Container Network Interface - VSHN AG · 2018-01-12 · - container to internet trac - internet to...
Transcript of Container Network Interface - VSHN AG · 2018-01-12 · - container to internet trac - internet to...
![Page 1: Container Network Interface - VSHN AG · 2018-01-12 · - container to internet trac - internet to container trac - hiding network complexity - vendors to add their stu not about:](https://reader034.fdocuments.net/reader034/viewer/2022042307/5ed3fc3f8d46b66d226337d1/html5/thumbnails/1.jpg)
CNIContainer Network Interface
Konstantinos KarampogiasSoftware Engineer, Swisscom
![Page 2: Container Network Interface - VSHN AG · 2018-01-12 · - container to internet trac - internet to container trac - hiding network complexity - vendors to add their stu not about:](https://reader034.fdocuments.net/reader034/viewer/2022042307/5ed3fc3f8d46b66d226337d1/html5/thumbnails/2.jpg)
Swisscom PAAS & Cloudfoundry
![Page 3: Container Network Interface - VSHN AG · 2018-01-12 · - container to internet trac - internet to container trac - hiding network complexity - vendors to add their stu not about:](https://reader034.fdocuments.net/reader034/viewer/2022042307/5ed3fc3f8d46b66d226337d1/html5/thumbnails/3.jpg)
Agenda
Container Standards
Container Runtime
CNI Introduction
Demo
Conclusions
![Page 4: Container Network Interface - VSHN AG · 2018-01-12 · - container to internet trac - internet to container trac - hiding network complexity - vendors to add their stu not about:](https://reader034.fdocuments.net/reader034/viewer/2022042307/5ed3fc3f8d46b66d226337d1/html5/thumbnails/4.jpg)
Container Standards @CN Landscape
![Page 5: Container Network Interface - VSHN AG · 2018-01-12 · - container to internet trac - internet to container trac - hiding network complexity - vendors to add their stu not about:](https://reader034.fdocuments.net/reader034/viewer/2022042307/5ed3fc3f8d46b66d226337d1/html5/thumbnails/5.jpg)
Container Standards @Cloudfoundry
![Page 6: Container Network Interface - VSHN AG · 2018-01-12 · - container to internet trac - internet to container trac - hiding network complexity - vendors to add their stu not about:](https://reader034.fdocuments.net/reader034/viewer/2022042307/5ed3fc3f8d46b66d226337d1/html5/thumbnails/6.jpg)
Container Standards @Kubernetes
![Page 7: Container Network Interface - VSHN AG · 2018-01-12 · - container to internet trac - internet to container trac - hiding network complexity - vendors to add their stu not about:](https://reader034.fdocuments.net/reader034/viewer/2022042307/5ed3fc3f8d46b66d226337d1/html5/thumbnails/7.jpg)
Generic Architecture
![Page 8: Container Network Interface - VSHN AG · 2018-01-12 · - container to internet trac - internet to container trac - hiding network complexity - vendors to add their stu not about:](https://reader034.fdocuments.net/reader034/viewer/2022042307/5ed3fc3f8d46b66d226337d1/html5/thumbnails/8.jpg)
Container Runtime Engine
![Page 9: Container Network Interface - VSHN AG · 2018-01-12 · - container to internet trac - internet to container trac - hiding network complexity - vendors to add their stu not about:](https://reader034.fdocuments.net/reader034/viewer/2022042307/5ed3fc3f8d46b66d226337d1/html5/thumbnails/9.jpg)
What is CNI
A minimal standard way to connect a container to a network
CNI Speci�cation: de�nes an API between runtimes and network plugins
Library: provide a Go implementation of the CNI speci�cation
Plugins: provide reference implementation for a variety of use-cases
https://github.com/containernetworking/cni https://github.com/containernetworking/plugins
![Page 10: Container Network Interface - VSHN AG · 2018-01-12 · - container to internet trac - internet to container trac - hiding network complexity - vendors to add their stu not about:](https://reader034.fdocuments.net/reader034/viewer/2022042307/5ed3fc3f8d46b66d226337d1/html5/thumbnails/10.jpg)
What is CNI
5 maintainers
60 contributors at 10+ companies
10+ plugin vendors
6+ runtimes (k8s, CF, Mesos, OpenShift, rkt, Amazon ECS)
Started from rkt
Spec separated from rkt April 2015
CNCF project since May 2017
![Page 11: Container Network Interface - VSHN AG · 2018-01-12 · - container to internet trac - internet to container trac - hiding network complexity - vendors to add their stu not about:](https://reader034.fdocuments.net/reader034/viewer/2022042307/5ed3fc3f8d46b66d226337d1/html5/thumbnails/11.jpg)
Single interface
![Page 12: Container Network Interface - VSHN AG · 2018-01-12 · - container to internet trac - internet to container trac - hiding network complexity - vendors to add their stu not about:](https://reader034.fdocuments.net/reader034/viewer/2022042307/5ed3fc3f8d46b66d226337d1/html5/thumbnails/12.jpg)
CNI spec
3 commands: ADD, DEL and VERSION
Con�guration on stdin, results on stdout
Runtime parameters via env (CNI_ARGS for arbitrary runtime params)
![Page 13: Container Network Interface - VSHN AG · 2018-01-12 · - container to internet trac - internet to container trac - hiding network complexity - vendors to add their stu not about:](https://reader034.fdocuments.net/reader034/viewer/2022042307/5ed3fc3f8d46b66d226337d1/html5/thumbnails/13.jpg)
Chained Plugins
![Page 14: Container Network Interface - VSHN AG · 2018-01-12 · - container to internet trac - internet to container trac - hiding network complexity - vendors to add their stu not about:](https://reader034.fdocuments.net/reader034/viewer/2022042307/5ed3fc3f8d46b66d226337d1/html5/thumbnails/14.jpg)
DEMO: Bridge + Port forwarding
![Page 15: Container Network Interface - VSHN AG · 2018-01-12 · - container to internet trac - internet to container trac - hiding network complexity - vendors to add their stu not about:](https://reader034.fdocuments.net/reader034/viewer/2022042307/5ed3fc3f8d46b66d226337d1/html5/thumbnails/15.jpg)
CNI is
about: - actions during creation/deletion - container to internet tra�c - internet to container tra�c - hiding network complexity - vendors to add their stu�
not about: - realtime changes (e.g. policy enforcement) - setting up the network medium (e.g. bridge creation) - multihost host container tra�c (e.g. distribute routes)
![Page 16: Container Network Interface - VSHN AG · 2018-01-12 · - container to internet trac - internet to container trac - hiding network complexity - vendors to add their stu not about:](https://reader034.fdocuments.net/reader034/viewer/2022042307/5ed3fc3f8d46b66d226337d1/html5/thumbnails/16.jpg)
Open Positions
![Page 17: Container Network Interface - VSHN AG · 2018-01-12 · - container to internet trac - internet to container trac - hiding network complexity - vendors to add their stu not about:](https://reader034.fdocuments.net/reader034/viewer/2022042307/5ed3fc3f8d46b66d226337d1/html5/thumbnails/17.jpg)
Thank you
Konstantinos KarampogiasSoftware Engineer, Swisscom
@karampok (http://twitter.com/karampok)
![Page 18: Container Network Interface - VSHN AG · 2018-01-12 · - container to internet trac - internet to container trac - hiding network complexity - vendors to add their stu not about:](https://reader034.fdocuments.net/reader034/viewer/2022042307/5ed3fc3f8d46b66d226337d1/html5/thumbnails/18.jpg)