Red Hat OpenShift OpenShift Commons Gathering: Los Angeles 2021, 3 Nov 2021

Previous Meeting Next Meeting

⏯

youtube image

►

From YouTube: Deliver A Resilient and Secure app - Pushkar Patil (Citrix) OpenShift Commons Gathering 2021

Description

OpenShift Commons Gathering 2021
Lightning Talk: Deliver a Resilient and Secure app
Speaker: Pushkar Patil (Citrix)

https://commons.openshift.org/index.html#join

A

So I'm pushkar patel, I'm from citrix so citrix. So this is the agenda which I'm going to go through if possible in five minutes. Basically, I'm going to start talking about what is citrix. What does this partnership with red hat means? How are customer using us and what are our recommendation right? So at citrix we wake up every day to have flawless experience of application delivery for our customers, wherever they are, wherever it is running right. So, basically, when it comes to delivering an application, there are really two very important pillars.

A

One is the security aspect and one is the performance and scale right. So at citrix we have uh you know many pops, where a whole security stack uh things like sso, multi-factor, authentication, authorization, identity management is provided as a service to our customers. So it's a very plug-and-play, very easy to use kind of a product, and then once you have that connecting the clients or these pops back to their on-prem data center or a public cloud data center, there are a bunch of devices which could be in different form factors.

A

uh You know whether it is a micro services or it is an edge device or whatever uh it is accomplished to something what we call it as adc adc stands for application delivery controller. um Just last week we also announced this application delivery controller as a service. So literally you can go to citrix cloud and get your application delivery platform up and running with our device. By the way, I think citrix application daily citrix has multiple businesses, the application delivery piece.

A

If you go back a while back, it was a company called netscaler which was bought by citrix, and that is the product I'm going to focus on along with you know, just the application delivery piece.

A

uh You know, as you have all these pieces and services everywhere, uh you need to have a common management plan or a control plane, and that is done through something called as application delivery management service, which is right at the bottom of this slide, and you know I'm going to focus on the open shift integration, which kind of falls into this red box area which I'm showing over here, and you know it is possible for us to work in all these different environments like public cloud, containerized environment, because we we have all these products, the application, delivery controllers and different form factors.

A

And what is unique about us is you know whether it is a hardware appliance, a big fat hardware, appliance or a virtual form factor or a container form factor. It is built out of a single software code base which helps for having consistent apis operational consistency and they get innovations right.

A

For example, if there is some use case in public cloud, we can get it very easily to our on-prem customers as well, and, as I said you know, last week we announced as a service where we call it an intent based networking, a solution for our customer, where your intent is driven into a action or a policy, and it is designed to be always learning always adaptive, self-healing, etc. So please do try it out on citrix cloud.com, our intent based solution.

A

So now, coming to the topic on hand, uh what what are we doing with red hat right? So we are in the journey of digital transformation, uh with red hat uh and as a first step for that uh we are a certified uh partner with red hat and that's why probably I'm here as well. So, basically anything which goes into the openshift cluster has gone through the certification, the containers and and bunch of other ancillary tools which are developed to make sure the application delivery is seamless, is all certified at openshift.

A

We also participate in the operator certification cycle, so we follow the operator framework along with that, as the customers are moving to these different environment. Automation is very important and ansible becomes a very important piece of that, so we are even a certified ansible partner with red hat right. So how do we help openshift customers right? So we help customers get into production faster because, more often than not, uh you know they already have citrix adcs in their data centers and the guys who have the citric adcs are actually the stakeholders responsible for the operation.

A

So if you have already something trusted, you know getting something new application. New devices into the environment through it makes it uh having such device makes it really easy right. Also, we are built built with uh you know all the security features uh when it comes to authentication authorization, web application, firewall, etc on a single device or a single instance. So that way you know you can secure your openshift clusters and also our value add here and kind of a demo which I'm going to do is about our multi-cluster solution.

A

In fact, I'm going to show you that how you can have openshift cluster and say different clouds, say amazon and azure, and I'm going to show you how easy is it to just deploy this application there and use our services to kind of have a resilient and secure application in these cloud environments?

A

The foundation, which makes it happen, are all these tools which are in a openshift cluster. What I'm showing over here is these are these. These hexagons are basically pods, which runs in a cluster. We have a ingress controller, which is the heart of the solution.

A

Along with that, there are a few other tools which you know based on the customer.

A

You know requests we have built these tools also, we have an extensive integration with the observability tools which are out there like prometheus grafana, elastic search and also we participate in all the ci cd pipeline.

A

I'm not given that I have very limited time. We support all different architectures, whether it is service mesh, whether you are trying to use adcs outside the cluster or you have teams who are requesting these application delivery platform. We have all the different flexibility with our architecture which our customers can use, um and you know when it comes to the best practices uh I think it is. It has been established. In fact, our customers are using.

A

You know, git ops as a way of deploying uh continuously deploying and iterating their application in the cloud, and in my demo I will show you exactly that one of the differentiator or one of the value add from our side is the multi-cluster technology which we have developed, which is based on a technology called as global server load balancing.

A

We have created operators and helm charts for that, so that becomes very easy to integrate and I'm going to show you in my demo these use cases.

A

What are the use cases for this, and this is possible because we have created two custom resource definition which can be used in your openshift cluster. We call it a global traffic policy and a global service entry. So as and when the services come up, you need to be able to discover those. That's where global service engine comes into picture and then also you know what kind of multi-cluster traffic management would you want to have? Would you want to have active active? Would you want to have you know a failover?

A

Would you want to have canary or you want to have some localized? You know the best response based algorithms, all those things are kind of built into the crds for global traffic controller. So use cases are pretty straightforward right. You can have your data centers or clusters across your different zones in your data center and you can use this or you could use it.

A

You know in a hybrid environment where you have say openshift, cluster on-prem and another openshift cluster and say azure or you can have it across multiple in multiple public cloud environment and we support all these different deployment type, and so now I'm gonna use the remaining minute or two to show a demo.

A

So basically I have a openshift cluster, which is already deployed in aws. I've used operator to install our stack and I am exposing this application called demoocpcloudpst.com.

A

And this is what you're seeing so, as you can see, I can access it. Also. I have this continuous loop, which is going on where I'm requesting the access to that. So what I'm going to do is now next is I'm going to keep this mic down first and I'm going to deploy my application.

A

So this is my demo application which I'm going to deploy in azure environment, and I already have installed the gtp in a gscs and what you will see here is this continuous loop. When I deploy this, you will see that the traffic is load balanced between these two cloud environments.

A

So I'm I'm using argo cd in the back, so basically I'm gonna just make sure I add it commit it and push it okay, so as that application is getting pushed. Let's look at the argo cd over here. So, as you can see, I want to make sure it is synchronized people around the world can't see.

A

No one can the demo, oh okay, how about now any better.

A

We see it's a little better okay, but we need to go quickly. Okay, I'm done I'm almost done. All I want to show was you know the application is going to be deployed, let's wait for azure to show up, and that would conclude my demo.

A

There you go so the application which was deployed in azure, as you can see, is it was just aws before now you have uh the same application deployed in two different locations: two different clouds and our technology, uh enabling that uh configuration okay. Thank you very much.

A