Consule
—————-
1) Traditional methods do not resolve the app's name . in this method, load balancer can resolve, but it is in round-robin fission. if we did any modification it won't update the dynamical
but console having an extra feature where there is a Registry that manages all the app info and availability details.
2)Discovery and service configuration tools
3)Container Pilot should use consul for service management
Nomad
==========
1)for control deployment and scheduler .hcl format.
Service management tool
Nomad should be used for managing the containers on one or more servers/clusters.
Vault
=========
Tool for securely accessing and storing secrets
The new component of AN could make use of the latest technology offer by Cobalt to manage the secret
AN is only planned for development hence it should not adopt this technology as it will not be accessible in production.
cypherstore–is the authorization used by mon servers.
What is OAuth?
Oauth-token base authentication TTL
OAuth is an open-standard authorization protocol or framework that describes how unrelated servers and services can safely allow authenticated access to their assets without actually sharing the initial, related, single login credential. In authentication parlance, this is known as secure, third-party, user-agent, delegated authorization.
OAuth-token base authentication TTL
from the apps side app ID is the key and added root token and kept in a vault, bootstrap method
How MS works
F5
—————–
|Gateway nginx | —->openapi.test/developer.test.com/amu.test.com
|- ——————–
| — container Pilot
|
——-
|Console|
——–
|
| Container Pilot
|
|POD-1| Apps/Web–> DB
|POD-2| Apps/Web–> DB
|
|
|
|
POD
============
|Web container —-pod level Nginx
|
– java container
– App container
High-Level Description
===================================================================
||
||
———-
| FireWall |
———-
||
——————————————————————————————————————-
||Rules lookup /NAT translation –>157.133.209.20.10.xx –>Connection stateupdate —->untranslate and Dispatch to F5||
———————————————————————————————————————–
||
—————————————-
||F5 is a loadbalancer/ Traffice manager ||—–>VIP lookup /connection Lookup/connection state update—> Dispatched to poll mamber
—————————————–
||
||
——————————
|| NGINX ||—> TLS certicate exchange/ IP entered at httpd header
—————————–
||
||
———————————
|| Container || container || –> POD NGINX
——————————-
|| container || container ||
——————————– ====>> Cobalt Infrastructure
|| ||
|| ||
———————————
container pilot
1)Application orchestration platform for containers
2)Container Pilot agent is required for every container in the new component service. The rest of the AN has to look up the component service and communicate using the REST API.
Datadog uses for collect all the alerts from Terraform
J-frog
——–
1)Artifact repository for Cobalt.
2)A new component would publish all the dependent artifacts in the new artifact repository and should not have any shared code with the rest of AN. Any common utility or platform components have to be uniformly shared by the Component and the rest of the AN.
troubleshoot
================
ping app. query –>console service
check
endpoint group
Netmaster and Netplugin- to managing dynamic environment/ Manage the security to avoid the collision
netmaster provide dynamic ACI fabric internally and having all endpoint information, like policy rules instances.
Need to create a software-defined network under netpluging (IP polling)–> OVS (open view switch)
EPIC -who does centralized configuration management for cobolt environment.
Comments
Post a Comment