Containers and BPF: twagent story Andrey Ignatov, Facebook October 28, 2020 1 ● a daemon ● runs on every Facebook server ● manages all Facebook containers ● a part of the bigger TW system, see the Should affect only task state, not host ● Rules auto-cleanup on task stop is important ● Has to be integrated with service discovery, etc Solution: ● Use BPF_CGROUP_INET_{EGRESS,INGRESS} ● If use-case allows drop, log (via perf buffer) ● Filter by local/remote IP, IP prefix, port, protocol, TCP flags ● Integrated with service discovery: can filter by service name (dynamic set of IP:port endpoints) Container

A Multithreaded, Transaction-Based Locking Strategy for Containers Bob Steagall CppCon 2020 K E W B C O M P U T I N GCopyright © 2020 Bob Steagall K E W B C O M P U T I N G Overview • Sharing a container STO-based solution • Summary CppCon 2020 - A Multi-threaded, Transaction-Based Locking Strategy for Containers 2Copyright © 2020 Bob Steagall K E W B C O M P U T I N G Sharing a Container • Sometimes a container is easier (?) than ever CppCon 2020 - A Multi-threaded, Transaction-Based Locking Strategy for Containers 3Copyright © 2020 Bob Steagall K E W B C O M P U T I N G Sharing a Container – Avoiding Race Conditions

What is the VMware SIG Purpose, Projects managed, How to join The Roadmap Moving “Out of Tree” : vSphere cloud provider + storage (CSI) How to Get Information on an ongoing basis The VMware SIG How to related to new CRDs, plug-ins and KEPs that allow the vSphere platform to supplement and support Kubernetes How to Join 6 SIG Sponsored projects vSphere cloud provider (In-tree and Out-of-tree) • A cloud Kubernetes project of this dependency, the cloud-controller-manager was introduced. CSI provider for vSphere • Container Storage Interface (CSI) is a standard API allowing a storage provider to write just

VKE VIC Beta 5 ©2018 VMware, Inc. vSphere Integrated Containers (VIC) 6 ©2018 VMware, Inc. vSphere Integrated Containers – Enabling the Best of Both Worlds vSphere Integrated Containers Docker registry Familiarity of vSphere No new tooling or technologies Full enterprise-grade power of Software-Defined Data Center 7 ©2018 VMware, Inc. vSphere vSphere Integrated Containers Approach VM Linux Monitoring, Healing and Lifecycle Management Scheduling, Orchestration, Service Creation vSAN vSphere Physical Infrastructure vRealize Suite NSX-T BOSH (K8s LCM) BOSH (cluster LCM) Kubernetes

multi-cloud stacks, enterprises are creating new opportunities to unify their IT operations with containers and Kubernetes. The recent Forrester Wave report1 stated that these cloud native technologies organizations to build and modernize their applications and services at scale. The potential of containers and Kubernetes was evident when, in 2020, Gartner2 predicted that more than 75% of worldwide Tanzu product suite that differentiated itself by leveraging Project Pacific, a re-architecture of vSphere with Kubernetes as its control plane. While there are other smaller players in the market, the

applications. Customers who want to boost their productivity and reduce the time to value, can use containers with the departments that are focused on software development. Kubernetes orchestration provides Kubernetes cluster. The intended audience of this white paper must have a working knowledge of containers, Kubernetes, PowerFlex, and Data Protection. Table 1. Terminology Term Definition CA their exact requirements. PowerFlex rack PowerFlex rack is a fully engineered system, with integrated networking that enables the customers to simplify deployments and accelerate time to value.

Features 145 Resolved Issues 145 Server 145 Query Processing 146 Data Flow 147 Tanzu Greenplum on vSphere 147 Release 6.21.0 147 Features 147 Resolved Issues 149 Server 149 Query Processing 151 Cluster Statistics Collection 293 VMware Tanzu Greenplum on vSphere 295 Supported Platforms 295 Overview 296 Getting Started 297 VMware Tanzu Greenplum on vSphere Architecture 297 Layered Architecture 297 Provider Infrastructure Layer 297 Virtual Machine Cluster Layer 298 Greenplum Layer 298 Planning VMware vSphere with Greenplum 299 Calculating the Greenplum Database Size and ESXi Hosts 299 Determining the RAID

Extensions 168 Server 169 Query Processing 170 MADlib 170 Cluster Management 170 Greenplum on vSphere 170 Release 6.23.1 170 Resolved Issues 171 Server 171 Query Processing 172 Data Flow 172 Release Features 184 Resolved Issues 184 Server 184 Query Processing 185 Data Flow 186 VMware Greenplum on vSphere 186 Release 6.21.0 186 Features 186 Resolved Issues 188 Server 188 Query Processing 190 Cluster Requirements 293 VMware Greenplum on DCA Systems 293 Storage 293 Hadoop Distributions 294 VMware vSphere Requirements 294 Public Cloud Requirements 295 Operating System 295 Storage 295 Amazon Web Services

Extensions 136 Server 136 Query Processing 137 MADlib 138 Cluster Management 138 Greenplum on vSphere 138 Release 6.23.1 138 Resolved Issues 138 Server 138 Query Processing 140 Data Flow 140 VMware Processing 153 Data Flow 154 VMware Greenplum 6 Documentation VMware, Inc 4 Tanzu Greenplum on vSphere 154 Release 6.21.0 154 Features 154 Resolved Issues 156 Server 156 Query Processing 158 Cluster 248 Deprecated Features 250 Known Issues and Limitations 251 Platform Requirements 255 VMware vSphere Requirements 255 On-Premise Hardware Requirements 255 Operating Systems 255 Software Dependencies

Extensions 155 Server 155 Query Processing 156 MADlib 156 Cluster Management 157 Greenplum on vSphere 157 Release 6.23.1 157 Resolved Issues 157 Server 157 Query Processing 159 Data Flow 159 Release Features 171 Resolved Issues 171 Server 171 Query Processing 172 Data Flow 172 VMware Greenplum on vSphere 172 Release 6.21.0 173 Features 173 Resolved Issues 175 Server 175 Query Processing 176 Cluster 267 Deprecated Features 268 Known Issues and Limitations 270 Platform Requirements 273 VMware vSphere Requirements 273 On-Premise Hardware Requirements 273 Operating Systems 273 Software Dependencies