DCSF19 Containerized Databases for Enterprise Applications

•

0 gostou•310 visualizações

Containerized Databases for Enterprise Applications Containers are now being used in organizations of all sizes. From small startups to established enterprises, data persistence is necessary in many mission critical applications. “Containers are not for database applications” is a misconception and nothing could be further from the truth. This session aims to help practitioners navigate the minefield of database containerization and avoid some of the major pitfalls that can occur. Discussion includes traditional enterprise database concerns surrounding data persistence and data security, and how they mesh with containerized deployment.

Tecnologia

Joe Carroll
Containerized Databases for
Enterprise Applications

1. Definitions
2. Misconceptions
3. Data Persistence
4. Data Security
Outline

Enterprise Database
Applications
Definitions

Enterprise Database Applications Manage Mission Critical Data
Definition:

Mission Critical Data
• Vital to lives, wallets, and/or the business
• If we lose it or compromise it, then we’re in the
news, people get fired, and the boss goes to
jail.
• Examples: Patient Records, Financial Data,
Payroll, etc.
Definition:

• Data Persistence
• Data Security
Needs

Summary
Enterprise Database
Applications Manage
Mission Critical Data
Mission Critical Data
Impacts Lives, Wallets, and
Business
Data Persistence
Data Security
21 3

• Immutable
• Portable
• Scriptable
Why Docker Containers?
Docker allows our application to be -

• Disposable/Ephemeral
• Broad ecosystem of tools not built
by us
• Docker daemon is privileged
Tension?

Summary
Containers are Immutable,
Portable, and Scriptable.
Mission Critical Data
Applications Are In Dire
Need Of These Benefits
Containers are for
Enterprise Database
Applications
21 3

Examples! (Databases + Volumes)
https://github.com/tjosephcarroll/DatabaseContainerExamples

Not All Data Needs Mission Critical Persistence

Summary
Critical Data Must Persist
Outside The Container
Not All Data is Critical Data
Make Smart Design
Decisions Regarding Where
Data Goes From Day 0
21 3

• Build a registry of trusted images (build your
own images)
• Scan your images for vulnerabilities
• Rotate your credentials
• There are many tools! This is easy! Do it
please!
Trust, Scan, and Sign Your Images

• No database passwords in source.
• Defined at runtime.
• Encrypted at rest and in motion.
• Start with Secrets!
Secure Access To Your Data

Examples! (Databases + Secrets)
https://github.com/tjosephcarroll/DatabaseContainerExamples

• What user/group are you containers running
as?
• Are the cgroups and namespaces what you
want?
• Any container in your configuration can be the
culprit.
Secure Your Runtime Environment

Summary
Use Secrets To Protect
Data Access
Runtime Security – Users,
Namespaces, Cgroups
Scan, Sign, and Trust Your
Images
21 3

Product, InterSystems
github.com/tjosephcarroll
@JoeCarroll3000
Joe Carroll

Mais conteúdo relacionado

Mais procurados

People typically think of Docker for microservices and try to make the smallest container they can. There are tremendous benefits to a microservices model but those are not the only apps that qualify for containers. Traditional, homegrown, monolithic apps are also great candidates for Docker - why? By containerizing these apps, many of the same agility, portability, security and cost savings benefits can be applied to the hundreds (if not thousands) of apps in your datacenters. But where to begin? Attend this session to learn how to approach modernizing traditional apps (MTA), considerations, the available tools and possibilities.

Back to the Future: Containerize Legacy Applications - Rob Tanner, Northern T...

Docker, Inc.

1&1, Europe’s largest web hosting company, has been automatically deploying and managing multi-tenant server environments for 20 years. These servers support millions of active websites and services around the world. Historically software stacks were pre-installed using estimates of what was considered good, taking a ‘one size fits all’ approach. I am going to show how we are now combining Git, Gitlab, Openshift and Docker to revolutionise our approach to large scale hosting, providing greater power and flexibility without increasing support overhead. This includes showing: · Transforming the legacy multi-tenant LAMP environment into many single-tenant Docker projects · Managing thousands of projects on behalf of tenants · Gitlab CI for testing Docker containers · Testing container interactions and upgrade cycle

Application Deployment and Management at Scale with 1&1 by Matt Baldwin

Docker, Inc.

In this session we will talk about HealthDirect’s journey with Docker. We will follow the life cycle of a container through our CD process to its home in our swarm cluster with just a git commit thanks to configuration management. We will cover the CD process for Docker, Docker swarm, Docker networking and service discovery. The audience will leave with a solid foundation of how to build a production ready swarm cluster (A github repo with code will be given). They will also have the knowledge of how to implement a CD framework using Docker.

Docker in Production, Look No Hands! by Scott Coulton

Docker, Inc.

Docker is hot. However, as Docker container use spreads into more mature production pipelines, there can be issues about control of Docker images to ensure they are production-ready. Is a promotion-based model appropriate to control and track the flow of Docker images from development to production? We will demonstrate how to implement a promotion model for docker images, and then show how to distribute them to any kind of consumer, being it a customer or a data center.

Docker Container Lifecycles, Problem or Opportunity? by Baruch Sadogursky, JFrog

Docker, Inc.

RTI International is an independent nonprofit research institute dedicated to improving the human condition, looking into areas of crime analytics, health economics and more. RTI International’s Center for Data Science sits at the confluence of academic research and innovative technologies, developing complex statistical and analytical applications derived from abstract research. In this talk, Keith Richards of the Center for Data Science will discuss some of the Center’s novel use cases of Docker technology throughout the data lifecycle for projects such as: developing and deploying software-as-a-service crime analytics, supporting public policy creation through horizontally scaled health economics microsimulations, and managing the dependencies of several machine learning applications

DCSF 19 Improving the Human Condition with Docker

Docker, Inc.

Cloud native applications are composed of containers, serverless functions and managed cloud services. What is the best set of tools on your desktop to provide a rapid, iterative development experience and package applications using these three components? This hand-on talk will explain how you can complement Docker Desktop, with it’s local Docker engine and Kubernetes cluster, with open source tools such as the Virtual Kubelet, Open Service Broker, the Gloo hybrid app gateway, Draft, and others, to build the most productive development inner-loop for these type of applications. It will also cover how you can use the Cloud Native Application Bundle (CNAB) format and it’s implementation in the Docker app experimental tool to package your application and manage it with container supply chain tooling such as Docker Hub.

DCSF 19 Developing Apps with Containers, Functions and Cloud Services

Docker, Inc.

Jeff Nickoloff - Co-founder, Topple Growth can be challenging to address once monolithic systems begin to fail under strain or internal software development processes begin to slow the release cadence. Many organizations are looking to microservices architecture to solve these application issues, whether they plan to write new applications or rewrite the monoliths into microservices. This talk will highlight the common technical and cultural issues that will make microservice architectures a challenge to adopt and maintain. Issues include impact of Dunbar's Number and Conway's Law, build-time vs runtime continuous integration, evolution of testability, API versioning impact, logistics overhead, artifact management, and strategies for iteration in a distributed environment. Attendees will learn: - How and why microservice architectures and ownership end up falling along organizational lines (and why that is a good thing) - How we can learn from monolith tooling to inform our tooling in a microservice environment - How you can achieve operational excellence at scale taking a logistical approach with Docker.

DCEU 18: From Monolith to Microservices

Docker, Inc.

In this talk, we will share how a small team at Intuit moved Docker from local to production serving real and critical workloads. We will share how we addressed the organization challenges of running Docker at large enterprises by building a business case for a pilot project to prove the value of containers and its real world application. Next, we will share how we solved the technical challenges that present themselves when taking Docker from local to production in a corporate data center. We will share the blueprint for the business case and the associated pilot which laser focused on running stateless back-end services throughout the entire SDLC. Finally, we will highlight our crawl-walk-run approach that allowed us to make inexpensive mistakes before investing in the right areas as our Docker knowledge increased. We will share the major technical issues we encountered, how we overcame them and the lessons we learned.

Taking Docker from Local to Production at Intuit JanJaap Lahpor, Intuit and H...

Docker, Inc.

Talk #1: Ryan Kennedy, CI: Build and Test in Docker Cloud In this talk, Ryan Kennedy will present an overview of Docker Cloud and demonstrate how to configure a CI pipeline using the automated build and test capabilities. We will dive into the latest features available in Docker Cloud, including sharing repositories with teams and securing your application pipeline. * Talk #2: Bryan Lee and Alberto Megia, Deploying and Managing Applications in Docker Cloud In this talk, Bryan Lee and Alberto Megia will demonstrate auto-deployment capabilities in Docker Cloud as well as how to deploy, manage, and scale container-based applications directly within the tool.

Docker Meetup at Docker HQ: Docker Cloud

Docker, Inc.

Security is a key concern for application developers and operations teams, as well as security professionals. Have I done enough? What do I need to do in the face of new threats like Meltdown and Spectre? What happens when the next big issue comes along? What should my priorities be? How do containers help? In this talk we’ll demonstrate some common attacks live, and show how you can effectively defend your container deployment against them, using a combination of best practices, configuration, and tools. Taking inspiration from highlights of the OWASP Top 10, and other high profile exploits and attacks, in this talk we will look at risks and preventative measures related to: - authentication - injection - updates - sensitive data - configuration By the end of the talk you should understand the most important security risks in your applications, and how to go about mitigating them.

Don’t have a Meltdown! Practical Steps for Defending Your Apps

Docker, Inc.

Hands-on Helm

Docker, Inc.

Networking in Docker EE 2.0 with Kubernetes and Swarm

Abhinandan P.b

Presentation by Ian Miell, author of 'Docker in Practice' The adoption of Docker brings with it many challenges, not all of themtechnical. There is a clear vision of Docker regularly articulated thatencompasses microservices, decoupled applications, agile and continuous deliveryand integration, and DevOps. But the application of this vision often flounders when confronted by the legacy structures of working and successful businesses. This talk draws on the experienced gained from several attempts to lead changewithin technical organisations. The speaker experienced both failure to effectchange (through productization of a bespoke software stack, and the introduction of Erlang), and success (moving to a Continuous Improvement modelof complex software maintenance). These experiences informed a successful drive to Docker as the build and delivery system of a 700-strong software company,with significant efficiency improvements. As with most historical revolutions, the integration of the vision with realityresulted in corners cut and principles compromised in order to effect change.This talk is a discussion of the lessons learned from these experiences in an effort to help the listener clarify and overcome the unique challenges their own organisation brings to making change happen.

DockerCon EU 2015: Cultural Revolution - How to Mange the Change Docker Brings

Docker, Inc.

Physicians Mutual, a 117-year-old Nebraska-based insurance company, had worked on modernizing its systems for over a decade. In such a complex industry, any IT refresh can seem like a never-ending journey. The existing application architecture made it difficult to scale or refresh applications individually. Everything was bundled, forcing the IT team to take a "one size fits all" approach that limited legacy modernization and business agility. To "untie" the bundle and create a more agile and responsive environment, the IT team determined that containerization and Dev/Ops were the answer. In 2017, the company piloted a microservice architecture and an automated pipeline on Docker Engine (CE) to deliver the new corporate API. Following the successful pilot, the company relaunched 11 mission critical services on Docker Enterprise, paving the way for a complete transformation of the company's application architecture. In this session, you'll learn: <About the journey of transitioning the corporate API from traditional application server deployment to containerized Microservices on Docker Enterprise <How the company built consensus and kept momentum in an enterprise environment <About the technologies and frameworks used, including log aggregation, system monitoring, and security <About key business benefits in agility and responsiveness achieved

DCSF 19 Modernizing Insurance with Docker Enterprise: The Physicians Mutual ...

Docker, Inc.

DevOps in the Real World is far from perfect, and we're all somewhere on the path to one day writing that "Amazing-Hacker-News-Post about your chat-bot fully-automated micro-service infrastructure." But until then, how can you *really* start using containers today, in meaningful ways that impact yours and your customers productivity? This session is designed for practitioners who are looking for ways to get started now with Docker and Swarm in production. No Docker 101 here, this is for helping you be successful on your way to Dockerizing your production systems. Attendees will get tactics, example configs, real working infrastructure designs, and see the (sometimes messy) internals of Docker in production today.

Journey to Docker Production: Evolving Your Infrastructure and Processes - Br...

Docker, Inc.

Docker use at Cornell University has been increasing steadily over the last 3 years in our central departments and various colleges - particularly as we move more workloads to the cloud. In this talk, we’ll give an overview of our Docker use cases across campus, featuring in detail two specific projects that highlight the versatility of this technology: Containerizing our central financial system (a traditional monolithic system); and building new researcher-focused financial tools natively in Docker (a microservice architecture built with the cloud in mind). We’ll discuss the design and implementation of both projects in detail. We’ll also describe how Docker has enabled us to develop consistent DevOps and CI practices spanning these two very different architectures.

The Tale of Two Deployments: Greenfield and Monolith Apps with Docker Enterpr...

Docker, Inc.

Hewlett Packard Enterprise has a vast IT organization that consists of 15k Dev + Ops professionals, operating in 11 countries, with hundreds of development teams working together on over 1000 projects. Millions of lines of code get changed every day, generating 20,000+ change request in an average year. And now, we’re on a journey to building a Docker environment for this massive organization, to serve the needs of our own multi-billion dollar enterprise. This session showcases our own learnings across multiple phases of our containerization project, with real life experiences from both the Dev and Ops perspectives. We’ll also talk about shared experiences from some of HPE’s customers. “Coding” our infrastructure with Docker, one application image, one deployment command, multiple deployment models – this is an “extreme” tale of how one of the world’s largest enterprises is fully embracing Docker.

Chugging Our Own "Craft Brew” – HPE’s Journey Towards Containers-as-a-Service...

Docker, Inc.

DockerCon 16 General Session Day 2

Docker, Inc.

Hacking into your containers, and how to stop it!

Eric Smalling

Modern container technology like Docker holds great promise for building large cloud infrastructure. Many enterprises, like Adobe, Salesforce, GE, have all found success with Docker to power Internet-scale cloud data centers. However, in a system of that scale, managing policy compliance and security is a challenging proposition. First, security functions deployed in those environments must be agile enough to accommodate massive scale changes. Second, there is very little room for guesswork and false positives. Finally, all the controls, including those at the host level, the daemon level, and the container level must operate in an integrated fashion to ensure robust operations of the entire environment. In this talk, we show that effective security for large container systems must be a cradle-to-scale initiative. We demonstrate that by leveraging development resources early in the lifecycle helps to scale up security controls tremendously in runtime. We show that we can automatically develop security profiles for running containers based on image analysis and with these profiles, we can accurately enforce runtime behaviors of containerized applications. We describe an actual Internet-scale deployment where rigorous image analysis and configuration inspection in development lead to an effective, easily scalable set of security controls in production.

Implementing Secure Docker Environments At Scale by Ben Bernstein, Twistlock

Docker, Inc.

Mais procurados (20)

Back to the Future: Containerize Legacy Applications - Rob Tanner, Northern T...

Application Deployment and Management at Scale with 1&1 by Matt Baldwin

Docker in Production, Look No Hands! by Scott Coulton

Docker Container Lifecycles, Problem or Opportunity? by Baruch Sadogursky, JFrog

DCSF 19 Improving the Human Condition with Docker

DCSF 19 Developing Apps with Containers, Functions and Cloud Services

DCEU 18: From Monolith to Microservices

Taking Docker from Local to Production at Intuit JanJaap Lahpor, Intuit and H...

Docker Meetup at Docker HQ: Docker Cloud

Don’t have a Meltdown! Practical Steps for Defending Your Apps

Hands-on Helm

Networking in Docker EE 2.0 with Kubernetes and Swarm

DockerCon EU 2015: Cultural Revolution - How to Mange the Change Docker Brings

DCSF 19 Modernizing Insurance with Docker Enterprise: The Physicians Mutual ...

Journey to Docker Production: Evolving Your Infrastructure and Processes - Br...

The Tale of Two Deployments: Greenfield and Monolith Apps with Docker Enterpr...

Chugging Our Own "Craft Brew” – HPE’s Journey Towards Containers-as-a-Service...

DockerCon 16 General Session Day 2

Hacking into your containers, and how to stop it!

Implementing Secure Docker Environments At Scale by Ben Bernstein, Twistlock

Semelhante a DCSF19 Containerized Databases for Enterprise Applications

Protect your Database with Data Masking & Enforced Version Control

DBmaestro - Database DevOps

University of Bath Research Data Management training for researchers

Jez Cope

110307 cloud security requirements gourley

GovCloud Network

In today’s IT world, the threats from bad actors are increasing and the negative impacts of a data breach continue to rise. Responsible enterprises have an obligation to handle the personal data of their customers with care and protect their company’s information with all the tools at their disposal. For IBM i customers, this includes system settings, company-wide security protocols and the strategic use of additional third-party solutions. These solutions should include things like multi factor authentication (MFA), auditing and SEIM features, access control, authority elevation, and more. In this presentation, we will help you understand how all these elements can work together to create an effective, comprehensive IBM i security environment. Watch this on-demand webinar to learn about: • taking a holistic approach to IBM i Security • what to look for when you consider adding a security product to your IBM i IT infrastructure. • the components to consider a comprehensive, effective security strategy • how Precisely can help

What Does a Full Featured Security Strategy Look Like?

Precisely

Lecture Data Classification And Data Loss Prevention

Nicholas Davis

Data Classification And Loss Prevention

Nicholas Davis

Lecture data classification_and_data_loss_prevention

Nicholas Davis

Database Security Presentation Why database Security is important

Kamruzzamansohel2

Webinar: Cloud Data Masking - Tips to Test Software Securely

Skytap Cloud

[Webinar] Building a Product Security Incident Response Team: Learnings from ...

bugcrowd

DSS ITSEC 2013 Conference 07.11.2013 - ALSO - Guardium INTRO

Andris Soroka

Tsc2021 cyber-issues

Ernest Staats

Understanding Database Encryption & Protecting Against the Insider Threat wit...

MongoDB

How to Destroy a Database

John Ashmead

Application Security: What do we need to know?

Jose L. Quiñones-Borrero

Are you overwhelmed by the plethora of cloud security vendors and not sure how to get started with security monitoring in a cloud environment? Find out how we at RightScale use security monitoring in the cloud to achieve compliance, send critical alerts, and collect forensic data. In this webinar, we will: - Guide you through the framework we used to define our goals for security monitoring, decide how we wanted to do it, and then select which tools to use. - Share practical insights on how to successfully do security monitoring in a cloud environment. - Realign the focus to be on delivering results instead of implementing technology for technology's sake. Join RightScale's Director of Security & Compliance Phil Cox and Senior Security Engineer Tony Spataro to learn directly from the team responsible for the security architecture and regulatory compliance for one of the most complex cloud-based deployments on the planet.

RightScale Webinar: Security Monitoring in the Cloud: How RightScale Does It

RightScale

Digital Finance Africa 2022 - https://itnewsafrica.com/event/ -hosted by IT News Africa is the definitive annual event on technology leadership in the financial services industry. It asks the hard questions not asked in other conferences, and identifies the skills required to steer a course in an age where the entire industry is transforming rapidly. This is a Summit for bold, visionary leaders who are willing to take calculated risks as much as they are willing to consolidate, who know what to give up as much as what they expect to gain.

Trust in a Digital World

itnewsafrica

Webinar: Are You Treating Unstructured Data as a Second Class Citizen?

Storage Switzerland

Data integrity 03.pptx

AyeCS11

Ppt security-database-overview-11g r2

Oracle BH

Semelhante a DCSF19 Containerized Databases for Enterprise Applications (20)

Protect your Database with Data Masking & Enforced Version Control

University of Bath Research Data Management training for researchers

110307 cloud security requirements gourley

What Does a Full Featured Security Strategy Look Like?

Lecture Data Classification And Data Loss Prevention

Data Classification And Loss Prevention

Lecture data classification_and_data_loss_prevention

Database Security Presentation Why database Security is important

Webinar: Cloud Data Masking - Tips to Test Software Securely

[Webinar] Building a Product Security Incident Response Team: Learnings from ...

DSS ITSEC 2013 Conference 07.11.2013 - ALSO - Guardium INTRO

Tsc2021 cyber-issues

Understanding Database Encryption & Protecting Against the Insider Threat wit...

How to Destroy a Database

Application Security: What do we need to know?

RightScale Webinar: Security Monitoring in the Cloud: How RightScale Does It

Trust in a Digital World

Webinar: Are You Treating Unstructured Data as a Second Class Citizen?

Data integrity 03.pptx

Ppt security-database-overview-11g r2

Mais de Docker, Inc.

Raymond Arifianto, AccelByte and Mark Mandel, Google - We have been deploying containerized micro-services for our Game Backend Services for a while. Now we are tackling the challenge to scale up fleets of game dedicated servers in multiple regions, multiple data centers and multiple providers - some in bare metal, some in Cloud. So we leverage docker containerization to deploy Game Servers to achieve Portability, Fast Deployment and Predictability, enabling us to scale up to thousands of servers, on demand, without a sweat.

Containerize Your Game Server for the Best Multiplayer Experience

Docker, Inc.

Nicholas Dille, Haufe-Lexware + Docker Captain - Docker continues to be the standard tool for building container images. For more than a year Docker ships with BuildKit as an alternative image builder, providing advanced features for secret and cache management. These features help to make image builds faster and more secure. In this session, Docker Captain Nicholas Dille will teach you how to use Buildkit features to your advantage.

How to Improve Your Image Builds Using Advance Docker Build

Docker, Inc.

Lukonde Mwila, Entelect - As the cloud-native approach to development and deployment becomes more prevalent, it's an exciting time for software engineers to be equipped on how to dockerize multi-container applications and deploy them to the cloud. In this talk, Lukonde Mwila, Software Engineer at Entelect, will cover the following topics: - Docker Compose - Containerizing an Nginx Server - Containerizing an React App - Containerizing an Node.JS App - Containerizing anMongoDB App - Runing Multi-Container App Locally - Creating a CI/CD Pipeline - Adding a build stage to test containers and push images to Docker Hub - Deploying Multi-Container App to AWS Elastic Beanstalk Lukonde will start by giving an overview of how Docker Compose works and how it makes it very easy and straightforward to startup multiple Docker containers at the same time and automatically connect them together with some form of networking. After that, Lukonde will take a hands on approach to containerize an Nginx server, a React app, a NodeJS app and a MongoDB instance to demonstrate the power of Docker Compose. He'll demonstrate usage of two Docker files for an application, one production grade and the other for local development and running of tests. Lastly, he'll demonstrate creating a CI/CD pipeline in AWS to build and test our Docker images before pushing them to Docker Hub or AWS ECR, and finally deploying our multi-container application AWS Elastic Beanstalk.

Build & Deploy Multi-Container Applications to AWS

Docker, Inc.

Kevin Jones, NGNIX - NGINX is one of the most popular images on Docker Hub and has been at the forefront of the web since the early 2000's. In this talk we will discuss how and why NGINX's lightweight and powerful architecture makes it a very popular choice for securing containerized applications as a sidecar reverse proxy within containers. We will highlight important aspects of application security that NGINX can help with, such as TLS, HTTP, AuthN, AuthZ and traffic control.

Securing Your Containerized Applications with NGINX

Docker, Inc.

Kathleen Juell, Digital Ocean - Containers are an essential part of today's microservice ecosystem, as they allow developers and operators to maintain standards of reliability and reproducibility in fast-paced deployment scenarios. And while there are best practices that extend across stacks in containerized environments, there are also things that make each stack distinct, starting with the application image itself. This talk will dive into some of these particularities, both at the image and service level, while also covering general best practices for building and running Node applications with database backends using Docker and Compose.

How To Build and Run Node Apps with Docker and Compose

Docker, Inc.

Jeff Hajewski, Salesforce - There is a wealth of information on building deep learning models with PyTorch or TensorFlow. Anyone interested in building a deep learning model is only a quick search away from a number of clear and well written tutorials that will take them from zero knowledge to having a working image classifier. But what happens when you need to deploy these models in a production setting? At Salesforce, we use TensorFlow models to help us provide customers with insights into their data, and we do this as close to real-time as possible. Designing these systems in a scalable manner requires overcoming a number of design challenges, but the core component is Docker. Docker enables us to design highly scalable systems by allowing us to focus on service interactions, rather than how our services will interact with the hardware. Docker is also at the core of our test infrastructure, allowing developers and data scientists to build and test the system in an end to end manner on their local machines. While some of this may sound complex, the core message is simplicity - Docker allows us to focus on the aspects of the system that matter, greatly simplifying our lives.

Distributed Deep Learning with Docker at Salesforce

Docker, Inc.

James Fuller, webcomposite s.r.o. - Curl is the venerable (yet very modern) 'swiss army knife' command line tool and library for transferring data with URLs. Recently we (the Curl team) decided to build a release for Docker Hub. This talk will outline our current development workflow with respect to the docker image and provide insights on what it takes to build a docker image for mass public consumption. We are also keen to learn from users and other developers how we might improve and enhance the official curl docker image.

The First 10M Pulls: Building The Official Curl Image for Docker Hub

Docker, Inc.

Fabian Stäber, Instana - In recent years, we saw a great paradigm shift in software engineering away from static monolithic applications towards dynamic distributed horizontally scalable architectures. Docker is one of the key technologies enabling this development. This shift poses a lot of new challenges for application monitoring, ranging from practical issues (need for automation) to technical challenges (Docker networking) to organizational topics (blurring line between software engineers and operations) to fundamental questions (define what is an application). In this talk we show how Docker changed the way we do monitoring, how modern application monitoring systems work, and what future developments we expect.

Monitoring in a Microservices World

Docker, Inc.

Clemente Biondo, Engineering Ingegneria Informatica - When the COVID 19 pandemic started, Engineering Ingegneria Informatica Group (1.25 billion euros of revenues, 65 offices around the world, 12.000 employees) was forced to put their digital transformation to the test in order to maintain operational continuity. In this session, Clemente Biondo, the Tech Lead of the Information Systems Department, will share how his company is reacting to this unforeseeable scenario and how Docker-driven digital transformation had paved the path for work to continue remotely. Clemente will discuss learnings moving from colocated teams, manual approaches, email based-business processes, and a monolithic application to a mature DevOps culture characterized by a distributed autonomous workforce and a continuous deployment process that deploys backward-compatible Docker containerized microservices into hybrid multi cloud datacenters an average of twice a day with zero-downtime. He will detail how they use Docker to unify dev, test and production environments, and as an efficient and automated mechanism for deploying applications. Lastly, Clemente shares how, in our darkest hour, he and others are working to shine their brightest light.

COVID-19 in Italy: How Docker is Helping the Biggest Italian IT Company Conti...

Docker, Inc.

Chris Lauer, NOAA Space Weather Prediction Center - This is the story of how adopting a containerized workflow changed the way our small software team works at NOAA’s Space Weather Prediction Center. Our old architecture, a big ball of mud shared-database integration, just wasn’t cutting it - it was killing our agility. Over the past two years, our small team has adopted a microservice style architecture, using Docker with docker-compose and environment files as our deployment strategy for all new development. We’ve discovered the joys of using containers for identical dev, staging, and production environments. We work closely with scientists: much of the code we’re running has complicated and conflicting library dependencies. Docker captures these beautifully - we’ve even had some success teaching our scientists to use it! I’ll share what we’ve learned, some of the persistent challenges we face, and one place we really got it wrong. This talk builds off of a popular hallway track from DockerCon 2019.

Predicting Space Weather with Docker

Docker, Inc.

Brian Christner, 56k + Docker Captain - In this session, we will unlock the full potential of using Microsoft Visual Studio Code (VS Code) and Docker Desktop to turn you into a Docker Power User. When we expand and utilize the VS Code Docker plugin, we can take our projects and Docker skills to the next level. In addition to using VS Code, we streamline our Docker Desktop development workflow with less context switching and built-in shortcuts. You will learn how to bootstrap new projects, quickly write Dockerfiles utilizing templates, build, run, and interact with containers all from VS Code.

Become a Docker Power User With Microsoft Visual Studio Code

Docker, Inc.

How to Use Mirroring and Caching to Optimize your Container Registry

Docker, Inc.

Ashish Sharma, SS&C Eze - SS&C Eze provides various products in the stock market domain. We spent the last couple of years building Eclipse which is an investment suite born in cloud. The journey so far has been very interesting. The very first version of the product were a bunch of monolithic windows services and deployed using Octopus tool. We successfully managed to bring all the monolithic problem to the cloud and created a nightmare for ourselves. We then started applying microservices architecture principles and started breaking the monolithic into small services. Very soon we realized that we need a better packaging/deployment tool. Docker looked like a magical solution to our problem. Since its adoption, It has not only solved the deployment problem for us but has made a deep impact on different aspects of SDLC. It allowed us to use heterogeneous technology stacks, simplified development environment setup, simplified our testing strategy, improved our speed of delivery, and made our developers more productive. In this talk I would like to share our experience of using Docker and its positive impact on our SDLC.

Monolithic to Microservices + Docker = SDLC on Steroids!

Docker, Inc.

Ara Pulido, Datadog - Container technologies, although not new, have increased their popularity in the past few years, with container orchestrators allowing companies around the world to adopt these technologies to help them ship and scale microservices with precision and velocity. Kubernetes is currently the most popular container orchestration platform, and while many organizations are migrating their workloads to it, Kubernetes is still relatively immature. New corner cases, errors, and quirks are regularly discovered as users push the boundaries of size and scale. When Datadog adopted Kubernetes we discovered some of these boundaries the hard way, and we continuously challenge and modify our infrastructure decisions in order to fit our use case. Join me in this talk for our story on what we learned while we scaled our Kubernetes clusters, the contributions to Kubernetes we made along the way, and how you can apply those learnings when growing your Kubernetes clusters from a handful to hundreds or thousands of nodes.

Kubernetes at Datadog Scale

Docker, Inc.

Andy Clemenko, StackRox - One underutilized, and amazing, thing about the docker image scheme is labels. Labels are a built in way to document all aspects about the image itself. Think about all the information that the tags inside your clothing carry. If you care to look you can find out everything about the garment. All that information can be very valuable. Now think about how we can leverage labels to carry similar information. We can even use the labels to contain Docker Compose or even Kubernetes Yaml. We can even include labels into the CI/CD process making things more secure and smoother. Come find out some fun techniques on how to leverage labels to do some fun and amazing things.

Labels, Labels, Labels

Docker, Inc.

Patrick Deloulay, Micro Focus - Micro Focus started their digital transformation 3 years ago, moving the entire portfolio into hundreds of container images. Leveraging Docker Hub as our primary registry service, we will cover how we ended up building a simple but secure push/pull model to publish and deliver our premium assets to our customers and partners to both meet the high agility of our DevOps teams while greatly simplifying the deployment of our applications.

Using Docker Hub at Scale to Support Micro Focus' Delivery and Deployment Model

Docker, Inc.

Lukonde Mwila, Entelect As the cloud-native approach to development and deployment becomes more prevalent, it's an exciting time for software engineers to be equipped on how to dockerize multi-container applications and deploy them to the cloud. In this talk, Lukonde Mwila, Software Engineer at Entelect, will cover the following topics: - Docker Compose - Containerizing an Nginx Server - Containerizing an React App - Containerizing an Node.JS App - Containerizing anMongoDB App - Runing Multi-Container App Locally - Creating a CI/CD Pipeline - Adding a build stage to test containers and push images to Docker Hub - Deploying Multi-Container App to AWS Elastic Beanstalk Lukonde will start by giving an overview of how Docker Compose works and how it makes it very easy and straightforward to startup multiple Docker containers at the same time and automatically connect them together with some form of networking. After that, Lukonde will take a hands on approach to containerize an Nginx server, a React app, a NodeJS app and a MongoDB instance to demonstrate the power of Docker Compose. He'll demonstrate usage of two Docker files for an application, one production grade and the other for local development and running of tests. Lastly, he'll demonstrate creating a CI/CD pipeline in AWS to build and test our Docker images before pushing them to Docker Hub or AWS ECR, and finally deploying our multi-container application AWS Elastic Beanstalk.

Build & Deploy Multi-Container Applications to AWS

Docker, Inc.

Elton Stoneman, Docker Captain + Container Consultant and Trainer How do you provide a SaaS offering when your product is a 10-year old Fortran app, currently built to run on Windows 10? With Docker and Kubernetes of course - and you can do it in a week (... to prototype level at least). In this session I'll walk through the processes and practicalities of taking an older Windows app, making it run in containers with Kubernetes, and then building a simple API wrapper to host the whole stack as a cloud-based SaaS product. There's a lot of technology here from a real world case study, and I'll focus on: - running Windows apps in Docker containers - building a .NET Core API which can run in Linux or Windows containers - running the stack in Kubernetes with Docker Desktop locally and AKS in the cloud - configuring AKS workloads in Azure to burst out to Azure Container Instances And there's a core theme to this session: Docker and Kubernetes are complex technologies, but they're the key to modern development. If you invest time learning them, they make projects like this simple, portable, fast and fun.

From Fortran on the Desktop to Kubernetes in the Cloud: A Windows Migration S...

Docker, Inc.

This virtual meetup introduces the concepts and best practices of using Docker containers for software development for the Arm architecture across a variety of hardware systems. Using Docker Desktop on Windows or Mac, Amazon Web Services (AWS) A1 instances, and embedded Linux, we will demonstrate the latest Docker features to build, share, and run multi-architecture images with transparent support for Arm.

Developing with Docker for the Arm Architecture

Docker, Inc.

For many, the idea of speaking in front of a bunch of strangers can be enough to prevent you from ever responding to a CFP. But don't let it! Speaking at conferences, meetups, or even at your own company is a fantastic way to share you knowledge, meet others, advance your career, and give back. Whether you are on the fence, have decided to take the plunge and submit a CFP, or have already even a few talks, this session is for you. Drawing on their experience reviewing DockerCon CFPs and prepping speakers (including themselves) for a variety of conferences, Jenny Burcio and Ashlynn Polini will outline tips and strategies for turning your idea into a winning proposal and ultimately a compelling talk. They will share how to submit and prepare for your first - or next - conference talk.

Sharing is Caring: How to Begin Speaking at Conferences

Docker, Inc.

Mais de Docker, Inc. (20)

Containerize Your Game Server for the Best Multiplayer Experience

How to Improve Your Image Builds Using Advance Docker Build

Build & Deploy Multi-Container Applications to AWS

Securing Your Containerized Applications with NGINX

How To Build and Run Node Apps with Docker and Compose

Distributed Deep Learning with Docker at Salesforce

The First 10M Pulls: Building The Official Curl Image for Docker Hub

Monitoring in a Microservices World

COVID-19 in Italy: How Docker is Helping the Biggest Italian IT Company Conti...

Predicting Space Weather with Docker

Become a Docker Power User With Microsoft Visual Studio Code

How to Use Mirroring and Caching to Optimize your Container Registry

Monolithic to Microservices + Docker = SDLC on Steroids!

Kubernetes at Datadog Scale

Labels, Labels, Labels

Using Docker Hub at Scale to Support Micro Focus' Delivery and Deployment Model

Build & Deploy Multi-Container Applications to AWS

From Fortran on the Desktop to Kubernetes in the Cloud: A Windows Migration S...

Developing with Docker for the Arm Architecture

Sharing is Caring: How to Begin Speaking at Conferences

Último

This presentation explores the impact of HTML injection attacks on web applications, detailing how attackers exploit vulnerabilities to inject malicious code into web pages. Learn about the potential consequences of such attacks and discover effective mitigation strategies to protect your web applications from HTML injection vulnerabilities. for more information visit https://bostoninstituteofanalytics.org/category/cyber-security-ethical-hacking/

HTML Injection Attacks: Impact and Mitigation Strategies

Boston Institute of Analytics

Histor y of HAM Radio presentation slide

vu2urc

Scaling API-first – The story of a global engineering organization Ian Reasor, Senior Computer Scientist - Adobe Radu Cotescu, Senior Computer Scientist - Adobe Apidays New York 2024: The API Economy in the AI Era (April 30 & May 1, 2024) ------ Check out our conferences at https://www.apidays.global/ Do you want to sponsor or talk at one of our conferences? https://apidays.typeform.com/to/ILJeAaV8 Learn more on APIscene, the global media made by the community for the community: https://www.apiscene.io Explore the API ecosystem with the API Landscape: https://apilandscape.apiscene.io/

Apidays New York 2024 - Scaling API-first by Ian Reasor and Radu Cotescu, Adobe

apidays

Enterprise Knowledge’s Urmi Majumder, Principal Data Architecture Consultant, and Fernando Aguilar Islas, Senior Data Science Consultant, presented "Driving Behavioral Change for Information Management through Data-Driven Green Strategy" on March 27, 2024 at Enterprise Data World (EDW) in Orlando, Florida. In this presentation, Urmi and Fernando discussed a case study describing how the information management division in a large supply chain organization drove user behavior change through awareness of the carbon footprint of their duplicated and near-duplicated content, identified via advanced data analytics. Check out their presentation to gain valuable perspectives on utilizing data-driven strategies to influence positive behavioral shifts and support sustainability initiatives within your organization. In this session, participants gained answers to the following questions: - What is a Green Information Management (IM) Strategy, and why should you have one? - How can Artificial Intelligence (AI) and Machine Learning (ML) support your Green IM Strategy through content deduplication? - How can an organization use insights into their data to influence employee behavior for IM? - How can you reap additional benefits from content reduction that go beyond Green IM?

Driving Behavioral Change for Information Management through Data-Driven Gree...

Enterprise Knowledge

GenCyber Cyber Security Day Presentation

Michael W. Hawkins

Partners Life - Insurer Innovation Award 2024

The Digital Insurer

Finology Group – Insurtech Innovation Award 2024

The Digital Insurer

Strategies for Landing an Oracle DBA Job as a Fresher

Remote DBA Services

Automating Google Workspace (GWS) & more with Apps Script

wesley chun

presentation ICT roal in 21st century education

jfdjdjcjdnsjd

As privacy and data protection regulations evolve rapidly, organizations operating in multiple jurisdictions face mounting challenges to ensure compliance and safeguard customer data. With state-specific privacy laws coming up in multiple states this year, it is essential to understand what their unique data protection regulations will require clearly. How will data privacy evolve in the US in 2024? How to stay compliant? Our panellists will guide you through the intricacies of these states' specific data privacy laws, clarifying complex legal frameworks and compliance requirements. This webinar will review: - The essential aspects of each state's privacy landscape and the latest updates - Common compliance challenges faced by organizations operating in multiple states and best practices to achieve regulatory adherence - Valuable insights into potential changes to existing regulations and prepare your organization for the evolving landscape

TrustArc Webinar - Stay Ahead of US State Data Privacy Law Developments

TrustArc

Imagine a world where information flows as swiftly as thought itself, making decision-making as fluid as the data driving it. Every moment is critical, and the right tools can significantly boost your organization’s performance. The power of real-time data automation through FME can turn this vision into reality. Aimed at professionals eager to leverage real-time data for enhanced decision-making and efficiency, this webinar will cover the essentials of real-time data and its significance. We’ll explore: FME’s role in real-time event processing, from data intake and analysis to transformation and reporting An overview of leveraging streams vs. automations FME’s impact across various industries highlighted by real-life case studies Live demonstrations on setting up FME workflows for real-time data Practical advice on getting started, best practices, and tips for effective implementation Join us to enhance your skills in real-time data automation with FME, and take your operational capabilities to the next level.

From Event to Action: Accelerate Your Decision Making with Real-Time Automation

Safe Software

Tata AIG General Insurance Company - Insurer Innovation Award 2024

The Digital Insurer

How to Troubleshoot Apps for the Modern Connected Worker

ThousandEyes

Real Time Object Detection Using Open CV

Khem

Join our latest Connector Corner webinar to discover how UiPath Integration Service revolutionizes API-centric automation in a 'Quote to Cash' process—and how that automation empowers businesses to accelerate revenue generation. A comprehensive demo will explore connecting systems, GenAI, and people, through powerful pre-built connectors designed to speed process cycle times. Speakers: James Dickson, Senior Software Engineer Charlie Greenberg, Host, Product Marketing Manager

Connector Corner: Accelerate revenue generation using UiPath API-centric busi...

DianaGray10

What are drone anti-jamming systems? The drone anti-jamming systems and anti-spoof technology protect against interference, jamming, and spoofing of the UAVs. To protect their security, countries are beginning to research drone anti-jamming systems, also known as drone strike weapons. The anti-jam and anti-spoof technology protects against interference, jamming and spoofing. A drone strike weapon is a drone attack weapon that can attack and destroy enemy drones. So what is so unique about this amazing system?

What Are The Drone Anti-jamming Systems Technology?

Antenna Manufacturer Coco

💉💊+971581248768>> SAFE AND ORIGINAL ABORTION PILLS FOR SALE IN DUBAI AND ABUDHABI}}+971581248768 +971581248768 Mtp-Kit (500MG) Prices » Dubai [(+971581248768**)] Abortion Pills For Sale In Dubai, UAE, Mifepristone and Misoprostol Tablets Available In Dubai, UAE CONTACT DR.Maya Whatsapp +971581248768 We Have Abortion Pills / Cytotec Tablets /Mifegest Kit Available in Dubai, Sharjah, Abudhabi, Ajman, Alain, Fujairah, Ras Al Khaimah, Umm Al Quwain, UAE, Buy cytotec in Dubai +971581248768''''Abortion Pills near me DUBAI | ABU DHABI|UAE. Price of Misoprostol, Cytotec” +971581248768' Dr.DEEM ''BUY ABORTION PILLS MIFEGEST KIT, MISOPROTONE, CYTOTEC PILLS IN DUBAI, ABU DHABI,UAE'' Contact me now via What's App…… abortion Pills Cytotec also available Oman Qatar Doha Saudi Arabia Bahrain Above all, Cytotec Abortion Pills are Available In Dubai / UAE, you will be very happy to do abortion in Dubai we are providing cytotec 200mg abortion pill in Dubai, UAE. Medication abortion offers an alternative to Surgical Abortion for women in the early weeks of pregnancy. We only offer abortion pills from 1 week-6 Months. We then advise you to use surgery if its beyond 6 months. Our Abu Dhabi, Ajman, Al Ain, Dubai, Fujairah, Ras Al Khaimah (RAK), Sharjah, Umm Al Quwain (UAQ) United Arab Emirates Abortion Clinic provides the safest and most advanced techniques for providing non-surgical, medical and surgical abortion methods for early through late second trimester, including the Abortion By Pill Procedure (RU 486, Mifeprex, Mifepristone, early options French Abortion Pill), Tamoxifen, Methotrexate and Cytotec (Misoprostol). The Abu Dhabi, United Arab Emirates Abortion Clinic performs Same Day Abortion Procedure using medications that are taken on the first day of the office visit and will cause the abortion to occur generally within 4 to 6 hours (as early as 30 minutes) for patients who are 3 to 12 weeks pregnant. When Mifepristone and Misoprostol are used, 50% of patients complete in 4 to 6 hours; 75% to 80% in 12 hours; and 90% in 24 hours. We use a regimen that allows for completion without the need for surgery 99% of the time. All advanced second trimester and late term pregnancies at our Tampa clinic (17 to 24 weeks or greater) can be completed within 24 hours or less 99% of the time without the need surgery. The procedure is completed with minimal to no complications. Our Women's Health Center located in Abu Dhabi, United Arab Emirates, uses the latest medications for medical abortions (RU-486, Mifeprex, Mifegyne, Mifepristone, early options French abortion pill), Methotrexate and Cytotec (Misoprostol). The safety standards of our Abu Dhabi, United Arab Emirates Abortion Doctors remain unparalleled. They consistently maintain the lowest complication rates throughout the nation. Our Physicians and staff are always available to answer questions and care for women in one of the most difficult times in their lives. The decision to have an abortion at the Abortion Cl

+971581248768>> SAFE AND ORIGINAL ABORTION PILLS FOR SALE IN DUBAI AND ABUDHA...

?#DUbAI#??##{{(☎️+971_581248768%)**%*]'#abortion pills for sale in dubai@

Effective data discovery is crucial for maintaining compliance and mitigating risks in today's rapidly evolving privacy landscape. However, traditional manual approaches often struggle to keep pace with the growing volume and complexity of data. Join us for an insightful webinar where industry leaders from TrustArc and Privya will share their expertise on leveraging AI-powered solutions to revolutionize data discovery. You'll learn how to: - Effortlessly maintain a comprehensive, up-to-date data inventory - Harness code scanning insights to gain complete visibility into data flows leveraging the advantages of code scanning over DB scanning - Simplify compliance by leveraging Privya's integration with TrustArc - Implement proven strategies to mitigate third-party risks Our panel of experts will discuss real-world case studies and share practical strategies for overcoming common data discovery challenges. They'll also explore the latest trends and innovations in AI-driven data management, and how these technologies can help organizations stay ahead of the curve in an ever-changing privacy landscape.

TrustArc Webinar - Unlock the Power of AI-Driven Data Discovery

TrustArc

Handwritten Text Recognition for manuscripts and early printed texts

Maria Levchenko

DCSF19 Containerized Databases for Enterprise Applications

1. Joe Carroll Containerized Databases for Enterprise Applications

2. Product, InterSystems Joe Carroll

3. 1. Definitions 2. Misconceptions 3. Data Persistence 4. Data Security Outline

4. Enterprise Database Applications Definitions

5. Enterprise Database Applications Manage Mission Critical Data Definition:

6. Mission Critical Data

7. Mission Critical Data • Vital to lives, wallets, and/or the business • If we lose it or compromise it, then we’re in the news, people get fired, and the boss goes to jail. • Examples: Patient Records, Financial Data, Payroll, etc. Definition:

8. • Data Persistence • Data Security Needs

9. Summary Enterprise Database Applications Manage Mission Critical Data Mission Critical Data Impacts Lives, Wallets, and Business Data Persistence Data Security 21 3

10. 1. Definitions 2. Misconceptions 3. Data Persistence 4. Data Security Outline

11. Misconceptions “Containers ≠ Database”

12. • Immutable • Portable • Scriptable Why Docker Containers? Docker allows our application to be -

13. • Disposable/Ephemeral • Broad ecosystem of tools not built by us • Docker daemon is privileged Tension?

14. • Data Persistence • Data Security Needs

15. ✚

16. Summary Containers are Immutable, Portable, and Scriptable. Mission Critical Data Applications Are In Dire Need Of These Benefits Containers are for Enterprise Database Applications 21 3

17. 1. Definitions 2. Misconceptions 3. Data Persistence 4. Data Security Outline

18. Data Persistence

19. Container

20. Container Data

21. Examples! (Databases + Volumes) https://github.com/tjosephcarroll/DatabaseContainerExamples

22. Not All Data Needs Mission Critical Persistence

23. Summary Critical Data Must Persist Outside The Container Not All Data is Critical Data Make Smart Design Decisions Regarding Where Data Goes From Day 0 21 3

24. 1. Definitions 2. Misconceptions 3. Data Persistence 4. Data Security Outline

25. Data Security

26. Reminder – Mission Critical

27. • Build a registry of trusted images (build your own images) • Scan your images for vulnerabilities • Rotate your credentials • There are many tools! This is easy! Do it please! Trust, Scan, and Sign Your Images

28. • No database passwords in source. • Defined at runtime. • Encrypted at rest and in motion. • Start with Secrets! Secure Access To Your Data

29. Examples! (Databases + Secrets) https://github.com/tjosephcarroll/DatabaseContainerExamples

30. • What user/group are you containers running as? • Are the cgroups and namespaces what you want? • Any container in your configuration can be the culprit. Secure Your Runtime Environment

31. Summary Use Secrets To Protect Data Access Runtime Security – Users, Namespaces, Cgroups Scan, Sign, and Trust Your Images 21 3

32. 1. Definitions 2. Misconceptions 3. Data Persistence 4. Data Security Outline

33. Product, InterSystems github.com/tjosephcarroll @JoeCarroll3000 Joe Carroll

DCSF19 Containerized Databases for Enterprise Applications

Recomendados

Recomendados

Mais conteúdo relacionado

Mais procurados

Mais procurados (20)

Semelhante a DCSF19 Containerized Databases for Enterprise Applications

Semelhante a DCSF19 Containerized Databases for Enterprise Applications (20)

Mais de Docker, Inc.

Mais de Docker, Inc. (20)

Último

Último (20)

DCSF19 Containerized Databases for Enterprise Applications