RED HAT
CLOUD PLATFORMS
Giovanni Galloro
Cloud Solution Architect, Red Hat
ggalloro@redhat.com
Cloud for Application Agility
RED HAT CLOUD PLATFORMS
BUSINESS DEMANDS DRIVE I.T. TRANSFORMATION
● Business wants agility, lower
cost, and new capabilities.
● IT is struggling with existing
legacy infrastructure
architecture and cost model.
● Cloud providers are using
next- generation IT built on
open source technologies.
● IT needs to adopt cloud
architectures and technologies
to close the innovation gap.
RED HAT CLOUD PLATFORMS
Infrastructure as a Service:
OpenStack
RED HAT CLOUD PLATFORMS
CLOUD INFRASTRUCTURE FOR APPLICATION AGILITY
RED HAT CLOUD PLATFORMS
CLOUD INFRASTRUCTURE FOR APPLICATION AGILITY
● Evolving from pure IaaS
● Modular - “Pluggable” Architecture
● Set of Integrated Projects
RED HAT CLOUD PLATFORMS
● Top OpenStack Priorities
● 44% Increased emphasis on
certified hardware
● 44% commercial OpenStack support
● 43% integration with open source
management initiatives
Source: IDC Red Hat Hybrid Cloud Management Survey, October 2014
Plan to use OpenStack APIs to enable
management integration across infrastructure
Expect vendors will leverage OpenStack in
next-generation products
Will implement a 100% OpenStack Cloud
Unsure
43%
27%
11%
12%
18%
WHAT ROLE DOES OPENSTACK HAVE IN YOUR
CLOUD STRATEGY?
RED HAT CLOUD PLATFORMS
RED HAT COMMUNITY CONTRIBUTION
Source: Bitergia http://activity.openstack.org/dash/browser/scm-companies.html?release=juno
Stakalytics http://stackalytics.com/?release=juno&company=red%20hat
● Top Contributor to Juno Release (incl. Inktank & eNovance)
Overall commits per
company (aggregated)
Red Hat community
contributions to projects
0
500
1000
1500
2000
2500
3000
Red Hat
HP
IBM
Mirantis
Rackspace
SUSE
OpenStack
Foundation
VMware
20.92%
18.48%
23.98%
6.76%
24.86%
27.35%
7.38%
5.44%
15.78%
5.39%
Nova Horizon Heat Neutron Ceilometer
Sahara Keystone Cinder Swift Glance
Hybrid Cloud Management
RED HAT CLOUD PLATFORMS
http://www.gartner.com/it-glossary/cloud-management-platforms
Source: “Evaluation Criteria for Cloud Management Platforms,” 19 July 2012 (refreshed 10 February 2014), By Alessandro Perilli, Gartner
GARTNER REFERENCE ARCHITECTURE FOR IAAS
And the Role of a CMP Solution
RED HAT CLOUD PLATFORMS
CREATE AN OPEN HYBRID CLOUD
CloudForms Adds Heterogeneous Capacity
Platform as a Service:
OpenShift
RED HAT CLOUD PLATFORMS
PAAS CLOUD SERVICE MODEL
RED HAT CLOUD PLATFORMS
PAAS LETS YOU STREAMLINE APP DEV
With PaaS
How to Build an App:
1. Have Idea
2. Get Budget
3. Code
4. Test
5. Launch
6. Automatically Scale
How to Build an App:
1. Have Idea
2. Get Budget
3. Submit VM Request request
4. Wait
5. Deploy framework/appserver
6. Deploy testing tools
7. Code
8. Test
9. Configure Prod VMs
10. Push to Prod
11. Launch
12. Request VMs to meet demand
13. Wait
14. Deploy app to new VMs
15. Etc.
Virtualized
How to Build an App:
1. Have Idea
2. Get Budget
3. Submit hardware acquisition request
4. Wait
5. Get Hardware
6. Rack and Stack Hardware
7. Install Operating System
8. Install Operating System Patches
9. Create user Accounts
10. Deploy framework/appserver
11. Deploy testing tools
12. Code
13. Test
14. Buy and configure Prod servers
15. Push to Prod
16. Launch
17. Order more servers to meet demand
18. Wait…
19. Deploy new servers
20. Etc.
Physical
“The use of Platform-as-a-Service technologies will
enable IT organizations to become more agile and
more responsive to the business needs.” –Gartner*
RED HAT CLOUD PLATFORMS
DEVOPS / CONTINOUS DELIVERY THROUGH
PLATFORM AS A SERVICE
RED HAT CLOUD PLATFORMS
REGISTRY / CONTAINER
DISCOVERY
CONTAINER FORMAT
WITH DOCKER
ISOLATION WITH LINUX
CONTAINERS
ORCHESTRATION WITH
KUBERNETES
OPENSHIFT:
DRIVING AND ADOPTING STANDARDS
Red Hat Strategy for
Linux Containers
RED HAT CLOUD PLATFORMS
WHAT ARE LINUX CONTAINERS?
Software packaging concept that typically includes an application and all of its
runtime dependencies.
● Easy to deploy and portable
across host systems
● Isolates applications on a
host operating system
● In RHEL, this is done through:
– Control Groups (cgroups)
– kernel namespaces
– SELinux, sVirt
– Docker
HOST OS
SERVER
CONTAINER
LIBS
APP
RED HAT CLOUD PLATFORMS
Traditional OS Containers
TRADITIONAL OS VS. CONTAINERS
HARDWARE
HOST OS
HARDWARE
HOST OS
CONTAINER
LIBS
APP A
LIBS A LIBS B LIBS LIBS
APP A APP B
CONTAINER
LIBS
APP B
RED HAT CLOUD PLATFORMS
LINUX DOCKER CONTAINER LAYERING
● New images can be created by adding
layers
● Layering model allows for specialization
● Base image and select number of
platform layers provided by Red Hat
● ISV images form the base of the RHEL
ecosystem
● Stack optimized for individual
application with minimal packaging per
layer
RED HAT CLOUD PLATFORMS
CONTAINERS DELIVER MANY BENEFITS
Base: 171 IT and Developer/programmer decision-makers at companies with 500+ employees in APAC, EMEA, and NA
Source: A commissioned study conducted by Forrester Consulting on behalf of Red Hat, January, 2015
Faster provisioning
Greater deployment flexibility
Ability to deliver/deploy applications faster
Greater application mobility/portability
69%
70%
72%
73%
How important are the following benefits of containers to your organization?
Critically or Very Important
73%
72%
70%
69%
RED HAT CLOUD PLATFORMS
● Who built this image?
● What’s its purpose? Was
it created to support a
demo?
● Is it safe to consume?
● Who maintains it?
NEED FOR A “CHAIN OF TRUST”
DOCKER HUB
docker pull mongodb
RED HAT CLOUD PLATFORMS
WHAT'S INSIDE THE CONTAINER MATTERS
36% of official images in Docker Hub contain high priority
security vulnerabilities
● High vulnerabilities: ShellShock (bash),
Heartbleed (OpenSSL), etc.
● Medium vulnerabilities: Poodle
(OpenSSL), etc.
● Low vulnerabilities: gcc: array memory
allocations could cause integer overflow
All Images (n=962)
0%
10%
20%
30%
40%
50%
60%
70%
80%
90%
100%
36%
28%
Low priority and no vulnerabilities Medium priority
High priority
Source: Over 30% of Official Images in Docker Hub Contain High Priority Security Vulnerabilities, Jayanth Gummaraju, Tarun Desikan, and Yoshio
Turner, BanyanOps, May 2015 (http://www.banyanops.com/pdf/BanyanOps-AnalyzingDockerHub-WhitePaper.pdf)
RED HAT CLOUD PLATFORMS
SECURING HOSTS AND CONTAINERS
RED HAT CONTAINER CERTIFICATION
UNTRUSTED
● How can you validate what’s in the host and
the containers? Will it compromise your
infrastructure?
● It “should” work from host to host, but can
you be sure?
CERTIFIED
● Trusted source for the host and the
containers
● Enterprise life cycle for container content
● Proven portability
● Container Development Kit
HOST OS
HARDWARE
CONTAINER
LIBS
APP
CONTAINER
LIBS
APP
HOST OS
HARDWARE
CONTAINER
LIBS
APP
CONTAINER
LIBS
APP
RED HAT CLOUD PLATFORMS
RED HAT ATOMIC
ENTERPRISE PLATFORM
Run and orchestrate multi-container based applications at scale
An integrated infrastructure platform powered
by Red Hat Enterprise Linux that is designed
to run, orchestrate, and scale container-based
applications and services
● Easily manage and scale applications and
infrastructure through a managed cluster
of container hosts
● Gain application resiliency and elasticity
via orchestration and service aggregation
RED HAT CLOUD PLATFORMS
OPENSHIFT ENTERPRISE
by Red Hat
An integrated hybrid cloud application
platform for application development and
deployment that facilitates DevOps
workflows and needs
● Develop, build, and manage container
based applications with application
lifecycle management and a rich
developer experience
● Easily turn source code into running
applications with source-to-image
capabilities
Integrated hybrid cloud application platform for application development and
deployment
RED HAT CLOUD PLATFORMS
RED HAT ATOMIC ENTERPRISE PLATFORM AND
OPENSHIFT 3
CONTAINER API
RHEL RHEL ATOMIC HOST
CONTAINER ORCHESTRATION AND MANAGEMENT
CONTAINER CONTAINER CONTAINER
PHYSICAL INFRASTRUCTURE
LANGUAGE RUNTIMES, MIDDLEWARE, DATABASES,
AND OTHER SERVICES
DEVOPS TOOL AND EXPERIENCE
RED HAT CLOUD PLATFORMS
SIMPLIFYING CONTAINER ADOPTION
FOR PARTNERS
RED HAT CLOUD PLATFORMS
Thank You

Red hat cloud platforms

  • 1.
    RED HAT CLOUD PLATFORMS GiovanniGalloro Cloud Solution Architect, Red Hat ggalloro@redhat.com
  • 2.
  • 3.
    RED HAT CLOUDPLATFORMS BUSINESS DEMANDS DRIVE I.T. TRANSFORMATION ● Business wants agility, lower cost, and new capabilities. ● IT is struggling with existing legacy infrastructure architecture and cost model. ● Cloud providers are using next- generation IT built on open source technologies. ● IT needs to adopt cloud architectures and technologies to close the innovation gap.
  • 4.
    RED HAT CLOUDPLATFORMS
  • 5.
    Infrastructure as aService: OpenStack
  • 6.
    RED HAT CLOUDPLATFORMS CLOUD INFRASTRUCTURE FOR APPLICATION AGILITY
  • 7.
    RED HAT CLOUDPLATFORMS CLOUD INFRASTRUCTURE FOR APPLICATION AGILITY ● Evolving from pure IaaS ● Modular - “Pluggable” Architecture ● Set of Integrated Projects
  • 8.
    RED HAT CLOUDPLATFORMS ● Top OpenStack Priorities ● 44% Increased emphasis on certified hardware ● 44% commercial OpenStack support ● 43% integration with open source management initiatives Source: IDC Red Hat Hybrid Cloud Management Survey, October 2014 Plan to use OpenStack APIs to enable management integration across infrastructure Expect vendors will leverage OpenStack in next-generation products Will implement a 100% OpenStack Cloud Unsure 43% 27% 11% 12% 18% WHAT ROLE DOES OPENSTACK HAVE IN YOUR CLOUD STRATEGY?
  • 9.
    RED HAT CLOUDPLATFORMS RED HAT COMMUNITY CONTRIBUTION Source: Bitergia http://activity.openstack.org/dash/browser/scm-companies.html?release=juno Stakalytics http://stackalytics.com/?release=juno&company=red%20hat ● Top Contributor to Juno Release (incl. Inktank & eNovance) Overall commits per company (aggregated) Red Hat community contributions to projects 0 500 1000 1500 2000 2500 3000 Red Hat HP IBM Mirantis Rackspace SUSE OpenStack Foundation VMware 20.92% 18.48% 23.98% 6.76% 24.86% 27.35% 7.38% 5.44% 15.78% 5.39% Nova Horizon Heat Neutron Ceilometer Sahara Keystone Cinder Swift Glance
  • 10.
  • 11.
    RED HAT CLOUDPLATFORMS http://www.gartner.com/it-glossary/cloud-management-platforms Source: “Evaluation Criteria for Cloud Management Platforms,” 19 July 2012 (refreshed 10 February 2014), By Alessandro Perilli, Gartner GARTNER REFERENCE ARCHITECTURE FOR IAAS And the Role of a CMP Solution
  • 12.
    RED HAT CLOUDPLATFORMS CREATE AN OPEN HYBRID CLOUD CloudForms Adds Heterogeneous Capacity
  • 13.
    Platform as aService: OpenShift
  • 14.
    RED HAT CLOUDPLATFORMS PAAS CLOUD SERVICE MODEL
  • 15.
    RED HAT CLOUDPLATFORMS PAAS LETS YOU STREAMLINE APP DEV With PaaS How to Build an App: 1. Have Idea 2. Get Budget 3. Code 4. Test 5. Launch 6. Automatically Scale How to Build an App: 1. Have Idea 2. Get Budget 3. Submit VM Request request 4. Wait 5. Deploy framework/appserver 6. Deploy testing tools 7. Code 8. Test 9. Configure Prod VMs 10. Push to Prod 11. Launch 12. Request VMs to meet demand 13. Wait 14. Deploy app to new VMs 15. Etc. Virtualized How to Build an App: 1. Have Idea 2. Get Budget 3. Submit hardware acquisition request 4. Wait 5. Get Hardware 6. Rack and Stack Hardware 7. Install Operating System 8. Install Operating System Patches 9. Create user Accounts 10. Deploy framework/appserver 11. Deploy testing tools 12. Code 13. Test 14. Buy and configure Prod servers 15. Push to Prod 16. Launch 17. Order more servers to meet demand 18. Wait… 19. Deploy new servers 20. Etc. Physical “The use of Platform-as-a-Service technologies will enable IT organizations to become more agile and more responsive to the business needs.” –Gartner*
  • 16.
    RED HAT CLOUDPLATFORMS DEVOPS / CONTINOUS DELIVERY THROUGH PLATFORM AS A SERVICE
  • 17.
    RED HAT CLOUDPLATFORMS REGISTRY / CONTAINER DISCOVERY CONTAINER FORMAT WITH DOCKER ISOLATION WITH LINUX CONTAINERS ORCHESTRATION WITH KUBERNETES OPENSHIFT: DRIVING AND ADOPTING STANDARDS
  • 18.
    Red Hat Strategyfor Linux Containers
  • 19.
    RED HAT CLOUDPLATFORMS WHAT ARE LINUX CONTAINERS? Software packaging concept that typically includes an application and all of its runtime dependencies. ● Easy to deploy and portable across host systems ● Isolates applications on a host operating system ● In RHEL, this is done through: – Control Groups (cgroups) – kernel namespaces – SELinux, sVirt – Docker HOST OS SERVER CONTAINER LIBS APP
  • 20.
    RED HAT CLOUDPLATFORMS Traditional OS Containers TRADITIONAL OS VS. CONTAINERS HARDWARE HOST OS HARDWARE HOST OS CONTAINER LIBS APP A LIBS A LIBS B LIBS LIBS APP A APP B CONTAINER LIBS APP B
  • 21.
    RED HAT CLOUDPLATFORMS LINUX DOCKER CONTAINER LAYERING ● New images can be created by adding layers ● Layering model allows for specialization ● Base image and select number of platform layers provided by Red Hat ● ISV images form the base of the RHEL ecosystem ● Stack optimized for individual application with minimal packaging per layer
  • 22.
    RED HAT CLOUDPLATFORMS CONTAINERS DELIVER MANY BENEFITS Base: 171 IT and Developer/programmer decision-makers at companies with 500+ employees in APAC, EMEA, and NA Source: A commissioned study conducted by Forrester Consulting on behalf of Red Hat, January, 2015 Faster provisioning Greater deployment flexibility Ability to deliver/deploy applications faster Greater application mobility/portability 69% 70% 72% 73% How important are the following benefits of containers to your organization? Critically or Very Important 73% 72% 70% 69%
  • 23.
    RED HAT CLOUDPLATFORMS ● Who built this image? ● What’s its purpose? Was it created to support a demo? ● Is it safe to consume? ● Who maintains it? NEED FOR A “CHAIN OF TRUST” DOCKER HUB docker pull mongodb
  • 24.
    RED HAT CLOUDPLATFORMS WHAT'S INSIDE THE CONTAINER MATTERS 36% of official images in Docker Hub contain high priority security vulnerabilities ● High vulnerabilities: ShellShock (bash), Heartbleed (OpenSSL), etc. ● Medium vulnerabilities: Poodle (OpenSSL), etc. ● Low vulnerabilities: gcc: array memory allocations could cause integer overflow All Images (n=962) 0% 10% 20% 30% 40% 50% 60% 70% 80% 90% 100% 36% 28% Low priority and no vulnerabilities Medium priority High priority Source: Over 30% of Official Images in Docker Hub Contain High Priority Security Vulnerabilities, Jayanth Gummaraju, Tarun Desikan, and Yoshio Turner, BanyanOps, May 2015 (http://www.banyanops.com/pdf/BanyanOps-AnalyzingDockerHub-WhitePaper.pdf)
  • 25.
    RED HAT CLOUDPLATFORMS SECURING HOSTS AND CONTAINERS RED HAT CONTAINER CERTIFICATION UNTRUSTED ● How can you validate what’s in the host and the containers? Will it compromise your infrastructure? ● It “should” work from host to host, but can you be sure? CERTIFIED ● Trusted source for the host and the containers ● Enterprise life cycle for container content ● Proven portability ● Container Development Kit HOST OS HARDWARE CONTAINER LIBS APP CONTAINER LIBS APP HOST OS HARDWARE CONTAINER LIBS APP CONTAINER LIBS APP
  • 26.
    RED HAT CLOUDPLATFORMS RED HAT ATOMIC ENTERPRISE PLATFORM Run and orchestrate multi-container based applications at scale An integrated infrastructure platform powered by Red Hat Enterprise Linux that is designed to run, orchestrate, and scale container-based applications and services ● Easily manage and scale applications and infrastructure through a managed cluster of container hosts ● Gain application resiliency and elasticity via orchestration and service aggregation
  • 27.
    RED HAT CLOUDPLATFORMS OPENSHIFT ENTERPRISE by Red Hat An integrated hybrid cloud application platform for application development and deployment that facilitates DevOps workflows and needs ● Develop, build, and manage container based applications with application lifecycle management and a rich developer experience ● Easily turn source code into running applications with source-to-image capabilities Integrated hybrid cloud application platform for application development and deployment
  • 28.
    RED HAT CLOUDPLATFORMS RED HAT ATOMIC ENTERPRISE PLATFORM AND OPENSHIFT 3 CONTAINER API RHEL RHEL ATOMIC HOST CONTAINER ORCHESTRATION AND MANAGEMENT CONTAINER CONTAINER CONTAINER PHYSICAL INFRASTRUCTURE LANGUAGE RUNTIMES, MIDDLEWARE, DATABASES, AND OTHER SERVICES DEVOPS TOOL AND EXPERIENCE
  • 29.
    RED HAT CLOUDPLATFORMS SIMPLIFYING CONTAINER ADOPTION FOR PARTNERS
  • 30.
    RED HAT CLOUDPLATFORMS Thank You