Docker Networking Deep Dive
37 likes17,652 views
This document provides an overview and agenda for a Docker networking deep dive presentation. The presentation covers key concepts in Docker networking including libnetwork, the Container Networking Model (CNM), multi-host networking capabilities, service discovery, load balancing, and new features in Docker 1.12 like routing mesh and secured control/data planes. The agenda demonstrates Docker networking use cases like default bridge networks, user-defined bridge networks, and overlay networks. It also covers networking drivers, Docker 1.12 swarm mode networking functionality, and how concepts like routing mesh and load balancing work.
1 of 34
Downloaded 560 times
Ad
Recommended
Introduction to container based virtualization with docker
Introduction to container based virtualization with dockerBangladesh Network Operators Group This document provides an overview of Docker and the author's experience. It discusses key Docker concepts like images, containers, the Dockerfile and Docker Engine. It also summarizes Docker benefits like portability, scalability and efficiency. Components like Docker Hub, Docker Machine and orchestration tools are briefly introduced. Security considerations and using Docker in production are also mentioned.
Understanding docker networking
Understanding docker networkingLorenzo Fontana The document discusses different Docker networking drivers including null, host, bridge, overlay, and macvlan/ipvlan networks. It provides examples of creating networks with each driver and how containers on different networks will connect and obtain IPs. Specifically, it shows how the bridge driver sets up a private Docker bridge network (docker0 by default) and how overlay networks use VXLAN tunnels to connect containers across multiple Docker daemons.
Docker introduction
Docker introductionPhuc Nguyen The document introduces Docker, a container platform. It discusses how Docker addresses issues with deploying different PHP projects that have varying version requirements by allowing each project to run isolated in its own container with specified dependencies. It then covers key Docker concepts like images, containers, linking, exposing ports, volumes, and Dockerfiles. The document highlights advantages of Docker like enabling applications to run anywhere without compatibility issues and making deployment more efficient.
Docker Introduction
Docker IntroductionPeng Xiao This document provides an introduction to Docker and discusses:
- The challenges of managing applications across different environments which Docker aims to solve through lightweight containers.
- An overview of Docker concepts including images, containers, the Docker workflow and networking.
- How Docker Compose allows defining and running multi-container applications and Docker Swarm enables orchestrating containers across a cluster.
- The open container ecosystem including the Open Container Initiative for standardization.
Docker swarm
Docker swarmAlberto Guimarães Viana This document discusses Microservices and Docker Swarm. It begins by introducing the presenter and their background. It then defines what a microservice is and introduces Docker. Key concepts about Docker Swarm are explained such as swarm features, service discovery without an external database, and the swarm concept of managers, workers, services and tasks. It demonstrates how to build a swarm cluster and add nodes, and discusses security, routing mesh, scaling, reverse proxy, rolling updates and secrets. Finally it briefly mentions logging, metrics and dashboard tools to monitor Docker systems.
Docker 101 : Introduction to Docker and Containers
Docker 101 : Introduction to Docker and ContainersYajushi Srivastava This document provides an introduction to Docker and containers. It discusses why containers are useful for software deployment given changes in the industry. Containers provide lightweight isolation of applications and their dependencies. Docker is a tool that manages containers running on the same operating system kernel. Key Docker components include the client, server, images, and containers. Popular use cases of Docker include Google running over a billion containers per week and Finnish Railways saving 50% of cloud costs with Docker.
Introduction to Docker Compose
Introduction to Docker ComposeAjeet Singh Raina This document introduces Docker Compose, which allows defining and running multi-container Docker applications. It discusses that Docker Compose uses a YAML file to configure and run multi-service Docker apps. The 3 steps are to define services in a Dockerfile, define the app configuration in a Compose file, and run the containers with a single command. It also covers topics like networking, environment variables, and installing Docker Compose. Hands-on labs are provided to learn Compose through examples like WordPress.
Docker Basics
Docker BasicsDuckDuckGo Docker is an open source containerization platform that allows applications to be easily deployed and run across various operating systems and cloud environments. It allows applications and their dependencies to be packaged into standardized executable units called containers that can be run anywhere. Containers are more portable and provide better isolation than virtual machines, making them useful for microservices architecture, continuous integration/deployment, and cloud-native applications.
Introduction to docker
Introduction to dockerInstruqt Docker is a tool that allows users to package applications into containers to run on Linux servers. Containers provide isolation and resource sharing benefits compared to virtual machines. Docker simplifies deployment of containers by adding images, repositories and version control. Popular components include Dockerfiles to build images, Docker Hub for sharing images, and Docker Compose for defining multi-container apps. Docker has gained widespread adoption due to reducing complexity of managing containers across development and operations teams.
Kubernetes 101 for Beginners
Kubernetes 101 for BeginnersOktay Esgul The document provides a comprehensive overview of Kubernetes, covering its architecture, core components, and deployment processes, alongside discussions on Docker and related containerization technologies. It introduces essential concepts such as namespaces, workloads, services, and storage in Kubernetes, as well as tools like Helm for package management. The document also includes hands-on workshop links for practical learning and emphasizes Kubernetes' role in managing and scaling applications efficiently.
Docker and the Linux Kernel
Docker and the Linux KernelDocker, Inc. The document summarizes a talk given at the Linux Plumbers Conference 2014 about Docker and the Linux kernel. It discusses what Docker is, how it uses kernel features like namespaces and cgroups, its different storage drivers and their issues, kernel requirements, and how Docker and kernel developers can collaborate to test and improve the kernel and Docker software.
Docker Birthday #3 - Intro to Docker Slides
Docker Birthday #3 - Intro to Docker SlidesDocker, Inc. Docker's third birthday celebration featured over 120 events worldwide with 7000+ RSVPs and 600 mentors, emphasizing the growth of the Docker ecosystem. It introduced a training session on Docker while promoting a diversity scholarship program for underrepresented groups to attend DockerCon. The event also included a birthday app challenge for developers to enhance their skills and creativity with Docker technologies.
Docker Explained | What Is A Docker Container? | Docker Simplified | Docker T...
Docker Explained | What Is A Docker Container? | Docker Simplified | Docker T...Edureka! The document outlines a DevOps certification training session focused on Docker, including its definition, functionality, and advantages over traditional virtualization. It discusses components like Docker Engine, Dockerfile, Docker Images, and Docker Registry, as well as tools such as Docker Swarm and Docker Compose for container management. Key topics include architectural differences, hands-on practices for containerization, and problem-solving scenarios related to code deployment across environments.
Getting started with Docker
Getting started with DockerRavindu Fernando The document is a presentation by Ravindu Fernando that explores the evolution and technology of Docker, explaining its function as a container engine and the differences between virtual machines and containers. It covers the architecture of Docker, how containers operate, and provides basic commands for managing Docker containers. The presentation also discusses advanced topics like Docker networking, data persistence through volumes, and the enhancements offered by Docker BuildKit and Buildx for efficient image builds.
What is Docker
What is DockerPavel Klimiankou Docker allows you to package applications with their dependencies into standardized units called containers that can run on any Linux server. Containers are more portable and efficient than virtual machines, starting in milliseconds and using less disk space. Docker makes it easy to deploy and run applications without having to rebuild environments and guarantees that an application will run the same regardless of the infrastructure it is running on.
Docker intro
Docker introOleg Z Docker allows users to package applications with all their dependencies into standardized units called containers that can run on any Linux server. Containers are more lightweight than virtual machines because they share the host operating system and only require the additional libraries and binaries needed to run the application rather than a full guest operating system. Docker uses containers and an image format to deploy applications in a consistent manner across development, testing, and production. The document provides examples of how to define a Dockerfile to build an image, run containers from images using docker-compose, and common Docker commands.
Docker 101 - Nov 2016
Docker 101 - Nov 2016Docker, Inc. Containers are not virtual machines - they have fundamentally different architectures and benefits. Docker allows users to build, ship, and run applications inside containers. It provides tools and a platform to manage the lifecycle of containerized applications, from development to production. Containers use layers and copy-on-write to provide efficient application isolation and delivery.
Docker Tutorial For Beginners | What Is Docker And How It Works? | Docker Tut...
Docker Tutorial For Beginners | What Is Docker And How It Works? | Docker Tut...Simplilearn The document provides a comprehensive overview of Docker, detailing its advantages over virtual machines, how it operates, and its components, including the Docker engine, containers, and images. It underscores Docker's efficiency in resource usage, rapid deployment capabilities, and ease of sharing applications across various platforms. Key concepts discussed include the differences between Docker and traditional virtual machines, the structure of Docker images and containers, and the functionality of Docker registries for image management.
Rancher 2.0 Technical Deep Dive
Rancher 2.0 Technical Deep DiveLINE Corporation The document provides a detailed overview of the Verda Kubernetes as a Service project, which aims to simplify Kubernetes operations for users by offering stable Kubernetes clusters and APIs for cluster management. It discusses the adoption of Rancher 2.0 as a management tool to oversee these clusters and highlights the project's roadmap and objectives for enhancing Kubernetes support. Additionally, it addresses the challenges faced, such as documentation limitations and scalability concerns, while outlining future enhancements and modifications planned for the service.
Docker Introduction
Docker IntroductionSparkbit Docker is a technology that uses lightweight containers to package applications and their dependencies in a standardized way. This allows applications to be easily deployed across different environments without changes to the installation procedure. Docker simplifies DevOps tasks by enabling a "build once, ship anywhere" model through standardized environments and images. Key benefits include faster deployments, increased utilization of resources, and easier integration with continuous delivery and cloud platforms.
Docker architecture-04-1
Docker architecture-04-1Mohammadreza Amini The document discusses the architecture of Docker, including its core components like Docker Engine, Docker Hub, Docker Machine, Docker Compose, Kitematic, Docker Swarm, and Docker Registry. Docker Engine runs on Linux to build and run containers. Docker Hub is a hosted registry service for managing images. Docker Machine sets up Docker Engine on computers and in data centers. Docker Compose defines multi-container applications in a single file. Kitematic provides a GUI for building and running containers. Docker Swarm turns Docker engines into a clustered virtual engine. Docker Registry stores and distributes Docker images.
Docker
DockerSangtongPeesing Docker provides tools for building and running containerized applications. The Docker Engine manages Docker objects like images, containers, networks and volumes. Docker Desktop is for Mac/Windows and includes Docker Engine and other tools. Docker Compose defines multi-container apps. Docker Hub is a public registry and Docker Swarm manages clusters of Docker Engines.
Docker, LinuX Container
Docker, LinuX ContainerAraf Karsh Hamid The document provides an extensive overview of Docker and Linux containers, covering fundamental concepts such as Docker images, containers, registries, and the architecture across different operating systems. It details the anatomy of a Dockerfile, processes for building images, managing containers, and using advanced command options. Additionally, it discusses the lightweight nature of Linux containers (LXC), their underlying technology, and performance benefits compared to traditional virtual machines.
What is Docker Architecture | Edureka
What is Docker Architecture | EdurekaEdureka! The document discusses Docker architecture and workflow. It outlines the key components of Docker including the Docker client, host, objects like images and containers, and Docker registry. It also contrasts traditional application deployment with using Docker, noting Docker allows for portable deployment of applications and their dependencies through use of containers.
Kubernetes Basics
Kubernetes BasicsEueung Mulyana This document provides an overview of Kubernetes including:
1) Kubernetes is an open-source platform for automating deployment, scaling, and operations of containerized applications. It provides container-centric infrastructure and allows for quickly deploying and scaling applications.
2) The main components of Kubernetes include Pods (groups of containers), Services (abstract access to pods), ReplicationControllers (maintain pod replicas), and a master node running key components like etcd, API server, scheduler, and controller manager.
3) The document demonstrates getting started with Kubernetes by enabling the master on one node and a worker on another node, then deploying and exposing a sample nginx application across the cluster.
Docker Introduction
Docker IntroductionMANAOUIL Karim The document introduces Docker as a system-level virtualization technology that packages applications and their dependencies into lightweight, portable containers. It covers essential commands for creating and managing Docker containers, networking configurations, and the Docker ecosystem, including the use of Docker Compose for deployment and scaling of multiple services. A practical example of deploying a Flask application and managing multiple containers using a YAML configuration file is also outlined.
Docker
DockerA.K.M. Ahsrafuzzaman Docker allows building, shipping, and running applications in portable containers. It packages an application with all its dependencies into a standardized unit for software development. Major cloud providers and companies support and use Docker in production. Containers are more lightweight and efficient than virtual machines, providing faster launch times and allowing thousands to run simultaneously on the same server. Docker simplifies distributing applications and ensures a consistent environment.
Docker in real life
Docker in real lifeNguyen Van Vuong Docker is a platform that allows users to build, ship, and run applications by using containers. It solves issues like dependency conflicts, portability, and consistency across development and production. Docker uses containers- isolated environments that package code and dependencies together- to deliver software quickly and reliably. Key Docker concepts include images (read-only templates for creating containers), volumes (for persistent data), registries (for sharing images), and compose files (for defining multi-container apps). Docker also provides networking and clustering functionality to connect containers across multiple hosts.
Demystfying container-networking
Demystfying container-networkingBalasundaram Natarajan Demystifying Docker & Kubernetes
The document provides an overview of container networking standards and models including Docker's Container Network Model (CNM) and Kubernetes' Container Networking Interface (CNI). It discusses Docker networking drivers like bridge, overlay, and host networking. It also covers Kubernetes networking fundamentals like pods, services, ingress, and network policies. The agenda includes a dive into CNM and CNI standards as well as examples of container networking in Docker and Kubernetes.
Collabnix Online Webinar - Demystifying Docker & Kubernetes Networking by Bal...
Collabnix Online Webinar - Demystifying Docker & Kubernetes Networking by Bal...Ajeet Singh Raina The document provides an overview of container networking standards, including Docker's CNM and Kubernetes' CNI, highlighting the roles of namespaces and cgroups in container networking. It explains service discovery, load balancing, routing mesh, and various deployment mechanisms within Docker and Kubernetes environments, detailing how services and tasks are managed. It also includes numerous references to resources for further exploration of the topics discussed.
More Related Content
What's hot (20)
Introduction to docker
Introduction to dockerInstruqt Docker is a tool that allows users to package applications into containers to run on Linux servers. Containers provide isolation and resource sharing benefits compared to virtual machines. Docker simplifies deployment of containers by adding images, repositories and version control. Popular components include Dockerfiles to build images, Docker Hub for sharing images, and Docker Compose for defining multi-container apps. Docker has gained widespread adoption due to reducing complexity of managing containers across development and operations teams.
Kubernetes 101 for Beginners
Kubernetes 101 for BeginnersOktay Esgul The document provides a comprehensive overview of Kubernetes, covering its architecture, core components, and deployment processes, alongside discussions on Docker and related containerization technologies. It introduces essential concepts such as namespaces, workloads, services, and storage in Kubernetes, as well as tools like Helm for package management. The document also includes hands-on workshop links for practical learning and emphasizes Kubernetes' role in managing and scaling applications efficiently.
Docker and the Linux Kernel
Docker and the Linux KernelDocker, Inc. The document summarizes a talk given at the Linux Plumbers Conference 2014 about Docker and the Linux kernel. It discusses what Docker is, how it uses kernel features like namespaces and cgroups, its different storage drivers and their issues, kernel requirements, and how Docker and kernel developers can collaborate to test and improve the kernel and Docker software.
Docker Birthday #3 - Intro to Docker Slides
Docker Birthday #3 - Intro to Docker SlidesDocker, Inc. Docker's third birthday celebration featured over 120 events worldwide with 7000+ RSVPs and 600 mentors, emphasizing the growth of the Docker ecosystem. It introduced a training session on Docker while promoting a diversity scholarship program for underrepresented groups to attend DockerCon. The event also included a birthday app challenge for developers to enhance their skills and creativity with Docker technologies.
Docker Explained | What Is A Docker Container? | Docker Simplified | Docker T...
Docker Explained | What Is A Docker Container? | Docker Simplified | Docker T...Edureka! The document outlines a DevOps certification training session focused on Docker, including its definition, functionality, and advantages over traditional virtualization. It discusses components like Docker Engine, Dockerfile, Docker Images, and Docker Registry, as well as tools such as Docker Swarm and Docker Compose for container management. Key topics include architectural differences, hands-on practices for containerization, and problem-solving scenarios related to code deployment across environments.
Getting started with Docker
Getting started with DockerRavindu Fernando The document is a presentation by Ravindu Fernando that explores the evolution and technology of Docker, explaining its function as a container engine and the differences between virtual machines and containers. It covers the architecture of Docker, how containers operate, and provides basic commands for managing Docker containers. The presentation also discusses advanced topics like Docker networking, data persistence through volumes, and the enhancements offered by Docker BuildKit and Buildx for efficient image builds.
What is Docker
What is DockerPavel Klimiankou Docker allows you to package applications with their dependencies into standardized units called containers that can run on any Linux server. Containers are more portable and efficient than virtual machines, starting in milliseconds and using less disk space. Docker makes it easy to deploy and run applications without having to rebuild environments and guarantees that an application will run the same regardless of the infrastructure it is running on.
Docker intro
Docker introOleg Z Docker allows users to package applications with all their dependencies into standardized units called containers that can run on any Linux server. Containers are more lightweight than virtual machines because they share the host operating system and only require the additional libraries and binaries needed to run the application rather than a full guest operating system. Docker uses containers and an image format to deploy applications in a consistent manner across development, testing, and production. The document provides examples of how to define a Dockerfile to build an image, run containers from images using docker-compose, and common Docker commands.
Docker 101 - Nov 2016
Docker 101 - Nov 2016Docker, Inc. Containers are not virtual machines - they have fundamentally different architectures and benefits. Docker allows users to build, ship, and run applications inside containers. It provides tools and a platform to manage the lifecycle of containerized applications, from development to production. Containers use layers and copy-on-write to provide efficient application isolation and delivery.
Docker Tutorial For Beginners | What Is Docker And How It Works? | Docker Tut...
Docker Tutorial For Beginners | What Is Docker And How It Works? | Docker Tut...Simplilearn The document provides a comprehensive overview of Docker, detailing its advantages over virtual machines, how it operates, and its components, including the Docker engine, containers, and images. It underscores Docker's efficiency in resource usage, rapid deployment capabilities, and ease of sharing applications across various platforms. Key concepts discussed include the differences between Docker and traditional virtual machines, the structure of Docker images and containers, and the functionality of Docker registries for image management.
Rancher 2.0 Technical Deep Dive
Rancher 2.0 Technical Deep DiveLINE Corporation The document provides a detailed overview of the Verda Kubernetes as a Service project, which aims to simplify Kubernetes operations for users by offering stable Kubernetes clusters and APIs for cluster management. It discusses the adoption of Rancher 2.0 as a management tool to oversee these clusters and highlights the project's roadmap and objectives for enhancing Kubernetes support. Additionally, it addresses the challenges faced, such as documentation limitations and scalability concerns, while outlining future enhancements and modifications planned for the service.
Docker Introduction
Docker IntroductionSparkbit Docker is a technology that uses lightweight containers to package applications and their dependencies in a standardized way. This allows applications to be easily deployed across different environments without changes to the installation procedure. Docker simplifies DevOps tasks by enabling a "build once, ship anywhere" model through standardized environments and images. Key benefits include faster deployments, increased utilization of resources, and easier integration with continuous delivery and cloud platforms.
Docker architecture-04-1
Docker architecture-04-1Mohammadreza Amini The document discusses the architecture of Docker, including its core components like Docker Engine, Docker Hub, Docker Machine, Docker Compose, Kitematic, Docker Swarm, and Docker Registry. Docker Engine runs on Linux to build and run containers. Docker Hub is a hosted registry service for managing images. Docker Machine sets up Docker Engine on computers and in data centers. Docker Compose defines multi-container applications in a single file. Kitematic provides a GUI for building and running containers. Docker Swarm turns Docker engines into a clustered virtual engine. Docker Registry stores and distributes Docker images.
Docker
DockerSangtongPeesing Docker provides tools for building and running containerized applications. The Docker Engine manages Docker objects like images, containers, networks and volumes. Docker Desktop is for Mac/Windows and includes Docker Engine and other tools. Docker Compose defines multi-container apps. Docker Hub is a public registry and Docker Swarm manages clusters of Docker Engines.
Docker, LinuX Container
Docker, LinuX ContainerAraf Karsh Hamid The document provides an extensive overview of Docker and Linux containers, covering fundamental concepts such as Docker images, containers, registries, and the architecture across different operating systems. It details the anatomy of a Dockerfile, processes for building images, managing containers, and using advanced command options. Additionally, it discusses the lightweight nature of Linux containers (LXC), their underlying technology, and performance benefits compared to traditional virtual machines.
What is Docker Architecture | Edureka
What is Docker Architecture | EdurekaEdureka! The document discusses Docker architecture and workflow. It outlines the key components of Docker including the Docker client, host, objects like images and containers, and Docker registry. It also contrasts traditional application deployment with using Docker, noting Docker allows for portable deployment of applications and their dependencies through use of containers.
Kubernetes Basics
Kubernetes BasicsEueung Mulyana This document provides an overview of Kubernetes including:
1) Kubernetes is an open-source platform for automating deployment, scaling, and operations of containerized applications. It provides container-centric infrastructure and allows for quickly deploying and scaling applications.
2) The main components of Kubernetes include Pods (groups of containers), Services (abstract access to pods), ReplicationControllers (maintain pod replicas), and a master node running key components like etcd, API server, scheduler, and controller manager.
3) The document demonstrates getting started with Kubernetes by enabling the master on one node and a worker on another node, then deploying and exposing a sample nginx application across the cluster.
Docker Introduction
Docker IntroductionMANAOUIL Karim The document introduces Docker as a system-level virtualization technology that packages applications and their dependencies into lightweight, portable containers. It covers essential commands for creating and managing Docker containers, networking configurations, and the Docker ecosystem, including the use of Docker Compose for deployment and scaling of multiple services. A practical example of deploying a Flask application and managing multiple containers using a YAML configuration file is also outlined.
Docker
DockerA.K.M. Ahsrafuzzaman Docker allows building, shipping, and running applications in portable containers. It packages an application with all its dependencies into a standardized unit for software development. Major cloud providers and companies support and use Docker in production. Containers are more lightweight and efficient than virtual machines, providing faster launch times and allowing thousands to run simultaneously on the same server. Docker simplifies distributing applications and ensures a consistent environment.
Docker in real life
Docker in real lifeNguyen Van Vuong Docker is a platform that allows users to build, ship, and run applications by using containers. It solves issues like dependency conflicts, portability, and consistency across development and production. Docker uses containers- isolated environments that package code and dependencies together- to deliver software quickly and reliably. Key Docker concepts include images (read-only templates for creating containers), volumes (for persistent data), registries (for sharing images), and compose files (for defining multi-container apps). Docker also provides networking and clustering functionality to connect containers across multiple hosts.
Similar to Docker Networking Deep Dive (20)
Demystfying container-networking
Demystfying container-networkingBalasundaram Natarajan Demystifying Docker & Kubernetes
The document provides an overview of container networking standards and models including Docker's Container Network Model (CNM) and Kubernetes' Container Networking Interface (CNI). It discusses Docker networking drivers like bridge, overlay, and host networking. It also covers Kubernetes networking fundamentals like pods, services, ingress, and network policies. The agenda includes a dive into CNM and CNI standards as well as examples of container networking in Docker and Kubernetes.
Collabnix Online Webinar - Demystifying Docker & Kubernetes Networking by Bal...
Collabnix Online Webinar - Demystifying Docker & Kubernetes Networking by Bal...Ajeet Singh Raina The document provides an overview of container networking standards, including Docker's CNM and Kubernetes' CNI, highlighting the roles of namespaces and cgroups in container networking. It explains service discovery, load balancing, routing mesh, and various deployment mechanisms within Docker and Kubernetes environments, detailing how services and tasks are managed. It also includes numerous references to resources for further exploration of the topics discussed.
DCUS17 : Docker networking deep dive
DCUS17 : Docker networking deep diveMadhu Venugopal This document provides an in-depth exploration of Docker networking, specifically addressing the application and data planes, as well as the various layers and dimensions involved. It outlines the functionalities of Docker's networking features like service discovery, load balancing, and management through control and data planes, utilizing overlay networks and VXLAN technology. Additionally, it discusses troubleshooting techniques and the underlying processes for network resource allocation within a Docker swarm environment.
Docker for Ops: Docker Networking Deep Dive, Considerations and Troubleshooti...
Docker for Ops: Docker Networking Deep Dive, Considerations and Troubleshooti...Docker, Inc. The document provides an in-depth overview of Docker networking, focusing on the capabilities of libnetwork and its new features in version 1.12, including swarm mode and multi-host networking. It details service discovery, load balancing, and secure control and data planes, emphasizing their scalability and performance enhancements. Additionally, practical examples of creating macvlan networks and describing routing mechanisms are discussed, culminating in a demo and Q&A session.
DockerCon US 2016 - Docker Networking deep dive
DockerCon US 2016 - Docker Networking deep diveMadhu Venugopal Docker networking provides a networking fabric for containers called libnetwork that defines the container networking model and provides features like multi-host networking, service discovery, load balancing, and security. New features in Docker 1.12 include networking in swarm mode without an external key-value store, macvlan driver support, a gossip-based secure control plane, optional IPSec for the data plane, built-in DNS for service discovery and load balancing, and a routing mesh for edge routing.
Docker Networking : 0 to 60mph slides
Docker Networking : 0 to 60mph slidesDocker, Inc. The document outlines a workshop on Docker networking, focusing on the architecture, design considerations, and advantages of container networking. It discusses key concepts such as the container network model, native service discovery, and load balancing, along with hands-on exercises using Docker networking. The workshop also covers the evolution of Docker networking and provides detailed insights into bridge and overlay networking functionalities.
Docker summit : Docker Networking Control-plane & Data-Plane
Docker summit : Docker Networking Control-plane & Data-PlaneMadhu Venugopal This document discusses Docker networking and provides an overview of its control plane and data plane components. The control plane uses a gossip-based protocol for decentralized event dissemination and failure detection across nodes. The data plane uses overlay networking with Linux bridges and VXLAN interfaces to provide network connectivity between containers on different Docker hosts. Load balancing for internal and external traffic is implemented using IPVS for virtual IP addresses associated with Docker services.
Docker Networking: Control plane and Data plane
Docker Networking: Control plane and Data planeDocker, Inc. The document discusses Docker networking and provides an overview of its control plane and data plane components. The control plane uses a gossip-based protocol for decentralized event dissemination and failure detection across nodes. The data plane uses overlay networking with Linux bridges and VXLAN interfaces to provide network connectivity between containers on different Docker hosts. Load balancing for internal and external traffic is implemented using IPVS for virtual IP addresses associated with Docker services.
Docker networking Tutorial 101
Docker networking Tutorial 101LorisPack Project The document provides an overview of Docker networking options and access control. It discusses the default Linux bridge networking (Docker0), port mapping to access containers externally, using the host's network, and connecting containers via their networks. It also covers more advanced options like Open vSwitch for encapsulation and programmable networking. The document recommends using iptables and the --icc and --link flags for access control between containers and only allowing connected containers to communicate.
What's New in Docker 1.12 (June 20, 2016) by Mike Goelzer & Andrea Luzzardi
What's New in Docker 1.12 (June 20, 2016) by Mike Goelzer & Andrea LuzzardiMike Goelzer Docker 1.12 introduces several new features for managing containerized applications at scale including Docker Swarm mode for native clustering and orchestration. Key features include services that allow defining and updating distributed applications, a built-in routing mesh for load balancing between nodes, and security improvements like cryptographic node identities and TLS encryption by default. The document also discusses plugins, health checks, and distributed application bundles for declaring stacks of services.
What's New in Docker 1.12 by Mike Goelzer and Andrea Luzzardi
What's New in Docker 1.12 by Mike Goelzer and Andrea LuzzardiDocker, Inc. Docker 1.12 introduces significant features including a built-in routing mesh for load balancing and service discovery, as well as enhanced security through cryptographic node identity and mutual TLS authentication. The new orchestration capabilities allow for dynamic role assignments and consistent state management for distributed applications. Additionally, the version maintains backward compatibility and provides tools for scalable service management, health checks, and plugin permissions management.
Docker 1.11 Meetup: Networking Showcase
Docker 1.11 Meetup: Networking ShowcaseDocker, Inc. Docker networking was introduced in Docker 1.9.0 and has continued to be improved upon and expanded. Key features introduced include support for multiple micro-segmented networks, built-in multihost networking using VXLAN, pluggable network plugins, and integration with Docker Swarm and Docker Compose. Later versions added additional capabilities like service discovery using embedded DNS, network load balancing, and experimental Macvlan and IPVlan drivers to connect containers to specific VLANs. Docker networking allows containers to be connected to different network types including default bridge networks, user-defined bridge networks, and overlay networks spanning multiple Docker hosts.
Docker Meetup: Docker Networking 1.11, by Madhu Venugopal
Docker Meetup: Docker Networking 1.11, by Madhu VenugopalMichelle Antebi The document details the advancements in Docker networking from versions 1.9.0 to 1.11.0, highlighting new features like multihost networking, service discovery, and built-in load balancing. Several use-cases are provided, demonstrating the use of default and user-defined bridge networks as well as overlay and VLAN networks with practical examples. Additional resources and user guides for Docker networking are also referenced for further exploration.
Docker Meetup: Docker Networking 1.11 with Madhu Venugopal
Docker Meetup: Docker Networking 1.11 with Madhu VenugopalDocker, Inc. The document outlines the evolution of Docker's networking features from versions 1.9.0 to 1.11.0, highlighting enhancements like multi-host networking, service discovery, and built-in load-balancing. It includes use cases for default bridge networks, user-defined bridge networks, and overlay networks with practical command examples for setting them up. Additional resources and links are provided for deeper understanding and experimental features like VLAN drivers.
DockerCon EU 2018 Workshop: Container Networking for Swarm and Kubernetes in ...
DockerCon EU 2018 Workshop: Container Networking for Swarm and Kubernetes in ...Guillaume Morini The document details networking in Docker Enterprise using both Swarm and Kubernetes, highlighting the architecture, networking models, and key components like service discovery and load balancing. It discusses concepts such as bridge and overlay networking, container network interface (CNI) with Calico, and network policies for Kubernetes. The workshop instructions and resources are also provided, emphasizing a hands-on approach to understanding Docker networking solutions.
AstriCon 2017 - Docker Swarm & Asterisk
AstriCon 2017 - Docker Swarm & AsteriskEvan McGee The document provides a detailed guide on deploying a Docker Swarm, highlighting its features like built-in resilience, orchestration, and load balancing. It includes steps for initializing the swarm, adding nodes, and deploying services like Asterisk with network configurations and health checks. Additionally, it emphasizes best practices for managing deployments and scaling applications effectively in a swarm environment.
Private cloud networking_cloudstack_days_austin
Private cloud networking_cloudstack_days_austinChiradeep Vittal The document discusses private cloud networking in Apache CloudStack, highlighting the differences between basic and advanced zone configurations. It emphasizes the importance of simplifying network setups while addressing various networking issues such as security, automation, and integration with legacy systems. The presentation outlines features related to security groups, service offerings, and networking design principles to facilitate efficient private cloud deployment.
Docker Networking Overview
Docker Networking OverviewSreenivas Makam The document provides an overview of Docker networking as of version 17.06. It begins with introductions of the presenter and some key terminology used. It then discusses why container networking is needed and compares features of container and VM networking. The major components of Docker networking including network drivers, IPAM, Swarm networking, service discovery, and load balancing are outlined. Concepts of CNI/CNM standards and IP address management are explained. Examples of different network drivers such as bridge, overlay, macvlan are provided. The document also covers Docker networking concepts such as default networks, Swarm mode, service discovery, and load balancing. It concludes with some debugging commands and a reference slide.
Docker Networking - Common Issues and Troubleshooting Techniques
Docker Networking - Common Issues and Troubleshooting TechniquesSreenivas Makam This document discusses Docker networking components and common issues. It covers Docker networking drivers like bridge, host, overlay, topics around Docker daemon access and configuration behind firewalls. It also discusses container networking best practices like using user-defined networks instead of links, connecting containers to multiple networks, and connecting managed services to unmanaged containers. The document is intended to help troubleshoot Docker networking issues.
Orchestrating Linux Containers while tolerating failures
Orchestrating Linux Containers while tolerating failuresDocker, Inc. The document discusses the orchestration of Linux containers, particularly through Docker's swarm mode introduced in version 1.12, which simplifies the setup and management of distributed clusters. It highlights the benefits of containerization for deploying microservices, addressing challenges such as scaling, security, and fault tolerance while implementing a robust consensus mechanism using the Raft algorithm. The document concludes by emphasizing Docker's built-in networking, security, and service abstraction features that facilitate failure-tolerant application management.
Ad
More from Docker, Inc. (20)
Containerize Your Game Server for the Best Multiplayer Experience
Containerize Your Game Server for the Best Multiplayer Experience Docker, Inc. The document discusses the benefits of containerizing game servers to enhance multiplayer gaming experiences, emphasizing the importance of low latency and performance. It outlines challenges such as managing global deployments and the need for persistent data, while highlighting the advantages of using Docker containers for deployment and management. Additionally, Agones is introduced as a solution for orchestrating game servers within a Kubernetes environment.
How to Improve Your Image Builds Using Advance Docker Build
How to Improve Your Image Builds Using Advance Docker BuildDocker, Inc. The document presents an overview of BuildKit, a build engine for Docker, highlighting its features such as multi-stage builds, improved build caching, build secrets management, and SSH agent forwarding. It details the advantages of using BuildKit over legacy build engines, including performance improvements and the ability to manage dependencies more efficiently. The document also includes demo instructions and practical use cases for transitioning to BuildKit in various development scenarios.
Build & Deploy Multi-Container Applications to AWS
Build & Deploy Multi-Container Applications to AWSDocker, Inc. The document outlines the process of building and deploying multi-container applications to AWS using Docker Compose. It includes details about containerizing various services like an Nginx server, a React app, and a Node.js server, as well as configuration steps for AWS deployment. The document emphasizes the use of a CLI tool to simplify the management of multiple containers.
Securing Your Containerized Applications with NGINX
Securing Your Containerized Applications with NGINXDocker, Inc. The document summarizes Kevin Jones' presentation on securing containerized applications with NGINX. It discusses the benefits of using a reverse proxy for security, NGINX best practices for TLS configuration, and deploying NGINX in Docker containers. It also provides code examples and configurations for setting up NGINX as a reverse proxy, optimizing TLS, and using NGINX as a sidecar proxy.
How To Build and Run Node Apps with Docker and Compose
How To Build and Run Node Apps with Docker and ComposeDocker, Inc. The document provides a comprehensive guide on building and running Node.js applications using Docker and Docker Compose. It covers essential steps such as creating Dockerfiles, setting up service definitions, and managing environment variables, along with deployment considerations. It also highlights best practices for containerization, including the use of volumes and securing applications with Let's Encrypt.
Hands-on Helm
Hands-on Helm Docker, Inc. The document discusses Helm, a package manager for Kubernetes, providing an overview of its features and significant changes in the transition from Helm 2 to Helm 3. Key updates include improved security, simplified architecture, and modifications to CLI commands and release metadata management. The document also encourages community involvement and outlines considerations for migration and support of existing charts.
Distributed Deep Learning with Docker at Salesforce
Distributed Deep Learning with Docker at SalesforceDocker, Inc. The document outlines how Salesforce employs Docker for distributed deep learning model deployment, addressing challenges such as team specialization, interaction with model servers, and testing. It emphasizes the importance of preprocessing, inference, and postprocessing in the deep learning workflow and presents solutions like containerizing functions and using Docker Compose for testing. Key takeaways include the scalability of deep learning processes through Docker and its ability to simplify complex systems.
The First 10M Pulls: Building The Official Curl Image for Docker Hub
The First 10M Pulls: Building The Official Curl Image for Docker HubDocker, Inc. The document discusses the creation and implementation of the official curl image for Docker Hub, detailing the design decisions, security considerations, and the build process. It highlights the use of multi-stage builds for minimal image size and includes references to security vulnerabilities and testing procedures. Additionally, the document outlines lessons learned and future steps for enhancing the curl docker image.
Monitoring in a Microservices World
Monitoring in a Microservices WorldDocker, Inc. Docker facilitates the creation of dynamic, distributed, and scalable polyglot applications but necessitates a novel monitoring approach. Key strategies include extensive automation, utilization of metrics and distributed traces, and adapting organizational roles such as DevOps and SRE to evolving responsibilities. Challenges include managing dynamically changing environments and ensuring comprehensive application state representation.
COVID-19 in Italy: How Docker is Helping the Biggest Italian IT Company Conti...
COVID-19 in Italy: How Docker is Helping the Biggest Italian IT Company Conti...Docker, Inc. The document discusses how Engineering Ingegneria Informatica leveraged Docker technology to maintain operational continuity during the COVID-19 pandemic, managing 250,000 remote workplaces for 400 clients. It highlights their digital workplace infrastructure, DevOps culture, and educational offerings revolving around Docker training and certifications. Additionally, it outlines their biosurveillance solution, Eng-De4Bios, designed to monitor and geolocate COVID-19 cases and prevent the spread of the virus.
Predicting Space Weather with Docker
Predicting Space Weather with DockerDocker, Inc. The document discusses how NOAA's Space Weather Prediction Center transitioned from a monolithic architecture to microservices using Docker. It describes how they started with a small verification project, then replaced their critical GOES satellite data source. This improved developers' morale and delivery speed. They encountered some security issues initially but learned from them. The transition was very successful and allowed them to quickly expand their mission to forecast aviation impacts using scientists' models packaged as Docker services.
Become a Docker Power User With Microsoft Visual Studio Code
Become a Docker Power User With Microsoft Visual Studio CodeDocker, Inc. The document is an agenda for a presentation by Brian Christner on becoming a Docker power user using Microsoft Visual Studio Code. It covers topics such as integrating Docker Desktop with VS Code, utilizing various features of the Docker extension, and includes demos and resources for further learning. Key highlights include bootstrapping new Docker projects, writing Dockerfiles with code completion, and the ability to debug Docker applications.
How to Use Mirroring and Caching to Optimize your Container Registry
How to Use Mirroring and Caching to Optimize your Container RegistryDocker, Inc. The document discusses the use of caching and mirroring to optimize image registries, highlighting methods like configuring registry mirrors and manual syncing of images. It addresses limitations and risks associated with caching, emphasizing the benefits of managing your own mirror to save bandwidth and ensure resilience against upstream outages. Additionally, it provides technical implementation details and strategies for manually mirroring Docker images.
Monolithic to Microservices + Docker = SDLC on Steroids!
Monolithic to Microservices + Docker = SDLC on Steroids!Docker, Inc. The document discusses the transition from monolithic architecture to microservices, highlighting the adoption of Docker and a polyglot tech stack at SS&C Eze to enhance the software development lifecycle. It emphasizes improvements in developer experience, quick onboarding, and the effectiveness of testing and deployment strategies, such as branch by abstraction and feature toggles. Key takeaways include the necessity for strict engineering discipline and the advantages of testing services in isolation for more efficient delivery.
Kubernetes at Datadog Scale
Kubernetes at Datadog ScaleDocker, Inc. Kubernetes networking can be complex to scale due to issues like growing iptables rules, but newer solutions are helping. Pod networking uses CNI plugins like flannel or Calico to assign each pod an IP and allow communication. Service networking uses kube-proxy and iptables or IPVS for load balancing to pods. DNS is used to resolve service names to IPs. While Kubernetes networking brings flexibility, operators must learn the nuances of their specific CNI plugin and issues can arise, but the ecosystem adapts quickly to new needs and changes don't impact all workloads.
Labels, Labels, Labels
Labels, Labels, Labels Docker, Inc. The document discusses the importance of using labels in software development for security, simplicity, and documentation. It provides specific examples of label schemas for container images, including details about authors, version control, and build information. Additionally, it outlines how to create and view these labels using Docker and Kubernetes commands.
Using Docker Hub at Scale to Support Micro Focus' Delivery and Deployment Model
Using Docker Hub at Scale to Support Micro Focus' Delivery and Deployment ModelDocker, Inc. Micro Focus uses Docker Hub at scale to support its software delivery and deployment model. Some key points:
- Docker Hub is used as the registry service for Micro Focus container images
- It allows for optimized, secure, reliable and cost-effective software delivery through deployments and updates of container images to customers and partners
- Micro Focus leverages features like private repositories, offline/online access, signing and scanning of images, and integration with CI/CD pipelines
- Over 1,650 organizations, 450 repositories, and 18 teams are used on Docker Hub to manage access and deliver software from Micro Focus
Build & Deploy Multi-Container Applications to AWS
Build & Deploy Multi-Container Applications to AWSDocker, Inc. The document outlines the process of building and deploying multi-container applications to AWS using Docker Compose. It details the steps involved, including containerizing an NGINX server, a React app, and a Node.js server, as well as configuring files such as buildspec.yml and dockerrun.aws.json. The summary also mentions the importance of environment variables in AWS Elastic Beanstalk and triggering the deployment pipeline.
From Fortran on the Desktop to Kubernetes in the Cloud: A Windows Migration S...
From Fortran on the Desktop to Kubernetes in the Cloud: A Windows Migration S...Docker, Inc. The document discusses Elton Stoneman's experiences migrating from Fortran on desktop to Kubernetes in the cloud, focusing on themes such as flexibility, speed, and standardization in app modeling. It outlines a structured migration process with phases for proof of concept and evaluation, involving the development of compute modules and APIs. Additionally, it includes promotional links for learning resources on Docker and Kubernetes.
Developing with Docker for the Arm Architecture
Developing with Docker for the Arm ArchitectureDocker, Inc. This document outlines the advantages of using Docker for ARM architecture development, emphasizing its ability to simplify and modernize the development process. It discusses the integration of Docker with various tools and platforms, including AWS and Raspberry Pi, and highlights the benefits of multi-architecture support and template automation. Additionally, it presents practical exercises for developers to enhance their skills in building and deploying applications using Docker.
Ad
Recently uploaded (20)
Can We Use Rust to Develop Extensions for PostgreSQL? (POSETTE: An Event for ...
Can We Use Rust to Develop Extensions for PostgreSQL? (POSETTE: An Event for ...NTT DATA Technology & Innovation Can We Use Rust to Develop Extensions for PostgreSQL?
(POSETTE: An Event for Postgres 2025)
June 11, 2025
Shinya Kato
NTT DATA Japan Corporation
Down the Rabbit Hole – Solving 5 Training Roadblocks
Down the Rabbit Hole – Solving 5 Training RoadblocksRustici Software Feeling stuck in the Matrix of your training technologies? You’re not alone. Managing your training catalog, wrangling LMSs and delivering content across different tools and audiences can feel like dodging digital bullets. At some point, you hit a fork in the road: Keep patching things up as issues pop up… or follow the rabbit hole to the root of the problems.
Good news, we’ve already been down that rabbit hole. Peter Overton and Cameron Gray of Rustici Software are here to share what we found. In this webinar, we’ll break down 5 training roadblocks in delivery and management and show you how they’re easier to fix than you might think.
June Patch Tuesday
June Patch TuesdayIvanti Ivanti’s Patch Tuesday breakdown goes beyond patching your applications and brings you the intelligence and guidance needed to prioritize where to focus your attention first. Catch early analysis on our Ivanti blog, then join industry expert Chris Goettl for the Patch Tuesday Webinar Event. There we’ll do a deep dive into each of the bulletins and give guidance on the risks associated with the newly-identified vulnerabilities.
Creating Inclusive Digital Learning with AI: A Smarter, Fairer Future
Creating Inclusive Digital Learning with AI: A Smarter, Fairer FutureImpelsys Inc. Have you ever struggled to read a tiny label on a medicine box or tried to navigate a confusing website? Now imagine if every learning experience felt that way—every single day.
For millions of people living with disabilities, poorly designed content isn’t just frustrating. It’s a barrier to growth. Inclusive learning is about fixing that. And today, AI is helping us build digital learning that’s smarter, kinder, and accessible to everyone.
Accessible learning increases engagement, retention, performance, and inclusivity for everyone. Inclusive design is simply better design.
Securing Account Lifecycles in the Age of Deepfakes.pptx
Securing Account Lifecycles in the Age of Deepfakes.pptxFIDO Alliance Securing Account Lifecycles in the Age of Deepfakes
High Availability On-Premises FME Flow.pdf
High Availability On-Premises FME Flow.pdfSafe Software FME Flow is a highly robust tool for transforming data both automatically and by user-initiated workflows. At the Finnish telecommunications company Elisa, FME Flow serves processes and internal stakeholders that require 24/7 availability from underlying systems, while imposing limitations on the use of cloud based systems. In response to these business requirements, Elisa has implemented a high-availability on-premises setup of FME Flow, where all components of the system have been duplicated or clustered. The goal of the presentation is to provide insights into the architecture behind the high-availability functionality. The presentation will show in basic technical terms how the different parts of the system work together. Basic level understanding of IT technologies is required to understand the technical portion of the presentation, namely understanding the purpose of the following components: load balancer, FME Flow host nodes, FME Flow worker nodes, network file storage drives, databases, and external authentication services. The presentation will also outline our lessons learned from the high-availability project, both benefits and challenges to consider.
National Fuels Treatments Initiative: Building a Seamless Map of Hazardous Fu...
National Fuels Treatments Initiative: Building a Seamless Map of Hazardous Fu...Safe Software The National Fuels Treatments Initiative (NFT) is transforming wildfire mitigation by creating a standardized map of nationwide fuels treatment locations across all land ownerships in the United States. While existing state and federal systems capture this data in diverse formats, NFT bridges these gaps, delivering the first truly integrated national view. This dataset will be used to measure the implementation of the National Cohesive Wildland Strategy and demonstrate the positive impact of collective investments in hazardous fuels reduction nationwide. In Phase 1, we developed an ETL pipeline template in FME Form, leveraging a schema-agnostic workflow with dynamic feature handling intended for fast roll-out and light maintenance. This was key as the initiative scaled from a few to over fifty contributors nationwide. By directly pulling from agency data stores, oftentimes ArcGIS Feature Services, NFT preserves existing structures, minimizing preparation needs. External mapping tables ensure consistent attribute and domain alignment, while robust change detection processes keep data current and actionable. Now in Phase 2, we’re migrating pipelines to FME Flow to take advantage of advanced scheduling, monitoring dashboards, and automated notifications to streamline operations. Join us to explore how this initiative exemplifies the power of technology, blending FME, ArcGIS Online, and AWS to solve a national business problem with a scalable, automated solution.
Integration of Utility Data into 3D BIM Models Using a 3D Solids Modeling Wor...
Integration of Utility Data into 3D BIM Models Using a 3D Solids Modeling Wor...Safe Software Jacobs has developed a 3D utility solids modelling workflow to improve the integration of utility data into 3D Building Information Modeling (BIM) environments. This workflow, a collaborative effort between the New Zealand Geospatial Team and the Australian Data Capture Team, employs FME to convert 2D utility data into detailed 3D representations, supporting enhanced spatial analysis and clash detection.
To enable the automation of this process, Jacobs has also developed a survey data standard that standardizes the capture of existing utilities. This standard ensures consistency in data collection, forming the foundation for the subsequent automated validation and modelling steps. The workflow begins with the acquisition of utility survey data, including attributes such as location, depth, diameter, and material of utility assets like pipes and manholes. This data is validated through a custom-built tool that ensures completeness and logical consistency, including checks for proper connectivity between network components. Following validation, the data is processed using an automated modelling tool to generate 3D solids from 2D geometric representations. These solids are then integrated into BIM models to facilitate compatibility with 3D workflows and enable detailed spatial analyses.
The workflow contributes to improved spatial understanding by visualizing the relationships between utilities and other infrastructure elements. The automation of validation and modeling processes ensures consistent and accurate outputs, minimizing errors and increasing workflow efficiency.
This methodology highlights the application of FME in addressing challenges associated with geospatial data transformation and demonstrates its utility in enhancing data integration within BIM frameworks. By enabling accurate 3D representation of utility networks, the workflow supports improved design collaboration and decision-making in complex infrastructure projects
Security Tips for Enterprise Azure Solutions
Security Tips for Enterprise Azure SolutionsMichele Leroux Bustamante Delivering solutions to Azure may involve a variety of architecture patterns involving your applications, APIs data and associated Azure resources that comprise the solution. This session will use reference architectures to illustrate the security considerations to protect your Azure resources and data, how to achieve Zero Trust, and why it matters. Topics covered will include specific security recommendations for types Azure resources and related network security practices. The goal is to give you a breadth of understanding as to typical security requirements to meet compliance and security controls in an enterprise solution.
Enabling BIM / GIS integrations with Other Systems with FME
Enabling BIM / GIS integrations with Other Systems with FMESafe Software Jacobs has successfully utilized FME to tackle the complexities of integrating diverse data sources in a confidential $1 billion campus improvement project. The project aimed to create a comprehensive digital twin by merging Building Information Modeling (BIM) data, Construction Operations Building Information Exchange (COBie) data, and various other data sources into a unified Geographic Information System (GIS) platform. The challenge lay in the disparate nature of these data sources, which were siloed and incompatible with each other, hindering efficient data management and decision-making processes.
To address this, Jacobs leveraged FME to automate the extraction, transformation, and loading (ETL) of data between ArcGIS Indoors and IBM Maximo. This process ensured accurate transfer of maintainable asset and work order data, creating a comprehensive 2D and 3D representation of the campus for Facility Management. FME's server capabilities enabled real-time updates and synchronization between ArcGIS Indoors and Maximo, facilitating automatic updates of asset information and work orders. Additionally, Survey123 forms allowed field personnel to capture and submit data directly from their mobile devices, triggering FME workflows via webhooks for real-time data updates. This seamless integration has significantly enhanced data management, improved decision-making processes, and ensured data consistency across the project lifecycle.
“Addressing Evolving AI Model Challenges Through Memory and Storage,” a Prese...
“Addressing Evolving AI Model Challenges Through Memory and Storage,” a Prese...Edge AI and Vision Alliance For the full video of this presentation, please visit: https://www.edge-ai-vision.com/2025/06/addressing-evolving-ai-model-challenges-through-memory-and-storage-a-presentation-from-micron/
Wil Florentino, Senior Segment Marketing Manager at Micron, presents the “Addressing Evolving AI Model Challenges Through Memory and Storage” tutorial at the May 2025 Embedded Vision Summit.
In the fast-changing world of artificial intelligence, the industry is deploying more AI compute at the edge. But the growing diversity and data footprint of transformers and models such as large language models and large multimodal models puts a spotlight on memory performance and data storage capacity as key bottlenecks. Enabling the full potential of AI in industries such as manufacturing, automotive, robotics and transportation will require us to find efficient ways to deploy this new generation of complex models.
In this presentation, Florentino explores how memory and storage are responding to this need and solving complex issues in the AI market. He examines the storage capacity and memory bandwidth requirements of edge AI use cases ranging from tiny devices with severe cost and power constraints to edge servers, and he explains how new memory technologies such as LPDDR5, LPCAMM2 and multi-port SSDs are helping system developers to meet these challenges.
Kubernetes Security Act Now Before It’s Too Late
Kubernetes Security Act Now Before It’s Too LateMichael Furman In today's cloud-native landscape, Kubernetes has become the de facto standard for orchestrating containerized applications, but its inherent complexity introduces unique security challenges. Are you one YAML away from disaster?
This presentation, "Kubernetes Security: Act Now Before It’s Too Late," is your essential guide to understanding and mitigating the critical security risks within your Kubernetes environments. This presentation dives deep into the OWASP Kubernetes Top Ten, providing actionable insights to harden your clusters.
We will cover:
The fundamental architecture of Kubernetes and why its security is paramount.
In-depth strategies for protecting your Kubernetes Control Plane, including kube-apiserver and etcd.
Crucial best practices for securing your workloads and nodes, covering topics like privileged containers, root filesystem security, and the essential role of Pod Security Admission.
Don't wait for a breach. Learn how to identify, prevent, and respond to Kubernetes security threats effectively.
It's time to act now before it's too late!
FIDO Seminar: New Data: Passkey Adoption in the Workforce.pptx
FIDO Seminar: New Data: Passkey Adoption in the Workforce.pptxFIDO Alliance FIDO Seminar: New Data: Passkey Adoption in the Workforce
Data Validation and System Interoperability
Data Validation and System InteroperabilitySafe Software A non-profit human services agency with specialized health record and billing systems. Challenges solved include access control integrations from employee electronic HR records, multiple regulations compliance, data migrations, benefits enrollments, payroll processing, and automated reporting for business intelligence and analysis.
Reducing Conflicts and Increasing Safety Along the Cycling Networks of East-F...
Reducing Conflicts and Increasing Safety Along the Cycling Networks of East-F...Safe Software In partnership with the Belgian Province of East-Flanders this project aimed to reduce conflicts and increase safety along a cycling route between the cities of Oudenaarde and Ghent. To achieve this goal, the current cycling network data needed some extra key information, including: Speed limits for segments, Access restrictions for different users (pedestrians, cyclists, motor vehicles, etc.), Priority rules at intersections. Using a 360° camera and GPS mounted on a measuring bicycle, we collected images of traffic signs and ground markings along the cycling lanes building up mobile mapping data. Image recognition technologies identified the road signs, creating a dataset with their locations and codes. The data processing entailed three FME workspaces. These included identifying valid intersections with other networks (e.g., roads, railways), creating a topological network between segments and intersections and linking road signs to segments and intersections based on proximity and orientation. Additional features, such as speed zones, inheritance of speed and access to neighbouring segments were also implemented to further enhance the data. The final results were visualized in ArcGIS, enabling analysis for the end users. The project provided them with key insights, including statistics on accessible road segments, speed limits, and intersection priorities. These will make the cycling paths more safe and uniform, by reducing conflicts between users.
AI VIDEO MAGAZINE - June 2025 - r/aivideo
AI VIDEO MAGAZINE - June 2025 - r/aivideo1pcity Studios, Inc AI VIDEO MAGAZINE - r/aivideo community newsletter – Exclusive Tutorials: How to make an AI VIDEO from scratch, PLUS: How to make AI MUSIC, Hottest ai videos of 2025, Exclusive Interviews, New Tools, Previews, and MORE - JUNE 2025 ISSUE -
AI vs Human Writing: Can You Tell the Difference?
AI vs Human Writing: Can You Tell the Difference?Shashi Sathyanarayana, Ph.D This slide illustrates a side-by-side comparison between human-written, AI-written, and ambiguous content. It highlights subtle cues that help readers assess authenticity, raising essential questions about the future of communication, trust, and thought leadership in the age of generative AI.
Providing an OGC API Processes REST Interface for FME Flow
Providing an OGC API Processes REST Interface for FME FlowSafe Software This presentation will showcase an adapter for FME Flow that provides REST endpoints for FME Workspaces following the OGC API Processes specification. The implementation delivers robust, user-friendly API endpoints, including standardized methods for parameter provision. Additionally, it enhances security and user management by supporting OAuth2 authentication. Join us to discover how these advancements can elevate your enterprise integration workflows and ensure seamless, secure interactions with FME Flow.
Can We Use Rust to Develop Extensions for PostgreSQL? (POSETTE: An Event for ...
Can We Use Rust to Develop Extensions for PostgreSQL? (POSETTE: An Event for ...NTT DATA Technology & Innovation
“Addressing Evolving AI Model Challenges Through Memory and Storage,” a Prese...
“Addressing Evolving AI Model Challenges Through Memory and Storage,” a Prese...Edge AI and Vision Alliance
Docker Networking Deep Dive
- 1. Docker Networking Deep Dive @MadhuVenugopal online meetup 08/24/2016
- 2. • What is libnetwork • CNM • 1.12 Features • Multihost networking • Secured Control plane & Data plane • Service Discovery • Native Loadbalacing • Routing Mesh • Demo Agenda
- 3. Overview
- 4. It is not just a driver interface • Docker networking fabric • Defines Container Networking Model • Provides builtin IP address management • Provides native multi-host networking • Provides native Service Discovery and Load Balancing • Allows for extensions by the ecosystem via plugins What is libnetwork?
- 5. Design Philosophy • Users First: • Application Developers • IT/Network Ops • Plugin API Design • Batteries Included but Swappable
- 6. Docker Networking 1.7 1.8 1.9 1.10 1.11 - Libnetwork - CNM - Migrated Bridge, host, none drivers to CNM - Multihost Networking - Network Plugins - IPAM Plugins - Network UX/API Service Discovery (using /etc/hosts) Distributed DNS - Aliases - DNS Round Robin LB 1.12 - Load Balancing - Encrypted Control and data plane - Routing Mesh - Built-in Swarm-mode networking
- 7. Container Networking Model • Endpoint • Network • Sandbox • Drivers & Plugins https://github.com/docker/libnetwork/blob/master/docs/design.md
- 10. eth0 eth0 eth0 docker0 docker0 docker0 C1 eth0 eth0 C2 eth0 C3 C1 eth0 eth0 C2 eth0 C3 C1 eth0 eth0 C2 eth0 C3 ToR switch / Hypervisor switch / … iptables : NAT / port-mapping iptables : NAT / port-mapping iptables : NAT / port-mapping
- 12. Host1 : $ docker network create -d bridge -o com.docker.network.bridge.name=brnet brnet $ docker run --net=brnet -it busybox ifconfig eth0 brnet 172.18.0.1 ToR switch / Hypervisor switch / … eth0 C1 Host1 eth0 C2 eth0 C3 iptables : NAT / port-mapping eth0 brnet 172.18.0.1 eth0 C4 Host2 eth0 C5 eth0 C6 iptables : NAT / port-mapping eth0 brnet 172.18.0.1 eth0 C7 Host3 eth0 C8 eth0 C9 iptables : NAT / port-mapping Host2 : $ docker network create -d bridge -o com.docker.network.bridge.name=brnet brnet $ docker run --net=brnet -it busybox ifconfig Host3 : $ docker network create -d bridge -o com.docker.network.bridge.name=brnet brnet $ docker run --net=brnet -it busybox ifconfig
- 13. Use-case3 Bridge Network plumbed to underlay with built-in IPAM (no NAT / Port-mapping)
- 14. Host1 : $ docker network create -d bridge --subnet=192.168.57.0/24 --ip-range=192.168.57.32/28 --gateway=192.168.57.11 --aux-address DefaultGatewayIPv4=192.168.57.1 -o com.docker.network.bridge.name=brnet brnet $ brctl addif brnet eth2 $ docker run --net=brnet -it busybox ifconfig Host2 : $ docker network create -d bridge --subnet=192.168.57.0/24 --ip-range=192.168.57.64/28 --gateway=192.168.57.12 --aux-address DefaultGatewayIPv4=192.168.57.1 -o com.docker.network.bridge.name=brnet brnet $ brctl addif brnet eth2 $ docker run --net=brnet -it busybox ifconfig Host3 : $ docker network create -d bridge --subnet=192.168.57.0/24 --ip-range=192.168.57.128/28 --gateway=192.168.57.13 --aux-address DefaultGatewayIPv4=192.168.57.1 -o com.docker.network.bridge.name=brnet brnet $ brctl addif brnet eth2 $ docker run --net=brnet -it busybox ifconfig eth2 192.168.57.11 brnet 192.168.57.11 ToR switch / Hypervisor switch / Virtual-box host-only / … (Gateway : 192.168.57.1) eth0 C1 Host1 eth0 C2 eth0 C3 eth2 192.168.57.12 brnet 192.168.57.12 eth0 C4 eth0 C5 eth0 C6 eth2 192.168.57.13 brnet 192.168.57.13 eth0 C7 eth0 C8 eth0 C9 Host2 Host3
- 16. eth0 C1 eth1 eth1 eth1 ToR switch / Hypervisor switch / … docker0docker_gwbridge eth0 eth1 eth1 eth1 docker0docker_gwbridge eth0 eth1 eth1 eth1 docker0docker_gwbridge ov-net1 ov-net1 ov-net1 VXLAN-VNI 100 VXLAN-VNI 100 eth0 eth0 eth0 eth0 eth0 eth0 eth0 eth0 eth0 VXLAN-VNI 100 iptables : NAT / port-mapping iptables : NAT / port-mapping iptables : NAT / port-mapping Docker overlay networking C2 C3 C4 C5 C6 C7 C8 C9
- 17. Use-case5 Plumbed to underlay vlan with built-in IPAM macvlan driver (& experimental ipvlan) https://github.com/docker/docker/blob/master/experimental/vlan-networks.md
- 18. # vlan 10 (eth0.10) $ docker network create -d macvlan —subnet=10.1.10.0/24 — gateway=10.1.10.1 -o parent=eth0.10 mcvlan10 $ docker run --net=mcvlan10 -it --rm alpine /bin/sh # vlan 20 (eth0.20) $ docker network create -d macvlan —subnet=10.1.20.0/24 — gateway=10.1.20.1 -o parent=eth0.20 mcvlan20 $ docker run --net=mcvlan20 -it --rm alpine /bin/sh # vlan 30 (eth0.30) $ docker network create -d macvlan —subnet=10.1.30.0/24 — gateway=10.1.30.1 -o parent=eth0.30 mcvlan30 $ docker run --net=mcvlan30 -it --rm alpine /bin/sh
- 20. New features in 1.12 swarm mode CNM Routing Mesh Multi-host Networking without external k/v store Service Discovery Secure Data-Plane Secure Control-Plane Load Balancing • Cluster aware • De-centralized control plane • Highly scalable
- 21. Swarm-mode Multi-host networking Manager Network Create Orchestrator Allocator Scheduler Dispatcher Service Create Task Create Task Dispatch Task Dispatch Gossip Worker1 Worker2 Engine Libnetwork Engine Libnetwork • VXLAN based data path • No external key-value store • Central resource allocation • Improved performance • Highly scalable
- 22. • Gossip based protocol • Network scoped • Fast convergence • Secure by default • periodic key rotations • swarm native key-exchange • Gossips control messages • Routing-states • Service-discovery • Plugin-data • Highly scalable Secured network control plane Cluster Scope Gossip W1 W2 W3 W1 W5 W4 Network Scope Gossip Network Scope Gossip
- 23. • Available as an option during overlay network creation • Uses kernel IPSec modules • On-demand tunnel setup • Swarm native key-exchange • Periodic key rotations Secure dataplane Worker1 Worker2 Worker3 secure network secure network IPSec Tunnel IPSec Tunnel IPSec Tunnel secure network secure network non- secure network non- secure network Open UDP traffic
- 24. • Provided by embedded DNS • Highly available • Uses Network Control Plane to learn state • Can be used to discover both tasks and services Service Discovery engine DNS Server DNS Resolver DNS Resolver DNS requests
- 25. • Internal & Ingress load-balancing • Supports VIP & DNS-RR • Highly available • Uses Network Control Plane to learn state • Minimal Overhead Load balancer Task1 ServiceA Task2 ServiceA Task3 ServiceA Client1 Client2 VIP LB VIP LB
- 26. • Builtin routing mesh for edge routing • Worker nodes themselves participate in ingress routing mesh • All worker nodes accept connection requests on PublishedPort • Port translation happens at the worker node • Same internal load balancing mechanism used to load balance external requests Routing mesh External Loadbalancer (optional) Task1 ServiceA Task1 ServiceA Task1 ServiceA Worker1 Worker2 Ingress Network 8080 8080 VIP LB VIP LB 8080->80 8080->80
- 27. Routing Mesh • Operator reserves a swarm- wide ingress port (8080) for myapp • Every node listens on 8080 • Container-aware routing mesh can transparently reroute traffic from Worker3 to a node that is running container • Built in load balancing into the Engine • DNS-based service discovery Worker 1 :8080 Manager User accesses myapp.com:8080:8080 Worker 2 :8080 Worker 3 :8080 frontend frontend $ docker service create --replicas 3 --name frontend --network mynet --publish 8080:80/tcp frontend_image:latest frontend
- 28. Routing Mesh: Published Ports • Operator reserves a swarm- wide ingress port (8080) for myapp • Every node listens on 8080 • Container-aware routing mesh can transparently reroute traffic from Worker3 to a node that is running container • Built in load balancing into the Engine • DNS-based service discovery Worker 1 :8080 Manager User accesses myapp.com:8080:8080 Worker 2 :8080 Worker 3 :8080 frontend frontend $ docker service create --replicas 3 --name frontend --network mynet --publish 8080:80/tcp frontend_image:latest frontend
- 29. Deep Dive
- 30. Service , Port-Publish & Network iptables eth0 Host1 default_gwbridge ingress-sbox eth1 ingress-overlay-bridge Ingress- Network eth0 vxlan tunnel to host2 - vni-100vxlan tunnel to host3 - vni-100 eth0 Container-sbox eth1 eth2 mynet mynet-br vxlan tunnel to host2 - vni-101 docker service create —name=test —network=mynet -p 8080:80 —replicas=2 xxx iptables ipvs iptables ipvs Host1: 8080 DNS Resolver daemon embedded DNS server service -> VIP
- 31. Day in life of a packet - IPTables & IPVS
- 32. Day in life of a packet - Routing Mesh & Ingress LB iptables NAT table DOCKER-INGRESS DNAT : Published-Port -> ingress-sbox eth0 Host1 default_gwbridge ingress-sboxeth1 iptables NAT table PREROUTING Redirect -> service-port iptables MANGLE table PREROUTING MARK : Published-Port -> <fw-mark-id> IPVS Match <fw-mark-id> -> Masq {RR across container-IPs) ingress-overlay-bridge Ingress- Network eth0 iptables NAT table DOCKER-INGRESS DNAT : Published-Port -> ingress-sbox eth0 Host2 default_gwbridge ingress-sbox eth1 ingress-overlay-bridge eth0 vxlan tunnel with vni Ingress- Network eth0 Container-sbox (backs a task/ service) eth1
- 33. Day in life of a packet - Internal LB eth0 Host1 container-sbox (service1) eth1 iptables MANGLE table OUTPUT MARK : VIP -> <fw-mark-id> IPVS Match <fw-mark-id> -> Masq {RR across container-IPs) mynet-overlay-bridge mynet eth2 Host2 mynet-overlay-bridgevxlan tunnel with vni mynet eth2 Container-sbox (service2) Application looks up service2 (using embedded-DNS @ 127.0.0.11) DNS Resolver daemon embedded DNS server service2 -> VIP2 vxlan tunnel with vni
- 34. Thank you!