As Docker containers become the new standard, learn about what's catapulting them to the head of the pack and how to best protect their assets now and later with the help of Unitrends.
2. 2
Things We’ll Talk About Today
Taylor Swift?
What is a Container?
What is a Docker Container?
Containers vs Hypervisors
Docker vs Containers vs Hypervisors
Protecting Docker Containers
> Hypervisor-Level Protection (Shallow Virtualization)
> Deep Virtualization
> Shallow and Deep Virtualization Together
> How Are Containers Different in Terms of Protection?
> Docker Container Image Protection
> Docker Container Volume Protection
> What Does Unitrends Offer for Docker Now…and Later?
Who We Are
4. 4
Look at the ramp of Docker versus
VMware ESX and Hyper-V
5. 5
By the way…Taylor Swift versus any
form of virtualization isn’t really close
6. 6
What Is a Container?
Containers are operating system
virtualization technology
Container key benefit is increasing
virtualized instance density
Containers date back to 2000
Notable implementations
> FreeBSD Jails
> Solaris Zones
> OpenVZ and LXC (Linux
Containers)
> Google lmctfy (Let Me Contain
That For You)
7. 7
What Is a Docker Container?
Docker is built upon LXC (Linux
Containers)
Docker core benefit is application
portability
> This is achieved via libcontainer
Docker’s libcontainer appears to be
becoming a de facto standard
Docker’s genius is its ecosystem
8. 8
Containers vs Hypervisors
App App
Bins/Libs
Operating
System
Virtual Machine
Type 2 Hypervisor
Operating System
Hardware
App App
Bins/Libs
Operating
System
Virtual Machine
Type 1 Hypervisor
Hardware
App App
Bins/Libs
Container
Hardware
Operating System
App App
Bins/Libs
Container
Hardware
Operating System
9. 9
Docker vs Containers vs Hypervisors
App App
Bins/Libs
Operating
System
Virtual Machine
Type 2 Hypervisor
Operating System
Hardware
App App
Bins/Libs
Operating
System
Virtual Machine
Type 1 Hypervisor
Hardware
App App
Bins/Libs
Container
Hardware
Operating System
App App
Bins/Libs
Container
Hardware
Operating System
Docker
11. 11
Shallow Virtualization: Hypervisor-Level Protection
App App
Bins/Libs
Operating
System
Virtual Machine
Type 1 Hypervisor
Hardware
App App
Bins/Libs
Operating
System
Virtual Machine
Shallow Simple Process
1. Get list of all VMs
2. Choose VMs to protect
3. Do a master/full on each
4. Periodically copy all
changed blocks of each
Application, data volume,
and operating system data
is included
12. 12
Deep Virtualization
App App
Bins/Libs
Operating
System
Virtual Machine
Type 2 Hypervisor
Operating System
Hardware
App App
Bins/Libs
Operating
System
Virtual Machine
Type 1 Hypervisor
Hardware
Deep Simple Process
1. Protect applications and
operating systems data
granularly
Specific context-aware data
is included
Shallow Simple Process
1. Get list of all VMs
2. Choose VMs to protect
3. Do a master/full on each
4. Periodically copy all
changed blocks of each
Application, data volume,
and operating system data
is included
14. 14
Container Differences
Containers consist of an
image and optional data
volumes
An image may contain OS
and application components
A container may be a “data
container” (no compute)
A container may use
volumes from another
container
App
Image 1
Volume
1
Operating System
Hardware
App
Image 2
App
Image 3
Volume
2
Volume
2
Container
1
Container
2
Container
3
15. 15
Container Differences (continued)
Application images are
published to repositories; don’t
change frequently
> Public repositories (e.g.,
Docker Hub Registry)
> Private repositories
Production containers must use
data volumes to persist storage
Data volumes are logically
accessed as volume paths
App
Image 1
Volume
1
Operating System
Hardware
App
Image 2
App
Image 3
Volume
2
Volume
2
Container
1
Container
2
Container
3
App
Image 1
App
Image 2
App
Image 3
Image Repository
Image Repository Pull
16. 16
Docker Image Protection
Why should you protect Docker
images despite the fact that they
infrequently change?
> You want to protect your
repository
> You want retention history of
your repository
> Repository pulls aren’t
accessible locally
> Repository pulls don’t meet
your RTO (Recovery Time
Objective)
App
Image 1
Volume
1
Operating System
Hardware
App
Image 2
App
Image 3
Volume
2
Volume
2
Container
1
Container
2
Container
3
App
Image 1
App
Image 2
App
Image 3
Image Repository
Image Repository Pull
17. 17
Docker Volume Protection
Why should you protect Docker
volumes?
> Because it’s your data
How should Docker volumes be
protected?
> Independently of images for
storage efficacy
+ But still need metadata to restore to
images
> Full and incremental backups
> Using compression and
deduplication
> With ability to archive
> With ability to replicate
App
Image 1
Volume
1
Operating System
Hardware
App
Image 2
App
Image 3
Volume
2
Volume
2
Container
1
Container
2
Container
3
App
Image 1
App
Image 2
App
Image 3
Image Repository
Image Repository Pull
18. 18
What Does Unitrends Offer for Docker Now…and Later?
Today
> Unitrends offers image-level
protection through KB 1884
> Unitrends offers in-container
protection
Later this year
> Unitrends will offer volume-
level protection
> Unitrends will offer several
other features we can discuss
under NDA
App
Image 1
Volume
1
Operating System
Hardware
App
Image 2
App
Image 3
Volume
2
Volume
2
Container
1
Container
2
Container
3
App
Image 1
App
Image 2
App
Image 3
Image Repository
Image Repository Pull
26. 26
Awards
Unitrends #1 mid-market PBBA
Unitrends had 10 of top 20 PBBAs
Unitrends #1 virtual software
Beat CommVault and Veeam
Unitrends first year placement in MQ;
Should accelerate right and higher in 2015
27. 27
Try Us Out
Get a Free Trial of Our Virtual Appliance
http://www.unitrends.com/products/download/ueb
Or, if you like to get physical, try an Eval Unit
http://www.unitrends.com/resources/request-evaluation-unit
This number is calculated by taking the amount of data protected and multiplying by the average retention for all of our installed products at our customer sites. It does not include free users.