java 9: tips on migraon and upgradability - qconsf...• if you use any of the components that are...

Copyright©2017,Oracleand/oritsaffiliates.Allrightsreserved.|

Java9:TipsonMigraDonandUpgradability

BernardTraversatVicePresidentofDevelopmentJavaSEPlaJormOracleNovember,2017

ConfidenDal–OracleInternal/Restricted/HighlyRestricted 1


SafeHarborStatementThefollowingisintendedtooutlineourgeneralproductdirecDon.ItisintendedforinformaDonpurposesonly,andmaynotbeincorporatedintoanycontract.Itisnotacommitmenttodeliveranymaterial,code,orfuncDonality,andshouldnotberelieduponinmakingpurchasingdecisions.Thedevelopment,release,andDmingofanyfeaturesorfuncDonalitydescribedforOracle’sproductsremainsatthesolediscreDonofOracle.



Agenda

Upgradability

JDK9migraDonDps

WhyJava9NewModulereallymaZersforupgradability?

WhyalltheabovemaZerevenmoreforthecloudandmicroservices!

1

2

3

4


Copyright©2017,Oracleand/oritsaffiliates.Allrightsreserved.| ConfidenDal–OracleInternal/Restricted/HighlyRestricted 4

Upgradability


So`wareUpgradability


ManagingandSecuringtheCloudatScale

• Massivecloudbuildupoverthepastfewyearsmeanscompoundingrisksifapatchorupdateisnotapplied– Equifaxfailedtopatchaknownsecurityvulnerability

•  Through2020,99%ofvulnerabili8esexploitedwillconDnuetobetheonesknownbysecurityandITprofessionalsforatleastoneyear(Gartner)•  The2016Microso`SecurityIntelligenceReportstatesthat5,000to6,000newvulnerabiliDessurfaceeachyear.Thatworksouttoanaverageof15perday.•  ExponenDalcomplexitytomanagendifferentversionsofthesameso`ware(nm)•  TheCloudisdemandingconDnuousupgradability!



WhyUpgrading?

•  Securityfixes• Regressionsfixes• Newreleaseoranewfeature• Moreperformance• Morerobustness• Becausethelayerunderneathoraboveyoujustupgraded(OS’s,Hardware)• ReducecostofoperaDonviauniformity



WhyNotUpgrading?


Itisgoingtocostmealotofmoneyifsomethinggoeswrong!

Somethingisgoingtogowrong!

Itiswork.Ineedtomodifymyapp!

Copyright©2017,Oracleand/oritsaffiliates.Allrightsreserved.| OracleConfidenDal–Internal/Restricted/HighlyRestricted 9

JavaScriptUpgradability

h4ps://trends.builtwith.com/javascript/compa=bility

30%

Copyright©2017,Oracleand/oritsaffiliates.Allrightsreserved.| OracleConfidenDal–Internal/Restricted/HighlyRestricted 10

JavaScriptUpgradability

h4ps://trends.builtwith.com/javascript/compa=bility

64%


GolangUpgradability



PythonUpgradability


Surgeryisgood,butpainful!


C#and.NetUpgradability



JavaUpgradability

TherearethreekindsofcompaDbilityexplicitlymanagedintheJavaPlaJorm:• Binary:willexisDnglibrariesandapplicaDonssDlllink?•  Source:willexisDngsourcebasessDllcompile?IfthesourcebasessDllcompile,willtheresulDngclassfilehaveequivalentsemanDcs?• Behavioral:atrunDme,willexisDnglibrariesandapplicaDonsbehaveinasufficientlysimilarway?

OracleConfidenDal–Internal/Restricted/HighlyRestricted 14


CategoriesofAPIsintheJavaPlaJorm

• MostoftheAPIsshippedintheJDK(java.*,javax.*)havespecificaDonsmanagedundertheJCP(JavaCommunityProcess)– MillionandmillionsofteststoensurecompaDbilityandupgradeability– VastecosystemofexisDngOSSlibrarieswecanusetotestcompaDbility

•  ToupdatethespecificaDonofsuchanAPI,aJCPprocessisrequired– RigorousJSR&OpenJDKtechnicalreviewandassessmentprocess

OracleConfidenDal 15


AJavacompaDbilityreviewincludes,butisnotlimitedto…• OverallsuitabilityfortheplaJorm– Recommendeduseoflanguagefeaturesandotherlibraries– FollowingJDKAPIconvenDons– Compliancewithstandingtechnicalpolicies,includinggeneralevoluDonpolicy– “Haveyouconsideredyesterday,todayandtomorrowimpacts”

• Verifypropertechnicalreviewerispresent• HelpmakeconnecDonstootherareas•  ForsomesecurityfixeswithbehavioralchangesweareworkinghardtofindafixthatmeetssecurityandcompaDbilityrequirements

OracleConfidenDal 16


JavaPlaJormCompaDbilityCommitment


AbigreasonforJavabeingthe#1DevelopmentPlaJormoverthepast10years!


JDK9MigraDon:FirstImpression


Youguysarebreakingeverything!


JDK9MigraDon:Acknowledgment


No,Idon’twanttohearthatIneedtomodifymyapp!


JDK9MigraDon:Reality


Imigratedmyapp,itwasnotthatbad!


JDK9Thegoodnews•  Theclasspathhasnotchanged• Classloadinghasnotchanged•  Youarenotforcedtomigrateyourcodetomodules•  sun.misc.Unsafeworksasbefore• MostexisDngcodeshouldworkasbefore•  TheIDEs,Maven,…allhavesupportforJDK9already

21


Thenotsogoodnews•  Youwillhavetoupgradethelibrariesandtoolsthatyouuse•  IfyouuseanyofthecomponentsthataresharedbetweenJavaSEandJavaEEthenyoumayneedtoadjustyourbuildordeployment• AsmallnumberofsupportedAPIshavebeenremoved• Anumberofnon-APIfeaturesandtoolshavebeenremoved•  Youmayseesomewarningsfromthelibrariesthatyouuse

22


JDKFasterCadence:6-monthReleaseCycle•  Javahasdeveloped9Majorreleasesoverthepast21years(every~2.5

Years)•  TheCloudischangingthepaceofinnovaDon.Developerswantquicker

accesstonewfeatures.•  UnderourcurrentmodelJDK10wouldGAaround2020– ThisisforeverinCloudYears!

•  FromfeatureboundtoDme-bound–Every6months!• Uptakeofnewreleasesislessofanissue,becauselesscontentandcloudoperatorswilldothisatscaleforyouJ

OracleConfidenDal–Internal 36


SimplifytheJDKDistribuDon:OpenJDKvsOracleJDK

•  LargeecosystemwithmanydifferentconsDtuentprofiles–  Developers--focusedonthebleedingedge,wanttoseefaster

innovaDon–  Installedbase--maintaininglegacysystems,wantstabilityandsecurity

•  NeedtosimplifyourdistribuDon–  Opensourcingcommercialfeatures(onecodebase)–  TwodistribuDontrains:•  OpenJDK–FocusedondeliveringinnovaDonsatafastercadence•  OracleJDK–StabilityandcriDcalbugfixes

OracleConfidenDal–Internal 37


WhyIsItHardtoUptakeaNewJavaRelease•  20%-RemoveddeprecatedAPIs– ObsoleteAPIsthathavebeentaggedfordeprecaDonforsomeDme– Trade-offofcompaDbilityvsinnovaDon

•  30%ChangedinapublicAPIbehavior– EithertheimplementaDonofthespecwaswrong,orthespecwaswrongandweneededtochangetheimplementaDon– Asecurityfixrequiredtochangeanunspecifiedbehavior

•  50%Useofinternal/non-publicAPIs– WetoldyouthattheseAPIsmaychangeandtheyindeedchanged



EdsgerDijkstrawrotein1988,

“Wehavetobeabletothinkintermsofconceptualhierarchiesthataremuchdeeperthanasinglemindeverneededtofacebefore.”


CanWeLearnfromtheHardwareGuys


10-15YearsAgoL DataCenterArchitectureTodayJ


AfewGoldenRules


Uniformity Modularity


So`wareModularity&UniformityFortheCloud


•  Dockerprovidesanuniformwrapperaroundaso`warepackage“Build,ShipandRunAnyApp,Anywhere”•  Thecontainerisalwaysthesame,regardlessofthecontentsandthusfitsonalltrucks,cranes,ships,…

•  But,DockerandKubernetesdonotaddressappmodularityinsidethecontainer.ThisiswhytheJava9newmodulesystemissoimportant!

•  KubernetesprovidesanelasDcdeploymentandmanagement


JDK9Module


CodeRe-UsabilityandInforma8onHiding

ClasstoreusebehaviorsInterfacetore-useabstracDons


JDK9Module


CodeRe-Usability

JDK217Packages


JDK9Module


Java9Module

ModuleisanewfundamentalabstracDondesignedexplicitlyforencapsulaDonandreuse


Java9Module–AbeZerFoundaDonforCompaDbility


AccessControlEnforcedbytheJVM


JDK7Internaldependencies



Summary•  Thecloudispuxngincreasingdemandsonupgradeability(minute/weekvsmonth/year)– Toreducecomplexityandcost(uDlitycompuDng)– Toaddressvulnerabilityandsustainingupgradesaso`enasneeded

•  UpgradeabilityissignificantissuestomanageCloudservicesatscale•  JDK9ModuleandstrongencapsulaDonattheJVMlevelismovingthebarbeyondwhatanyotherdeveloperrunDmeisprovidingtoimproveupgradabilityandguaranteecompaDbility•  Uptaking9maybesomeisnotthatscary!•  Pleaseuptake9andassembleyourservicesasmoduleforthesakeofourindustryJ



Q&A


java 9: tips on migraon and upgradability - qconsf...• if you use any of the components that are...

Documents