Pakupera kwaMay vakaita musangano wepamhepo pamusoro pemusoro wenyaya . Takataura nezve midziyo, Kubernetes uye orchestration musimboti, maitiro ekusarudza zvivakwa uye zvimwe zvakawanda. Vatori vechikamu vakagovana nyaya kubva mukuita kwavo.
Vatori vechikamu:
- Evgeniy Potapov, CEO weITSumma. Vanopfuura hafu yevatengi vayo vangave vatofamba kana kuda kushandura kuKubernetes.
- Dmitry Stolyarov, CTO "Flant". Ane 10+ makore echiitiko achishanda nemacontainer system.
- Denis Remchukov (aka Eric Oldmann), COO argotech.io, ex-RAO UES. Akavimbisa kutaura nezvenyaya mu "ropa" bhizinesi.
- Andrey Fedorovsky, CTO "News360.com"Mushure mekutenga kambani nemumwe mutambi, ane mutoro wehuwandu hweML uye AI mapurojekiti uye zvivakwa.
- Ivan Kruglov, masisitimu mainjiniya, ex-Booking.com.Munhu mumwe chete akaita zvakawanda naKubernetes nemaoko ake.
Themes:
- Maonero evatori vechikamu nezvemidziyo uye orchestration (Docker, Kubernetes, nezvimwewo); izvo zvakaedzwa mukuita kana kuongororwa.
- Nyaya: Kambani iri kuvaka chirongwa chekuvandudza zvivakwa kwemakore. Sarudzo inoitwa sei yekuvaka (kana kufambisa yazvino) zvivakwa kune midziyo uye Kuber kana kwete?
- Matambudziko munyika yegore-yekuzvarwa, chii chisipo, ngatifungei zvichaitika mangwana.
Nhaurirano inofadza yakatevera, pfungwa dzevatori vechikamu dzakanga dzakasiyana uye dzakakonzera mhinduro dzakawanda zvokuti ndinoda kugoverana newe. Eat , uye pasi apa pane pfupiso yehurukuro.
Kubernetes atove mwero kana kushambadzira kukuru?
"Takasvika pairi (Kubernetes. - Mupepeti.) apo hapana aiziva nezvazvo. Takauya kwaari kunyangwe iye asipo. Taida kare "- Dmitry Stolyarov
Mufananidzo kubva kuReddit.com
5-10 makore apfuura kwaive nenhamba huru yezvishandiso, uye pakanga pasina mwero mumwe chete. Mwedzi mitanhatu yega yega chigadzirwa chitsva chakaonekwa, kana kupfuura chimwe. Kutanga Vagrant, kozoti Munyu, Mubiki, Chipopi,... βuye unovakazve zvivakwa zvako mwedzi mitanhatu yega yega. Une vatariri vashanu vanogara vakabatikana kunyorazve configs,β anoyeuka kudaro Andrey Fedorovsky. Anotenda kuti Docker naKubernetes "vakazarisa" vamwe vese. Docker yave chiyero mumakore mashanu apfuura, Kubernetes mumakore maviri apfuura. Uye izvo zvakanaka kune indasitiri..
Dmitry Stolyarov nechikwata chake vanoda Kuber. Vaida chombo chakadaro chisati chaoneka, uye vakauya pachiri pasina aiziva nezvazvo. Parizvino, nekuda kwezvikonzero zviri nyore, havatore mutengi kana vakanzwisisa kuti havazoite Kubernetes naye. Panguva imwecheteyo, maererano naDmitry, kambani ine "nyaya dzakawanda dzakakura dzebudiriro pamusoro pekugadzirisazve nhaka yakaipa."
Kubernetes haingori dhizaini orchestration, igadziriso manejimendi system ine yakagadziridzwa API, networking chikamu, L3 kuenzanisa uye Ingress controllers, izvo zvinoita kuti zvive nyore kubata zviwanikwa, chiyero uye abstract kubva kune yakaderera maseru ezvivakwa.
Nehurombo, muhupenyu hwedu tinofanira kubhadhara kune zvese. Uye mutero uyu wakakura, kunyanya kana tichitaura nezvekuchinja kuKubernetes yekambani ine zvivako zvakagadziridzwa, sezvinotenda Ivan Kruglov. Aigona kushanda zvakasununguka zvese mukambani ine zvechinyakare zvivakwa uye naKuber. Chinhu chikuru ndechokunzwisisa maitiro ekambani uye musika. Asi, semuenzaniso, kuna Evgeny Potapov, uyo aizogadzira Kubernetes kune chero mudziyo wekuridza midziyo, mubvunzo wakadaro haumuke.
Evgeniy akadhirowa fananidzo nemamiriro ezvinhu muma1990, apo hurongwa hwakanangana nechinhu hwakaonekwa senzira yekuronga zvikumbiro zvakaoma. Panguva iyoyo, gakava rakaenderera uye zvishandiso zvitsva zvakaonekwa kutsigira OOP. Ipapo mamicroservices akabuda senzira yekuenda kure neiyo monolithic pfungwa. Izvi, zvakare, zvakakonzera kubuda kwemidziyo uye maturusi ekugadzirisa midziyo. "Ini ndinofunga kuti tichakurumidza kusvika panguva apo pachange pasina mubvunzo wekuti zvakakodzera kunyora diki microservice application, ichanyorwa se microservice nekusarudzika," anotenda. Saizvozvo, Docker naKubernetes vanozopedzisira vave mhinduro yakajairwa pasina kudiwa kwesarudzo.
Dambudziko re database mune stateless
Mufananidzo ne
Mazuva ano, kune akawanda mabikirwo ekushandisa dhatabhesi muKubernetes. Kunyangwe nzira yekuparadzanisa chikamu chinoshanda neI / O disk kubva, zvine mamiriro, chikamu chekushandisa chedhatabhesi. Zvinogoneka here kuti mune ramangwana dhatabhesi ichachinja zvakanyanya zvekuti ichaunzwa mubhokisi, apo chimwe chikamu chicharongedzerwa kuburikidza neDocker neKubernetes, uye mune chimwe chikamu chezvivakwa, kuburikidza nesoftware yakaparadzana, chikamu chekuchengetedza chichapihwa. ? Ko mabhesi achachinja sechigadzirwa here?
Tsananguro iyi yakafanana nekutonga kwemitsara, asi izvo zvinodiwa zvekuvimbika uye kuwiriranisa ruzivo mune zvechinyakare dhatabhesi zvakakwirira zvakanyanya, Andrey anotenda. Cache hit ratio mune zvakajairika dhatabhesi inoramba iri pa99%. Kana mushandi akaburuka, imwe itsva inotangwa, uye cache "inodziya" kubva pakutanga. Kusvikira cache ichidziya, mushandi anoshanda zvishoma nezvishoma, izvo zvinoreva kuti haigone kutakurwa nemutoro wemushandisi. Nepo pasina mushandisi mutoro, iyo cache haidziye. Idenderedzwa rakashata.
Dmitry haabvumirani zvachose - quorums uye sharding zvinogadzirisa dambudziko. Asi Andrey anosimbirira kuti mhinduro haina kukodzera munhu wese. Mune mamwe mamiriro ezvinhu, quorum yakakodzera, asi inoisa imwe mutoro pane network. Dhatabhesi yeNoSQL haina kukodzera mune zvese zviitiko.
Vatori vechikamu mumusangano vakakamurwa kuita misasa miviri.
Denis naAndrey vanopikisa kuti zvese zvakanyorwa kune diski - dhatabhesi uye zvichingodaro - hazvigoneke kuita mune yazvino Kuber ecosystem. Izvo hazvigoneke kuchengetedza kutendeseka uye kuenderana kwekugadzira data muKubernetes. Ichi chinhu chakakosha. Mhinduro: hybrid infrastructure.
Kunyangwe yemazuva ano dhatabhesi ekuzvarwa seMongoDB neCassandra, kana mitsetse yemameseji seKafka kana RabbitMQ, inoda kuramba ichichengeterwa data kunze kweKubernetes.
Evgeniy anopokana: "Nheyo dzeKubera kukuvara kwepedyo-yeRussia, kana pedyo-bhizinesi, izvo zvine chekuita nenyaya yekuti hakuna Cloud Adoption muRussia." Makambani madiki kana epakati nepakati kuMadokero iCloud. Amazon RDS dhatabhesi iri nyore kushandisa pane kubhuroka neKubernetes iwe pachako. MuRussia vanoshandisa Kuber "pa-premise" uye vanoendesa mabhesi kwairi pavanenge vachiedza kubvisa zoo.
Dmitry haanawo kubvumirana nechirevo chekuti hapana dhatabhesi rinogona kuchengetwa muKubernetes: "Base rakasiyana nebase. Uye kana iwe ukasundira hofori yehukama dhatabhesi, saka pasina mamiriro. Kana ukasundidzira chimwe chinhu chidiki uye chegore, icho chakagadzirirwa hupenyu hwehafu-ephemeral, zvese zvichanaka. " Dmitry akataurawo kuti maturusi ekuchengetedza dhatabhesi haana kugadzirira chero Docker kana Kuber, saka matambudziko makuru anomuka.
Ivan, zvakare, ane chokwadi chekuti kunyangwe tikabvisa kubva kune pfungwa dzehurumende uye dzisina nyika, ecosystem yebhizinesi mhinduro muKubernetes haisati yagadzirira. NaKuber, zvakaoma kuchengetedza zvinodiwa nemutemo uye zvekutonga. Semuyenzaniso, hazvigoneke kugadzira chitupa chekupa mhinduro uko kwakasimba sevha yekuzivikanwa vimbiso inodiwa, kusvika pasi kune Hardware inoiswa mumaseva. Iyi nzvimbo iri kusimukira, asi hapana mhinduro parizvino.
Vatori vechikamu havana kukwanisa kubvumirana, saka hapana mhedziso ichaitwa muchikamu chino. Ngatipei mienzaniso miviri inoshanda.
Nyaya 1. Cybersecurity ye "mega-regulator" ine mabhesi kunze kweKubera
Panyaya yeyakagadziridzwa cybersecurity system, kushandiswa kwemidziyo uye orchestration kunoita kuti zvikwanise kurwisa kurwiswa uye kupindira. Semuenzaniso, mune imwe mega-regulator, Denis nechikwata chake vakaita musanganiswa we orchestrator ine yakadzidziswa SIEM sevhisi inoongorora matanda munguva chaiyo uye kuona maitiro ekurwisa, kubira kana kutadza. Muchiitiko chekurwiswa, kuedza kuisa chimwe chinhu, kana pakaitika hutachiona hweransomware, iyo, kuburikidza ne orchestrator, inotora midziyo ine zvikumbiro nekukurumidza kupfuura yavanotapukirwa, kana nekukurumidza kupfuura kurwisa kwavanorwisa.
Nyaya yechipiri. Kutama kusingaverengeki kweBooking.com dhatabhesi kuenda Kubernetes
MuBooking.com, iyo huru dhatabhesi ndeyeMySQL ine asynchronous replication - kune tenzi uye nehumambo hwevaranda. Panguva iyo Ivan akasiya kambani, chirongwa chakatangwa kuendesa nhapwa dzaigona "kupfurwa" nekumwe kukuvara.
Pamusoro peiyo nheyo huru, kune yekumisikidzwa kweCassandra ine yekuzvinyora-yakanyorwa orchestration, iyo yakanyorwa kunyangwe Kuber asati apinda mune mainstream. Iko hakuna matambudziko mune izvi, asi inoramba ichienderera kune emunharaunda SSDs. Kuchengetedza kure, kunyange mukati meiyo data data data, haishandiswe nekuda kwedambudziko repamusoro latency.
Yechitatu kirasi yedatabase ndiyo Booking.com yekutsvaga sevhisi, uko yega yega sevhisi node idatabase. Kuedza kuendesa sevhisi yekutsvaga kuKuber kwakakundikana, nekuti imwe neimwe node ndeye 60-80 GB yenzvimbo yekuchengetedza, izvo zvakaoma "kusimudza" uye "kudziya".
Somugumisiro, injini yekutsvaga haina kuendeswa kuKubernetes, uye Ivan haafungi kuti pachava nekuedza kutsva munguva yemberi iri pedyo. Dhatabhesi reMySQL rakatamiswa nepakati: Varanda chete, vasingatyi "kupfurwa". Cassandra agara zvakanaka.
Kusarudzwa kwezvivakwa sebasa pasina mhinduro yakajairika
Mufananidzo ne
Ngatiti isu tine kambani nyowani, kana kambani iyo chikamu chezvivakwa chakavakwa nenzira yekare. Inovaka chirongwa chekuvandudza zvivakwa kwemakore. Sarudzo inoitwa sei yekuvaka zvivakwa pamidziyo uye Kuber kana kwete?
Makambani anorwira nanoseconds haana kubatanidzwa muhurukuro. Hutano conservatism inobhadhara maererano nekuvimbika, asi kuchine makambani anofanirwa kufunga maitiro matsva.
Ivan: "Chokwadi ndaizotanga kambani pamakore izvozvi, nekuda kwekuti inokurumidza," kunyangwe zvisingaite zvakachipa. Nekuvandudzwa kwe venture capitalism, kutanga hakuna matambudziko makuru nemari, uye basa guru nderekukunda musika.
Ivan ane maonero akadaro kuvandudzwa kwezvivakwa zvemazuva ano isarudzo yekusarudza. Kana pakanga paine mari yakakomba munguva yakapfuura, uye inoshanda, saka hapana chikonzero chekuita zvakare. Kana zvivakwa zvisina kugadzirwa, uye kune matambudziko nemidziyo, chengetedzo uye yekutarisa, saka zvine musoro kutarisa kune yakagoverwa hupfumi.
Mutero uchafanirwa kubhadharwa mune chero mamiriro ezvinhu, uye Ivan aizobhadhara iyo yaimubvumira kubhadhara zvishoma mune ramangwana. "Nokuti nemhaka yokuti ndiri kukwira chitima chiri kufamba nevamwe, ndichafamba kure zvikuru kupfuura kana ndikagara pane chimwe chitima, chandinofanira kuzviisira mafuta."anodaro Ivan. Kana iyo kambani iri nyowani, uye iyo latency zvinodiwa makumi makumi emamilliseconds, ipapo Ivan aizotarisa kune "vashandisi" umo classical database "yakaputirwa" nhasi. Ivo vanosimudza ketani yekudzokorora, iyo inozvishandura pachayo kana ikatadza, nezvimwe ...
Kukambani diki ine maseva akati wandei, Kubera haina musoro, "anodaro Andrey. Asi kana ikaronga kukura kusvika kumazana emaseva kana anopfuura, saka inoda otomatiki uye sisitimu manejimendi system. 90% yemakesi akakodzera mutengo. Uyezve, zvisinei nehuwandu hwemutoro uye zviwanikwa. Zvine musoro kune wese munhu, kubva kune ekutanga kusvika kumakambani makuru ane vateereri vemamirioni, kuti zvishoma nezvishoma vatarise kune zvigadzirwa zvemidziyo orchestration. "Hongu, iri ndiro remangwana chairo," Andrey ane chokwadi.
Denis akatsanangura maitiro maviri makuru - scalability uye kugadzikana kwekushanda. Achasarudza maturusi anonyatsokodzera basa racho. "Rinogona kunge riri zita rakaunganidzwa pamabvi ako, uye ine Nutanix Community Edition pairi. Iyi inogona kunge iri mutsara wechipiri muchimiro chekunyorera paKuber ine dhatabhesi iri kumashure, iyo inodzokororwa uye yakatsanangudza RTO neRPO paramita" (yekudzoreredza nguva / poindi zvinangwa - approx.).
Evgeniy akaona dambudziko rinogona kuitika nevashandi. Parizvino, hapana nyanzvi dzakawanda dzakanyatsokwanisa pamusika dzinonzwisisa "guts." Zvechokwadi, kana teknolojia yakasarudzwa yakwegura, saka zvakaoma kuhaya chero ani zvake kunze kwevanhu vepakati-kati vaneta uye vaneta nehupenyu. Kunyangwe vamwe vatori vechikamu vanotenda kuti iyi inyaya yekudzidziswa kwevashandi.
Kana tikaisa mubvunzo wesarudzo: kutanga kambani diki muPublic Cloud ine dhatabhesi muAmazon RDS kana "panzvimbo" ine dhatabhesi muKubernetes, saka kunyangwe paine zvikanganiso, sarudzo yevatori vechikamu yaive Amazon RDS.
Sezvo ruzhinji rwevateereri vemusangano vasiri ve "ropa" bhizinesi, saka mhinduro dzakagoverwa ndidzo dzatinofanira kuvavarira. Masisitimu ekuchengetera data anofanirwa kugoverwa, akavimbika, uye kugadzira latency yakayerwa mumayuniti emamilliseconds, makumi zvakanyanya.", Andrey akadaro.
Kuongorora Kubernetes Kushandiswa
Mutereri Anton Zhbankov akabvunza mubvunzo wemusungo kuvanyori veKubernetes: wakasarudza sei uye wakaitisa chidzidzo chekugonesa? Sei Kubernetes, sei asiri chaiwo machina, semuenzaniso?
Mufananidzo ne
Dmitry naIvan vakaipindura. Muzviitiko zviviri izvi, kuburikidza nekuedza uye kukanganisa, kutevedzana kwezvisarudzo kwakaitwa, semugumisiro wekuti vatori vechikamu vose vakasvika kuKubernetes. Iye zvino mabhizinesi ari kutanga kuzvimiririra kugadzira software ine musoro kuendesa kuKuber. Hatisi kutaura nezveyechitatu-bato masisitimu, akadai se1C. Kubernetes inobatsira kana vagadziri vachida kukurumidza kugadzira kuburitswa, nekusamira Kuenderera mberi Kuvandudza.
Chikwata chaAndrey chakaedza kugadzira sumbu rinotyisa rakavakirwa pamashini chaiwo. Node dzakadonha semadominoes, izvo dzimwe nguva zvakakonzera kuputsika kwesumbu. βSezvineiwo, unogona kuzvipedza wotsigira nemaoko ako, asi zvinonetesa. Uye kana pane mhinduro pamusika inokubvumira kuti ushande kunze kwebhokisi, saka isu tinofara kuenda kune iyo. Uye isu takachinja semhedzisiro, "anodaro Andrey.
Kune zviyero zvekuongorora kwakadaro uye kuverenga, asi hapana anogona kutaura kuti yakarurama sei pane hardware chaiyo iri kushanda. Pakuverenga, zvakakoshawo kuti unzwisise chishandiso chimwe nechimwe uye ecosystem, asi izvi hazvigoneke.
Chii chakamirira isu
Mufananidzo ne
Sezvo tekinoroji ichishanduka, zvidimbu zvinowedzera zvakasiyana zvinoonekwa, uyezve shanduko yechikamu inoitika, mutengesi anooneka auraya mukanyiwa wakakwana kuti zvese zviungane mumudziyo mumwe chete.
Iwe unofunga kuti ichasvika nguva apo pachange paine chishandiso chakaita seUbuntu chenyika yeLinux? Zvichida mudziyo mumwe chete wekushongedza uye orchestration chishandiso chinosanganisa Kuber. Ichaita kuti zvive nyore kuvaka pa-premise makore.
Mhinduro yakapihwa naIvan: "Google yave kuvaka Anthos - ichi ndicho chipo chavo chakaiswa gore uye chinosanganisira Kuber, Service Mesh, yekutarisa - ese mahardware anodiwa kune-panzvimbo mamicroservices." Tatove pedyo."
Denis akataura zvakare Nutanix uye VMWare neiyo vRealize Suite chigadzirwa, icho chinogona kubata nebasa rakafanana pasina mudziyo.
Dmitry akagovera maonero ake kuti kuderedza "marwadzo" uye kuderedza mitero inzvimbo mbiri dzatinogona kutarisira kuvandudzwa.
Kupfupisa nhaurirano, tinosimbisa anotevera matambudziko ezvivakwa zvemazuva ano:
- Vatori vechikamu vatatu vakabva vangoona dambudziko nestateful.
- Nyaya dzakasiyana-siyana dzekutsigira kuchengetedza, kusanganisira mukana wekuti Docker anozopedzisira aine akawanda mavhezheni ePython, maseva ekushandisa, uye zvikamu.
Overspending, izvo zviri nani kukurukurwa mumusangano wakasiyana.
Dambudziko rekudzidza se orchestration yakaoma ecosystem.
Dambudziko rinowanzoitika muindastiri kushandiswa zvisina kunaka kwemidziyo.Mamwe mamhedziso ari kwauri. Pachine manzwiro ekuti hazvisi nyore kuti Docker + Kubernetes musanganiswa ive "yepakati" chikamu chehurongwa. Semuenzaniso, masisitimu anoshanda akaiswa pane Hardware kutanga, izvo zvisingagoni kutaurwa nezvemidziyo uye orchestration. Zvichida mune ramangwana, masisitimu anoshanda uye midziyo ichabatana neyegore manejimendi software.
Mufananidzo neNdoda kutora mukana uno kukwazisa amai vangu nekukuyeuchidzai kuti tine Facebook group , channel nezvinyorwa zvinonakidza kubva kune akasiyana tech blogs. Uye chiteshi changu , kwandinotaura pamusoro pekugadzirisa kubudirira mumakambani echigadzirwa.
Source: www.habr.com