like Flyway to update on application startup
- 86. Bootable App what about thelogs ??? Ship logs to a central log server where they can be • aggregated • stored and backuped • indexed • searched through a nice web UI Many good hosted solutions • Loggly • Logentries • Papertrail • …
- 87. what about sessions??? Bootable App Keep session in an encrypted and signed cookie • avoids session timeouts • avoids server clustering & session replication • avoids sticky sessions & server affinity
- 88. what about rollingout new versions ???
- 89.
- 90.
- 91.
- 92.
- 93. understanding modern CPUs BothIntel and AMD have hardware support for virtualization • isolation • performance
- 94.
- 95. Bootable App Hardware Hypervisor Bootable App Hardware Hypervisor OS+Container Runtime BootableApp Hardware OS+Container Runtime On PremOn Prem / Cloud Cloud Only makes sense if you cannot afford $9.60/month granularity
- 96. Bootable App Hardware Hypervisor Bootable App Hardware Hypervisor OS+Container Runtime BootableApp Hardware OS+Container Runtime On PremOn Prem / Cloud Cloud Only makes sense if you cannot afford 1.3 cents /hour granularity
- 97.
- 98. • One immutableunit • Regenerated after every change • Promoted from Environment to Environment Classic Mistake: Build per Environment
- 99. Bootable App • One immutableunit • Regenerated after every change • Promoted from Environment to Environment Classic Mistake: Build per Environment
- 100.
- 101.