Digital Transformation

Transcription

1 Empowering Digital Transformation with Mo Abdirashid Program Manager & System Architect May IBM Corporation

2 Cloud is changing how workloads are built & delivered Existing, Monolithic Apps Extended/Enabled Solutions New Cloud Native Apps Web, Mobile, Cognitive, BD&A, AI Lines of Business Proprietary Enterprise Resource Planning Lines of Business Proprietary Customer Relationship Mgmt Lines of Business Proprietary Relational DB Lines of Business Proprietary Customer Relationship Mgmt Data Function Cloud Services Linux, DevOps, PaaS, Open Source, Containers, Cognitive Services Container Cloud Build once, deploy anywhere Auto Scaling, CI/CD, DevOps, Docker, Linux, PaaS, Open Source and ISV Containers Web, Mobile, Cognitive, BD&A, AI By 2018, Over 60% of New Apps Will Use Cloud-Enabled Continuous Delivery and Cloud-Native Application Architectures to Enable Faster Innovation and Business Agility. IDC Predicts

3 Cloud Native Development DevOps Continuous Integration & Delivery Micro Services Containers

4 Containers The Building Blocks for Cloud-Native Solutions DevOps Micro Services Cloud Native Continuous Delivery Containers Developer Value Creation Cognitive Solutions Physical Infrastructure & Management Cloud Native Development Building Blocks for New Value Containers, Container Orchestration, Micro-services Frameworks, DevOps Tools(Jenkins), CI-CD, Messaging, Logging/Metrics, Runtimes(Java, Node etc.), API Integration/Mgmt Apache LAMP WebSphere Bluemix Integration Services API Connect Next Generation Apps & Solutions Weaving together Services to create High Value Business Acceleration Web Data Cognitive Modern Data Platform DashDB DBaaS Block Storage Object Storage Software Defined Storage Backup/Restore Operations(logging, monitoring, HA, DRM etc.) PowerAI GPU Accel Training Inference Engines DSX Machine Learning Deep Learning Spark, Hadoop Cloud Management(Openstack) & Virtualization(VM, Containers) Systems, Storage, Network, Accelerators, Flash, PM

5 Could Native Digital Transformation Container Options for IBM Systems & Cloud Basic Docker Open Source DIY Build from Source Tree All main Distro s available (Redhat, Ubuntu, SUSE, CentOS) Binaries Available from Unicamp Freely Available and IBM Support offering for Docker Open Source on RedHat Great for clients just starting out with Docker Docker Orchestration Tools Swarm Open Source community enables power for all three Orchestrators IBM active in all communities enabling operation on Power with CICD pipeline integration Freely Available Great for DIY Clients who want to assemble their own Docker Cloud Stack Common Finding:IBM Systems deliver better throughput, latency, scalability and price-performance than commodity X86 servers For Containers Openshift Ready to Run Solutions Kubernetes Based Easy Install, GUI Dashboard Enterprise Hardened GPU Sharing Enabled Free Community Version Support Offering Available Docker Inc. Partnership Full Enterprise Support Easy to Install, Full Function Support Offering Available Produced in Partnership with RedHat PaaS Environment Full Enterprise Support Coming Soon IBM Confidential

6 Container Orchestration Adoption About 30% of container deployments are in production environments Kubernetes remains the leading orchestration tool, closely followed by Docker Swarm 5

7

8 Containers A standard way to package an application and all its dependencies so that it can be moved between environments and run without changes. Containers work by isolating the differences between applications inside the container so that everything outside the container can be standardized. 7

9 By converging diverse app pipelines into a single supply chain DEVELOPERS IT OPERATIONS BUILD SHIP RUN One uniform packaging format, API & tooling from dev to ops Containers One Platform everywhere Standard interfaces Agile, portable, secure, resilient and cost efficient apps

10 Docker Enterprise Edition (EE) is the CaaS enabled platform for developers and IT Integrated orchestration, security and management Predictable quarterly releases with one year of support and maintenance Security patches and hotfixes backported to all supported versions Enterprise class support (9am-6pm or 24x7x365) Certified Infrastructure, Containers and Plugins Docker Confidential

11 Docker EE Architecture BYO TCP Load Balancer Raft consensus group Internal distributed store Manager Manager Manager Docker Confidential

12 Docker EE Architecture Admin / User Deploy / manage BYO TCP Load Balancer Raft consensus group Internal distributed store Manager Manager Manager Worker Worker Worker Worker Docker Confidential

13 Docker EE Architecture Admin / User Deploy / manage BYO TCP Load Balancer Raft consensus group Logging Monitoring push / pull Internal distributed store LDAP/AD Manager Manager Manager External CA Security Scanning Service Image Storage BYO TCP Load Balancer DTR Replica Worker DTR Replica Worker DTR Replica Worker Worker Worker Worker Worker Docker Confidential Image Registry

14 Docker Enterprise Edition (EE) enables CaaS for the modern software supply chain DEVELOPERS IT OPERATIONS BUILD Accelerate Delivery SHIP Bidirectional Collaboration RUN Optimize Cost & Operations New apps Notary Signer Monolith ISV Microservices Private Registry IBM P / Z Linux X86 Windows / Linux

15 Multi-Arch & Multi-Cloud Enablement for Docker Multiarch now fully implemented in Docker since version 1.12 and beyond Manifest List has pointers to each of the architecture specific containers that have been compiled for an application Docker Engines and Registry sort out which image to send based on Manifest list and arch tags Docker user experience (CLI, REST API) is identical across platforms Docker Calling Convention identical across platforms if you use the manifest name instead of the container name Developers need to start using this now to see the benefits RUN Deploy, Manage, Scale User Application User_App Manifest List One Name to Call User_App X86 Container User_App Power Container User_App Z Container Developer builds a container for each architecture and creates a Manifest List File Engines ask for the image for their Arch Tag when docker command executed Public Cloud Docker on X86 Docker on Power Docker on Z

16 Popular Client Use Case References: Containerize and Transform to Microservices Before On-going & After App A App B App Service App Service Application Teams Trusted Registry Universal Control Plane Auth Auth Authorization Auth App Service App A Logging Auth App Service App B Logging App Reg Session App Registration App Reg Marketplace App Reg Marketplace Marketplace App Reg Session Management Portability Logging Logging Marketplace Integration Auth App Service App A Logging Auth App Service App B Logging more more Logging App Reg Marketplace App Reg Marketplace more

17 IBM-Docker Inc Partnership Systems (z/power) & Docker Inc. partnering on advancing Docker s technology with Docker Enterprise Edition (EE) as a supported Enterprise product 1. Basic Edition = Docker Engine offered per instance or drawer 2. Advanced Edition = Standard + Docker Security Scan (DSS) offered per instance or drawer Standard Edition = Docker Engine, Docker Universal Control Plane (UCP) & Docker Trusted Registry (DTR) Docker brings best of breed secure container management & orchestration to the platform as our clients increasingly turn to containers for devops and deployment of applications / new workloads Security function & features not available in community or other community packages Announced at DockerCON April 19, 2017: press release & blog Mutual clients will order directly from IBM with electronic fulfillment by Docker Supported by IBM and Docker Inc, and along with x86, allows heterogeneous Enterprise one stop Docker support Available for all distros: SUSE 12, Red Hat 7 & Ubuntu June GA: CE (Basic) & EE (Standard) with EE managing z nodes from x86 Sept GA: EE (Advanced) with z managing z nodes with DSS included

18 Financial Insights Demo Built with DevOps, Microservices based Architecture, Spark on z/os & Docker Containers. DevOps Continuous Delivery + Micro Services Containers Cloud Native Development

19 Your digital intelligence is your competitive advantage + Data outside + Data you possess your firewall Data that s coming Customer records Transactional systems Predictive models Institutional expertise Operational systems Structured and active News Events Geospatial Weather Social media Internet of Things Sensory data Images Video Unstructured and dark

20 Financial Insights Business Use Case Financial Institution: offers both retail / consumer banking as well as investment services Stock Price History public data Business Critical Information owned by the organization: Credit Card Info Trade Transaction Info Customer Info Social Media Data: Twitter GOAL Produce right-time offers for cross sell or upsell, tailored for individual customers based on: customer profile, trade transaction history, credit card purchases and social media sentiment and information

21 Demo Architecture REST API Twitter Fetcher Service CICS Transaction system JDBC DB2 z/os MongoDB Admin MongoDB Admin UI Databases Spark Job Server JDBC IMS Transaction system IMS Credit Card Info Trade Transaction Info CaaS LPAR Banking Insights Service JDBC with Rocket MDSS VSAM Customer Info 20

22 CI/CD with Docker + Jenkins 1. Push a commit to GitHub 2. GitHub webhook 3. Jenkins copies artifacts 4. Jenkins builds Docker image 5. Runs test on Docker container 6. Pushes to DTR Developer Creates App, Builds Container And pushes to Registry 21

23 CaaS LPAR Architecture.yml Description for Application Internal Distributed State Management Plane Web UI CLI Manager Manager Manager MongoDB Mongo Admin UI Banking Insights Service Worker Nodes Twitter Fetcher Service Worker Node Worker Node Worker Node Worker Node Swarm Manager Docker Engine Mutual TLS CaaS LPAR Cluster-wide store

24 Docker EE on z Systems: The Safest Way to Run Apps with the Most Secured and Reliable System Usable Security App Secrets Dev/Ops Workflow Secure by default runtime + Trusted Delivery Image Signing & Verification Image Scanning Encryption at Rest TLS Encryption + Infrastructure Independent Physical Users & RBAC Virtualization Public Cloud + = Safer Apps

25 Secure Container as a Service Deliver hyper-secure integrated Docker environment for public and private clouds Run containerized mainframe software abstracting away host Linux requirements Deploy arbitrary workloads in a standard and repeatable fashion + Provide a hyper-secure and private cloud-enabled execution environment Industry standard orchestration and integration

26 IBM Secure Service Container The Base Infrastructure to Host and Build Software Appliances Naming from 3 years ago - Its really a Secure LPAR Partition SNOWDEN Insecurity of Privileged Users 80% Of threats are internal 1 58% Of IT Operations and Security Managers believe their organizations are unnecessarily granting access to individuals beyond their roles and responsibilities 1 Simplified, fast deployment and management of packaged solutions Tamper protection during appliance installation and runtime The Right Access for the Right Users Confidentiality of data and code running in appliance at flight and at rest Management via Remote APIs (RESTful) and web interfaces Enables appliances to be delivered via distribution channels IBM Secure Service Container Protects Against Misuse of Privileged User Credentials 1 Operating environments and data are protected against access and abuse by root users, system administrator credentials, and other privileged user access Management Services Applications Operating System IBM Secure Service Container

27 Why would I want to run Docker on z Systems? Better Container Density = More WL Throughput Secure Container-as-a-Service (scaas) Runs 4K active Docker containers on ave 2.0x better than comparable Haswell-based system! Host over 10K Docker containers with mixed (heavy & light) workloads throughput (# transactions/sec) z Container Resource & Cluster Manager (zcrcm) Multi-Layer Auto scale: Performance Manager: Enable Secure Container aas Appliance with Docker Scale Cube & Latency in Microservices World

28 For More Information please contact Len Santalucia, CTO & Business Development Manager Vicom Infinity, Inc. One Penn Plaza Suite 2010 New York, NY mobile About Vicom Infinity Account Presence Since Late 1990 s IBM Premier Business Partner Reseller of IBM Hardware, Software, and Maintenance Vendor Source for the Last 10 Generations of Mainframes/IBM Storage Professional and IT Architectural Services Vicom Family of Companies Also Offer Leasing & Financing, Computer Services, and IT Staffing & IT Project Management

29 Thank You 2016 IBM Corporation #ibmedge