InterConnect
2017
WebSphere Liberty and
IBM Containers:
The Perfect Combination for
Java Microservices
Tom Banks @tom_will_banks
tom.banks@uk.ibm.com
David Currie @dcurrie
david_currie@uk.ibm.com
Please note
IBM’s statements regarding its plans, directions, and intent
are subject to change or withdrawal without notice at IBM’s
sole discretion.
Information regarding potential future products is intended to
outline our general product direction and it should not be relied
on in making a purchasing decision.
The information mentioned regarding potential future products
is not a commitment, promise, or legal obligation to deliver
any material, code or functionality. Information about potential
future products may not be incorporated into any contract.
The development, release, and timing of any future features
or functionality described for our products remains at our sole
discretion.
Performance is based on measurements and projections
using standard IBM benchmarks in a controlled environment.
The actual throughput or performance that any user will
experience will vary depending upon many factors, including
considerations such as the amount of multiprogramming in
the user’s job stream, the I/O configuration, the storage
configuration, and the workload processed. Therefore, no
assurance can be given that an individual user will achieve
results similar to those stated here.
Agenda
Microservices Overview
Why Containers?
Why IBM Bluemix Container Service?
Why WebSphere Liberty?
Demo
Future Direction
Microservices
Overview
Application architected as a suite of:
Small, independently deployable, services
Built around business capabilities
Each running in its own process
Communicating with lightweight protocols
Microservices: A Definition
Microservice
component
Microservice
component
Microservice
component
Pros and Cons
Agility
Runtime scalability
Development scalability
Resilience
Technical heterogeneity
Operational complexity
DevOps skills
Service versioning
Duplicated effort
Increased latency
Fault tolerance
Eventual consistency
Service discovery
End-to-end testing
Microservice Premium
http://martinfowler.com/bliki/MicroservicePremium.html
Why Containers?
Container =
Isolation of virtual
machine +
Startup time and
footprint of
process
Process
PID
IPC
= Namespaces for isolation
CPU
Memory
= Control groups for resource constraint
The Docker Advantage
image = standardized packaging mechanism +
meta-data defining externals
layers = shorter build times +
less i/o and disk usage
API = consistent interface for handling logs,
metrics, volumes, networking, …
r/o = optional immutability
registry
server 1
FROM websphere-liberty
COPY app.war /config/dropins
Dockerfile
app.war
Image: app
Docker
Enginedocker build/run
serverwebsphere-
liberty
ubuntu
java
server
ubuntu
java
app.war
Container
server
ubuntu
java
r/w layer
app.warapp
Why IBM Bluemix
Container Service?
IBM Bluemix
Container Service
Fully-managed hosted service for building and
running containers
Private container registry pre-populated with IBM
images (including WebSphere Liberty)
Volume service for persistent storage
Overlay networking providing non-routed IP
addresses for every container and ability to bind
public IPs
Easily configure and consume services, whether
inside or outside of Bluemix
Scalable groups with integrated load balancing
and auto-recovery
Vulnerability Advisor
Ensure that only secure images are
deployed and that they stay secure
Growing capabilities:
July 2015: Policy Violations/
Vulnerable Packages
Nov 2015: Best Practice Improvements
Oct 2016: Security Misconfigurations
Nov 2016: Live Container Scanning
Jan 2017: Integration with IBM X-Force
Bluemix Open Toolchains
IBM Bluemix
Container Service
Image Build
Image
Registry
Preconfigured
metrics for memory,
CPU and network I/O
Search across
aggregated logs
Monitoring and Logging
Why WebSphere
Liberty?
Liberty Characteristics
Fast start-up
Minimal footprint
Liberty server package, with or without server
binaries
Simple deployment model
Compose server, application and environment
configuration
Standards based feature function required for
microservices implementation
Cloud-native Java
programming model
MicroProfile.io community
MicroProfile 1.0 announced at JavaOne 2016
JAX-RS / JSON-P / CDI
MicroProfile project in Eclipse Foundation
Configuration: environment specific application
configuration from multiple sources with dynamic
updates; implementation based on Netflix
Archaius
Fault Tolerance: timeout, retry, circuit breaker,
fallback and bulkhead pattern; implementation
based on Failsafe
Monitoring: application and runtime metrics
exposed via /metrics
Health Check: application health exposed via
/health
Distributed tracing: proposal for OpenTracing
with Zipkin
Security: Open ID Connect / JWT
Best practice is to make available
environmental configuration at deploy time
Easy to embed environment variables in
Liberty server configuration ${env.YYY}
Use Liberty configDropins folder to mount in
additional configuration files at deployment
time; supports dynamic update
Beta feature microProfileConfig-0.1 provides
Java API for application level configuration
Environmental Configuration
Liberty App Accelerator
http://wasdev.net/accelerate
<10
Get a Java-based
minutes
microservice that
uses Liberty built
and deployed in
Developer images for latest fix
pack available in IBM Bluemix
Container Service registry
latest / javaee7
webProfile6
webProfile7
microProfile
Images kept vulnerability free
Can be upgraded to production
licensed image via license JAR
from Passport Advantage
Images in Bluemix Registry
Getting started experience is very
simple: build an image that adds a
WAR file and then run it
Modifying the application only
requires rebuilding and
redeploying the application layer
Running an Application
FROM ibmliberty:webProfile7
COPY app.war /config/dropins/
bx ic build -t app .
bx ic run -d -p 9080 -p 9443 app
.war
Liberty kernel image and online
repository of features makes it
possible to build custom images
containing just the features
required by an application
‘Right size’ Images
FROM websphere-liberty:kernel
COPY server.xml /config/
RUN installUtility install --acceptLicense defaultServer
Free WebSphere Developer Tools
support running applications from
the Eclipse workspace on a
Liberty instance in a container
Adds REST Connector and
enables security
Provides ability to switch Liberty
server in to debug mode
WebSphere Developer Tools
Docker logging enables collection
of SystemOut/SystemErr
Liberty features push messages,
trace, FFDC, HTTP access and
GC logs
logstashCollector
bluemixLogCollector
Liberty dashboards for Kibana
Logging
Demo
Future Direction
Beta available March 20th. Service combines Docker and
Kubernetes to deliver powerful tools, an intuitive user
experience,and built-in security and isolation to enable rapid
delivery of applications all while leveraging Cloud Services
including cognitive capabilities from Watson.
www.ibm.com/cloud-computing/bluemix/containers
Intelligent Scheduling Automated rollouts and rollbacks Container Security & PrivacyDesign Your Own Cluster
Self-healing Horizontal scaling Leverages IBM Cloud & Watson Integrated Operational Tools
Service discovery & load balancing Secret & configuration management Simplified Cluster Management Native Kubernetes Experience
IBM Bluemix Container Service
Microservice Builder (Beta)
Common OSS architecture
IBM Spectrum Conductor for
Containers
x86 and Power
On Premise Focus
Customer-managed IBM-managed
Common Programming models + Tools + Runtimes
SwiftFAILSAFE
IBM Bluemix Container Service
Bluemix Cloud
Containerized Applications
> bx dev create …
Learn More
Microservices and Java
• http://wasdev.net/microservices
• http://www.redbooks.ibm.com/red
pieces/abstracts/sg248357.html
Play with Microservices
https://game-on.org
Questions?
Summary
Microservices Overview
Why Containers?
Why IBM Bluemix Container Service?
Why WebSphere Liberty?
Demo
Future Direction
Notices and disclaimers
Copyright © 2017 by International Business Machines Corporation (IBM).
No part of this document may be reproduced or transmitted in any form
without written permission from IBM.
U.S. Government Users Restricted Rights — use, duplication or
disclosure restricted by GSA ADP Schedule Contract with IBM.
Information in these presentations (including information relating to
products that have not yet been announced by IBM) has been reviewed
for accuracy as of the date of initial publication and could include
unintentional technical or typographical errors. IBM shall have no
responsibility to update this information. This document is distributed
“as is” without any warranty, either express or implied. In no event
shall IBM be liable for any damage arising from the use of this
information, including but not limited to, loss of data, business
interruption, loss of profit or loss of opportunity. IBM products and
services are warranted according to the terms and conditions of the
agreements under which they are provided.
IBM products are manufactured from new parts or new and used parts.
In some cases, a product may not be new and may have been previously
installed. Regardless, our warranty terms apply.”
Any statements regarding IBM's future direction, intent or product
plans are subject to change or withdrawal without notice.
Performance data contained herein was generally obtained in a
controlled, isolated environments. Customer examples are presented
as illustrations of how those customers have used IBM products and
the results they may have achieved. Actual performance, cost, savings or
other results in other operating environments may vary.
References in this document to IBM products, programs, or services
does not imply that IBM intends to make such products, programs or
services available in all countries in which IBM operates or does
business.
Workshops, sessions and associated materials may have been prepared
by independent session speakers, and do not necessarily reflect the
views of IBM. All materials and discussions are provided for informational
purposes only, and are neither intended to, nor shall constitute legal or
other guidance or advice to any individual participant or their specific
situation.
It is the customer’s responsibility to insure its own compliance with legal
requirements and to obtain advice of competent legal counsel as to
the identification and interpretation of any relevant laws and regulatory
requirements that may affect the customer’s business and any actions
the customer may need to take to comply with such laws. IBM does not
provide legal advice or represent or warrant that its services or products
will ensure that the customer is in compliance with any law.
Notices and disclaimers
continued
Information concerning non-IBM products was obtained from the
suppliers of those products, their published announcements or other
publicly available sources. IBM has not tested those products in
connection with this publication and cannot confirm the accuracy of
performance, compatibility or any other claims related to non-IBM
products. Questions on the capabilities of non-IBM products should be
addressed to the suppliers of those products. IBM does not warrant the
quality of any third-party products, or the ability of any such third-party
products to interoperate with IBM’s products. IBM expressly disclaims
all warranties, expressed or implied, including but not limited to, the
implied warranties of merchantability and fitness for a particular,
purpose.
The provision of the information contained herein is not intended to, and
does not, grant any right or license under any IBM patents, copyrights,
trademarks or other intellectual property right.
IBM, the IBM logo, ibm.com, Aspera®, Bluemix, Blueworks Live, CICS,
Clearcase, Cognos®, DOORS®, Emptoris®, Enterprise Document
Management System™, FASP®, FileNet®, Global Business Services®,
Global Technology Services®, IBM ExperienceOne™, IBM SmartCloud®,
IBM Social Business®, Information on Demand, ILOG, Maximo®,
MQIntegrator®, MQSeries®, Netcool®, OMEGAMON, OpenPower,
PureAnalytics™, PureApplication®, pureCluster™, PureCoverage®,
PureData®, PureExperience®, PureFlex®, pureQuery®, pureScale®,
PureSystems®, QRadar®, Rational®, Rhapsody®, Smarter Commerce®,
SoDA, SPSS, Sterling Commerce®, StoredIQ, Tealeaf®, Tivoli® Trusteer®,
Unica®, urban{code}®, Watson, WebSphere®, Worklight®, X-Force® and
System z® Z/OS, are trademarks of International Business Machines
Corporation, registered in many jurisdictions worldwide. Other product
and service names might be trademarks of IBM or other companies. A
current list of IBM trademarks is available on the Web at "Copyright and
trademark information" at: www.ibm.com/legal/copytrade.shtml.
InterConnect
2017

WebSphere Liberty and IBM Containers: The Perfect Combination for Java Microservices

  • 1.
    InterConnect 2017 WebSphere Liberty and IBMContainers: The Perfect Combination for Java Microservices Tom Banks @tom_will_banks tom.banks@uk.ibm.com David Currie @dcurrie david_currie@uk.ibm.com
  • 2.
    Please note IBM’s statementsregarding its plans, directions, and intent are subject to change or withdrawal without notice at IBM’s sole discretion. Information regarding potential future products is intended to outline our general product direction and it should not be relied on in making a purchasing decision. The information mentioned regarding potential future products is not a commitment, promise, or legal obligation to deliver any material, code or functionality. Information about potential future products may not be incorporated into any contract. The development, release, and timing of any future features or functionality described for our products remains at our sole discretion. Performance is based on measurements and projections using standard IBM benchmarks in a controlled environment. The actual throughput or performance that any user will experience will vary depending upon many factors, including considerations such as the amount of multiprogramming in the user’s job stream, the I/O configuration, the storage configuration, and the workload processed. Therefore, no assurance can be given that an individual user will achieve results similar to those stated here.
  • 3.
    Agenda Microservices Overview Why Containers? WhyIBM Bluemix Container Service? Why WebSphere Liberty? Demo Future Direction
  • 4.
  • 5.
    Application architected asa suite of: Small, independently deployable, services Built around business capabilities Each running in its own process Communicating with lightweight protocols Microservices: A Definition Microservice component Microservice component Microservice component
  • 6.
    Pros and Cons Agility Runtimescalability Development scalability Resilience Technical heterogeneity Operational complexity DevOps skills Service versioning Duplicated effort Increased latency Fault tolerance Eventual consistency Service discovery End-to-end testing
  • 7.
  • 8.
  • 9.
    Container = Isolation ofvirtual machine + Startup time and footprint of process Process PID IPC = Namespaces for isolation CPU Memory = Control groups for resource constraint
  • 10.
    The Docker Advantage image= standardized packaging mechanism + meta-data defining externals layers = shorter build times + less i/o and disk usage API = consistent interface for handling logs, metrics, volumes, networking, … r/o = optional immutability registry server 1 FROM websphere-liberty COPY app.war /config/dropins Dockerfile app.war Image: app Docker Enginedocker build/run serverwebsphere- liberty ubuntu java server ubuntu java app.war Container server ubuntu java r/w layer app.warapp
  • 11.
  • 12.
    IBM Bluemix Container Service Fully-managedhosted service for building and running containers Private container registry pre-populated with IBM images (including WebSphere Liberty) Volume service for persistent storage Overlay networking providing non-routed IP addresses for every container and ability to bind public IPs Easily configure and consume services, whether inside or outside of Bluemix Scalable groups with integrated load balancing and auto-recovery
  • 13.
    Vulnerability Advisor Ensure thatonly secure images are deployed and that they stay secure Growing capabilities: July 2015: Policy Violations/ Vulnerable Packages Nov 2015: Best Practice Improvements Oct 2016: Security Misconfigurations Nov 2016: Live Container Scanning Jan 2017: Integration with IBM X-Force
  • 14.
    Bluemix Open Toolchains IBMBluemix Container Service Image Build Image Registry
  • 15.
    Preconfigured metrics for memory, CPUand network I/O Search across aggregated logs Monitoring and Logging
  • 16.
  • 17.
    Liberty Characteristics Fast start-up Minimalfootprint Liberty server package, with or without server binaries Simple deployment model Compose server, application and environment configuration Standards based feature function required for microservices implementation
  • 18.
    Cloud-native Java programming model MicroProfile.iocommunity MicroProfile 1.0 announced at JavaOne 2016 JAX-RS / JSON-P / CDI MicroProfile project in Eclipse Foundation Configuration: environment specific application configuration from multiple sources with dynamic updates; implementation based on Netflix Archaius Fault Tolerance: timeout, retry, circuit breaker, fallback and bulkhead pattern; implementation based on Failsafe Monitoring: application and runtime metrics exposed via /metrics Health Check: application health exposed via /health Distributed tracing: proposal for OpenTracing with Zipkin Security: Open ID Connect / JWT
  • 19.
    Best practice isto make available environmental configuration at deploy time Easy to embed environment variables in Liberty server configuration ${env.YYY} Use Liberty configDropins folder to mount in additional configuration files at deployment time; supports dynamic update Beta feature microProfileConfig-0.1 provides Java API for application level configuration Environmental Configuration
  • 20.
    Liberty App Accelerator http://wasdev.net/accelerate <10 Geta Java-based minutes microservice that uses Liberty built and deployed in
  • 21.
    Developer images forlatest fix pack available in IBM Bluemix Container Service registry latest / javaee7 webProfile6 webProfile7 microProfile Images kept vulnerability free Can be upgraded to production licensed image via license JAR from Passport Advantage Images in Bluemix Registry
  • 22.
    Getting started experienceis very simple: build an image that adds a WAR file and then run it Modifying the application only requires rebuilding and redeploying the application layer Running an Application FROM ibmliberty:webProfile7 COPY app.war /config/dropins/ bx ic build -t app . bx ic run -d -p 9080 -p 9443 app .war
  • 23.
    Liberty kernel imageand online repository of features makes it possible to build custom images containing just the features required by an application ‘Right size’ Images FROM websphere-liberty:kernel COPY server.xml /config/ RUN installUtility install --acceptLicense defaultServer
  • 24.
    Free WebSphere DeveloperTools support running applications from the Eclipse workspace on a Liberty instance in a container Adds REST Connector and enables security Provides ability to switch Liberty server in to debug mode WebSphere Developer Tools
  • 25.
    Docker logging enablescollection of SystemOut/SystemErr Liberty features push messages, trace, FFDC, HTTP access and GC logs logstashCollector bluemixLogCollector Liberty dashboards for Kibana Logging
  • 26.
  • 27.
  • 28.
    Beta available March20th. Service combines Docker and Kubernetes to deliver powerful tools, an intuitive user experience,and built-in security and isolation to enable rapid delivery of applications all while leveraging Cloud Services including cognitive capabilities from Watson. www.ibm.com/cloud-computing/bluemix/containers
  • 29.
    Intelligent Scheduling Automatedrollouts and rollbacks Container Security & PrivacyDesign Your Own Cluster Self-healing Horizontal scaling Leverages IBM Cloud & Watson Integrated Operational Tools Service discovery & load balancing Secret & configuration management Simplified Cluster Management Native Kubernetes Experience IBM Bluemix Container Service
  • 30.
    Microservice Builder (Beta) CommonOSS architecture IBM Spectrum Conductor for Containers x86 and Power On Premise Focus Customer-managed IBM-managed Common Programming models + Tools + Runtimes SwiftFAILSAFE IBM Bluemix Container Service Bluemix Cloud Containerized Applications > bx dev create …
  • 31.
  • 32.
    Microservices and Java •http://wasdev.net/microservices • http://www.redbooks.ibm.com/red pieces/abstracts/sg248357.html
  • 33.
  • 34.
  • 35.
    Summary Microservices Overview Why Containers? WhyIBM Bluemix Container Service? Why WebSphere Liberty? Demo Future Direction
  • 36.
    Notices and disclaimers Copyright© 2017 by International Business Machines Corporation (IBM). No part of this document may be reproduced or transmitted in any form without written permission from IBM. U.S. Government Users Restricted Rights — use, duplication or disclosure restricted by GSA ADP Schedule Contract with IBM. Information in these presentations (including information relating to products that have not yet been announced by IBM) has been reviewed for accuracy as of the date of initial publication and could include unintentional technical or typographical errors. IBM shall have no responsibility to update this information. This document is distributed “as is” without any warranty, either express or implied. In no event shall IBM be liable for any damage arising from the use of this information, including but not limited to, loss of data, business interruption, loss of profit or loss of opportunity. IBM products and services are warranted according to the terms and conditions of the agreements under which they are provided. IBM products are manufactured from new parts or new and used parts. In some cases, a product may not be new and may have been previously installed. Regardless, our warranty terms apply.” Any statements regarding IBM's future direction, intent or product plans are subject to change or withdrawal without notice. Performance data contained herein was generally obtained in a controlled, isolated environments. Customer examples are presented as illustrations of how those customers have used IBM products and the results they may have achieved. Actual performance, cost, savings or other results in other operating environments may vary. References in this document to IBM products, programs, or services does not imply that IBM intends to make such products, programs or services available in all countries in which IBM operates or does business. Workshops, sessions and associated materials may have been prepared by independent session speakers, and do not necessarily reflect the views of IBM. All materials and discussions are provided for informational purposes only, and are neither intended to, nor shall constitute legal or other guidance or advice to any individual participant or their specific situation. It is the customer’s responsibility to insure its own compliance with legal requirements and to obtain advice of competent legal counsel as to the identification and interpretation of any relevant laws and regulatory requirements that may affect the customer’s business and any actions the customer may need to take to comply with such laws. IBM does not provide legal advice or represent or warrant that its services or products will ensure that the customer is in compliance with any law.
  • 37.
    Notices and disclaimers continued Informationconcerning non-IBM products was obtained from the suppliers of those products, their published announcements or other publicly available sources. IBM has not tested those products in connection with this publication and cannot confirm the accuracy of performance, compatibility or any other claims related to non-IBM products. Questions on the capabilities of non-IBM products should be addressed to the suppliers of those products. IBM does not warrant the quality of any third-party products, or the ability of any such third-party products to interoperate with IBM’s products. IBM expressly disclaims all warranties, expressed or implied, including but not limited to, the implied warranties of merchantability and fitness for a particular, purpose. The provision of the information contained herein is not intended to, and does not, grant any right or license under any IBM patents, copyrights, trademarks or other intellectual property right. IBM, the IBM logo, ibm.com, Aspera®, Bluemix, Blueworks Live, CICS, Clearcase, Cognos®, DOORS®, Emptoris®, Enterprise Document Management System™, FASP®, FileNet®, Global Business Services®, Global Technology Services®, IBM ExperienceOne™, IBM SmartCloud®, IBM Social Business®, Information on Demand, ILOG, Maximo®, MQIntegrator®, MQSeries®, Netcool®, OMEGAMON, OpenPower, PureAnalytics™, PureApplication®, pureCluster™, PureCoverage®, PureData®, PureExperience®, PureFlex®, pureQuery®, pureScale®, PureSystems®, QRadar®, Rational®, Rhapsody®, Smarter Commerce®, SoDA, SPSS, Sterling Commerce®, StoredIQ, Tealeaf®, Tivoli® Trusteer®, Unica®, urban{code}®, Watson, WebSphere®, Worklight®, X-Force® and System z® Z/OS, are trademarks of International Business Machines Corporation, registered in many jurisdictions worldwide. Other product and service names might be trademarks of IBM or other companies. A current list of IBM trademarks is available on the Web at "Copyright and trademark information" at: www.ibm.com/legal/copytrade.shtml.
  • 38.