Downloaded 166 times
Uploaded byAdrian Cockcroft
Dockercon 2015 - Faster Cheaper Safer
The document discusses the benefits of using Docker for secure microservice architectures aimed at improving speed, cost-efficiency, and safety in software development. It emphasizes the need for developers to adopt DevOps practices, continuous delivery, and infrastructure management to build resilient applications while minimizing risks from both internal and external threats. Additionally, it highlights best practices such as immutable deployments and automated testing to enhance security in production environments.
More Related Content
Similar to Dockercon 2015 - Faster Cheaper Safer
![[muCon2017]DevSecOps: How to Continuously Integrate Security into DevOps](https://cdn.slidesharecdn.com/ss_thumbnails/mucon2017devsecopshowtocontinuouslyintegratesecurityintodevops-171106193735-thumbnail.jpg?width=640&height=640&fit=bounds)
![Devfest Harare 2025 Slides [GDG Harare] - Combined Slide Deck](https://cdn.slidesharecdn.com/ss_thumbnails/ilovepdfmerged12-251029161756-3b829161-thumbnail.jpg?width=640&height=640&fit=bounds)
Dockercon 2015 - Faster Cheaper Safer
- 1. Faster, Cheaper, Safer SecureMicroservice Architectures using Docker Adrian Cockcroft @adrianco Technology Fellow - Battery Ventures June 2015
- 2. Key Goals ofthe CIO? Align IT with the business Develop products faster Try not to get breached
- 3. Security Blanket Failure Insecureapplications hidden behind firewalls make you feel safe until the breach happens… http://peanuts.wikia.com/wiki/Linus'_security_blanket
- 4.
- 5.
- 6.
- 7. “You build it,you run it.” Werner Vogels 2006
- 8. DevOps Continuous Delivery No meetings,no tickets Self service tools and APIs
- 9. Developer Developer Run WhatYou Wrote Developer Developer
- 10. Developer Developer Run WhatYou Wrote Micro service Micro service Micro service Micro service Micro service Micro service Micro service Developer Developer
- 11. Developer Developer Run WhatYou Wrote Micro service Micro service Micro service Micro service Micro service Micro service Micro service Developer Developer Monitoring Tools
- 12. DeveloperDeveloper Developer Run WhatYou Wrote Micro service Micro service Micro service Micro service Micro service Micro service Micro service Developer Developer Monitoring Tools
- 13. DeveloperDeveloper Developer Run WhatYou Wrote Micro service Micro service Micro service Micro service Micro service Micro service Micro service Developer Developer Site Reliability Monitoring Tools Availability Metrics 99.95% customer success rate
- 14. DeveloperDeveloper Developer Run WhatYou Wrote Micro service Micro service Micro service Micro service Micro service Micro service Micro service Developer Developer Manager Manager Site Reliability Monitoring Tools Availability Metrics 99.95% customer success rate
- 15. DeveloperDeveloper Developer Run WhatYou Wrote Micro service Micro service Micro service Micro service Micro service Micro service Micro service Developer Developer Manager Manager VP Engineering Site Reliability Monitoring Tools Availability Metrics 99.95% customer success rate
- 16.
- 17. Observe Orient Decide Act Land grab opportunity Competitive Move CustomerPain Point Measure Customers Continuous Delivery
- 18. Observe Orient Decide Act Land grab opportunity Competitive Move CustomerPain Point INNOVATION Measure Customers Continuous Delivery
- 19. Observe Orient Decide Act Land grab opportunity Competitive Move CustomerPain Point Analysis Model Hypotheses INNOVATION Measure Customers Continuous Delivery
- 20. Observe Orient Decide Act Land grab opportunity Competitive Move CustomerPain Point Analysis Model Hypotheses BIG DATA INNOVATION Measure Customers Continuous Delivery
- 21. Observe Orient Decide Act Land grab opportunity Competitive Move CustomerPain Point Analysis JFDI Plan Response Share Plans Model Hypotheses BIG DATA INNOVATION Measure Customers Continuous Delivery
- 22. Observe Orient Decide Act Land grab opportunity Competitive Move CustomerPain Point Analysis JFDI Plan Response Share Plans Model Hypotheses BIG DATA INNOVATION CULTURE Measure Customers Continuous Delivery
- 23. Observe Orient Decide Act Land grab opportunity Competitive Move CustomerPain Point Analysis JFDI Plan Response Share Plans Incremental Features Automatic Deploy Launch AB Test Model Hypotheses BIG DATA INNOVATION CULTURE Measure Customers Continuous Delivery
- 24. Observe Orient Decide Act Land grab opportunity Competitive Move CustomerPain Point Analysis JFDI Plan Response Share Plans Incremental Features Automatic Deploy Launch AB Test Model Hypotheses BIG DATA INNOVATION CULTURE CLOUD Measure Customers Continuous Delivery
- 25. Observe Orient Decide Act Land grab opportunity Competitive Move CustomerPain Point Analysis JFDI Plan Response Share Plans Incremental Features Automatic Deploy Launch AB Test Model Hypotheses BIG DATA INNOVATION CULTURE CLOUD Measure Customers Continuous Delivery
- 26. Low Cost ofChange Using Docker Developers • Compile/Build • Seconds Extend container • Package dependencies • Seconds PaaS deploy Container • Docker startup • Seconds
- 27. Low Cost ofChange Using Docker Fast tooling supports continuous delivery of many tiny changes Developers • Compile/Build • Seconds Extend container • Package dependencies • Seconds PaaS deploy Container • Docker startup • Seconds
- 28. Change One Thing ata Time!
- 29. What Happened? Rate ofchange increased Cost and size and risk of change reduced
- 30.
- 31.
- 32. Fail early andoften Instrument everything Hypothesis driven development Efficient and autoscaled
- 33. Efficiency Gains: Virtualization consolidatesCPUs Docker consolidates CPU and RAM
- 34. With Docker atest environment should only exist for the few seconds it takes to run a test
- 35. Autoscale production toconsume just the resources you need, by the second
- 36.
- 37.
- 38. What can developersdo about the threats?
- 39. External Threats Build usingpenetration test tools Manage image supply chain Hardened immutable services Service roles and security groups
- 40. Internal Threats Assume employeesare compromised User roles, minimum privilege Audit logs for everything Encrypt data at rest
- 41.
- 42.
- 43.
- 44.
- 45. Immutable deployments Automated penetrationtesting Role based identity and access Trusted container supply chain Continuous audit
- 46.
- 47. Need for Speed CPUand IO Intensive workloads Hadoop, streaming, datastores Bare metal for efficiency Well isolated for security
- 48. Cutting the Cost Manysimilar containers per VM Saving on RAM, oversubscribe CPU Deploy with Swarm, Mesos, ECS, GKE VM based single tenant security
- 49. Playing it Safe Onecritical container per VM Extra security for exposed services Deploy as immutable VM image Docker adds to VM security
- 50. Tooling for Docker andmany more….
- 51. Docker in Production 2014- DIY frameworks 2015 - Hardening and best practices 2016 - Mature production tooling
- 52. Thanks ! Continue thediscussion on Twitter @adrianco Adrian Cockcroft Technology Fellow - Battery Ventures June 2015 Disclosure: some of the companies mentioned may be Battery Ventures Portfolio Companies See www.battery.com for a list of portfolio investments