Cloud Native Computing Foundation KubeCon + CloudNativeCon China 2019 (Shanghai), 5 Jul 2019

Previous Meeting Next Meeting

⏯

youtube image

►

From YouTube: Multi-tenancy & Blockchain: Deploying Hyperledger Fabric on Kubernetes - Tong Li, IBM

Description

Join us for Kubernetes Forums Seoul, Sydney, Bengaluru and Delhi - learn more at kubecon.io

Don't miss KubeCon + CloudNativeCon 2020 events in Amsterdam March 30 - April 2, Shanghai July 28-30 and Boston November 17-20! Learn more at kubecon.io. The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects

Multi-tenancy & Blockchain: Deploying Hyperledger Fabric on Kubernetes - Tong Li, IBM

Hyperledger Fabric is an open-source enterprise-grade Distributed Ledger Technology (DLT) platform designed primarily for permissioned blockchains. It provides developers a framework for building blockchain applications. Deploying a multi-component system like Hyperledger Fabric to production is challenging. Kubernetes, on the other hand, is a portable, extensible open-source platform for automating deployment, scaling, and management of containerized applications. It supports multi tenancy, which makes it possible for developers to develop and test blockchain applications efficiently. Attendees will learn all about Hyperledger Fabric and Kubernetes and how when used collectively, Hyperledger and Kubernetes offer a powerful, secure platform for processing blockchain transactions.

https://sched.co/NrsL

A

Da-Da-Da-Da-Da-Da-Da turns out the multi-tenancy erotic, europa Pollachi in the system deploy deploy, Dalek Cuban ad cluster, something.

A

Shinto you go to a tea shop well at home, sure IBM, the katakana sure what will come down at your shirt. Take it out. Developer advocate hello, Jerry Katya, her Herrmann teacher woman, George Aesthetica, open-source community, robotic open-source, take a kappa logic, data consider teaching technology now tied out a consuming and she put home down like a timely idea. If you've got a girl, I think an institute or even a you, come to a song sure know how to idea kappa know what we oughta take a conga tune.

A

The energy oh sure in gypsum found me Janek wrong, see her to calendar to see a couple: gonzo now: Mildred Amla juice, real quantity, to no heartache automation higher to the attacks in ending acetone. The mango decoy now take creatine artwork to Ortega cello teacher found in the console just watching a meteor shower Samuel I thought no human lights. Aha, you me.

A

The cannula a tungsten and origam into a product of my own, to my lighter, so what your own sanity of Avada, okay, now I'm gonna switch to English.

A

So it will be easier for me to say those terms.

A

So we have a little agenda here. First I will talk about a little bit about the hyper ledger fabric for the conference. They're quite few actually talks about fabric I will just give a little bit highlight and from my own understanding what hap hyper later fabric is different from other blockchain technologies or products.

A

Then we're gonna talk about the typical hyper later fabric topology. How do you actually lay out the fabric Network and then we're gonna talk about how you're gonna deploy from a different perspective? Are you gonna deploy your fabric in Italy? They said you have a fabric networking. How do you actually expand it? You have more people coming. How do you join your fabric network? Okay, then, if we have time we're gonna do a little bit of Q&A and during the talk, you're, very welcome to raise your hand and ask questions.

A

You can stop me any time you like so I wanted to have this talk, guys that I get more interactive. Not just me talking, so you can ask questions and we can have some discussions.

A

Okay um doing this conference, as I said, many people already talk about half leather fabric, but from their own perspective. This is from my perspective. Okay, so obviously hyper laser fabric is the open source project founded by Linux Foundation.

A

In hypolita fabric actually leveraged container technologies. So if you look at how that fabric components actually get distributed, you will know all the components package as container images in on docker hub. You can download any of those components. You may include the tools which generate I say certificates, all that kind of stuff right, so so everything pretty much packed as container available on docker hub you can put down and when we talk about cryptocurrency like a big coin or aphelion, people often think that those cryptocurrencies equivalent to blockchain. In my view, that's really a misunderstanding.

A

Blockchain is a technology. The currencies cryptocurrencies actually are applications based on your blockchain technology, so in fabric term the application actually is called king code right. So let's say you actually wanted to develop some application for banking for I, don't know patent for education purposes. Those things will be actually developer has chain code. Okay, so you actually install this chain code onto fabric networks. Let me help your applications.

A

Okay, a hot potato fabric actually is a platform. Many people ask me now. So what do you mean by platform? I I normally give them. Example, like you know, if you want to sell something, they say you, you actually make a hat. Okay,.

B

A

Want to sell the Hat right, you can set up a booth somewhere to say hey. This is what I made them so right or you can go on Amazon or ah beep I, say: hey I'm, gonna, just use that platform right I have to sell my hat right, a lot of things that has been done for you right. So in that case Amazon or Alibaba. Actually it is a platform for you to do a business so fabric. Actually is that platform right? So when you want to develop applications, you could develop a chain code.

A

So, in the sense that you know, fabric is a platform for you to actually create for the industry. Specific applications.

A

The other thing, I think is most unique to fabric. Is that fabric isn't permission-based right? You probably can ignore all other three parts, but the last one. The permission-based is truly unique to fabric what I mean what I mean by that is.

A

Fabric network, actually is the information on fabric network is controlled. It's not like Bitcoin or Assyrian Network right. You can fully join and you can see what information actually is placed on the ledger right. The fabric is different. The information placed on the ledger actually is access controlled, so not everybody want to see them will be able to see them. Okay, so you have the coaster process, get proper, proper permission to be able to see the information on the chain. Okay. So this is very different.

A

The reason why it's made Souls, because there's so many real world applications that require the information to be private, for example, if I transfer some money to somebody I do not want everybody know that I have had this transaction with that person or they say I have some information I own something right, I, don't want everybody to know that, so this is actually is really really important. For many many industry, you cannot just say: hey I, put all the information, you know the public right, that's what the public you know.

A

What's the word only answer.

A

So, let's look at the halogen fabric. Network. If you look at the high quality fabric Network, you normally will find odors tears and chain code. Probably you cannot physically see them right. This is the application running over here right and also some applications from client side. For example, you may have application that you can install on your phone or your computer, which actually requests transactions or look at the transactions in the past or a campaign which will be normally your client signed application.

A

Then you have the chain code, as I mentioned earlier running on your peers right. So normally you look at the hyper later fabric Network, you will see those things right, the graph on the right hand, side. You can see that I currently have quite a few organizations right.

A

So so, let's talk about organizations because we talk about permission-based blockchain system right. So how do you actually organize those nodes on your network? So we naturally have this term called of an organization. It's like a company like IBM is organization, it's a company so when I mean wanted to participate in a fabric network. Actually, that is considered as one organization, so each organization can have many peers. They also participate in the Odin system. Ok, so you can see that, on my on the right hand, side right hand, side of the slide.

A

I have the green bubbles right each bubble actually represent a organization in this organization. You have a different component, either here or older node, then on the surrounding area. Then you, you see those.

A

If this actually represent applications right, those applications could be your mobile application or some desktop application. Right then, on up here, actually will be the chain code running.

A

So component ownership I talked about the organization, so those peers- you know, orders and alone two different organizations right, so each organization should be responsible for the node that they own okay. So, for example, the top one. It's called Orca a currently there's three peers inside the organization, so the admin of org a will be responsible for those nodes right so most likely in terms of network operations that a demean will be responsible to contact with other admins on a network for accept expanding the network.

A

Okay, any questions yeah.

A

Okay right, when we talked about blockchain system, we always know that they're there there's a concept of consensus right. How do we actually agree that a transaction is true right for Bitcoin? You actually have this proof of work right that actually you you mind the hash code right, so so that's the way proof. Actually you have really verified this particular transaction right, so fabric network. Actually consensus is done a little bit different, so each of here each application actually create the transaction.

A

The transaction can request to send it to appear and send to order, and the older actually put all the transactions in the sequence. Okay, so older note, the only purpose is to actually in terms of consensus, is to put all the transactions in the particular order. That order is unique. Okay, yep, the transaction in that sequence, will be eventually so pushed to all the peer nodes. Okay, so that way, we know which transaction happens first, which transact can happen a second right.

A

This is to prevent the double spending problem that say, I only have ten dollars in my account, I want to give it to him. Also, at same time, I give to other people. How do you actually prevent that from happening right.

C

A

When you have those two transactions in the right order, you can see that the second transaction cannot go through okay, so the Alderaan system, the purpose is to actually put all the transactions in in order in the sequence. Okay, this.

C

A

In a way that it's to accomplish that consensus through all the entire fabric and networking.

A

Excuse me how often yes, okay, the transaction means the transaction come in, will put in the in in you know, in a sequence, as the transaction comes in.

B

A

There is no particular unless you talk about how many, unless you talk about how do you actually cut a block? Okay, because transactions actually make a lot of transactions that make a block right. You know how often you actually cut a block. You see what I'm saying.

B

No because you say you could induce equals, then you know you for this transaction I me $10 transfer to two persons, but.

A

B

Organizing a information and organisation the information come at the same time, I mean which one to reach answer.

D

B

One comes first, no.

A

Okay, they say: okay, I said you, you actually I sent ten dollars to this gentleman. First right, then I send at the same time to do you, for example, but this is the two transactions right, though so transaction will come to order and system.

A

Okay, the older system actually will based on some algorithm, put them in in a sequence: okay right, so so this sequence of transactions. Will you mentally make a block right? This block will push to all the peers right, but the one of this transaction actually is invalid right. So when the peer actually receive all this, regardless how the transactions is put in the block when the peer receive that it will say, the second one is invalid, but the sequence is its unique: it's a set for every peer. It's not a give. This peer.

A

The first comes first in the other one. The second comes first right, that's not a case because all the peers get in a block from ordering system. Okay, there's only one order system, you with me, so the transaction, the second transaction, actually will be marked invalid. The transaction, though, will be still part of your ledger.

B

Okay, but are you, for example, organization, be another connect to the order in services for certain time it can not do anything. Oh I'm.

A

You know organizationally.

B

The peer service cannot a connect to the I, mean roster, the NATO internal work connection with the ordering services. Then the peer system can not do anything or it'll can't you do something. You're.

A

Saying if there is one here disconnected from network right, so I mean if it is connected from an ordering system, that peer can still confirm and still endorse some of the transactions, but a will not be able to grow it later, because if it is connected from the ordinate system right, so it's later will actually stop at certain length right.

A

So it can grow it later. So when more transactions come in. Actually, if you cannot do anything.

B

Okay, thank you sure.

A

Okay, so when we try to deploy a fabric Network, there are so many different ways. Actually you can again, you can do this based on what you want to do right. Let's say you actually start a new fabric network. It's completely new right. There's nothing exist yet. So what you want to do is I called sitting a hyper later fabric network right.

C

So you started.

A

From scratch, you can nothing right now so you're, starting with order and the peers right. So you know things has to have to start somewhere right. So this is initially how you set up things. So normally you would do other nodes and then maybe peer, node or not right, but other node has to other nodes, have to be there first. For for you to have a fabric network, if you don't have order system, you don't have a fabric network. Okay, then they say there is a fabric network are already running there.

A

You are the organization you wanted to do something right. It's like, for example, we have Bitcoin network. Now you you figured that you wanted to tune to mine bitcoins right, so you can set up machine and start doing that, so you in a sense, just organization, just wanna peer node. It's similar to that right. You have a fabric fabric unit, we're already running somewhere. Now you figured you know: I wanted to join that fabric. Network do things right! In that case, you normally just need to set up a peer nodes.

A

We're gonna talk about this more actually later.

A

So the young ramen actually run hydrated fabric components, I got as I mentioned earlier. A you know. Fabric can actually was developed in package that containers so obviously most of the deponent it's container based, but you can still run native executable if you want to, and if you don't have a lot of confidence in container and technology. Probably you can run the executable natively on your machine. There's nothing prevents you from doing that. You can certainly do that and either it's a physical virtual machines.

A

So this is where you know the molten tallinn sea comes to play. I have a perfect networker running in my own data center. Now you want to start your own. You know fabric and notes. Appear notes wanted to join in my fabric network, so you can set up the pier in the place in the environment that you prefer.

A

There's so many different ways you can do that, but.

A

In IBM, we actually run all the fabric network use cuban. Ladies every node actually is the Cuban eight spot I.

A

Work on cello, specifically the ansible agent, which actually take the user input and deploy fabric network either older only appear only or both older and peer all together onto even Cuban Anissa cluster I will show you a little bit detail later on.

A

We have two more minutes, so if you want to just deploy appear older only say: hey I'm, starting a fabric networking, so you can actually use this kind of configuration. Okay, you can see I give an altar a define three older notes, right, very simple in the llamo file. Actually, you can creat this and use the encircle agent and just go ahead at the place three nodes ordering.

B

A

This is like your see that you're starting something right or you say, hey I, know, fabric network is already ordered to run in somewhere and I only want to put up to peer nodes and then once I beat up the put up the peer nodes and then I can join my peers to a given fabric network. Okay or you can actually say, hey I'm, not only doing the ordering and also doing the peer. Then you can actually use the right hand.

A

Side configuration to start up a three node ordering system and total a six node here right, the you know two different organizations. This just give you example that that you can use ansible agent to deploy a fabric network. Whatever the way you want, it's very flexible.

A

So so now you're probably wondering how do you actually expand the hi politic fabric right? So they say we already have a fabric network of running right. In this case we have an ordering system sitting in the middle. Then we have one two, three four, maybe da da da I, don't know how many and Cyril or X. So you have that many organizations already participating your fabric network right.

B

A

You have a new that new organization called organ. You want to participate in your network. So how actually you you would do that right. So you, your goal is that that our new eventually become the right hand side chart. That is part of your fabric network, which you can do transactions in the sea right. So how do you actually do that so.

A

What is the actually the process right? So we're gonna talk about the process, so when you want to actually expand your fabric, Network.

A

You, like I, don't know how much you know about fabric actually, when you say you're part of a fabric network. What really means is that you peer or your organization now is part of a channel okay. So so first thing you want to do that is you have to create a hyper laser fabric, a channel right? Then you you, you will need to install the channel management chain code, okay, to help you to actually make the job easier to bring new organizations into your fabric network, and this is not absolutely necessary.

A

You can use the menu process to do channel update but okay, so the working group that I have a link at the bottom. Okay, this is the Linux Foundation funded working group. The whole purpose is that to make this process a lot easier, so you don't have to do a lot of menu steps to expand your haircut network. So you install the management chain code into the channel that you want to expand menu.

A

And you you want to make sure that the the chain code actually is there to allow new members to to join okay. So so.

A

Again, this is not. This is not. This is to help you go through a lot of steps, steps that if, without this, you will have to do those menu.

A

So what do you should do? First, you want to create at a new organization. You want to create a new new request. Adjoining you guys, say: hey I know, there's a fabric networker running there now I want.

C

This organization.

A

To join that fabric Network, so what did I do right, I needed to create a new new request and, as the Adam II of this new organization, I will have to send this new request to one of the admins who manage those current fabric network. Okay, you can use the email or whatever way, to send that request to to the a demeans. Okay, then the a demean will request will receive your request was will actually create a channel update proposal.

A

Eventually, the proposal sent to other a demeans on a network. Then those elements can signs that hey. Yes, I approve its new organization to join this fabric or say no I. Don't want this new organization to join okay. So this is the signature. It's more like a consensus, algorithm right as soon as you get enough for the signature, they say you have 20. You have 20 organizations already in your fabric network.

A

If your policy, if your channel policy says the majority of the organization's have to improve, then you have to get probably more than 13 signatures from all those 20 organizations that only after that, this new organization can actually participate in your channel.

A

Okay, so other admins will either prove or disapprove the request. If the one one with the adamant I said, Adam II actually collect all the approval signatures and eventually submit the channel update. Then the new organization now become part of your fabric network. Okay, so our working group actually created this dashboard application right. I have the again the URL on the right hand side. So this this screen capture actually just shows the process, so they say the atom.

A

In a user example, I had previously the atom in a will use the request in the new new organization enemies sent will create an updated proposal. Then the updated proposal will show up on a dashboard and other atom. A actually will be able to actually simply simply click. The sign here simply click the sign which is to approve, if you don't want to approve. Of course you don't want to sign it right, so other admins will be able to do that, use their own dashboard.

A

Of course that's the same application, but it could be running in many many different places.

A

So once one act me actually signs that you will be able to see the signatures here and if you have to admin sign and all the signatures.

D

A

Up on your dashboard okay, so they say we have more actually require required signatures, so other organizations all all sign them. Then you will see them in this list and eventually.

A

And eventually the admin will be able to just hit apply, so the channel now is updated. The new organization become the part of the fabric network, okay, so actually, this is really just the client side of application right, because this is a user interface. Just show you how user can interact with your system.

A

So this, basically is the chain code we actually developed to help organization. Have the means to do all these type of work so just like any other chain code application. So this is very simple to give you a few method, allow you to create a new proposal and retrieve the proposal. We use this as like a datastore to save all the requests and everything right, so we are actually used in the fabric provided the functions to manage fabric okay. So that's I think we have two minutes and that's everything I want to talk about.

A

So we have two minutes for questions.

B

So familiar with the fabric, important long you're, talking, I, think the fabric you kind of centralized to system. Oh.

A

Right when you say that, actually you mean really, the ordering system is centralized. That is true, but now we actually support. We support as a consensus mechanism now started fabric. One point four point: one: now you can use a raft and then before that you can only use Kafka to do the ordering system. Now we can use raft. Actually, when we use raft it's no longer, you know centralized okay, many organizations can participate in ordering system, so you can have many other node participant your raft and network okay, so it won't be centralized anymore.

A

All the organization's can have your raft.

D

A

A

C

Hi I have a question, so they are so many fortune as a service platform in the market. So we know the end long-past platform and so why why they don't use the share. Oh, oh.

A

Party to not use cello yeah.

C

So many company, the other they are about my phone.

C

A

So your your question is that why not everybody using cello deploy their fabric? Oh I, don't know to be honest. Actually I mentioned earlier. There are so many different ways to build your fabric. Network right, you can use a container you. You can choose now to use container right, there's so many ways. Actually even they say you choose use campaign and there's still so many different ways. For example, you can use cuban aides operator to put up your your pots right, cello, actually just one way. Obviously many other ways you can do things.

A

You know cellos, I mean it's. It's a deployer tool. Many people probably find is useful. Other people probably didn't find it useful. So again, there's so many different ways to do the same thing. People have their own preference.

C

A

But a cello is it getting better, though I and I hope everybody can. You know- join the community and it's now helping out to make it better and.

C

A

For your question, though,.

D

Okay, thank you and you say you sending ordered in rub the paste system raft yes and I.

A

D

Want to ask her than every other show to be. First of all, these double every order should be just bore.

A

Okay, yeah yeah, that good question. Actually you know I said many times. Fabric network is a permission based right for the holder is the same thing you let they say today. I want to join the ferry networking. I don't want to put up here. I want to put our older right. So my older wanted to join the fabric network. Actually, I have to go through the same process. I have to prove to all other other means. Who I am right, so they have to approve actual tall pounced.

A

Older node can join this network to serve as an older system. I have to go through that process, so my certificate will be part of the older Channel right. I cannot simply put up older, say: hey I'm, doing the older service. No, you have to go through the process, the process of governor. You know if this node is trustful or not.

D

A

D

B

A

Right. Thank you very much.