oracle's microservices strategy · microservices. • operations is not integrated in the...

Copyright©2017, Oracleand/oritsaffiliates.Allrightsreserved.|

Oracle'sModernMicroservices StrategyAnOpinionatedPlatformonKubernetes

BorisMSchollVPofDevelopmentClaudioCaldatoSr.DirectorofDevelopmentOracleCloudMicroservicesOctober3rd,2017

Confidential– OracleInternal/Restricted/HighlyRestricted


SafeHarborStatementThefollowingisintendedtooutlineourgeneralproductdirection.Itisintendedforinformationpurposesonly,andmaynotbeincorporatedintoanycontract.Itisnotacommitmenttodeliveranymaterial,code,orfunctionality,andshouldnotberelieduponinmakingpurchasingdecisions.Thedevelopment,release,andtimingofanyfeaturesorfunctionalitydescribedforOracle’sproductsremainsatthesolediscretionofOracle.

Confidential– OracleInternal/Restricted/HighlyRestricted 2


ProgramAgenda

Motivation

OurStack

Demo

Roadmap

1

2

3


4

Copyright©2017, Oracleand/oritsaffiliates.Allrightsreserved.|Copyright©2017, Oracleand/oritsaffiliates.Allrightsreserved.| Confidential– OracleInternal/Restricted/HighlyRestricted 4

Motivation


Today’sproblemswithcontainernativedevelopment

OracleConfidential– Internal/Restricted/HighlyRestricted 5

COMMONAPIANDSERVICESCI/CD

MANAGEDKUBERNETES

JAVAMICROSERVICES

DIAG

NOSTICS

• Programmingmodelandinfrastructureareentangled,thereisnoclearseparationanddevelopersneedtounderstandtheunderneathinfrastructuretomaketheirservicework

• Lackoffocusondevelopersmakesonboardingonandoperateexistingsolutionsexpensiveandtimeconsuming

• Externalservicedependenciesneedtobewiredupmanually• ThereisnounifiedapproachforServerless andcontainer-basedMicroservices.

• Operationsisnotintegratedintheplatformmakingitanexpensiveafterthought

• Turnkeymicroservices platformslackopennessandmodularity


Today’sproblemswithcontainernativedevelopment



MANAGEDKUBERNETES

JAVAMICROSERVICES

DIAG

NOSTICS

• Kubernetes(K8S)providesapplicationinfrastructureformoderncloud-nativeapplications,butleavesmuchofdistributedsystemmanagementtoapplicationauthors:• Service/APIDiscovery• Backoff/RetryandIdempotency• Resiliency/CircuitBreakers• Diagnostics

• MuchasintheSOAdays,newtechnologiesareemergingtooutsourcethiscomplexityfromapplications:servicemeshes(istio/linkerd)


OurStack


Microservices Stack



MANAGEDKUBERNETES

JAVAMICROSERVICES

DIAG

NOSTICS

• WestartwithacuratedpackageofOSSlaidontopofourmanagedK8Sservice:• DiagnosticsandOperations(Zipkin/Jaeger,Vizceral)• Istio(Servicemesh)• OpenServiceBrokerAPI(LinuxFoundation),whichisthefoundationoftheK8sservicecatalog

• APICatalog(Apiary)• EventManager(Kafkabased)

• Ourvalue-addistounifyallofthis,andfliptheexperienceforthedevelopertobeAPI-first:alwaysreactive,unifiedbetweenfunctions/services• Developersgetobservabilityand“distributedmuck”forfree


ArchitecturalandFunctionalOverview


OKE

ISTIOServiceMesh/ISTIO

ISTIO

ISTIOServiceBroker

Kubernetes

APIRegistry+

ISTIOCLI– kubectl-oms ISTIODeveloperConsole

ISTIO

Diagno

stics/Mon

itorin

g

ISTIO

DeveloperCloud

Prometheus

• PublishandConsumeAPIsandmanagement• Generateclientlibraries• Mockservices

• RegistrationofcloudservicesanduserservicesAPIsandFn

• Configurationofserviceaccess

§ RoutingandDiscover(LB,A/Betc.)§ Resiliency(CircuitBreakeretc.)§ Servicemonitoringanddiagnostics§ InterServiceSecurityandPolicies

§ ClusterManagement/HA§ Orchestration§ Deploymentstrategies

ISTIOEventManager

RegisterEventprovidersandconsumers

CatalogService

OrderService

FooService

HighProductivityService/APIfirst

HighControlBuildonnativeK8s


ServiceMesh• Istio isthefoundationofouroffering;besidesofferingingresscontrol,itprovidesanapplicationdeveloperdefaultservice-to-service:– Loadbalancing– Encryption– AccessPolicy– Resiliency– Upgradesandsophisticatedrouting(e.g.,1%canaries,etc.)– DiagnosticsandTracing

• WearefundamentallygoingtoalignwithIstio,andenhanceitintheopen,notlayerontop



ServiceBroker• BuildingonOpenServiceBrokerAPI,wearegoingtounifyaccessto3rdpartyservicesonthemesh;developerswillbeabletoaccessserviceslikeDynamoDB/etc asifitisoneoftheirownservices• Wewillalsoenabledeveloperstoregisteruserservicesandfunctionswiththeservicebrokeronthemeshtogetthesameintegrationbenefitsmentionedabove• Every3rd partyservice,userserviceandfunctionregisteredthroughtheservicebrokerwillbeautoactivatedandaddedtotheAPIcatalog• OurservicebrokerwillregisterconnectioninformationandaccesstokenswiththeAPIcatalog;developersdonotneedtoconfiguresecureaccesstothirdpartyservicesandcanfocusonworkingwithAPIs



APICatalog

• Apiary’sOSScomponentsarethefoundationofourAPIcatalog,weenhancetheircurrentmockserviceandBlueprint/OpenAPIfunctionalitybyadding– ClientLibrarygeneration,wewillstartwithsupportforJavaandJavaScript– SecuritysettingsforAPIaccess– SophisticatedroutingcapabilitiestoenableA/Btesting,Canarydeploymentsetc.

• EverycomponentregisteredwiththeAPIcatalogwillbedeeplyintegratedwiththemesh;asaresultdevelopersdonotneedtoworryaboutendpoints,security,routingandresiliency.



Diagnosticsandoperations• TodaywearepackagingZipkin/OpenTracing/PrometheusandVizceral• Longtermasacloudproviderthisisourhugeopportunitytodifferentiatebyprovidingeasyaccessto:– Telemetry– Capacitymanagement– Securityauditing– ServiceDebugging/Introspection

• WewillbuildanoperationsUXthatenablesdeveloperstonotonlymonitor,diagnoseanddebugtheirservicesinrealtime,butalsotosetupsophisticateddeploymentandtestingscenariossuchasBlue/GreendeploymentandA/Btesting.



Demo


KeyTakeaways• OpinionatedandOpen– useofprovenCNCFcomponents– Batteriesincludedbutreplaceable

• DeveloperProductivity– Abstractionofinfrastructure– Resiliencypushedintotheplatform– Diagnosticsandmonitoringpushedintotheplatform

• DevelopmentFirst– Easytoconsumeexternalservices– APIfirstapproach– FNintegration– Supportforeventdrivenarchitectures



Doyouwanttotryit?• TechPreviewavailability– about4weeksafterOOW

• Pleasecontact:– [email protected]– [email protected]


oracle's microservices strategy · microservices. • operations is not integrated in the...

Documents