-
Notifications
You must be signed in to change notification settings - Fork 12
/
Copy pathtraefik-Online-Meetup.html
366 lines (245 loc) · 12 KB
/
traefik-Online-Meetup.html
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
<?xml version="1.0" encoding="ISO-8859-1" ?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta charset="utf-8"/>
<title>træfik Online Meetup</title>
<link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/reveal.js@4.1.1/dist/reveal.css"/>
<link rel="stylesheet" href="themes/theme2021.css" id="theme"/>
<link rel="stylesheet" href="themes/common.css" id="theme"/>
<link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/highlight.js@10.7.2/styles/rainbow.css"/>
<link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/@fortawesome/fontawesome-free@5.15.3/css/all.min.css"/>
</head>
<body>
<div class="reveal">
<div class="slides">
<section data-markdown="" data-separator="^---$" data-separator-vertical="^--$"><textarea data-template="">
<!-- .slide: data-background="images/Haufe Group Campus Building 11.jpeg" style="padding: 0.5em 1em 1em 1em; color: white; background: rgba(0, 0, 0, 0.5); width: 70%; margin: auto; position: absolute; top: 45%; bottom: 5%; left: 5%; right: 25%;" -->
# Using Kubernetes, træfik and <br/>Monitoring-as-a-Service
Nicholas Dille, Haufe Group
<i class="fab fa-docker" style="width: 1.5em; text-align: center;"></i> Docker Captain <i class="fab fa-windows" style="width: 1.5em; text-align: center;"></i> Microsoft MVP
</textarea></section>
<section data-markdown="000_introduction/02_bio.md" data-separator="^---$" data-separator-vertical="^--$"></section>
<section data-markdown="" data-separator="^---$" data-separator-vertical="^--$"><textarea data-template="">
## Agenda
What is Haufe Group?
Architecture built on træfik
- High availability
- Certificates
- Automation
Monitoring-as-a-Service
</textarea></section>
<section data-markdown="" data-separator="^---$" data-separator-vertical="^--$"><textarea data-template="">
## Haufe Group
Family-owned enterprise founded in 1951
Leading software and media company
19 locations in Europe with HQ in Freiburg, Germany
~2.200 employees
Dozens of autonomous development teams
</textarea></section>
<section data-markdown="" data-separator="^---$" data-separator-vertical="^--$"><textarea data-template="">
## Haufe Group
Digital media: knowledge base for lawyers, accounts, HR
Software: tax, accounting, human resources, talent management, ERP, real estate
Training: seminars, brokering
### Numbers
€393M renevue FY19/20
All DAX 30 companies, 1M customers in SMB market
360.000 seminars per year
</textarea></section>
<section data-markdown="" data-separator="^---$" data-separator-vertical="^--$"><textarea data-template="">
## Development Infrastructure
Team of 8 engineers
Running Jira, GitLab, Artifactory/Xray, Team Foundation Server, <br/>GoCD, build agents, SonarQube, Monitoring-as-a-Service
### Challenges
Manage service lifecycle
Enable development teams
Balance work and family
</textarea></section>
<section data-markdown="" data-separator="^---$" data-separator-vertical="^--$"><textarea data-template="">
## Development Infrastructure
Artifactory holds **1.4M artifacts** using **16TB storage**
GitLab provides **4.000 repositories** to **1.100 active users**
Build agents execute **2.500 Linux build jobs per day**
**100 Windows VMs** build and test desktop products
Monitoring-as-a-Service runs in **15 instances**
træfik serves **60-100 connections/second**
</textarea></section>
<section data-markdown="" data-separator="^---$" data-separator-vertical="^--$"><textarea data-template="">
## træfik for access
 <!-- .element: style="float: left; width: 50%; padding: 1em 1em 2em 0;" -->
Self-hosted clusters
Only very few services are exposed to the internet
270 ingress rules with 200 middlewares
Assigned by label selector
No performant hairpin mode
</textarea></section>
<section data-markdown="" data-separator="^---$" data-separator-vertical="^--$"><textarea data-template="">
## High availability for and with træfik
 <!-- .element: style="float: left; width: 40%; padding: 1em 1em 2em 0;" -->
`CNAME` to træfik's `A` record
Failover across DMZ hosts
Failover across all workers
`A` records are updated after failover
Small TTL for short outage
Avoid DNS servers overriding the TTL
Mind TTL for negative caching
</textarea></section>
<section data-markdown="" data-separator="^---$" data-separator-vertical="^--$"><textarea data-template="">
## Demo environment
 <!-- .element: style="float: left; width: 40%; padding: 1em 1em 2em 0;" -->
Kubernetes-in-Docker (KinD)
First worker serves external requests
Host ports 80/443 are forwarded
Other workers are only accessible from the inside
Internal access using Squid proxy
</textarea></section>
<section data-markdown="" data-separator="^---$" data-separator-vertical="^--$"><textarea data-template="">
## Demo environment
 <!-- .element: style="float: left; width: 40%; padding: 1em 1em 2em 0;" -->
kind network represents LAN/WAN
First worker represents DMZ hosts
Other workers represent internal hosts
</textarea></section>
<section data-markdown="" data-separator="^---$" data-separator-vertical="^--$"><textarea data-template="">
## Certificates
No træfik+acme due to multiple instances
`cert-manager` per cluster
Certificates stored in dedicated secret
More than 130 certificates
Available to all instances of træfik
</textarea></section>
<section data-markdown="" data-separator="^---$" data-separator-vertical="^--$"><textarea data-template="">
## Automation
### Cluster deployment
Currently based on [`kubespray`](https://github.com/kubernetes-sigs/kubespray)
### Declarative infrastructure
Ingresses (træfik `IngressRoute` CRD)
Certificates (`cert-manager`)
DNS (`external-dns`)
</textarea></section>
<section data-markdown="" data-separator="^---$" data-separator-vertical="^--$"><textarea data-template="">
## Automation
### Cluster migration
Semi-automated
Based on DNS
Exports certificates before cleanup in old cluster
### Monitoring
Per cluster Prometheus
Dashboards against centralized Premetheus
</textarea></section>
<section data-markdown="" data-separator="^---$" data-separator-vertical="^--$"><textarea data-template="">
## Links
traefik: [external](https://traefik-external.demo-dillen.dille.io) | [internal](https://traefik-internal.demo-dillen.dille.io) | [qa](https://traefik-qa.demo-dillen.dille.io)
Cluster monitoring: [Prometheus](https://prometheus.demo-dillen.dille.io)
</textarea></section>
<section data-markdown="" data-separator="^---$" data-separator-vertical="^--$"><textarea data-template="">
## Monitoring-as-a-Service
Service born from our own needs
We maintain the monitoring stack
### Components
Grafana
InfluxDB with telegraf and chronograf
Prometheus with push gateway
Loki with promtail
</textarea></section>
<section data-markdown="" data-separator="^---$" data-separator-vertical="^--$"><textarea data-template="">
## Links
traefik: [external](https://traefik-external.demo-dillen.dille.io) | [internal](https://traefik-internal.demo-dillen.dille.io) | [qa](https://traefik-qa.demo-dillen.dille.io)
Cluster monitoring: [Prometheus](https://prometheus.demo-dillen.dille.io)
MaaS: [Grafana](https://test-dillen.maas.dille.io) | [Prometheus](https://prometheus.test-dillen.maas.dille.io)
</textarea></section>
<section data-markdown="" data-separator="^---$" data-separator-vertical="^--$"><textarea data-template="">
## Haufe Group
 <!-- .element: style="float: right; width: 15%;" -->
Family-owned software and media company
Service offerings to support dozens of teams
træfik drives the architecture
Declarative infrastructure to simplify automation
Monitoring-as-a-Service is a success
### Slides will be made available [<i class="fab fa-github" style="width: 1.5em; text-align: center;"></i>](https://github.com/nicholasdille/container-slides/releases/tag/20210721)
</textarea></section>
</div>
</div>
<script src="https://cdn.jsdelivr.net/npm/reveal.js@4.1.1/dist/reveal.js" type="application/javascript"></script>
<script src="https://cdn.jsdelivr.net/npm/reveal.js@4.1.1/plugin/markdown/markdown.js" type="application/javascript"></script>
<script src="https://cdn.jsdelivr.net/npm/reveal.js@4.1.1/plugin/highlight/highlight.js" type="application/javascript"></script>
<script src="https://cdn.jsdelivr.net/npm/reveal.js@4.1.1/plugin/search/search.js" type="application/javascript"></script>
<script src="https://cdn.jsdelivr.net/npm/reveal.js@4.1.1/plugin/zoom/zoom.js" type="application/javascript"></script>
<script src="https://cdn.jsdelivr.net/npm/reveal.js@4.1.1/plugin/notes/notes.js" type="application/javascript"></script>
<script>
Reveal.initialize({
width: 1920,
height: 1080,
minScale: 1,
maxScale: 1,
controls: true,
controlsTutorial: false,
controlsLayout: 'bottom-right',
progress: true,
slideNumber: false,
hash: true,
history: true,
keyboard: true,
disableLayout: true,
overview: true,
center: false,
touch: true,
loop: false,
rtl: false,
navigationMode: 'default',
shuffle: false,
fragments: true,
fragmentInURL: true,
embedded: false,
help: true,
pause: true,
showNotes: false,
autoPlayMedia: null,
preloadIframes: null,
autoAnimate: true,
autoSlide: 0,
mouseWheel: false,
previewLinks: false,
postMessage: true,
transition: 'convex',
transitionSpeed: 'default',
backgroundTransition: 'fade',
viewDistance: 3,
mobileViewDistance: 2,
display: 'block',
hideInactiveCursor: true,
hideCursorTime: 3000,
parallaxBackgroundImage: '',
parallaxBackgroundSize: '',
totalTime: 50 * 60,
allottedTime: 50 * 60 * 1000,
barColor: 'rgb(200, 0, 0)',
pausedBarColor: 'rgba(200, 0, 0, .6)',
markdown: {
smartypants: true
},
keyboard: {
// pause/resume time when Enter is pressed
13: () => {
ElapsedTimeBar.isPaused ? ElapsedTimeBar.resume() : ElapsedTimeBar.pause();
},
// reset timer when 'r' is pressed
82: () => {
ElapsedTimeBar.reset();
}
},
dependencies: [
{ src: 'plugins/elapsed-time-bar-2699fc8/elapsed-time-bar.js' }
],
plugins: [
RevealMarkdown,
RevealHighlight,
RevealSearch,
RevealZoom,
RevealNotes
]
});
</script>
</body>
</html>