1. The Path to Containerization Transforming workloads into containers
Microsoft 2016
9/12/2018 5:24 AM
BRK3319
The Path to Containerization Transforming workloads into containers
Patrick Lang
Sr. Program Manager
Taylor Brown
Principal Lead Program Manager
@taylorb_msft
Matt Roberts
Principal Software Engineer
Tyco Security Products
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

2. Why are we here today? Tooling to make you more efficient
Microsoft 2016
9/12/2018 5:24 AM
Containers are cool…
What, Why, How of Containers
Docker overview
Taking the first step on your path to containerization
Tooling to make you more efficient
Why are we here today?
BRK3189 (Fri 9AM)
This Session
BRK3147
BRK3146
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

3. The cloud has changed expectations

4. Expectations of Cloud Applications
Microsoft Build 2016
9/12/2018 5:24 AM
Expectations of Cloud Applications
Availability
Hyper-Scale
Agility
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

5. Introducing… Matt Roberts
Principal Software Engineer, Tyco Security Products

6. Microsoft 2016
9/12/2018 5:24 AM
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

7. Microsoft 2016
9/12/2018 5:24 AM
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

8. Card Readers & Door Controls
Application Server
Service
Card Readers & Door Controls
Cameras & Recorders
Windows Clients
Mobile Clients

9. Card Readers & Door Controls Cameras & Recorders Windows Clients
Microsoft 2016
9/12/2018 5:24 AM
Master Application Server
Service
Satellite Application Server 1
Satellite Application Server 2
Service
Service
Card Readers & Door Controls
Cameras & Recorders
Windows Clients
Mobile Clients
Card Readers & Door Controls
Cameras & Recorders
Windows Clients
Mobile Clients
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

10. Current Challenges Customer Pain Developer Pain Scalability (lack of)
Microsoft 2016
9/12/2018 5:24 AM
Current Challenges
Customer Pain
Scalability (lack of)
All or nothing updates
Downtime during updates
Complicated deployment
High 3rd party license costs
Developer Pain
Long build times
Locked into single technology stack
High team coordination/overhead
Easy to break the monolith
Long release cycles
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

11. Build 2015
9/12/2018 5:24 AM
© 2015 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

12. Card Readers & Door Controls Cameras & Recorders Windows Clients
Application Server
Micro Service A
Container
Micro Service B
Container
Micro Service C
Container
Card Readers & Door Controls
Cameras & Recorders
Windows Clients
Mobile Clients
Card Readers & Door Controls
Cameras & Recorders
Windows Clients
Mobile Clients

13. Moving to micro-services
Microsoft 2016
9/12/2018 5:24 AM
Moving to micro-services
Make it micro-service ready
Run it in the container
Centralize configuration
Centralize logging
Automate as much as possible
Break up the monolith
Identify seams
Create micro-service
Adopt micro-service
Remove old functionality from monolith
Rinse & Repeat
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

14. Benefits we hope to realize in the future
Customer Benefits
Better Availability/Disaster Recovery
Faster delivery of new features
Reduced downtime during upgrades
True elasticity
Reduced 3rd party license costs
Simplified & reliable deployment
Developer Benefits
Automated everything
Freedom to leverage any technology
Reduced coordination overhead
Shorter build times

15. Lessons learned Automation is needed out of the gate
Monoliths are big and sensitive
Find ways to leverage containers internally

16. How can you get started? Microsoft 2016 9/12/2018 5:24 AM
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

17. Container Overview Microsoft 2016 9/12/2018 5:24 AM
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

18. Windows Server Containers
Microsoft Build 2016
9/12/2018 5:24 AM
What is a container?
Windows Server Containers
Maximum speed and density
Containers = Operating system virtualization OS
CONTAINER
CONTAINER
CONTAINER
Kernel
CONTAINER
Applications
Kernel
Hardware
Hyper-V Containers
Isolation plus performance
Traditional virtual machines = hardware virtualization
Hyper-V
Kernel
CONTAINER
Application VM OS
Hardware
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

19. Container Image What is a container image? Image
Analogous to an Exported Virtual Machine’s VHD and Config files
Templates for containers
Can depend on other images
Created by running a container and capturing changes
Image
Metadata Name,
Creation Data,
Command To Execute,
Dependences
Contents
Files
Folders

20. Container Images My Website Application IIS Application Framework
Base Image (OS)

21. Container Images My Website Application IIS Application Framework
Microsoft 2016
9/12/2018 5:24 AM
Container Images
My Website
Application
IIS
Application Framework
Image Contents
Registry
Folders and Files
HKLM
HKCU
License.txt
PerfLogs
Program Files
Base Image (OS)
HKCR
HKU
Program Files (x86)
Users
Windows
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

22. Container Images Image Contents My Website Application IIS
Registry
Folders and Files
My Website
Application
inetpub
HKLM
mysite.html
SOFTWARE/ mykey
IIS
Application Framework
Image Contents
Registry
Folders and Files
HKLM
HKCU
License.txt
PerfLogs
Program Files
Base Image (OS)
HKCR
HKU
Program Files (x86)
Users
Windows

23. What’s in the Datacenter?
Microsoft 2016
9/12/2018 5:24 AM
What’s in the Datacenter?
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

24. What’s in the Datacenter?
Microsoft 2016
9/12/2018 5:24 AM
What’s in the Datacenter?
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

25. What’s in the Datacenter?
Microsoft 2016
9/12/2018 5:24 AM
What’s in the Datacenter?
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

26. Where you’re at today… Microsoft 2016 9/12/2018 5:24 AM
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

27. Where you want to be… Microsoft 2016 9/12/2018 5:24 AM
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

28. Where to Start Microsoft 2016 9/12/2018 5:24 AM
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

29. Stateless Applications
Microsoft 2016
9/12/2018 5:24 AM
Stateless Applications
Web sites & application workers
Batch processing
Continuous Integration workflows
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

30. Image2Docker https://github.com/docker/communitytools-image2docker-win
Convert WIM/VHD to Dockerfile
Written in PowerShell
Open Source
Discover
Find Installed Programs
Show Roles & Features
IIS Sites & Configurations
Common applications
SQL, Apache
Generate
Dockerfile

31. Taking it further Practice your skills, build out infrastructure
Microsoft 2016
9/12/2018 5:24 AM
Taking it further
Practice your skills, build out infrastructure
Deploy frequently
Automate everything
Plan to centralize configuration and logging
Scale it out
Deploy more containers to meet demand
Test and look for issues that would block scalability
Learn orchestration platforms & load balancing techniques
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

32. Breaking down the datacenter
Microsoft 2016
9/12/2018 5:24 AM
Breaking down the datacenter
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

33. Breaking down the datacenter
Microsoft 2016
9/12/2018 5:24 AM
Breaking down the datacenter
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

34. Stateful Applications
Microsoft 2016
9/12/2018 5:24 AM
Stateful Applications
Persistent Data
Move files out of the container
Store on host folder or named volume
Runtime State
Move out of process
Distributed caches
Key/value storage
Message queues
SQL
Host Filesystem
MDB …
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

35. Stateful Applications
Microsoft 2016
9/12/2018 5:24 AM
Stateful Applications
Benefits
Deploy all applications tiers anywhere
Build as many test deployments as you need
Continuous integration & unit tests
Match customer environment
Move your container across hypervisors, datacenters, cloud
Challenges
Doesn’t imply scalability
Scale up vs Scale Out
Scale out requires coordination & synchronization
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

36. Deploying IIS & SQL with Docker-Compose
version: '2'
services:
musicstore_test:
build:
context: .
dockerfile: Dockerfile.iis
ports:
- "80:80"
sql:
image: microsoft/mssql-server-2014-express-windows
SQL Server

37. Networking & Service Discovery
Microsoft 2016
9/12/2018 5:24 AM
Networking & Service Discovery
NAT
External: Host IP
TCP:80
TCP:80
Internal: /12
DNS:
SQL Server
musicstore_test
sql
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

38. Web & SQL with Compose Patrick Lang Microsoft 2016 9/12/2018 5:24 AM
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

39. Active Directory Identity for Containers
Ready for Enterprise Applications
No infrastructure changes to Active Directory required
Leverages Group Managed Service Accounts
Enables containerized applications to authenticate with SQL Server, file shares, and more
Simple and Secure
Identity specified at container start time
Credentials are not stored within the container image
No changes required to move across environments i.e. dev, test, prod, cloud

40. Securing App to Database with Active Directory
Patrick Lang

41. DefaultAccount: Domain\MyWebApp1
Microsoft Build 2016
9/12/2018 5:24 AM
Default Account
1) Use default accounts for services & tasks (LocalSystem, Network Service)
Image
IIS & ASP.Net
Running Container
Service: IIS
User:
LocalSystem
SQL Server
Domain\MyWebApp1
Credential Spec
DefaultAccount: Domain\MyWebApp1
3) Container connects using service account
2) Provide default service account to use when starting container
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

42. Breaking down the datacenter
Microsoft 2016
9/12/2018 5:24 AM
Breaking down the datacenter
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

43. Breaking down larger applications
Microsoft 2016
9/12/2018 5:24 AM
Breaking down larger applications
Identify seams
Prioritize
Decompose
Iterate
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

44. Breaking down larger applications
Microsoft 2016
9/12/2018 5:24 AM
Breaking down larger applications
Development
Makes development teams faster
Decoupled development, less coordination
Freedom to use the best tools for the job
Shorter builds & faster deployment
Operations
Deploy faster with automation
Reliable and deterministic
Clear list of running containers
Less risk, less downtime
Containers deliver consistency through dev, test, and production
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

45. Our Journey To Nano Server – Docker CI
Microsoft 2016
9/12/2018 5:24 AM
Our Journey To Nano Server – Docker CI
What is it?
Part of the Docker Project
For Every Code Submission
Compiles the change for both Linux and Windows
Uses Jenkins to execute tests against Linux and Windows hosts
Windows Server Core Image
Azure D3 VM (4 cores, 14GB RAM, 200GB SSD)
Takes ~31 min and 21 sec to run
Nano Image
Early prototype (not checked in yet)
Azure D2 VM (2 cores, 7GB, 100GB SSD)
Takes ~21min and 39 sec to run
Benefit of Nano
30% Reduction in Execution Time!
50% Reduction in Cost
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

46. Breaking down the datacenter
Microsoft 2016
9/12/2018 5:24 AM
Breaking down the datacenter
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

47. Great for VMs… Hosting low level network & identity services
DHCP, Domain controllers
Leveraging hardware or driver access
Print, GPU
Depending on Active Directory for configuration
No object in AD
Group Policy
Running desktop applications
Remote Desktop & VDI

48. What’s Next? Microsoft 2016 9/12/2018 5:24 AM
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

49. Quick start guide at http://aka.ms/containers
Microsoft 2016
9/12/2018 5:24 AM
Let’s Get Moving
Start your journey
Learn by doing
Many apps require few to no changes
Take advantage of opportunities
Start breaking larger applications down into microservices
Achieve the benefits DevOps delivers
Have Fun!
Quick start guide at
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

50. Free IT Pro resources To advance your career in cloud technology
Microsoft Ignite 2016
9/12/2018 5:24 AM
Free IT Pro resources To advance your career in cloud technology
Plan your career path
Microsoft IT Pro Career Center
Cloud role mapping
Expert advice on skills needed
Self-paced curriculum by cloud role
$300 Azure credits and extended trials
Pluralsight 3 month subscription (10 courses)
Phone support incident
Weekly short videos and insights from Microsoft’s leaders and engineers
Connect with community of peers and Microsoft experts
Get started with Azure
Microsoft IT Pro Cloud Essentials
Demos and how-to videos
Microsoft Mechanics
Connect with peers and experts
Microsoft Tech Community
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

51. Please evaluate this session
9/12/2018 5:24 AM
Please evaluate this session
Your feedback is important to us!
From your PC or Tablet visit MyIgnite at
From your phone download and use the Ignite Mobile App by scanning the QR code above or visiting
© 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

52. 9/12/2018 5:24 AM
© 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.