Containers are quickly becoming the default foundation for modern applications. As a public cloud provider, IBM has been an early champion of containers in the cloud and has built an enterprise ready container service as part of IBM Bluemix. IBM has a long heritage of supporting, contributing to, and building offerings on top of open technologies and IBM carries this commitment to the open development of container solutions by being an active/founding member of the Open Containers Initiative and Cloud Native Computing Foundation. In this session, we will explore the enduring commitment to open technology as well as the advantages of using a pure containers service where the user has access to total solution life cycle management through integration of lessons learned, cutting edge enhancements/development and end-to-end support on the user's underlying infrastructure. We will explore topics such as exploiting bare metal servers, applying overlay networking to containers, ensuring isolation and security in a truly multi-tenant container environment and managing a global service deployment.

1. Production Ready Containers from
IBM and Docker
Jason McGee
IBM Fellow, VP and CTO, IBM Cloud
Chris Rosen
Senior Technical Offering Manager

2. Section One
What we are hearing
Agenda
Section Two
Tools for the Container Lifecycle
Section Three
Demo
Section Four
amalgam8

3. What we are
hearing

4. Produc'on Ready Containers Require
§ Agility and portability
§ Deep visibility
§ Security & Compliance
§ Resource Management

5. IBM Confidential
5IBM
PHP
PHP
PHP
PHP
Data Storage
External ServicesGame ServerNGINIXLoad BalancerFirewall
Data Storage
Load BalancerFirewall
PHP
PHP PHP PHP
PHP PHP
Services
PHP PHP
PHP PHP PHP
FPM
FPM
Worker
Worker
Worker
CentOS
Host

6. Containers alone
are not enough

7. Acquire
Build
Deliver
Run
Maintain
Improve control & usability across the container lifecycle

8. IBM Confidential
8IBM
• Fully managed hosted
run'me
• Integrated logging,
monitoring, load
balancing, registry
and auto-scaling
• Advanced security
features
• Built using Docker
technology
IBM
CONTAINERS

9. Core Capabilities
• Delivery Choice
• Persistent Storage
• Content
• Cloud Integra'on
• Overlay Networking
• Security
• Na've Docker
• Hosted Docker Registry
• Scalable Groups
IBM
CONTAINERS

10. Container-native platform
Server
Host OS
Docker Engine
Appl
B
Appl
A
Appl
A
Server
Host OS
Docker Engine
Appl
A
Appl
A
Appl
A
Server
Host OS
Docker Engine
Appl
B
Appl
A
Appl
A
Guest OS
Docker Engine
Appl
A
Appl
A
Appl
A
Guest OS
Docker Engine
Appl
B
Appl
B
Guest OS
Docker Engine
Appl
A
Appl
A
Appl
A
Server
Host OS
Hypervisor
Server
Host OS
Hypervisor
Multiple-tenants
Improved visibility
and control
Bare metal performance
Improved density
Container-native cloud Containers on IaaS cloud
Managed by
customer
Managed by
provider
Single-tenant
Limited visibility
and control
Container-native cloud enables new differentiating capabilities in the areas of
security, compliance, and performance management: with better guarantees
and simpler to use.

12. IBM Confidential
12IBM

13. Domain Services
Runtimes
Foundation
Platform
Infrastructure Bare Metal
(Ironic)
Virtual Machines
(Nova)
Networking
(Neutron/Ovn)
Storage
(Swift/Cinder)
Containers
(OCI/CNCF/Docker)
Applications
(CloudFoundry)
OpenWhisk
(serverless, event-based)
Foundation Services
Log/Metrics, Service Publish/Discovery, Configuration, ActiveDeploy
Application Runtimes
(Java, Node.js, Swift & more)
Cognitive Data IoT Analytics Integration
An open approach: the IBM Cloud Architecture
Mobile
Public
Multi-tenant, off-prem
Dedicated
Single-tenant, off-prem
Local
Single-tenant, on-prem
13

14. Public or Private
Repositories
Custom Stacks
Vulnerability Advisor
Scalable Groups
Logging & Monitoring
Improve control & usability across the container lifecycle
14

15. Logging and Monitoring

16. Deep introspection allows no-touch vulnerability analysis

20. Updating without downtime

21. Enhancements

22. Docker Comose Support

23. Performance Improvements
• 50% improvement in CLI/API ac'ons.
• 30% improvement in disk io for aUached volumes
• Improvement consistency for container (and group) deployment 'mes.
• Bring your own IP
• Private network for container groups
• Improved port security management

24. Enterprise-Ready Images At Your Finger'ps
IBM® WebSphere® Applica:on Server Liberty
Profile
• IBM WebSphere Applica'on Server for Developers
V8.5.5 Liberty Profile
• IBM Java Run'me Environment 7.1 SR1
• Debian dnsu'ls package 1:9.9.5.dfsg-3ubuntu0.3
(dnsu'ls)
• Ubuntu OpenSSH Server package 1:6.6p1-2ubuntu2
(openssh-server)
• Supervisor 3.0b2-1
IBM® MobileFirst Pla?orm Founda:on
• MobileFirst Server
• MobileFirst Data Proxy
• MobileFirst Opera'onal Analy'cs
• A Derby database defined with the database
objects for MobileFirst Server
• A mobile browser simulator
• A project (MobileFirstStarter) to evaluate
IBM® Node with StrongLoop Process Manager
• IBM Node SDK v0.10.32
• Debian dnsu'ls package 1:9.9.5.dfsg-3ubuntu0.3
(dnsu'ls)
• Ubuntu OpenSSH Server package 1:6.6p1-2ubuntu2
(openssh-server)
• Supervisor 3.0b2-1
• StrongLoop Process Manager

25. Demo

26. How it Works…
Drone
Interface
Rebel Watson
(Container)
Watson
Vision API

29. Microservices

30. IBM Confidential
An engineering approach focused on
decomposing an application into single-function
modules with well defined interfaces which are
independently deployed and operated by a small
team who owns the entire lifecycle of the service.
Microservices accelerate delivery by minimizing
communication and coordination between people
while reducing the scope and risk of change.
Microservices

31. Evolution to a Microservices Architecture
Platform-enabled Microservices
Services
Tier
Cloud
Service
Cloud
Service
Cloud
Services
Edge Proxy
Application selection Version & Instance selection Admission Control
Service
Discovery
Active
Deploy
Build
Service
Repository
Container Service
Micro
Service
Micro
Service
Micro
Service
Micro
Service
Micro
Service
Micro
Service
Micro
Service
Micro
Service
Micro
Service
Micro
Service
Service Proxy
Version & Instance selection
Admission Control
Auto
Scaler

33. Compose and Orchestrate your Polyglot
Microservices with Amalgam8

34. Platform & Runtime Independent
Multi-Tenancy Supported
Shortens Development Cycles
• Simplified Service Discovery & Load Balancing
• Red/Black Deployment & Canary Testing

36. Visit amalgam8.io or
github.com/amalgam8

37. ©2015 IBM Corporation
37IBM
Design Thinking
Containers
Extreme
Agile
MobileIoT
APIs
MicroservicesCognitive
Build
something
cool!
Watson
IBM
Containers
ElasticSearch
by Compose
Twilio
Slack
IBM 37
©2015 IBM Corporation
Build Something Cool!
bluemix.net

38. Thank you!
Jason McGee
@jrmcgee
jrmcgee@us.ibm.com
Chris Rosen
@ChrisRosen188
crosen@us.ibm.com