DockerCon SF 2015: Faster, Cheaper, Safer
•
9 likes•5,196 views
This document discusses how Docker can help organizations achieve faster, cheaper, and safer development and operations. It outlines how Docker enables microservices architectures and continuous delivery for faster development. Using Docker allows consolidating resources for cheaper and more efficient infrastructure. Following security best practices like immutable deployments and role-based access helps ensure safer applications. The document provides examples of how different types of workloads can benefit from Docker in production environments.
Recommended
Recommended
More Related Content
What's hot
What's hot (20)
Viewers also liked
Viewers also liked (20)
Similar to DockerCon SF 2015: Faster, Cheaper, Safer
Similar to DockerCon SF 2015: Faster, Cheaper, Safer (20)
More from Docker, Inc.
More from Docker, Inc. (20)
DockerCon SF 2015: Faster, Cheaper, Safer
- 1. Faster, Cheaper, Safer Secure Microservice Architectures using Docker Adrian Cockcroft @adrianco Technology Fellow - Battery Ventures June 2015
- 2. Key Goals of the CIO? Align IT with the business Develop products faster Try not to get breached
- 3. Security Blanket Failure Insecure applications hidden behind firewalls make you feel safe until the breach happens… http://peanuts.wikia.com/wiki/Linus'_security_blanket
- 7. “You build it, you run it.” Werner Vogels 2006
- 8. DevOps Continuous Delivery No meetings, no tickets Self service tools and APIs
- 9. DeveloperDeveloper Developer Run What You Wrote Micro service Micro service Micro service Micro service Micro service Micro service Micro service Developer Developer Manager Manager VP Engineering Site Reliability Monitoring Tools Availability Metrics 99.95% customer success rate
- 10. Observe Orient Decide Act Land grab opportunity Competitive Move Customer Pain Point Analysis JFDI Plan Response Share Plans Incremental Features Automatic Deploy Launch AB Test Model Hypotheses BIG DATA INNOVATION CULTURE CLOUD Measure Customers Continuous Delivery
- 11. Low Cost of Change Using Docker Fast tooling supports continuous delivery of many tiny changes Developers • Compile/Build • Seconds Extend container • Package dependencies • Seconds PaaS deploy Container • Docker startup • Seconds
- 12. Change One Thing at a Time!
- 13. What Happened? Rate of change increased Cost and size and risk of change reduced
- 14. Cheaper - Lean
- 16. Fail early and often Instrument everything Hypothesis driven development Efficient and autoscaled
- 17. Efficiency Gains: Virtualization consolidates CPUs Docker consolidates CPU and RAM
- 18. With Docker a test environment should only exist for the few seconds it takes to run a test
- 19. Autoscale production to consume just the resources you need, by the second
- 20. Safer - Rugged
- 22. What can developers do about the threats?
- 23. External Threats Build using penetration test tools Manage image supply chain Hardened immutable services Service roles and security groups
- 24. Internal Threats Assume employees are compromised User roles, minimum privilege Audit logs for everything Encrypt data at rest
- 26. In Production https://www.docker.com/resources/usecases/ and many more….
- 28. Best Practices https://blog.docker.com/2015/05/understanding-docker-security-and-best-practices/
- 29. Immutable deployments Automated penetration testing Role based identity and access Trusted container supply chain Continuous audit
- 30. Workloads
- 31. Need for Speed CPU and IO Intensive workloads Hadoop, streaming, datastores Bare metal for efficiency Well isolated for security
- 32. Cutting the Cost Many similar containers per VM Saving on RAM, oversubscribe CPU Deploy with Swarm, Mesos, ECS, GKE VM based single tenant security
- 33. Playing it Safe One critical container per VM Extra security for exposed services Deploy as immutable VM image Docker adds to VM security
- 34. Tooling for Docker and many more….
- 35. Docker in Production 2014 - DIY frameworks 2015 - Hardening and best practices 2016 - Mature production tooling
- 36. Thanks ! Continue the discussion on Twitter @adrianco Adrian Cockcroft Technology Fellow - Battery Ventures June 2015 Disclosure: some of the companies mentioned may be Battery Ventures Portfolio Companies See www.battery.com for a list of portfolio investments