Stability and more functionalities Alternative solutions? • Why not use DPDK? • DPDK performs busy polling even when network is idle. • Why not use a pure eBPF service? • Not mature enough eBPF brief kernel • Attach to network tc hooks • Triggered by ingress/egress packets IPVS bypass conntrack • Why IPVS depends on conntrack? • Iptables/conntrack SNAT • How IPVS bypasses conntrack? • Ingress • Pre-route IPVS entry BPF SNAT IPVS mode data path IPVS-eBPF mode data path How eBPF does SNAT • Why does SNAT with eBPF • eBPF program is easy to deploy • How to do SNAT in eBPF • Do SNAT in TC egress

Kubernetes社区Member� ➔ OpenSDS社区Memeber� ➔ OpenStack社区数据保护项⽬目联合发起⼈人� Outline� ➔ 边缘计算 & 应⽤用场景 & ⾯面临的挑战� ➔ Why KubeEdge & 基础架构 & 设备管理理 & 实战� ➔ 后续规划 & 社区贡献 & 技术交流� 边缘计算� 云计算是集中化的，离终端设备（如摄像头、传感器器等）和⽤用户较远，对于实 ⽹网络：云和边缘之间的⽹网络可靠性和带宽限制。� ➔ 管理理：边缘节点的资源管理理与边缘应⽤用⽣生命周期管理理。� ➔ 扩展：⾼高度分布和⼤大规模的可扩展性。� ➔ 异构：边缘侧异构AI硬件接⼊入。� Why KubeEdge� KubeEdge通过更更优的架构和技术实现，完美应对边缘计算遇到的挑战：� ➔ 通过将AI能⼒力力、⼤大数据能⼒力力等延伸到边缘，解决与云上服务的数据协同、任务协同、管理理协同、安全协同诉求。� 开源的云、边协同边缘计算框架 Why KubeEdge——CNCF & Kubernetes & KubeEdge� Central Cloud� Edge 1� Edge n� Edge 2� Cloud� Edge� Kubernetes Cluster� CNCF社区⾸首个基于Kubernetes的边缘计算平台KubeEdge Why KubeEdge——华为公有云智能边缘平台IEF

to-2500-nodes/ Agenda • What is the typical ML workflow and some of their shortcomings • Why DevOps? • Why Containers, Kubernetes, and Helm? • Intro to Kubeflow, Helm, Argo • Demos • Image classification for App Dev. Now time for AI/ML • But, must ensure data scientist are not hindered by structure Why Containers, Kubernetes & Helm? • Container • Contains everything needed to run your application

most popular open source projects in this world • Written by, and heavily depends on Golang Again: Why Go? • All about community • A sad story: • https://github.com/google/lmctfy • Now think about current := getCurrentState() makeChanges(desired, current) } • Write your own controller! Why DIY? Container Pod Deployment I need co-scheduling I have many Pod replicas Service I want to Programming Patterns in Kubernetes 1.this is the main difference of Kubernetes with others 2.think about why everyone loves Borg Come and Join, Gophers! ⼴广告时间 END Harry Zhang @resouer

Container and VM Ecosystem Kubernetes Docker Swarm Marathon Nomad Container OpenStack Others Why We Run VM on Kubernetes? • Traditional Applications • No linux based Applications • Functions provided implements a substantial portion of the Linux system surface https://github.com/google/gvisor Why does gVisor exist? ü a single, shared kernel also mean that container escape is possible ü gVisor

UX Designer, Google Spencer Sugarman UX Researcher, Google Talk Goals 1. What Dashboard is and why you should be using it 2. Research findings and the future of Dashboard 3. Where to learn more General Motors Sebastian Florek (co-lead), Loodse Marcin Maciaszczyk, Loodse Peng Xiao, Alauda Why a UI? 60% of survey takers use a UI to monitor or manage their resources in Kubernetes https://unsplash

Out-of-tree vSphere Cloud Provider 8 Moving out of tree: the Kubernetes vSphere Cloud Provider Why it exists Handles identification of nodes Labels nodes with zone information (optional) Used to couple of releases. Status within the Kubernetes project 9 Moving out of tree: the CSI Provider Why it exists Handles C/R/U/D of storage volumes Coordinate storage with availability zones Controls

scheduling platform development l Gaps for Spark • Agenda l Why Spark on Kubernetes l Volcano solution for Spark l Future works Why Spark on Kubernetes Kubernetes extends beyond container orchestration

variety are available, in validating and mutating classes Elements that influence pod placements 10 Why use Zones? Kubernetes will automatically spread the pods in replication controllers or services across themselves within vSphere failure domains. 11 What is NUMA? Non Uniform Memory Architecture 12 Why should you care about NUMA? Memory intensive workloads Nearly all database servers (e.g. Oracle, MongoDB)

variety are available, in validating and mutating classes Elements that influence pod placements 10 Why use Zones? Kubernetes will automatically spread the pods in replication controllers or services across themselves within vSphere failure domains. 11 What is NUMA? Non Uniform Memory Architecture 12 Why should you care about NUMA? Memory intensive workloads Nearly all database servers (e.g. Oracle, MongoDB)