Book Image

Native Docker Clustering with Swarm

By : Fabrizio Soppelsa, Chanwit Kaewkasi
Book Image

Native Docker Clustering with Swarm

By: Fabrizio Soppelsa, Chanwit Kaewkasi

Overview of this book

Docker Swarm serves as one of the crucial components of the Docker ecosystem and offers a native solution for you to orchestrate containers. It’s turning out to be one of the preferred choices for Docker clustering thanks to its recent improvements. This book covers Swarm, Swarm Mode, and SwarmKit. It gives you a guided tour on how Swarm works and how to work with Swarm. It describes how to set up local test installations and then moves to huge distributed infrastructures. You will be shown how Swarm works internally, what’s new in Swarmkit, how to automate big Swarm deployments, and how to configure and operate a Swarm cluster on the public and private cloud. This book will teach you how to meet the challenge of deploying massive production-ready applications and a huge number of containers on Swarm. You'll also cover advanced topics that include volumes, scheduling, a Libnetwork deep dive, security, and platform scalability.
Table of Contents (18 chapters)
Native Docker Clustering with Swarm
Credits
About the Authors
About the Reviewer
www.PacktPub.com
Dedication
Preface

Securing Swarm cluster


Recall the picture of a secured Swarm cluster from Chapter 4, Creating a Production-Grade Swarm; we'll explain the security aspects found in a Docker Swarm model cluster.

We have the Orchestrator as one of the main parts of a Docker Swarm manager. Diogo Monica, a member of the Docker Security team, mentioned in his Orchestration Least Privileged presentation, in Berlin 2016, that each component in the orchestration must have a limitation of what it can do.

  • Node management: A cluster operator may instruct an Orchestrator to perform actions for a set of nodes

  • Task assignment: The Orchestrator is also responsible for assigning tasks to each node

  • Cluster state reconciliation: The Orchestrator maintains the state of the cluster by reconciling each state to the desired state

  • Resource management: The Orchestrator offers and revokes resources for submitted tasks

An Orchestrator with the least privilege will make the system secure and a least privilege Orchestrator is defined based...