A karshen watan Mayu sun gudanar da taron kan layi kan batun . Mun yi magana game da kwantena, Kubernetes da ƙungiyar makaɗa bisa manufa, ma'auni don zabar ababen more rayuwa da ƙari mai yawa. Mahalarta sun raba maganganu daga aikin nasu.
Mahalarta taron:
- Evgeniy Potapov, Shugaba na ITSumma. Fiye da rabin abokan cinikin sa ko dai sun riga sun motsa ko suna son canzawa zuwa Kubernetes.
- Dmitry Stolyarov, CTO "Flant". Yana da ƙwarewar shekaru 10+ yana aiki tare da tsarin kwantena.
- Denis Remchukov (aka Eric Oldmann), COO argotech.io, tsohon RAO UES. Ya yi alkawarin yin magana game da lokuta a cikin kasuwancin "jini".
- Andrey Fedorovsky, CTO "Labarai360.com"Bayan siyan kamfanin ta wani ɗan wasa, yana da alhakin yawan ayyukan ML da AI da abubuwan more rayuwa.
- Ivan Kruglov, injiniyan tsarin, tsohon Booking.com.Mutumin da ya yi yawa tare da Kubernetes da hannunsa.
Jigogi:
- Fahimtar mahalarta game da kwantena da ƙungiyar makaɗa (Docker, Kubernetes, da sauransu); abin da aka gwada a aikace ko nazari.
- Harka: Kamfanin yana gina tsarin ci gaban ababen more rayuwa na shekaru. Ta yaya aka yanke shawarar ko gina (ko ƙaura na yanzu) ababen more rayuwa zuwa kwantena da Kuber ko a'a?
- Matsaloli a cikin girgije-halayen duniya, abin da ya ɓace, bari mu yi tunanin abin da zai faru gobe.
Tattaunawa mai ban sha'awa ta gudana, ra'ayoyin mahalarta sun bambanta kuma sun haifar da maganganu masu yawa wanda nake so in raba su tare da ku. Ku ci , kuma a ƙasa akwai taƙaitaccen tattaunawar.
Shin Kubernetes ya riga ya zama ma'auni ko babban tallace-tallace?
"Mun zo wurinta (Kubernetes. - Ed.) Lokacin da babu wanda ya san game da shi tukuna. Mun zo masa ko da ba ya nan. Mun so shi kafin" - Dmitry Stolyarov
Hoto daga Reddit.com
Shekaru 5-10 da suka wuce akwai adadi mai yawa na kayan aiki, kuma babu wani ma'auni ɗaya. Kowane wata shida sabon samfur ya bayyana, ko ma fiye da ɗaya. Farko Vagrant, sannan Gishiri, Chef, Puppet,... “kuma kuna sake gina kayan aikin ku kowane wata shida. Kuna da masu gudanarwa guda biyar waɗanda koyaushe suna shagaltuwa da sake rubutawa,” in ji Andrey Fedorovsky. Ya yi imanin cewa Docker da Kubernetes "sun cika" sauran. Docker ya zama ma'auni a cikin shekaru biyar da suka gabata, Kubernetes a cikin shekaru biyu da suka gabata. Kuma yana da kyau ga masana'antu.
Dmitry Stolyarov da tawagar son Kuber. Suna son irin wannan kayan aiki kafin ya bayyana, kuma sun zo wurinsa lokacin da babu wanda ya san shi. A halin yanzu, saboda dalilai masu dacewa, ba sa ɗaukar abokin ciniki idan sun fahimci cewa ba za su aiwatar da Kubernetes tare da shi ba. A lokaci guda, a cewar Dmitry, kamfanin yana da "labarun nasara masu yawa masu yawa game da sake yin mummunan gado."
Kubernetes ba kawai ƙungiyar makaɗar kwantena ba ce, tsarin sarrafa sanyi ne tare da haɓaka API, ɓangaren sadarwar, daidaitawar L3 da masu kula da Ingress, wanda ya sa ya zama mai sauƙin sarrafa albarkatu, sikelin da ƙima daga ƙananan yadudduka na kayan aikin.
Abin takaici, a rayuwarmu dole ne mu biya komai. Kuma wannan haraji yana da girma, musamman ma idan muka yi magana game da sauyawa zuwa Kubernetes na kamfani tare da ci gaba da kayan aiki, kamar yadda Ivan Kruglov ya yi imani. Zai iya yin aiki da yardar kaina a cikin kamfani tare da kayan aikin gargajiya da kuma tare da Kuber. Babban abu shine fahimtar halayen kamfani da kasuwa. Amma, alal misali, ga Evgeny Potapov, wanda zai ba da damar Kubernetes ga kowane kayan aikin kwantena, irin wannan tambaya ba ta taso ba.
Evgeniy ya zana kwatanci tare da halin da ake ciki a cikin 1990s, lokacin da shirye-shiryen da suka dace da abu ya bayyana a matsayin hanyar shirya hadaddun aikace-aikace. A lokacin, an ci gaba da muhawara kuma sababbin kayan aiki sun bayyana don tallafawa OOP. Sa'an nan microservices sun fito a matsayin hanya don kawar da ra'ayi na monolithic. Wannan kuma ya haifar da bullar kwantena da kayan aikin sarrafa kwantena. "Ina tsammanin cewa nan ba da jimawa ba za mu zo lokacin da ba za a yi tambaya ba game da ko yana da daraja rubuta ƙaramin aikace-aikacen microservice, za a rubuta shi azaman microservice ta tsohuwa," in ji shi. Hakanan, Docker da Kubernetes a ƙarshe za su zama daidaitaccen bayani ba tare da buƙatar zaɓi ba.
Matsalar rumbun adana bayanai a cikin marasa jiha
Hotuna ta
A zamanin yau, akwai girke-girke da yawa don gudanar da bayanan bayanai a Kubernetes. Ko da yadda za a raba ɓangaren da ke aiki tare da faifan I/O daga, a sharadi, ɓangaren aikace-aikacen bayanan. Shin zai yiwu nan gaba rumbun adana bayanai su canza ta yadda za a kai su a cikin akwati, inda za a tsara wani bangare ta hanyar Docker da Kubernetes, a wani bangaren kuma, ta hanyar manhajoji daban-daban, za a samar da bangaren ajiya. ? Shin tushe zai canza a matsayin samfur?
Wannan bayanin yayi kama da gudanar da jerin gwano, amma buƙatun aminci da aiki tare da bayanai a cikin bayanan gargajiya sun fi girma, Andrey ya yi imani. Matsakaicin bugun cache a cikin bayanan al'ada ya kasance a 99%. Idan ma'aikaci ya sauka, an ƙaddamar da wani sabon abu, kuma cache "yana dumi" daga karce. Har sai cache ya dumama, ma'aikaci yana aiki a hankali, wanda ke nufin ba za a iya loda shi da nauyin mai amfani ba. Duk da yake babu nauyin mai amfani, cache ɗin baya dumama. Muguwar da'ira ce.
Dmitry ya ƙi yarda da gaske - quorums da sharding warware matsalar. Amma Andrey ya nace cewa maganin bai dace da kowa ba. A wasu yanayi, ƙididdiga ya dace, amma yana ƙara ƙarin nauyi akan hanyar sadarwa. Bayanan NoSQL bai dace ba a kowane yanayi.
An raba mahalarta taron zuwa sansani biyu.
Denis da Andrey suna jayayya cewa duk abin da aka rubuta zuwa faifai - bayanan bayanai da sauransu - ba shi yiwuwa a yi a cikin yanayin yanayin Kuber na yanzu. Ba shi yiwuwa a kula da mutunci da daidaito na bayanan samarwa a cikin Kubernetes. Wannan siffa ce ta asali. Magani: kayan aikin matasan.
Hatta ma'ajin bayanai na zamani na girgije kamar MongoDB da Cassandra, ko layin saƙo kamar Kafka ko RabbitMQ, suna buƙatar ci gaba da adana bayanai a wajen Kubernetes.
Evgeniy abubuwa: "Tsarin da ke Kubera na kusa-Rasha ne, ko kuma na kusa-da-kasuwa rauni, wanda ke da alaƙa da gaskiyar cewa babu Cloud Adoption a Rasha." Ƙananan kamfanoni ko matsakaitan kamfanoni a Yamma sune Cloud. Rukunin bayanan RDS na Amazon sun fi sauƙin amfani fiye da yin tinkering tare da Kubernetes da kanku. A Rasha suna amfani da Kuber "a kan-gida" da kuma canja wurin tushe zuwa gare shi lokacin da suke ƙoƙarin kawar da gidan zoo.
Dmitry kuma ya ƙi yarda da bayanin cewa ba za a iya ajiye bayanan bayanai a Kubernetes ba: “Tsarin ya bambanta da tushe. Kuma idan kun tura giant database database, to a karkashin wani hali. Idan kun tura wani abu ƙarami da ɗan ƙasa na girgije, wanda aka shirya a hankali don rayuwar ɗan ƙaramin lokaci, komai zai yi kyau. ” Dmitry ya kuma ambata cewa kayan aikin sarrafa bayanai ba su shirya don Docker ko Kuber ba, don haka manyan matsaloli sun taso.
Ivan, bi da bi, yana da tabbacin cewa ko da mun ƙirƙira daga ra'ayoyi na jihar da rashin ƙasa, yanayin yanayin hanyoyin samar da kasuwanci a Kubernetes bai riga ya shirya ba. Tare da Kuber, yana da wahala a kiyaye ƙa'idodin doka da ka'idoji. Misali, ba zai yuwu a samar da hanyar samar da ainihi ba inda ake buƙatar tabbataccen tabbacin uwar garken, har zuwa kayan aikin da aka saka a cikin sabar. Wannan yanki yana tasowa, amma har yanzu babu mafita.
Mahalarta taron sun kasa yarda, don haka ba za a yanke shawara a wannan bangare ba. Bari mu ba da misalai biyu masu amfani.
Case 1. Tsaron Intanet na "mega-regulator" tare da sansanonin a wajen Kubera
Dangane da tsarin tsaro na yanar gizo da aka haɓaka, amfani da kwantena da makaɗa yana ba da damar yaƙar hare-hare da kutse. Misali, a cikin mega-regulator daya, Denis da tawagarsa sun aiwatar da haɗin gwiwar mawaƙa tare da sabis na SIEM mai horarwa wanda ke nazarin rajistan ayyukan a ainihin lokacin kuma yana ƙayyade tsarin harin, hacking ko gazawa. A yayin da aka kai hari, yunƙurin sanya wani abu, ko kuma a yayin da kwayar cutar ta ransomware ta mamaye, ta, ta hanyar ƙungiyar makaɗa, tana ɗaukar kwantena tare da aikace-aikacen da sauri fiye da kamuwa da cuta, ko sauri fiye da maharin ya kai musu hari.
Case 2. Ƙaurawar ɓangarori na ɗakunan bayanai na Booking.com zuwa Kubernetes
A cikin Booking.com, babban ma'aunin bayanai shine MySQL tare da kwafi asynchronous - akwai maigidan da kuma gabaɗayan tsarin bayi. A lokacin da Ivan ya bar kamfanin, an kaddamar da wani aikin don canja wurin bayin da za a iya "harbe" tare da wasu lalacewa.
Baya ga babban tushe, akwai shigarwa na Cassandra tare da kaɗe-kaɗe na rubuta kansa, wanda aka rubuta tun kafin Kuber ya shiga cikin al'ada. Babu matsaloli a wannan batun, amma yana dagewa akan SSDs na gida. Ma'ajiyar nisa, ko da a cikin cibiyar bayanai guda ɗaya, ba a amfani da ita saboda matsalar rashin jinkiri.
Ajin na uku na bayanan bayanai shine sabis na bincike na Booking.com, inda kowane kullin sabis ɗin bayanai ne. Ƙoƙarin canja wurin sabis ɗin bincike zuwa Kuber ya kasa, saboda kowane kumburi shine 60-80 GB na ajiyar gida, wanda yake da wuya a "ɗaga" da "dumi".
A sakamakon haka, ba a canja wurin injin binciken zuwa Kubernetes ba, kuma Ivan ba ya tunanin cewa za a yi sabon ƙoƙari a nan gaba. An canja wurin bayanai na MySQL a cikin rabi: kawai Bayi, waɗanda ba sa tsoron zama "harbi". Cassandra ya zauna daidai.
Zaɓin kayan aikin a matsayin ɗawainiya ba tare da cikakken bayani ba
Hotuna ta
A ce muna da sabon kamfani, ko kamfani inda aka gina wani ɓangare na abubuwan more rayuwa ta tsohuwar hanya. Yana haifar da shirin bunkasa ababen more rayuwa na shekaru. Ta yaya aka yanke shawarar ko gina ababen more rayuwa a kan kwantena da Kuber ko a'a?
Kamfanonin da ke yaki don nanoseconds an cire su daga tattaunawar. Amintaccen ra'ayin mazan jiya yana biyan kuɗi dangane da dogaro, amma har yanzu akwai kamfanoni waɗanda yakamata suyi la'akari da sabbin hanyoyin.
Ivan: "Tabbas zan fara kamfani akan gajimare yanzu, kawai saboda yana da sauri," kodayake ba lallai ba ne mai rahusa. Tare da ci gaban jari-hujja, masu farawa ba su da manyan matsaloli tare da kudi, kuma babban aikin shine cin nasara a kasuwa.
Ivan yana da ra'ayin cewa ci gaban abubuwan more rayuwa na yanzu shine ma'aunin zaɓi. Idan akwai wani babban jari a baya, kuma yana aiki, to babu wani amfani a sake yin shi. Idan ba a ci gaba da samar da ababen more rayuwa ba, kuma akwai matsaloli tare da kayan aiki, tsaro da saka idanu, to yana da ma'ana don kallon kayan aikin da aka rarraba.
Za a biya haraji a kowane hali, kuma Ivan zai biya wanda ya ba shi damar biya ƙasa a nan gaba. "Domin kawai saboda gaskiyar cewa ina kan jirgin da wasu ke motsawa, zan yi tafiya da yawa fiye da idan na zauna a wani jirgin, wanda zan sa mai da kaina."In ji Ivan. Lokacin da kamfani ya kasance sababbi, kuma buƙatun latency ɗin su ne dubun millise seconds, to Ivan zai duba zuwa ga “masu aiki” waɗanda ke “nannade” bayanan gargajiya a yau. Suna ɗaga sarkar maimaitawa, wanda ke juyawa kanta idan ta gaza, da sauransu ...
Ga ƙaramin kamfani mai sabobin biyu, Kubera ba shi da ma'ana, "in ji Andrey. Amma idan yana shirin girma zuwa ɗaruruwan sabar ko fiye, to yana buƙatar sarrafa kansa da tsarin sarrafa albarkatun. 90% na shari'o'in sun cancanci farashi. Bugu da ƙari, ba tare da la'akari da matakin kaya da albarkatun ba. Yana da ma'ana ga kowa da kowa, tun daga masu farawa zuwa manyan kamfanoni masu sauraron miliyoyin, a hankali a hankali su kalli samfuran kade-kade. "Eh, wannan shine ainihin gaba," Andrey ya tabbata.
Denis ya zayyana manyan sharudda guda biyu: scalability da kwanciyar hankali na aiki. Zai zaɓi kayan aikin da suka fi dacewa da aikin. "Zai iya zama sunan da aka taru akan gwiwowinku, kuma yana da Nutanix Community Edition akan sa. Wannan na iya zama layi na biyu a cikin nau'i na aikace-aikace akan Kuber tare da bayanan bayanai akan bangon baya, wanda aka maimaita kuma ya ƙayyade sigogin RTO da RPO" (manufofin lokacin dawowa/manufa - kusan).
Evgeniy ya gano matsala mai yiwuwa tare da ma'aikata. A halin yanzu, babu ƙwararrun ƙwararrun ƙwararrun ƙwararrun ƙwararrun a kasuwa waɗanda suka fahimci “guts”. Hakika, idan fasahar da aka zaɓa ta tsufa, to yana da wuya a yi hayar wani banda masu matsakaicin shekaru waɗanda suka gaji da gajiya da rayuwa. Ko da yake sauran mahalarta sun yi imanin cewa wannan lamari ne na horar da ma'aikata.
Idan muka sanya tambayar zabi: don ƙaddamar da ƙaramin kamfani a cikin Jama'a Cloud tare da bayanan bayanai a cikin Amazon RDS ko "a kan gaba" tare da bayanan bayanai a Kubernetes, to, duk da wasu gazawa, Amazon RDS ya zama zaɓi na mahalarta.
Tun da yawancin masu sauraron saduwa ba su daga kasuwancin "jini", to mafita da aka rarraba sune abin da ya kamata mu yi ƙoƙari. Dole ne a rarraba tsarin ma'ajiyar bayanai, abin dogaro, kuma ƙirƙirar latency auna a cikin raka'a na millise seconds, goma a mafi yawan", Andrey ya taƙaita.
Ƙimar Amfani da Kubernetes
Mai sauraro Anton Zhbankov ya yi tambayan tarko ga masu neman afuwar Kubernetes: ta yaya kuka zaba da gudanar da binciken yiwuwar? Me yasa Kubernetes, me yasa ba injina ba, misali?
Hotuna ta
Dmitry da Ivan sun amsa. A cikin lokuta biyu, ta hanyar gwaji da kuskure, an yanke shawarar yanke shawara, sakamakon abin da mahalarta biyu suka isa Kubernetes. Yanzu kasuwancin sun fara haɓaka software da kansu waɗanda ke da ma'ana don canja wurin zuwa Kuber. Ba muna magana ne game da tsarin tsarin ɓangare na uku ba, kamar 1C. Kubernetes yana taimakawa lokacin da masu haɓakawa ke buƙatar yin saki da sauri, tare da Ci gaba da Ci gaba ba da tsayawa ba.
Ƙungiyar Andrey ta yi ƙoƙarin ƙirƙirar gungu mai daidaitawa bisa injunan kama-da-wane. Nodes sun faɗi kamar dominoes, wanda wani lokaci ya kai ga rushewar tarin. "A zahiri, zaku iya gama shi kuma ku goyi bayansa da hannayenku, amma yana da ban sha'awa. Kuma idan akwai mafita a kasuwa wanda zai ba ku damar yin aiki daga cikin akwatin, to muna farin cikin zuwa gare ta. Kuma mun canza sakamakon haka, ”in ji Andrey.
Akwai ma'auni don irin wannan bincike da lissafi, amma ba wanda zai iya faɗi daidai yadda suke a kan kayan aiki na ainihi a cikin aiki. Don ƙididdiga, yana da mahimmanci don fahimtar kowane kayan aiki da yanayin muhalli, amma wannan ba zai yiwu ba.
Me ke jiran mu
Hotuna ta
Yayin da fasaha ke tasowa, ƙananan sassa daban-daban suna bayyana, sa'an nan kuma canjin lokaci ya faru, mai sayarwa ya bayyana wanda ya kashe isasshen kullu don duk abin da ya taru a cikin kayan aiki guda ɗaya.
Kuna tsammanin lokaci zai zo da za a sami kayan aiki kamar Ubuntu don duniyar Linux? Wataƙila kwantena guda ɗaya da kayan aikin ƙungiyar za su haɗa da Kuber. Zai sauƙaƙa gina gizagizai da ke kan gaba.
Ivan ya ba da amsar: "Yanzu Google yana gina Anthos - wannan ita ce tayin da suka tattara wanda ke tura gajimare kuma ya haɗa da Kuber, Sabis na Sabis, sa ido - duk kayan aikin da ake buƙata don microservices na kan layi." Muna kusa nan gaba."
Denis ya kuma ambaci Nutanix da VMWare tare da samfurin vRealize Suite, wanda zai iya jurewa irin wannan aiki ba tare da kwantena ba.
Dmitry ya raba ra'ayinsa cewa rage "zafi" da kuma rage haraji shine yankuna biyu da za mu iya tsammanin ingantawa.
Don taƙaita tattaunawar, muna haskaka waɗannan matsalolin abubuwan more rayuwa na zamani:
- Mahalarta uku nan da nan sun gano matsala tare da jahilai.
- Abubuwan tallafi daban-daban na tsaro, gami da yuwuwar Docker zai ƙare da nau'ikan Python da yawa, sabar aikace-aikacen, da abubuwan haɗin gwiwa.
Ƙarfafawa, wanda ya fi dacewa a tattauna a wani taro daban.
Kalubalen koyo a matsayin ƙungiyar makaɗa shine hadadden yanayin muhalli.
Matsalar gama gari a cikin masana'antar shine rashin amfani da kayan aiki.Sauran yanke shawara ya rage naku. Har yanzu akwai jin cewa ba shi da sauƙi ga haɗin Docker + Kubernetes ya zama ɓangaren "tsakiya" na tsarin. Misali, ana shigar da tsarin aiki a kan kayan aiki da farko, waɗanda ba za a iya faɗi game da kwantena da ƙungiyar makaɗa ba. Wataƙila a nan gaba, tsarin aiki da kwantena za su haɗu tare da software na sarrafa girgije.
Hotuna taIna so inyi amfani da wannan damar in gaishe da mahaifiyata tare da tunatar da ku cewa muna da group na Facebook , channel tare da wallafe-wallafe masu ban sha'awa daga shafukan fasaha daban-daban. Kuma channel dina , Inda na yi magana game da sarrafa ci gaba a cikin kamfanonin samfur.
source: www.habr.com