Unikernelize your Java Application
Download as PPTX, PDF0 likes558 views
The document discusses the concept of unikernels, which are specialized machine images built from app code and necessary operating system components for efficient cloud deployment. It highlights the advantages of unikernels, such as small footprint, fast boot times, and reduced attack surface, particularly for Java applications. The document also outlines the challenges of using unikernels and introduces tools like Capstan for building Java unikernel applications.
Unikernelize your Java Application
- 2. Agenda what are unikernels why should you care how does java fit in build java unikernel app
- 3. www.infobip.com Java, .NET, nodejs, reactjs microservices continuous delivery practitioners 100+ deploys daily / 6 datacenters 300M+ messages per day 200+ hypervisors up to 20 VMs per hypervisor
- 5. “specialized, single-address-space machine images constructed by using library operating systems.”
- 6. App code + OS parts actually needed = unikernel
- 8. Hardware Hypervisor OS + Kernel App code & config App runtime & libraries VM Typical cloud deployment
- 9. Hardware Hypervisor OS + Kernel App code & config App runtime & libraries VM Typical cloud deployment OS + Kernel App code & config App runtime & libraries VM
- 11. Hardware Hypervisor Kernel on host OS OS App code & config App runtime & libraries Container Containerized deployment
- 12. Hardware Hypervisor Kernel on host OS OS App code & config App runtime & libraries Container OS App code & config App runtime & libraries Container Containerized deployment
- 13. What if…
- 14. Hardware Hypervisor Unikernel Unikernel deployment App code & config App runtime & libs Specialized kernel
- 15. Hardware Hypervisor Unikernel Unikernel deployment App code & config App runtime & libs Specialized kernel Unikernel App code & config App runtime & libs Specialized kernel
- 16. immutable server
- 17. Hardware Hypervisor OS + Kernel App code & config App runtime & libraries VM Hardware Hypervisor Kernel on host OS OS App code & config App runtime & libraries Container Hardware Hypervisor Unikernel App code & config App runtime & libs Specialized kernel Isolation Resource sharing Specialization
- 18. "just enough" of the OS to run your code, nothing more.
- 19. Why should I use this?
- 20. Why should I use this? Small footprint
- 21. Why should I use this? Small footprint Fast boot
- 22. Why should I use this? Small footprint Fast boot Highly optimized
- 23. Why should I use this? Small footprint Fast boot Highly optimized Reduced attack surface
- 24. No, really… why should I use this?
- 25. same amount of work on less powerful VMs… …saves $$$
- 26. Cons ?
- 27. Cons ? no fork() or exec()
- 28. Cons ? no fork() or exec() hard to debug
- 29. Cons ? no fork() or exec() hard to debug “secure” is just a matter of time
- 30. Cons ? no fork() or exec() hard to debug “secure” is just a matter of time troubleshooting tools
- 31. What’s out there ?
- 33. How does java fit in ?
- 36. new OS designed for the cloud C++ native Linux apps, JVM single address space boots < 1 sec Lower administration & OS support costs
- 37. Hypervisor support KVM, XEN - fully VMW, VBox – exp
- 38. Cloud support EC2 - fully GCE – exp
- 39. a little “fatter” min image size ~20MB Java image ~120MB
- 41. Benchmarks redis 50% more TPS memcached 20% more req/sec TCP 20% better latency
- 42. How to build a java unikernel app?
- 43. Capstan build tool (feels dockerish)
- 44. Capstanfile
- 45. Capstanfile base: cloudius/osv-openjdk8 build: mvn package files: /app.jar: target/app.jar cmdline: /java.so -jar /app.jar
- 46. $ capstan build -p vbox
- 47. $ mvn package $ capstan run target/app.jar
- 60. So where is this all going ? few users hard to ship hard to build hard to run
- 61. Community
- 66. ”next big thing in the cloud”
- 67. Thank you!