Delivering SaaS to the Enterprise with illumos

•

0 gostou•1,300 visualizações

Circonus's SaaS stack consists of over 20 asynchronous components delivered by or depending on around 200 software packages. Our challenge is to also deliver this platform to the enterprise as a manageable set of systems. This presentation describes how illumos technologies enable us to manage both SaaS and enterprise deployments with ease.

Delivering SaaS
to the Enterprise with illumos
or: Herding Cats for Fun and Profit
illumos day 2014

/me
Eric Sproul, aka @eirescot
Sysadmin (DevOp?)
Engineer at Circonus
Automator of Things
Continuous integration/delivery
Packaging
Deployments

What's Circonus?
API-driven, scalable monitoring and telemetry analysis
Distributed, service-oriented architecture
Available as both public and private (on-prem) SaaS
Runs on OmniOS and RHEL/CentOS
...but this talk isn't really about Circonus

Challenges
Started as public SaaS (one true copy)
Lots of moving parts, many disparate configs
Must now be delivered on-premise too, configured
correctly for the local environment
Updates happen frequently
Periodically define a known-good set of versions

Goals
Bring up over 20 async components across N systems
Deliver a consistent set of software, regardless of when
users update

Right tool for the job
Minimalist server-focused illumos distribution

OmniOS Key Enablers
IPS
Zones
Crossbow
of course: ZFS, SMF, DTrace, etc.

Initial Install
1. Install chef-solo environment package
2. Provide site config (data bag)
3. Run management script

Herding Cats
>200 custom packages
!
Need a way to move
from one set of
package versions to
another
flickr.com/photos/ceardach/

Image Packaging System
aka IPS, pkg(5)
developed @ Sun for OpenSolaris
network-centric
delta-only updates
integrates with ZFS, SMF
rich dependency support

IPS Package
FMRI (Fault Managed Resource Identifier)
pkg://circonus/field/ck@0.4.2,5.11-0.151006:20140611T155727Z
pkg:// scheme
circonus publisher
field/ck name
0.4.2 component version
5.11 build version
0.151006 branch version
20140611T155727Z
timestamp (ISO 8601)

Package manifest
set name=pkg.fmri
value=pkg://circonus/field/ck@0.4.2,5.11-0.151006:20140611T155727Z
set name=pkg.summary value="Concurrency Kit"
...
dir group=bin mode=0755 owner=root path=opt/circonus/lib/amd64
file c217fea9c27c7f48f3a1679883ac510e6ea476dd
chash=7c62a0b79e561090a024d61d40fe647a037adff0 elfarch=i386
elfbits=64 elfhash=bdf288d24210adfc1cc1aa16d60a613ec5ed6d36
group=bin mode=0744 owner=root
path=opt/circonus/lib/amd64/libck.so.0.4.2
pkg.csize=22125 pkg.size=48192
...
depend fmri=pkg:/system/library@0.5.11-0.151006 type=require

Dependency Types
require
optional
exclude
# any version of foo
library/foo
!
# foo >= 2
library/foo@2
!
# foo >= 2.1
library/foo@2.1

Dependency Types
incorporate
# 2.x, not 1.x or 3.x
library/foo@2
!
# 2.1.x, not 2.0 or 2.2
library/foo@2.1
!
# 2.1.2 only
library/foo@2.1.2

Cat Status: Herded
set name=pkg.fmri value=pkg://circonus/field/circonus-incorporation@
0.2.1411487427,5.11-0.151006:20140923T155035Z
set name=pkg.human-version value="8e53fc6:Tue Sep 23 15:50:27
2014 UTC"
...
depend
fmri=pkg://circonus/field/ck@0.4.2,5.11-0.151006
type=incorporate
depend
fmri=pkg://circonus/field/jdk@1.7.0.67,5.11-0.151006
type=incorporate
depend
fmri=pkg://circonus/platform/ca@0.1.1410355765,5.11-0.151006
type=incorporate
...

Cat Status: Herded
Updating circonus-incorporation pulls any other installed
packages into compliance
A newly-installed package will be constrained to the
version allowed by the installed incorporation
All version decisions concentrated in a single package

Other illumos Benefits
Zones: OS partitions that isolate app environments
SMF: true framework for service control
ZFS: because we care about our data
filesystem trees can be delegated to zones
Advanced virtual networking (Crossbow)

Which led to...
New product idea!
Deliver on-premise
SaaS that runs on a
single host
Trade redundancy,
scalability for simplicity
Lower cost
Easier to operate
Fills a niche between
public SaaS and full-scale
private version

SaaS in a Box
VNIC
virtual network i/f
etherstub
virtual switch
GZ forwards to
NGZs and does
outbound NAT
(IPFilter)
Entire system operates from one visible IP address

Thanks!
http://wiki.illumos.org/
http://omnios.omniti.com/
http://circonus.com

Mais conteúdo relacionado

Mais procurados

MDP Group SAP PI & PO Azure Adapter

MDP Group

How to add storage to esxi 5.5

Osama Mustafa

KKBOX WWDC17 Airplay 2 - Dolphin

Liyao Chen

"Puppet at SpaceX" - Jok Thuau of SpaceX - PuppetCamp LA '12

Puppet

Hadoop presentation

MaggieZhang61

Next-Generation Best Practices for VMware and Storage

Scott Lowe

Solr5

Phoebe Shih

Ansible + WordPress - WordCamp Toronto 2016

Alan Lok

SaltConf14 - Forrest Alvarez, Choice Hotels - Salt Formulas and States

SaltStack

Weblogic 12c installation (oracle linux)

Osama Mustafa

L5 swagger

saber tabatabaee

Spring Boot - Microservice Metrics Monitoring

DonghuKIM2

Ansible

Afroz Hussain

Install oracle siebel on windows 2008 r2

Osama Mustafa

Managing windows Nodes like Linux Nodes by Ansible

anilvm09

Appache.ppt

anandha ganesh

Fabric Fast & Furious edition

Alejandro E Brito Monedero

Ansible windows cheat sheet by anil.k

anilvm09

Does the SPL still have any relevance in the Brave New World of PHP7?

Mark Baker

AWS 기반 Docker, Kubernetes

정빈 권

Mais procurados (20)

MDP Group SAP PI & PO Azure Adapter

How to add storage to esxi 5.5

KKBOX WWDC17 Airplay 2 - Dolphin

"Puppet at SpaceX" - Jok Thuau of SpaceX - PuppetCamp LA '12

Hadoop presentation

Next-Generation Best Practices for VMware and Storage

Solr5

Ansible + WordPress - WordCamp Toronto 2016

SaltConf14 - Forrest Alvarez, Choice Hotels - Salt Formulas and States

Weblogic 12c installation (oracle linux)

L5 swagger

Spring Boot - Microservice Metrics Monitoring

Ansible

Install oracle siebel on windows 2008 r2

Managing windows Nodes like Linux Nodes by Ansible

Appache.ppt

Fabric Fast & Furious edition

Ansible windows cheat sheet by anil.k

Does the SPL still have any relevance in the Brave New World of PHP7?

AWS 기반 Docker, Kubernetes

Semelhante a Delivering SaaS to the Enterprise with illumos

Provisioning with OSGi Subsystems and Repository using Apache Aries and Felix

David Bosschaert

ITB2017 - Keynote

Ortus Solutions, Corp

Beyond static configuration

Stefan Schimanski

Beyond static configuration management discusses how containerization and distributed configuration management are disrupting traditional system engineering. Key developments include specialized container-centric operating systems like CoreOS, orchestration tools like Docker, Mesos, and Kubernetes, as well as configuration stores like etcd, Consul, and Zookeeper that enable dynamic configuration of distributed systems. The talk argues this represents an exciting transition period for development and operations.

Microservices Application Tracing Standards and Simulators - Adrians at OSCON

Adrian Cockcroft

This document discusses distributed tracing standards and microservices simulations. It introduces OpenZipkin and OpenTracing as open source distributed tracing projects. It also discusses Pivot Tracing and the OpenTracing initiative to standardize instrumentation. The document proposes using a microservices simulator called Spigo to generate test data and visualize traces. It provides an example of defining a LAMP stack architecture in JSON to simulate with Spigo.

Ruby and Rails Packaging to Production

Fabio Kung

This document discusses packaging Ruby and Rails applications for production. It covers using system packages versus gems, configuration management tools like Chef and Puppet, creating Debian packages, packaging gems, build servers, pain points like outdated Rubygems packages, and ideas for deeper Bundler integration and packaging gems by default. Overall it presents strategies for deploying Ruby applications as system packages for production servers.

Package Management via Spack on SJTU π Supercomputer

Jianwen Wei

Cloud Meetup - Automation in the Cloud

petriojala123

CoreOS, or How I Learned to Stop Worrying and Love Systemd

Richard Lister

Ric Lister presents patterns for running Docker in production on CoreOS, including a simple homogeneous operations cluster where sidekick units announce services in etcd and a reverse proxy discovers them, an etcd and workers pattern for low-traffic sites behind a load balancer, and an immutable servers pattern without etcd for high-traffic microservices with strict change control. He also discusses logging to ship container output off hosts, various monitoring options, alternative operating systems like RancherOS and Atomic, and scheduler options like Kubernetes, Mesos, and Deis.

Deploying PHP Applications with Ansible

Orestes Carracedo

The document discusses using Ansible to deploy PHP applications. It provides an overview of Ansible concepts like inventory, modules, playbooks and roles. It also covers common Ansible patterns like managing dependencies, accessing remote servers, deploying code from version control and implementing blue-green deployments. Examples are given for tasks like installing packages, copying files, templating configuration and automating full application deployments using third-party roles.

Ansible is the simplest way to automate. MoldCamp, 2015

Alex S

Ansible is a radically simple IT automation engine. This is new and great configuration management system (like Chef, Puppet) that has been created in 2012 year. Also Ansible is pretty simple and flexible system, that helps you in managing your servers and execute Ad-hoc commands. During this session I will explain how to start using Ansible in infrastructure orchestration and what are pros and cons of this system. Also I will explain you our experience in deployments, provisioning and other aspects.

Dependencies Managers in C/C++. Using stdcpp 2014

biicode

Developing MIPS Exploits to Hack Routers

BGA Cyber Security

This document discusses developing exploits for routers running MIPS binaries. It begins by setting up a Debian MIPS environment using QEMU for testing exploits. The document then analyzes a stack overflow vulnerability in MiniUPnPd version 1.0 as a target. Details are provided on obtaining the MiniUPnPd binary from router firmware, setting up remote debugging of the binary, and triggering the vulnerability with a long SOAP request. The document concludes by discussing restrictions in writing the exploit and finding an appropriate return-oriented programming chain to execute shellcode.

Container Security - Let's see Falco and Sysdig in Action by Stefan Trimborn

ContainerDay Security 2023

Session at ContainerDay Security 2023 on the 8th of March in Hamburg. Containers are awesome. The technology finds more and more adaptation in our daily IT lifes. They are fast, agile and shareable. All those postives bring a downsite to it - visibility. Can I trust every container content? Is my container behaving like it should? It's to fast, how can I catch anomalities? We want to tackle those questions in our session and show you what Falco and Sysdig can do for you to win back container visibility without any loss of container benefits.

DevconTLV 2014 (Jan) - DIY DevOps

Leonid Mirsky

We all know that bringing devops practices to your organisation is hard and very labour intensive task. Despite the fact that for large organisations it is still a real challenge, for small startups and development teams devops practices can be adopted relatively easily. In this talk Leonid will share his experience of bringing devops practices to small organisations, and prove that devops isn't something that you should postpone for a later growth stage, but something you can do (and relatively easy) now, at the first stages of your idea inception!

Anycast all the things

Maximilan Wilhelm

Es gibt viele Möglichkeiten hoch verfügbare und/oder skalierbare Dienste zu bauen, die weitläufig im Einsatz sind: DNS Round-Robin, ein Satz Loadbalancer oder Reverse-Proxies, etc. pp. An Anycast und BGP im eigenen Rechenzentrum trauen sich einige Admins und Entscheider nicht heran. Warum es OK ist, wenn einige bis viele Server die selbe IP-Adresse haben, viele Wege nach Rom führen und wie man so ein Setup aufbaut und betreibt soll in diesem Vortrag praxisnah gezeigt werden. Wir bauen auf Basis von Debian Linux, Bird und Bind einen Cluster von Webservern und spielen ein bisschen damit herum (wenn noch genug Zeit ist).

Splunk: Forward me the REST of those shells

Anthony D Hendricks

Splunk forwarders were used to gain initial access to a network by exploiting their default credentials and REST API. This allowed deploying a malicious app that provided a shell. The shell was then used to pillage other systems by abusing credentials and data found in Chef scripts and GitHub repositories. Mitigations include changing default credentials, disabling the REST API on forwarders, improving logging and monitoring for unusual app deployments, using TLS for deployment server communications, and running Splunk in a less privileged manner.

Make stateful apps in Kubernetes a no brainer with Pure Storage and GitOps

Weaveworks

The need for scale and acceleration of code to production are the main drivers behind the rapid adoption of Kubernetes in modern enterprises. Organizations are aiming to deploy thousands of cloud native applications, including stateful applications on premise, in a single cloud or across multiple clouds. Managing these workloads are complex and can often be a challenging task when it comes to automating operational tasks, rolling updates or migrations. In this webinar Weaveworks and Pure will show you how integrated solutions such as the Weave Kubernetes Platform and Pure Service Orchestrator can save you valuable time through efficient, predictable and reliable operations.

Assisted-Installer-DevConf-US-2021

Nir Magnezi

Since announcing Openshift version 4, deploying a single OpenShift cluster has become pretty simple. However, simple does not mean scalable, especially when you need to deploy tens, hundreds or even thousands of clusters. For example, a cellular company deploying OpenShift on Edge at the base of each of their cell towers. It would be very difficult to try and manage this using the default deployment tool. Zero Touch Provisioning (ZTP), along with GitOps methodologies, can be leveraged to automate OpenShift deployment in parallel to multiple sites, without human intervention. ZTP is a component of Open Cluster Management (OCM), an operator that enables a single OCP cluster to manage a fleet of clusters. This functionality uses declarative APIs to enable the configuration of a vast number of OpenShift clusters. ZTP integrates multiple open-source projects: OCM, Hive, Assisted Installer and Metal³. In this session, you will learn about ZTP architecture and its components. We will discuss the installation flow and how the components interact with each other. We will learn about the possibility of installing in an air-gapped environment (disconnected from the Internet) and finally demonstrate how to install a Single Node Openshift on bare metal using only a few manifests.

"Look Ma, no hands! Zero Touch Provisioning for OpenShift" DevConf.US 2021

Freddy Rolland

Workshop MSF4J - Getting Started with Microservices and Java

Edgar Silva

Semelhante a Delivering SaaS to the Enterprise with illumos (20)

Provisioning with OSGi Subsystems and Repository using Apache Aries and Felix

ITB2017 - Keynote

Beyond static configuration

Microservices Application Tracing Standards and Simulators - Adrians at OSCON

Ruby and Rails Packaging to Production

Package Management via Spack on SJTU π Supercomputer

Cloud Meetup - Automation in the Cloud

CoreOS, or How I Learned to Stop Worrying and Love Systemd

Deploying PHP Applications with Ansible

Ansible is the simplest way to automate. MoldCamp, 2015

Dependencies Managers in C/C++. Using stdcpp 2014

Developing MIPS Exploits to Hack Routers

Container Security - Let's see Falco and Sysdig in Action by Stefan Trimborn

DevconTLV 2014 (Jan) - DIY DevOps

Anycast all the things

Splunk: Forward me the REST of those shells

Make stateful apps in Kubernetes a no brainer with Pure Storage and GitOps

Assisted-Installer-DevConf-US-2021

"Look Ma, no hands! Zero Touch Provisioning for OpenShift" DevConf.US 2021

Workshop MSF4J - Getting Started with Microservices and Java

Último

みなさんこんにちはこれ何文字まで入るの？40文字以下不可とか本当に意味わからないけどこれ限界文字数書いてないからマジでやばい文字数いけるんじゃないの？えこ...

名前です男

Energy Efficient Video Encoding for Cloud and Edge Computing Instances

Alpen-Adria-Universität

Generating privacy-protected synthetic data using Secludy and Milvus

Zilliz

During this demo, the founders of Secludy will demonstrate how their system utilizes Milvus to store and manipulate embeddings for generating privacy-protected synthetic data. Their approach not only maintains the confidentiality of the original data but also enhances the utility and scalability of LLMs under privacy constraints. Attendees, including machine learning engineers, data scientists, and data managers, will witness first-hand how Secludy's integration with Milvus empowers organizations to harness the power of LLMs securely and efficiently.

“Building and Scaling AI Applications with the Nx AI Manager,” a Presentation...

Edge AI and Vision Alliance

For the full video of this presentation, please visit: https://www.edge-ai-vision.com/2024/06/building-and-scaling-ai-applications-with-the-nx-ai-manager-a-presentation-from-network-optix/ Robin van Emden, Senior Director of Data Science at Network Optix, presents the “Building and Scaling AI Applications with the Nx AI Manager,” tutorial at the May 2024 Embedded Vision Summit. In this presentation, van Emden covers the basics of scaling edge AI solutions using the Nx tool kit. He emphasizes the process of developing AI models and deploying them globally. He also showcases the conversion of AI models and the creation of effective edge AI pipelines, with a focus on pre-processing, model conversion, selecting the appropriate inference engine for the target hardware and post-processing. van Emden shows how Nx can simplify the developer’s life and facilitate a rapid transition from concept to production-ready applications.He provides valuable insights into developing scalable and efficient edge AI solutions, with a strong focus on practical implementation.

Fueling AI with Great Data with Airbyte Webinar

Zilliz

Salesforce Integration for Bonterra Impact Management (fka Social Solutions A...

Jeffrey Haguewood

Sidekick Solutions uses Bonterra Impact Management (fka Social Solutions Apricot) and automation solutions to integrate data for business workflows. We believe integration and automation are essential to user experience and the promise of efficient work through technology. Automation is the critical ingredient to realizing that full vision. We develop integration products and services for Bonterra Case Management software to support the deployment of automations for a variety of use cases. This video focuses on integration of Salesforce with Bonterra Impact Management. Interested in deploying an integration with Salesforce for Bonterra Impact Management? Contact us at sales@sidekicksolutionsllc.com to discuss next steps.

20240607 QFM018 Elixir Reading List May 2024

Matthew Sinclair

Digital Marketing Trends in 2024 | Guide for Staying Ahead

Wask

https://www.wask.co/ebooks/digital-marketing-trends-in-2024 Feeling lost in the digital marketing whirlwind of 2024? Technology is changing, consumer habits are evolving, and staying ahead of the curve feels like a never-ending pursuit. This e-book is your compass. Dive into actionable insights to handle the complexities of modern marketing. From hyper-personalization to the power of user-generated content, learn how to build long-term relationships with your audience and unlock the secrets to success in the ever-shifting digital landscape.

Presentation of the OECD Artificial Intelligence Review of Germany

innovationoecd

5th LF Energy Power Grid Model Meet-up Slides

DanBrown980551

5th Power Grid Model Meet-up It is with great pleasure that we extend to you an invitation to the 5th Power Grid Model Meet-up, scheduled for 6th June 2024. This event will adopt a hybrid format, allowing participants to join us either through an online Mircosoft Teams session or in person at TU/e located at Den Dolech 2, Eindhoven, Netherlands. The meet-up will be hosted by Eindhoven University of Technology (TU/e), a research university specializing in engineering science & technology. Power Grid Model The global energy transition is placing new and unprecedented demands on Distribution System Operators (DSOs). Alongside upgrades to grid capacity, processes such as digitization, capacity optimization, and congestion management are becoming vital for delivering reliable services. Power Grid Model is an open source project from Linux Foundation Energy and provides a calculation engine that is increasingly essential for DSOs. It offers a standards-based foundation enabling real-time power systems analysis, simulations of electrical power grids, and sophisticated what-if analysis. In addition, it enables in-depth studies and analysis of the electrical power grid’s behavior and performance. This comprehensive model incorporates essential factors such as power generation capacity, electrical losses, voltage levels, power flows, and system stability. Power Grid Model is currently being applied in a wide variety of use cases, including grid planning, expansion, reliability, and congestion studies. It can also help in analyzing the impact of renewable energy integration, assessing the effects of disturbances or faults, and developing strategies for grid control and optimization. What to expect For the upcoming meetup we are organizing, we have an exciting lineup of activities planned: -Insightful presentations covering two practical applications of the Power Grid Model. -An update on the latest advancements in Power Grid -Model technology during the first and second quarters of 2024. -An interactive brainstorming session to discuss and propose new feature requests. -An opportunity to connect with fellow Power Grid Model enthusiasts and users.

Let's Integrate MuleSoft RPA, COMPOSER, APM with AWS IDP along with Slack

shyamraj55

How to Get CNIC Information System with Paksim Ga.pptx

danishmna97

Nordic Marketo Engage User Group_June 13_ 2024.pptx

MichaelKnudsen27

Introduction of Cybersecurity with OSS at Code Europe 2024

Hiroshi SHIBATA

I develop the Ruby programming language, RubyGems, and Bundler, which are package managers for Ruby. Today, I will introduce how to enhance the security of your application using open-source software (OSS) examples from Ruby and RubyGems. The first topic is CVE (Common Vulnerabilities and Exposures). I have published CVEs many times. But what exactly is a CVE? I'll provide a basic understanding of CVEs and explain how to detect and handle vulnerabilities in OSS. Next, let's discuss package managers. Package managers play a critical role in the OSS ecosystem. I'll explain how to manage library dependencies in your application. I'll share insights into how the Ruby and RubyGems core team works to keep our ecosystem safe. By the end of this talk, you'll have a better understanding of how to safeguard your code.

Driving Business Innovation: Latest Generative AI Advancements & Success Story

Safe Software

Are you ready to revolutionize how you handle data? Join us for a webinar where we’ll bring you up to speed with the latest advancements in Generative AI technology and discover how leveraging FME with tools from giants like Google Gemini, Amazon, and Microsoft OpenAI can supercharge your workflow efficiency. During the hour, we’ll take you through: Guest Speaker Segment with Hannah Barrington: Dive into the world of dynamic real estate marketing with Hannah, the Marketing Manager at Workspace Group. Hear firsthand how their team generates engaging descriptions for thousands of office units by integrating diverse data sources—from PDF floorplans to web pages—using FME transformers, like OpenAIVisionConnector and AnthropicVisionConnector. This use case will show you how GenAI can streamline content creation for marketing across the board. Ollama Use Case: Learn how Scenario Specialist Dmitri Bagh has utilized Ollama within FME to input data, create custom models, and enhance security protocols. This segment will include demos to illustrate the full capabilities of FME in AI-driven processes. Custom AI Models: Discover how to leverage FME to build personalized AI models using your data. Whether it’s populating a model with local data for added security or integrating public AI tools, find out how FME facilitates a versatile and secure approach to AI. We’ll wrap up with a live Q&A session where you can engage with our experts on your specific use cases, and learn more about optimizing your data workflows with AI. This webinar is ideal for professionals seeking to harness the power of AI within their data management systems while ensuring high levels of customization and security. Whether you're a novice or an expert, gain actionable insights and strategies to elevate your data processes. Join us to see how FME and AI can revolutionize how you work with data!

Programming Foundation Models with DSPy - Meetup Slides

Zilliz

Cosa hanno in comune un mattoncino Lego e la backdoor XZ?

Speck&Tech

ABSTRACT: A prima vista, un mattoncino Lego e la backdoor XZ potrebbero avere in comune il fatto di essere entrambi blocchi di costruzione, o dipendenze di progetti creativi e software. La realtà è che un mattoncino Lego e il caso della backdoor XZ hanno molto di più di tutto ciò in comune. Partecipate alla presentazione per immergervi in una storia di interoperabilità, standard e formati aperti, per poi discutere del ruolo importante che i contributori hanno in una comunità open source sostenibile. BIO: Sostenitrice del software libero e dei formati standard e aperti. È stata un membro attivo dei progetti Fedora e openSUSE e ha co-fondato l'Associazione LibreItalia dove è stata coinvolta in diversi eventi, migrazioni e formazione relativi a LibreOffice. In precedenza ha lavorato a migrazioni e corsi di formazione su LibreOffice per diverse amministrazioni pubbliche e privati. Da gennaio 2020 lavora in SUSE come Software Release Engineer per Uyuni e SUSE Manager e quando non segue la sua passione per i computer e per Geeko coltiva la sua curiosità per l'astronomia (da cui deriva il suo nickname deneb_alpha).

Recommendation System using RAG Architecture

fredae14

How to use Firebase Data Connect For Flutter

Daiki Mogmet Ito

TrustArc Webinar - 2024 Global Privacy Survey

TrustArc

How does your privacy program stack up against your peers? What challenges are privacy teams tackling and prioritizing in 2024? In the fifth annual Global Privacy Benchmarks Survey, we asked over 1,800 global privacy professionals and business executives to share their perspectives on the current state of privacy inside and outside of their organizations. This year’s report focused on emerging areas of importance for privacy and compliance professionals, including considerations and implications of Artificial Intelligence (AI) technologies, building brand trust, and different approaches for achieving higher privacy competence scores. See how organizational priorities and strategic approaches to data security and privacy are evolving around the globe. This webinar will review: - The top 10 privacy insights from the fifth annual Global Privacy Benchmarks Survey - The top challenges for privacy leaders, practitioners, and organizations in 2024 - Key themes to consider in developing and maintaining your privacy program

Delivering SaaS to the Enterprise with illumos

1. Delivering SaaS to the Enterprise with illumos or: Herding Cats for Fun and Profit illumos day 2014

2. /me Eric Sproul, aka @eirescot Sysadmin (DevOp?) Engineer at Circonus Automator of Things Continuous integration/delivery Packaging Deployments

3. What's Circonus? API-driven, scalable monitoring and telemetry analysis Distributed, service-oriented architecture Available as both public and private (on-prem) SaaS Runs on OmniOS and RHEL/CentOS ...but this talk isn't really about Circonus

4. Challenges Started as public SaaS (one true copy) Lots of moving parts, many disparate configs Must now be delivered on-premise too, configured correctly for the local environment Updates happen frequently Periodically define a known-good set of versions

5. Goals Bring up over 20 async components across N systems Deliver a consistent set of software, regardless of when users update

6. Right tool for the job Minimalist server-focused illumos distribution

7. OmniOS Key Enablers IPS Zones Crossbow of course: ZFS, SMF, DTrace, etc.

8. Initial Install 1. Install chef-solo environment package 2. Provide site config (data bag) 3. Run management script

9. Updates Run management script again!

10. Herding Cats >200 custom packages ! Need a way to move from one set of package versions to another flickr.com/photos/ceardach/

11. Image Packaging System aka IPS, pkg(5) developed @ Sun for OpenSolaris network-centric delta-only updates integrates with ZFS, SMF rich dependency support

12. IPS Package FMRI (Fault Managed Resource Identifier) pkg://circonus/field/ck@0.4.2,5.11-0.151006:20140611T155727Z pkg:// scheme circonus publisher field/ck name 0.4.2 component version 5.11 build version 0.151006 branch version 20140611T155727Z timestamp (ISO 8601)

13. Package manifest set name=pkg.fmri value=pkg://circonus/field/ck@0.4.2,5.11-0.151006:20140611T155727Z set name=pkg.summary value="Concurrency Kit" ... dir group=bin mode=0755 owner=root path=opt/circonus/lib/amd64 file c217fea9c27c7f48f3a1679883ac510e6ea476dd chash=7c62a0b79e561090a024d61d40fe647a037adff0 elfarch=i386 elfbits=64 elfhash=bdf288d24210adfc1cc1aa16d60a613ec5ed6d36 group=bin mode=0744 owner=root path=opt/circonus/lib/amd64/libck.so.0.4.2 pkg.csize=22125 pkg.size=48192 ... depend fmri=pkg:/system/library@0.5.11-0.151006 type=require

14. Dependency Types require optional exclude # any version of foo library/foo ! # foo >= 2 library/foo@2 ! # foo >= 2.1 library/foo@2.1

15. Dependency Types incorporate # 2.x, not 1.x or 3.x library/foo@2 ! # 2.1.x, not 2.0 or 2.2 library/foo@2.1 ! # 2.1.2 only library/foo@2.1.2

16. Cat Status: Herded set name=pkg.fmri value=pkg://circonus/field/circonus-incorporation@ 0.2.1411487427,5.11-0.151006:20140923T155035Z set name=pkg.human-version value="8e53fc6:Tue Sep 23 15:50:27 2014 UTC" ... depend fmri=pkg://circonus/field/ck@0.4.2,5.11-0.151006 type=incorporate depend fmri=pkg://circonus/field/jdk@1.7.0.67,5.11-0.151006 type=incorporate depend fmri=pkg://circonus/platform/ca@0.1.1410355765,5.11-0.151006 type=incorporate ...

17. Cat Status: Herded Updating circonus-incorporation pulls any other installed packages into compliance A newly-installed package will be constrained to the version allowed by the installed incorporation All version decisions concentrated in a single package

18. Other illumos Benefits Zones: OS partitions that isolate app environments SMF: true framework for service control ZFS: because we care about our data filesystem trees can be delegated to zones Advanced virtual networking (Crossbow)

19. Which led to... New product idea! Deliver on-premise SaaS that runs on a single host Trade redundancy, scalability for simplicity Lower cost Easier to operate Fills a niche between public SaaS and full-scale private version

20. SaaS in a Box VNIC virtual network i/f etherstub virtual switch GZ forwards to NGZs and does outbound NAT (IPFilter) Entire system operates from one visible IP address

21. Thanks! http://wiki.illumos.org/ http://omnios.omniti.com/ http://circonus.com

Delivering SaaS to the Enterprise with illumos

Recomendados

Recomendados

Mais conteúdo relacionado

Mais procurados

Mais procurados (20)

Semelhante a Delivering SaaS to the Enterprise with illumos

Semelhante a Delivering SaaS to the Enterprise with illumos (20)

Último

Último (20)

Delivering SaaS to the Enterprise with illumos