Containers Expo Blog Authors: Elizabeth White, Yeshim Deniz, Liz McMillan, Pat Romanski, Zakia Bouachraoui

Related Topics: Containers Expo Blog, @CloudExpo

Containers Expo Blog: Blog Feed Post

The Devil Is in the Details

Or more apropos, it’s in the complex and intimate relationship between applications and their infrastructure

Virtualization Magazine on Ulitzer

Or more apropos, it’s in the complex and intimate relationship between applications and their infrastructure.


What’s the difference between a highly virtualized corporate data center and a cloud computing environment? There are probably many, but the most important distinction – and the one that earns the latter a “cloud computing” tag – is certainly that the former lacks a comprehensive orchestration system and was likely not architected using a rapid, infrastructure inclusive, scalability strategy.

Mitch Garnaat, “The Elastician”, recently managed to sum up what should be every modern data center’s motto in a single, six word tweet: “Scale is not just about servers.” In fact, I am hereby dubbing this “Garnaat’s Theorem”, as this fundamental data center truth has been established and proven more times than some of us would care to remember.

Mitch could not be more right. Scale is not just about servers, and for corporate data centers and cloud computing providers looking to realize the benefits of rapid elasticity and on-demand provisioning scale simply must be one of the foundational premises upon which a dynamic data center is built. And that includes the infrastructure.


image It’s a fine thing to be able to replicate and deploy many instances of an application to achieve higher capacity, better performance, and fault tolerance. But if the underlying infrastructure is not also prepared to handle the higher volume of traffic and requests, such a strategy will ultimately fail. Large scale data centers already know this; the network and application network infrastructure over which high volume web applications are delivered must also scale to meet application demand or risk becoming the bottleneck and cause of poor performance.


Bandwidth seems a no brainer, after all we’re running data centers built on 10Gbps backbones today. But individual NICs on servers and ports on switches and other network infrastructure solutions are often still only capable of handling 1Gbps. A very large server (think 8, 16, or more cores) may have multiple NICs but each may be only 1Gbps. Scaling bandwidth, then, becomes a matter of architecting the network such that more bandwidth is available to the server. Teaming of NICs is often used as a means to combine multiple network connections into a “virtual” network connection that can handle many more Gbps of traffic. But simply teaming NICs or deploying a vSwitch on the server will only help distribute application responses, because the software responsible for binding those NICs together only has control over the server-side traffic. To scale network traffic bidirectionally it’s necessary to also configure the network solution(s) on the other end of that link – might be a switch, might be a load balancing device, etc… – to also bind together the appropriate network connections to form a single, logical link between the server and the network device.

Consider what that means in relation to scalability. Port densities on switches and application network solutions have increased, yes, but in organizations other than the largest it is likely many of those devices do not have more than 48 ports available, i.e. there are only 48 network connections available for connection servers. If each large server is teaming four NICs together, that means four ports on the network infrastructure should also be “teamed” together, which reduces the number of servers able to be physically connected to that switch to 12. If the data center has more than 12 “servers” then it’s likely that additional network infrastructure components will be necessary. More NICs teamed together means fewer servers physically connected, which can dramatically change the physical (and logical) network and application network infrastructure architecture.


Most organizations have other network, security, and application network infrastructure that architecturally sits “in front of” the applications. Each of these components must be capable of scaling in tandem with the servers and applications being scaled. If it is expected that an application can scale from 10,000 concurrent users to 50,000 concurrent users, so must the infrastructure be capable of scaling. Some solutions, such as IPS and IDS in the security world – and even many WAFs (Web Application Firewalls) - are often configured to transparently monitor and subsequently act on incoming and outgoing responses. These solutions require ports on infrastructure switching solutions, and thus if it is necessary to scale them to support higher volumes of traffic they, too, will require additional ports on infrastructure switching solutions whether because network connections are aggregated to provide the bandwidth necessary and mitigate bandwidth limiting bottlenecks or because multiple instances (physical or virtual) of the solution are being deployed. Every solution needs its own network connection, caution-loadlimitafter all.


Speaking of network connections needed by infrastructure solutions, “data center scalability” also requires careful consideration of the management network. Most infrastructure solutions utilize separate management ports as a means to enable out-of-band management. This mitigates the risk of being unable to access and manage a given infrastructure component in the face of overwhelming traffic, such as a DDoS scenario or failed network connection. Whether this is accomplished via a physically or logically separate network is a matter of budget and design, but in either case requires careful attention to the architecture of the data center to allow both the “work” network and the “management” network to scale along with the application.

This also should trigger concern or at least a line item on the scalability to-do list to inquire as to the scalability of network management systems (NMS) used to manage these applications and its infrastructure. More infrastructure, more complex architectures, more applications and servers will certainly add stressors on the NMS that may not have been present before. It may be necessary to scale that solution, as well, which impacts the network and application network infrastructure as well as the applications, depending on the solution used.


When folks start getting excited about the idea of Virtual Network Appliances (VNAs) as a means to achieve some of the scalability challenges I’ve noted above, they are thinking about scalability of infrastructure (which is good) but forget that the VNA is going to incur the same scalability challenges that a virtualized application would incur (which is not so good). The “Spin Strategy”, i.e. spin up a new instance of X to address increasing demand, is not a strategy at all, it’s a tactical measure to addressing a specific task within what should be an architectural strategy to scalability. We’ve barely touched on the challenges associated with infrastructure scalability in this post; there are many other factors to consider. What should be clear, however, is that Garnaat’s Theorem holds true: scale is not just about servers. There are many, many more pieces of the architectural puzzle that go into scalability and it behooves data center architects to consider the impact of scaling approaches – up, out, virtual, physical – before jumping into an implementation.

This isn’t the first time I’ve touched upon this subject, but it’s a concept that needs to be reiterated – especially with so many pundits and analysts looking for the next big virtualization wave to crash onto the infrastructure beachhead. I’m here to tell you, though, that the devil is in the details. The architectural details.

Read the original blog entry...

More Stories By Lori MacVittie

Lori MacVittie is responsible for education and evangelism of application services available across F5’s entire product suite. Her role includes authorship of technical materials and participation in a number of community-based forums and industry standards organizations, among other efforts. MacVittie has extensive programming experience as an application architect, as well as network and systems development and administration expertise. Prior to joining F5, MacVittie was an award-winning Senior Technology Editor at Network Computing Magazine, where she conducted product research and evaluation focused on integration with application and network architectures, and authored articles on a variety of topics aimed at IT professionals. Her most recent area of focus included SOA-related products and architectures. She holds a B.S. in Information and Computing Science from the University of Wisconsin at Green Bay, and an M.S. in Computer Science from Nova Southeastern University.

IoT & Smart Cities Stories
At CloudEXPO Silicon Valley, June 24-26, 2019, Digital Transformation (DX) is a major focus with expanded DevOpsSUMMIT and FinTechEXPO programs within the DXWorldEXPO agenda. Successful transformation requires a laser focus on being data-driven and on using all the tools available that enable transformation if they plan to survive over the long term. A total of 88% of Fortune 500 companies from a generation ago are now out of business. Only 12% still survive. Similar percentages are found throug...
At CloudEXPO Silicon Valley, June 24-26, 2019, Digital Transformation (DX) is a major focus with expanded DevOpsSUMMIT and FinTechEXPO programs within the DXWorldEXPO agenda. Successful transformation requires a laser focus on being data-driven and on using all the tools available that enable transformation if they plan to survive over the long term. A total of 88% of Fortune 500 companies from a generation ago are now out of business. Only 12% still survive. Similar percentages are found throug...
Every organization is facing their own Digital Transformation as they attempt to stay ahead of the competition, or worse, just keep up. Each new opportunity, whether embracing machine learning, IoT, or a cloud migration, seems to bring new development, deployment, and management models. The results are more diverse and federated computing models than any time in our history.
Dion Hinchcliffe is an internationally recognized digital expert, bestselling book author, frequent keynote speaker, analyst, futurist, and transformation expert based in Washington, DC. He is currently Chief Strategy Officer at the industry-leading digital strategy and online community solutions firm, 7Summits.
Digital Transformation is much more than a buzzword. The radical shift to digital mechanisms for almost every process is evident across all industries and verticals. This is often especially true in financial services, where the legacy environment is many times unable to keep up with the rapidly shifting demands of the consumer. The constant pressure to provide complete, omnichannel delivery of customer-facing solutions to meet both regulatory and customer demands is putting enormous pressure on...
IoT is rapidly becoming mainstream as more and more investments are made into the platforms and technology. As this movement continues to expand and gain momentum it creates a massive wall of noise that can be difficult to sift through. Unfortunately, this inevitably makes IoT less approachable for people to get started with and can hamper efforts to integrate this key technology into your own portfolio. There are so many connected products already in place today with many hundreds more on the h...
The standardization of container runtimes and images has sparked the creation of an almost overwhelming number of new open source projects that build on and otherwise work with these specifications. Of course, there's Kubernetes, which orchestrates and manages collections of containers. It was one of the first and best-known examples of projects that make containers truly useful for production use. However, more recently, the container ecosystem has truly exploded. A service mesh like Istio addr...
Digital Transformation: Preparing Cloud & IoT Security for the Age of Artificial Intelligence. As automation and artificial intelligence (AI) power solution development and delivery, many businesses need to build backend cloud capabilities. Well-poised organizations, marketing smart devices with AI and BlockChain capabilities prepare to refine compliance and regulatory capabilities in 2018. Volumes of health, financial, technical and privacy data, along with tightening compliance requirements by...
Charles Araujo is an industry analyst, internationally recognized authority on the Digital Enterprise and author of The Quantum Age of IT: Why Everything You Know About IT is About to Change. As Principal Analyst with Intellyx, he writes, speaks and advises organizations on how to navigate through this time of disruption. He is also the founder of The Institute for Digital Transformation and a sought after keynote speaker. He has been a regular contributor to both InformationWeek and CIO Insight...
Andrew Keys is Co-Founder of ConsenSys Enterprise. He comes to ConsenSys Enterprise with capital markets, technology and entrepreneurial experience. Previously, he worked for UBS investment bank in equities analysis. Later, he was responsible for the creation and distribution of life settlement products to hedge funds and investment banks. After, he co-founded a revenue cycle management company where he learned about Bitcoin and eventually Ethereal. Andrew's role at ConsenSys Enterprise is a mul...