LinuxCon + ContainerCon + CloudOpen China 2018: Full Schedule

June 25 - 27 - Beijing, China
Click Here For Information & Registration

09:00 CST

Keynote: Welcome & Opening Remarks - Jim Zemlin, Executive Director, The Linux Foundation

Speakers

Jim Zemlin

Executive Director, The Linux Foundation

Jim Zemlin’s career spans three of the largest technology trends to rise over the last decade: mobile computing, cloud computing, and open source software. Today, as executive director of The Linux Foundation, he uses this experience to accelerate innovation in technology through... Read More →

Monday June 25, 2018 09:00 - 09:25 CST
Plenary Hall B

Keynote

Language English
Experience Level Any

09:30 CST

Keynote: Linus Torvalds, Creator of Linux & Git, in conversation with Dirk Hohndel, VP & Chief Open Source Officer, VMware

Speakers

Dirk Hohndel

Head of the Open Source Program Office, Verizon

Dirk is the Head of the Open Source Program Officer at Verizon. Prior to that, Dirk was VMware’s Chief Open Source Officer, where he lead the company’s Open Source Program Office, directing the efforts and strategy around use of and contribution to open-source projects and driving... Read More →

Linus Torvalds

Fellow, The Linux Foundation

Linus Torvalds was born on December 28, 1969, in Helsinki, Finland. He enrolled at the University of Helsinki in 1988, graduating with a master’s degree in computer science. His M.Sc. thesis was titled “Linux: A Portable Operating System” and was the genesis for what would become... Read More →

Monday June 25, 2018 09:30 - 10:10 CST
Plenary Hall B

Keynote

Language English
Experience Level Any

10:35 CST

Keynote: The Software Defined World - Imad Sousou, Corporate Vice President and General Manager, Open Source Technology Center, Intel

As we move toward a world where everything is smart and connected, our experiences are becoming increasingly digitized, resulting in a massive flood of data. We are using the power of that data to transform some of the most exciting areas of human activity. Container technology and open source hypervisors continue to be the driving forces behind the next wave of the technology revolution. Containers are set to usher in the third wave of cloud computing enabling micro-services, whereas, open source hypervisors are optimized to streamline embedded development. Imad Sousou, corporate vice president and general manager of the Open Source Technology Center for Intel Corporation, will highlight how Intel is uniquely positioned to drive the increasingly smart, connected world.

Speakers

Imad Sousou

Imad Sousou is corporate vice president and general manager of the Open Source Technology Center at Intel Corporation. Sousou is responsible for leading Intel's efforts in open source software across technologies and market segments. These include: Linux-based operating systems such... Read More →

Monday June 25, 2018 10:35 - 10:50 CST
Plenary Hall B

Keynote

Language English
Experience Level Any

10:55 CST

Keynote: Open Source Opening Doors - Michelle Noorali, Sr. Software Engineer, Microsoft

Michelle Noorali, Sr. Software Engineer at Microsoft Azure and open source developer, will talk about open source projects in the cloud-native ecosystem, the benefits of having an open source project in a foundation like the Cloud Native Computing Foundation (CNCF), and the process of transitioning an open source project to the CNCF. Michelle currently serves on the Kubernetes Steering Committee, is on the governing board of the CNCF, and is a core maintainer of Helm, which was recently adopted into the CNCF. In this talk, Michelle will aim to inspire and inform other maintainers of open source projects on how to think about foundations as a long-term home for their open source project.

Speakers

Michelle Noorali

Senior Software Engineer, Microsoft

Michelle Noorali is a Sr. Software Engineer at Microsoft and was Co-Chair for KubeCon+CloudNativeCon 2017. She is a member of the CNCF Technical Oversight Committee and serves as a developer representative on the CNCF Governing Board. Michelle is also a core maintainer of several... Read More →

Monday June 25, 2018 10:55 - 11:15 CST
Plenary Hall B

Keynote

Language English
Experience Level Any

11:30 CST

Preempt-RT Linuxkit -- Put Docker into IoT - Tiejun Chen, VMware

Linuxkit is a toolkit for building secure, portable and lean operating systems for containers. But currently Linuxkit is built based on mainline linux. So it just provide such the soft real time implementation. In many use cases like IoT, even some time-sensitive tasks in the cloud, we really need to meet hard real time requirement. Preempt-RT Linux patch can convert mainline Linux to be preempt-able. Here we will review together how we can integrate Preempt-RT Linux patches to make sure Linuxkit can build out Real Time Linux for container. This can help us deploy different Linux/Docker onto the resource constrained IoT Gateway. In addition, I hope we can discuss if-how we can tune Real Time Configuration in the case of Docker.

Speakers

Tiejun Chen

Sr. Technical Lead, VMware

Tiejun Chen is Sr. technical leader from VMware OCTO, also strategic Representative of RISC-V International TSC 2023. He's been working on a lot of areas - cloud native, edge computing, ML/AI, RISC-V, WebAssembly, etc. He ever made many presentations at kubecon China 2021, Kube Edge... Read More →

Monday June 25, 2018 11:30 - 12:10 CST
306A

IoT & M2M

Language English
Experience Level Intermediate

11:30 CST

Empowering Container-Based NFV Infrastructure with VPP on Arm Architecture - Trevor Tao & Song Zhu, Arm (slides attached)

The presentation will show a reference design of containerized VNFs with VPP integration on Arm-based NFV infrastructure. Kubernetes is used as VIM to deploy Docker cluster for OPNFV platform. DPDK is used to accelerate containerized VNFs, meanwhile, the VPP vhost-user interfaces are used to create an L2 bridge and VxLAN overlay to connect between containers, which can be on the same host or different hosts. The design ensures high throughput performance for VNFs, as well as provides high scalability. The whole deployment process for container networking with VPP on Arm platform would be demoed.

This presentation will be useful for an audience who want to understand the progress of NFV on Arm and who have the plan to deploy their containerized NFV solutions on Arm architecture.

Speakers

Trevor Tao

Staff Software Engineer, Arm

Trevor Tao(Zijin Tao) is a Ph.D in Computer Networking, who has worked in this area for more than 15 years. He has worked as a network engineer in research institute of university for more than 10 years. Then he worked in IBM for almost 5 years for SDN and Cloud Networking. Now he... Read More →

Song Zhu

Senior Software Manager, Arm

Empowering Container Based NFV Infrastructure with VPP on Arm Architecture Trevor Tao & Song Zhu pdf

Monday June 25, 2018 11:30 - 12:10 CST
311B

Networking & Orchestration

Language English
Experience Level Intermediate

11:30 CST

The Evolution of the Open Source Software Foundation - Stephen R. Walli, Microsoft

Non-profit organizations have played a key role in the evolution of the open source ecosystem over the past 30 years. While each of the organizations has been created to address a particular need or constituency, they all provide a strong base to enable the next wave of growth and investment in successful, maturing open source projects in the wild. Over the past decade, corporations have begun to engage more in collaborations and look to non-profit organizations to act as the point of cooperation to encourage growth and investment in new projects. With that difference in mind, the presentation looks at what evolution is needed to support the differences and challenges to be managed (with examples) to continue to grow a strong open source ecosystem.

Speakers

Stephen Walli

Principal Program Manager, Microsoft

I'm a principal program manager at Microsoft in the Azure Office of the CTO. I've worked with Docker, been a Distinguished Technologist at Hewlett-Packard, technical director at the Outercurve Foundation, founded a start-up, and been a writer and consultant. I've been around open... Read More →

Monday June 25, 2018 11:30 - 12:10 CST
310

Open Source Leadership

Language English
Experience Level Any

13:20 CST

All About That Base - Keeley Erhardt, Improbable (slides attached)

Microservice architectures promise to deliver flexibility and scalability to the development and deployment of service-based applications. With these obvious benefits, however, comes the difficulty and operational complexity of managing a distributed system. In this presentation, we will cover why building production services is hard, and how Improbable has tackled the problem through a new project designed to unify services' common functionality in a single base server. We will discuss how developing microservices utilizing a common base server has reduced development time and led to more stable and reliable systems at Improbable, and how you can use the strategy to achieve similar benefits in your own systems.

Speakers

Keeley Erhardt

Software Engineer, Improbable

Keeley is a software engineer at Improbable, a London-based tech company focused on enabling massive-scale simulation. She graduated from MIT with a B.S. and an M.Eng in Computer Science. Keeley is passionate about distributed systems and open source and has contributed to a variety... Read More →

radicle LC3 pdf

Monday June 25, 2018 13:20 - 14:00 CST
309B

Cloud Native & Serverless & Microservices

Language English
Experience Level Any

13:20 CST

State of Serverless - Doug Davis, IBM (slides attached)

Serverless and FaaS computing are gaining in popularity to easily create microservice applications. In this talk we will discuss what are the characteristics of serverless, the status of the serverless working group within the CNCF and the new CloudEvents specification they’re working on, as well as the open source options available for running serverless and associated services with a focus on Kubernetes.

Speakers

Doug Davis

PM Microservices, Microsoft

Doug is currently focusing on improving the developer experience for cloud native computing in Azure Cloud. He’s been working on Cloud related technologies for many years and has worked on many of the most popular OSS projects, including OpenStack, CloudFoundry, Docker, Kubernetes... Read More →

LF State of Serverless Jun 2018 pdf

Monday June 25, 2018 13:20 - 14:00 CST
309A

Cloud Native & Serverless & Microservices

Language English
Experience Level Beginner

13:20 CST

Automation to Make OSS License Compliance Easier - Kate Stewart & Greg Kroah-Hartman, The Linux Foundation

Until now, the software industry has been treating compliance with open source licenses as something to worry about when a product is ready to ship, and relying on more and more sophisticated tooling and heuristics to guess what the license is. Code sharing between projects (with different licenses!) has become common and enables much innovation, but causes the license detection problem to only get worse. More resources (tooling, people, time) are needed to figure out the licensing to comply with the terms of open source licenses.

In this session, we’ll look at the the Linux kernel which while it has a LICENSE file indicating it is GPL-2.0-only, actually has over 80 licenses, expressed over 1000+ ways. We’ll go through a simple solution that is being applied at the source code level in the Linux kernel to remove the guesswork from the tooling, and to simplify the analysis. This technique can be applied to any open source project. This will take us significantly closer to the goal that for every build, you know the licenses that apply (via a simple ‘grep” if you prefer) and can easily and automatically generate the artifacts to comply with those licenses.

Speakers

Greg Kroah-Hartman

Fellow, Linux Foundation

Greg Kroah-Hartman is among a distinguished group of software developers who maintain Linux at the kernel level. In his role as a Linux Foundation Fellow, he continues his work as the maintainer for the Linux stable kernel branch and a variety of subsystems while working in a fully... Read More →

Kate Stewart

Senior Director of Strategic Programs, Linux Foundation

Kate Stewart is a Senior Director of Strategic Programs, responsible for Embedded and Open Compliance programs. Since joining The Linux Foundation, she has launched Real-Time Linux, Zephyr Project, CHAOSS, and ELISA.

Monday June 25, 2018 13:20 - 14:00 CST
306B

Emerging Technologies & Wildcard

Language English
Experience Level Any

13:20 CST

Building on Web of Things : Make Your IoT Accessible, Open and Secure using Javascript - Rabimba Karanjai, Mozilla

The IoT is a system of physical objects connected to the Internet that can be discovered and interacted with. What IoT was supposed to be. Instead what we have is
- Vertical stacks
- Don’t talk to each other
- Per-vendor integrations

Like the Internet before the world wide web with competing for hypertext systems and proprietary GUIs from AOL and CompuServe

In this talk, we take a step back and apply lessons learned from the World Wide Web to the IOT. WoT is not another vertical IoT technology stack to compete with existing platforms
It is a unifying horizontal layer to bridge together underlying IoT protocols.

In this talk, I introduce you to Mozilla “Project Things”, with the goal of building a decentralized ‘Internet of Things’ that is focused on security, privacy, and interoperability.

Speakers

Rabimba Karanjai

Researcher, Mozilla

Rabimba Karanjai is a full time graduate researcher, part time hacker and FOSS enthusiast. He is working with Mozilla Research Mixed Reality team on WebVR. He also is a Mozilla TechSpeaker and would love to chat with you on VR,AR,Security and openweb over a cup of coffee or bottle... Read More →

Monday June 25, 2018 13:20 - 14:00 CST
306A

IoT & M2M

Language English
Experience Level Intermediate

13:20 CST

Complex Made Simple: The State of Governance in Open Source - Shane Martin Coughlan, The OpenChain Project (slides attached)

Clear governance, a shared understanding of process and rules, is key to the success of open source adoption at scale. Our global community represents many perspectives, many cultures, and many jurisdictions. To address these we have seen the emergence of overarching principles, practical guides and effective tools that support the necessary balance of flexibility and shared trust. This talk will focus on the key open source solutions that address real-world challenges. It will highlight a stack of solutions that includes OpenChain, SPDX, Reuse.Software, FOSSology, ScanCode, sw360, ClearlyDefined and QuarterMaster and explain how they work together at a high level (e.g OpenChain standard) to practical tooling (e.g QuarterMaster CI/CD).

Speakers

Shane Coughlan

OpenChain General Manager, Linux Foundation

Shane Coughlan is an expert in communication, security and business development. His professional accomplishments include spearheading the licensing team that elevated Open Invention Network into the largest patent non-aggression community in history, establishing the leading professional... Read More →

Complex Made Simple The State of Governance in Open Source Shane Martin Coughlan pdf

Monday June 25, 2018 13:20 - 14:00 CST
310

Open Source Leadership

Language English
Experience Level Any

13:20 CST

Introduction to Serverless Containers - Ria Bhatia, Microsoft

Kubernetes has won the orchestration war but now how to developers build production ready code with Kubernetes? Standalone Kubernetes still requires a layer of management and Kubernetes alone isn’t the answer developers are looking for. Virtual Kubelet is an open source project that takes away operational hardships for developers so they can continue to focus on building great apps rather than fumbling with infrastructure they shouldn’t have to care about.

This is where containers fill the gap for flexibility, scalability, light-weight infrastructure matched with a per-second billing model, customers get exactly what they pay for. Azure Container Instances and other pods as a service platforms like Hyper.sh is the story for flexible billing, instant compute power and efficiency within the cloud. This changes the game for deploying infrastructure.

Speakers

Ria Bhatia

Program Manager, Independent

Ria Bhatia was a Program Manager for Upstream Azure Compute within Microsoft. She's been working with the community on different ways to scale in Kubernetes and operate Kubernetes. She actively maintains Virtual Kubelet and has spoken at multiple meetups and conferences, including... Read More →

Monday June 25, 2018 13:20 - 14:50 CST
307A

Infrastructure & Automation

Language English
Experience Level Any

14:10 CST

Introduction to Container Security - Thomas Cameron, Red Hat

Application containerization is one of the coolest technologies in IT. It solves numerous problems, allows for incredible application density, and can really increase flexibility and responsiveness. But not everyone understands what makes up container security - it's a LOT more than what application is in the container.

In this session, Red Hat’s Thomas Cameron will talk about the basic components of container security. He'll talk about kernel namespaces, Security Enhanced Linux, Linux control groups, the Docker daemon, etc. and how they all work. He'll provide demonstrations of how each of these technologies affects security.

He'll also talk about tips and tricks for planning a secure container environment, describe some “gotchas” about containers, and debunk some of the security myths about containers.

Attendees will understand the fundamentals of container security when they leave.

Speakers

Thomas Cameron

Senior Principal Cloud Engineer, Red Hat

Thomas Cameron is a senior principal cloud engineer at Red Hat. He has been in the information technology industry since 1993, and has been at Red Hat since 2005. Thomas is a Red Hat Certified Architect (RHCA) specializing in cloud technologies.

Monday June 25, 2018 14:10 - 14:50 CST
309B

Cloud Native & Serverless & Microservices

Language English
Experience Level Beginner

14:10 CST

Apache OpenWhisk 101 - A Cloud-Native, Open Source, Serverless Platform Incubating at the ASF - Ying Chun (Daisy) Guo, IBM China Development Lab (slides attached)

The open source Apache OpenWhisk project (supported by IBM, Adobe, Red Hat, and others) provides a scalable and polyglot serverless platform for deploying cloud-native applications driven by data, message, and REST API call events. At this talk, you'll find out why serverless architectures are attractive for many emerging cloud workloads and when to consider OpenWhisk in particular for your next web, mobile, IoT, bot, or analytics project. You'll understand the architecture, installation, programming model, community status of OpenWhisk. You will also see how the resiliency and container lifecycle models compare against Platform-as-a-Service (Cloud Foundry) and container orchestration (Kubernetes) environments. Demos at this session include integration with public cloud services based on Apache Kafka (message streams), Apache CouchDB (NoSQL data), and LoopBack/OpenAPI (REST APIs).

Speakers

Ying Chun Guo

Software Engineer, IBM

Ying Chun Guo, known as “Daisy”, is an open source developer in IBM China development lab. She has several years experiences in open source communities, starting from OpenOffice, then OpenStack, and recently serverless platforms Apache OpenWhisk and Knative. Now she concentrates... Read More →

Apache OpenWhisk 101 A Cloud Native, Open Source, Serverless Platform Incubating at the ASF Ying Chun (Daisy) Guo pdf

Monday June 25, 2018 14:10 - 14:50 CST
306B

Emerging Technologies & Wildcard

Language English
Experience Level Intermediate

14:10 CST

Using Docker in QEMU Testing - Fam Zheng, Red Hat (slides attached)

The QEMU project has adopted a Docker-based approach to run tests since a few years ago, and it works! In this talk, Fam will review this experience and explain why and how we did that, covering the interesting details, the benefits and the challenges we have had. He will then summarize how the tight integration of Docker-based testing, especially for Continuous Integration purposes, could apply generically to other projects.

Speakers

Fam Zheng

Senior Software Engineer, Red Hat

Fam Zheng is a senior software engineer in the Red Hat virtualization team. He worked on various aspects of QEMU and KVM in past years, and is now focused on VirtIO and block performance. and is a maintainer for a number of components of QEMU. Previously he has presented Userspace... Read More →

Using Docker in QEMU Testing pdf

Monday June 25, 2018 14:10 - 14:50 CST
203AB

KVM

Language English
Experience Level Beginner

14:10 CST

Bringing an Open Source Project to The Linux Foundation - Chris Aniszczyk, Cloud Native Computing Foundation (slides attached)

Speakers

Chris Anisczcyk

CTO, Linux Foundation (CNCF)

Chris Aniszczyk is an open source executive and engineer with a passion for building a better world through open collaboration. He's currently a CTO at the Linux Foundation focused on developer relations and running the Open Container Initiative (OCI) / Cloud Native Computing Foundation... Read More →

Bringing an Open Source Project to the Linux Foundation (LC3 2018) pdf

Monday June 25, 2018 14:10 - 14:50 CST
310

Open Source Leadership

Language English
Experience Level Any

15:00 CST

VFIO Device Assignment Quirks and How to Avoid Them in Your Hardware - Alex Williamson, Red Hat (slides attached)

In order to assign a peripheral I/O device to a virtual machine, the device needs to be isolated from the host and aspects of the hardware may need to be virtualized for transparency to the guest. Some devices and platforms are better at this than others. Adherence to specifications and creative backdoors through hardware can present challenges to device assignment. In this presentation, Alex Williamson will provide case studies through various examples of troublesome configurations and the workarounds, or quirks, that are sometimes employed to enable them. These quirks are however not without pitfalls and can impose performance, maintenance, functionality, and time-to-market downsides. The goal of this talk is to share some of these common issues, expose the quirks available as workarounds, and discuss how they can be avoided entirely with well-informed hardware design.

Speakers

Alex Williamson

Sr Principal Software Engineer, Red Hat

Alex Williamson is a Senior Principal Software Engineer with Red Hat, maintainer of VFIO, Linux’s secure userspace driver framework, for both the kernel and QEMU components, and regular contributor to the Linux kernel IOMMU and PCI subsystems. Alex has given previous talks on VFIO... Read More →

lc32018 Williamson VFIO Quirks pdf

Monday June 25, 2018 15:00 - 15:40 CST
203AB

KVM

Language English
Experience Level Intermediate

15:00 CST

The Flavors of Memory Supported by Linux, their Use and Benefit - Christoph Lameter, Jump Trading LLC (slides attached)

In recent years the types of memory supported by the Linux Operating system have multiplied. In addition to DRAM and NUMA systems we now have various forms of non volatile RAM, Memory areas on accelerators (f.e. on GPU, ManyCore and FPGAs) and more is on the horizon. This talk gives an overview of the memory technologies available, shows the advantages and explains how such memory is managed and handled in Linux.

Speakers

Christoph Lameter

R&D Team Lead, Jump Trading LLC

Christoph Lameter is working as a lead in research and development for Jump Trading LLC (an algorithmic trading company) in Chicago and maintains the slab allocators and the per cpu subsystems in the Linux Kernel. He contributed to a number of Linux projects since the initial kernel... Read More →

2018 LinuxCon Beijjing pdf

Monday June 25, 2018 15:00 - 15:40 CST
307B

Linux Systems

Language English
Experience Level Intermediate

15:00 CST

Is There an Open Source Business Model: YES or NO? - Jeffrey Borek, IBM & Stephen Walli, Microsoft (slides attached)

The open source definition is over 20 years old. Red Hat is a multi-billion dollar company. MySQL and JBoss have had great acquisition exits. Cloudera and Hortonworks are well on their way to becoming the next billion-dollar software companies. But Stephen would like to observe that despite these successes, there is no open source business model.

But wait, Jeff would beg to differ! From data centers to the cloud, from self-driving cars to drones - open source software is everywhere. Major companies that are bottom-line driven are starting to actively engage and contribute to open source projects.

Join this lively session with Stephen and Jeff as they compare and contrast the current state of the ecosystem and debate what comes next.

Speakers

Jeff Borek

WW Program Director, IBM

Working to build a scalable and consistent supply chain security platform, while continuing to lead the consumption compliance Open Source Program Office (OSPO), including policy, execution and guidance. Working with IBM Government & Regulatory Affairs, Software, Systems, Cloud, Consulting... Read More →

Stephen Walli

Principal Program Manager, Microsoft

OSLC3 OSBusModel 25June2018vFINAL pdf

Monday June 25, 2018 15:00 - 15:40 CST
310

Open Source Leadership

Language English
Experience Level Any

15:50 CST

Getting Started with Logging in Kubernetes - Eduardo Silva, Treasure Data

A good practice when deploying applications in Kubernetes is to set proper instrumentation to gather insights and solve general monitoring needs. Logging is a fundamental piece of the instrumentation cycle and is continually evolving to solve pains associated with unstructured formats, performance, and monitoring.

In this presentation, you will learn the concepts involved in log processing for containerized applications. You will also be introduced to these hot new features in Logging: metering the logging pipeline with Prometheus, performance improvements, scalability and the ability to customize the log processor behavior through declarative resource annotations.

Speakers

Eduardo Silva

Principal Engineer, Arm Treasure Data

Eduardo is a Principal Engineer at Arm Treasure Data, he is the author and maintainer of Fluent Bit Log Processor, a CNCF sub-project under the umbrella of Fluentd. He is an international speaker in Open Source conferences, he has participated in Scale California, LinuxConf AU, Linux... Read More →

Monday June 25, 2018 15:50 - 16:30 CST
309B

Cloud Native & Serverless & Microservices

Language English
Experience Level Any

15:50 CST

Storage Performance Tuning for FAST! Virtual Machines - Fam Zheng, Red Hat (slides attached)

There are many variables around how you could run your virtual machines. How to locate those that affect I/O performance of your virtual machine? What does each of these options mean and how do they relate to each other? What are the newcomers in the family and how can they help? In this talk, Fam Zheng will take you through the configuration stack of virtual storage devices, decipher the parameters and give suggestions on how to tune for the best performance on your systems.

Speakers

Fam Zheng

Senior Software Engineer, Red Hat

Storage Performance Tuning for FAST Virtual Machines pdf

Monday June 25, 2018 15:50 - 16:30 CST
203AB

KVM

Language English
Experience Level Beginner

15:50 CST

License Information Management: A Case Study - Kate Stewart, The Linux Foundation (slides attached)

License Information Management - Case Study (Steve Winslow and Kate Stewart, The Linux Foundation): For modern open source software projects, license compliance presupposes that a developer or distributor can determine what licenses are present in a codebase. Managing, locating and maintaining license information for a large open source project is often far more complex than simply posting a single LICENSE.txt file. In this tutorial, Steve Winslow and Kate Stewart will present real-world examples to demonstrate techniques and best practices for identifying applicable licenses, handling license compatibility, and communicating license information to a project's contributors and users.

Speakers

Kate Stewart

Senior Director of Strategic Programs, Linux Foundation

L3C 20180625 LicenseInfoMgmt Zephyr pdf

Monday June 25, 2018 15:50 - 16:30 CST
310

Open Source Leadership

Language English
Experience Level Any

16:40 CST

A Practical Introduction to Kubernetes Federated HPAs - Irfan Ur Rehman & Shashidhara, Huawei Technologies

Kubernetes supports simple workload auto-scaling within a cluster using Horizontal Pod Autoscaling (HPA). Multi-cluster Federation enables binding multiple clusters into a cluster pool to overcome limitations imposed by single cluster and cloud-provider boundaries.
Intelligent workload autoscaling across multiple clusters opens up opportunities to safely solve some hard but critically important use cases, such as automated cloud bursting from on-premises to public cloud; follow-the-sun resource migration; and failure-aware global load balancing.

This talk showcases this important new feature. We will explain the design of this feature and demonstrate some compelling new use cases.

Speakers

Shashidhara T D

Senior Software Engineer, Huawei

Shashi is a senior engineer with Huawei Technologies and is currently associated with the cloud platforms team. In his current role he is part of the engineering group that works as a bridge between the kubernetes open source project and Huawei's adaptation of the same in its cloud... Read More →

Irfan Ur Rehman

Sr. Software Engineer, Turbonomic

Irfan is a senior engineer associated with the Advanced Engineering group at Turbonomic. In his current role he is tasked with drafting multi cluster capabilities for Turbonomic’s analytics platform. He has also been associated with SIG Multicluster, particularly Kubernetes Cluster... Read More →

Monday June 25, 2018 16:40 - 17:20 CST
309B

Cloud Native & Serverless & Microservices

Language English
Experience Level Intermediate

16:40 CST

Africa's AI Story: Opportunities for Open Source Projects - Opetunde Adepoju, ladoke Akintola University of Technology

When the whole world talks about innovation in artificial intelligence they usually don't mention Africa. Let's just give them a benefit of doubt and say they forgot about Africa in artificial intelligence innovation. But they are missing out on a huge market share opportunity which abounds in Africa.

In this talk, I will tell the story of AI technologies which have been built by Africans for Africa:
- the story of kudi.ai, lara.ng, delivery science, flyzipline.

I will highlight extensively on opportunities that abound in various fields which open source projects can help solve. I will dig deeper by giving various open source project ideas and a how to build a successful business model from such projects in relation to Africa's market and culture.

Lastly, I will prove with statistics the huge benefits companies who build solutions around Africa's opportunities stand to gain

Speakers

Opetunde Adepoju

Data science student, ladoke Akintola University of Technology

Opetunde is a Global Women in Data Science Ambassador, an initiative of Stanford University and a lead community manager of Facebook Data Science community in Nigeria. She started her career in data science in 2017 and has delivered a speech on data science and Africa at pycon Nigeria... Read More →

Monday June 25, 2018 16:40 - 17:20 CST
306B

Emerging Technologies & Wildcard

Language English
Experience Level Any

16:40 CST

K8s Cluster and Application Monitoring with Prometheus - Max Leonard Inden, CoreOS

Kubernetes is a powerful system to build and operate a modern cloud-native infrastructure. Monitoring with Prometheus ensures that Kubernetes stays healthy. Prometheus is a stateful application, so operating it in a cloud native environment can be a challenging task. The Prometheus Operator makes running highly available Prometheus clusters, and even an entire end to end monitoring pipeline, easily manageable. Max will explain the functionality of the Prometheus Operator and describe a desirable end-to-end monitoring stack, including alerts and dashboards.

Speakers

Max Leonard Inden

Software developer, CoreOS

Max is a software developer at CoreOS and member of the upstream Prometheus project, working both on Prometheus and Kubernetes. Previously hacking on data quality analysis, he decided to stop suppressing his interest for distributed systems at scale and joined CoreOS. Now he implements... Read More →

Monday June 25, 2018 16:40 - 17:20 CST
307A

Infrastructure & Automation

Language English
Experience Level Intermediate

16:40 CST

Better Live Migration on KVM/QEMU - Guangrong Xiao, Tencent Cloud (slides attached)

Live Migration plays a very important role in the cloud industry, e.g, it's a key component for high availability, load balance, etc. Currently Qemu/KVM gains some notable features to improve the performance of live migration, for example, it supports auto-converge, compress, xbzrle and post-copy, etc, however, in Tencent Cloud we met some challenges to enable them in our productions and realized that they do not work well as we expected in the real world.

In this presentation, we are going to present the issues & shortages we found on current KVM/QEMU, then show our solutions to resolve them which will include lockless multithread mode, better vCPU throttle algorithm, redesigning memory mode for compression and xbzrle and so on. Besides that, we will also share the new ideas we innovated to make live migration better.

Speakers

Xiao Guangrong

Senior Software Engineer, Tencent Cloud

Xiao Guangrong is a Linux Kernel developer working on Ftrace, MM, Btrfs but his main interest is KVM. As a active contributor, he was invited to give some presentations at some conferences: Japan LinuxCon 2011, Japan LinuxCon 2012 China CLK 2012, KVM Forum 2016, 2017, 2018. He is... Read More →

Better Live Migration on KVM:QEMU Guangrong Xiao pdf

Monday June 25, 2018 16:40 - 17:20 CST
203AB

KVM

Language English
Experience Level Intermediate

16:40 CST

A Major Overhaul of the APIC Initialization and Vector Allocation - Dou Liyang, Fujitsu (FNST) (slides attached)

Interrupt is one of the important mechanisms of the Linux kernel, vector and APIC tell the
kernel how to operate the interrupt.

With the development of the kernel, the old code leads to many problems, such as vector
space exhaustion, vector allocation chaos, kdump failure, Timer setup error, etc.,

Recently, Thomas Gleixner and Dou Liyang conducted a major overhaul. In this presentation, Dou Liyang will describe the main process of interrupt initialization, discuss the challenges it faces, and introduce what does the overhaul do and explain how it may address those challenges.

Speakers

Dou Liyang

software engineer, Fujitsu(FNST)

Dou Liyang is a Linux kernel developer in Fujitsu Nanda. He primarily works on kernel initialization related technologies. He has contributed to CPU hotplug. Recently he focused on Interrupt initialization and has unified the APIC and interrupt mode setup for kernel.

A Major Overhaul of the APIC Initialization and Vector Allocation in Linux Kernel 6 14 4 3 pdf

Monday June 25, 2018 16:40 - 17:20 CST
307B

Linux Systems

Language English
Experience Level Any

16:40 CST

Why You Need an Open Source Program Office - Chris Aniszczyk, Cloud Native Computing Foundation (slides attached)

Speakers

Chris Anisczcyk

CTO, Linux Foundation (CNCF)

Starting an Open Source Program In Your Company (LC3 China 2018) pdf

Monday June 25, 2018 16:40 - 17:20 CST
310

Open Source Leadership

Language English
Experience Level Any

10:05 CST

Keynote Panel: Cloud Native - Dan Kohn, Cloud Native Computing Foundation; Junjie Cai, Alibaba Cloud; Anni Lai, Huawei; Todd Moore, IBM; Michelle Noorali, Microsoft; Haifeng Liu, JD.com; Liu Xin, Tencent

Moderators

Dan Kohn

General Manager, Linux Foundation Public Health, Linux Foundation

Dan leads Linux Foundation Public Health, a new initiative to use open source software to help public health authorities combat COVID-19 and serves as VP, Strategic Programs for the Cloud Native Computing Foundation, which sustains and integrates open source technologies like Kubernetes... Read More →

Speakers

Junjie Cai

Senior Staff Engineer, Alibaba Cloud

Junjie (Jack) is the Chief Architect of the Elastic Compute Service at Alibaba Cloud. He has extensive experience with Cloud Computing across IaaS, PaaS and SaaS. His current focus is to make the IaaS controller more intelligent for better compute service availability, performance... Read More →

Anni Lai

Head of Global Business Development, VP of Strategy & Business Development, Huawei

Anni leads the Operations of Huawei’s Cloud Open Source Development Team responsible for OpenStack, Containers, Open Storage, AI/Deep Learning, and other Cloud-related open source projects. Anni currently sits on both OpenStack and CNCF Boards. In addition, Anni is part of Huawei’s... Read More →

Xin liu

General Manager, Tencent

刘昕，现任腾讯移动网事业群运营部助理总经理，全面负责移动互联网事业群技术平台的研发和运营工作。领导团队进行架构设计与服务优化，打造微服务开发框架、名字服务、监控服务、数据缓存服务、分布式存储系统、消息中间件、机器学习平台，为腾讯手机浏览器、腾讯桌面浏览器、应用宝、腾讯手机管家、腾讯桌面管家以及腾讯地图、翻译君提供稳定可靠的运营服务。致力于腾讯开源社区建设工作，推动微服务开发框架TARS、轻量化名字服务TSeer开源，以及开源项目在业界应用。目前开始探索5G网络中IT技术应用和V2X、VR/AR、IoT、云游戏应用在5G网络部署与适配。Mr... Read More →

Haifeng Liu

Chief Architect and Vice President of Technology, JD.com

Haifeng has always had a passion for building complex systems. He is the Chief Architect of JD.com, China’s largest retailer and the world’s third largest internet company by revenue. He is also Vice President of JD’s Technical Infrastructure department. Haifeng joined JD in 2013 and is responsible for the construction and optimization of the infrastructure that powers al... Read More →

Todd Moore

Vice President - Open Technology, IBM Developer and Developer Advocacy, IBM

Open Source innovator, Agile and Business development strengths. Industry leader in open source community development. Extensive experience in creating HW and Software architectures for desktops, servers, middleware, and device middleware. Strong background in performance, performance... Read More →

Michelle Noorali

Senior Software Engineer, Microsoft

Tuesday June 26, 2018 10:05 - 10:45 CST
Plenary Hall B

Keynote

Language English
Experience Level Any

11:20 CST

Extend Hyperledger Fabric to Support EVM Contract and Web3 Toolings - Jiannan Guo & Swetha Repakula, IBM (slides attached)

Hyperledger Fabric is a permissioned blockchain platform where people build applications to communicate and interact with deployed smart contracts. However, smart contracts and apps must be written in programming languages like Go or Javascript. Alternatively, Ethereum made it friendly to write smart contracts by inventing Contract-Oriented Languages, e.g. Solidity, and created a Web3 library that can be used to interact with smart contracts.
The talk will cover how an EVM has been integrated into Fabric, enabling users to write contracts in Contract-Oriented Languages as well as interact with them via the Web3 library. Developers familiar with Ethereum can easily develop on Fabric, leverage tools like Truffle & Remix, as well as migrate their Distributed Apps (DApps) with minimal effort. The talk will also describe use cases where permissioned blockchains are more desirable.

Speakers

Jay Guo

Software Engineer, IBM

Jiannan (Jay) Guo is working for IBM China as software engineer. His main job is to contribute and advocate open source projects and he is currently maintainer of Hyperledger Fabric, a permissioned blockchain technology. He used to contribute to Apache Mesos, a container orchestration... Read More →

Swetha Repakula

Open Source Contributor, IBM

Swetha Repakula is currently a software engineer at IBM’s Open Technologies and a member of the Technical Steering Committee at Hyperledger. For the last two years, she has been working on Hyperledger Fabric, specifically on its EVM integration. Previously she was a full time open... Read More →

LC3 EVM pdf

Tuesday June 26, 2018 11:20 - 12:00 CST
311A

Blockchain

Language English
Experience Level Intermediate

11:20 CST

How Good Is Our Code? Kubernetes, Cloud Native Development, and Continuous Integration - Dan Kohn, CNCF

Cloud Native computing, such as using Kubernetes, is defined as being a mix of containerization, orchestration, and microservices. In this talk, Dan will review cloud native architectures, and argue that continuous integration is actually the most important part of the cloud native architecture. He will discuss how testing in continuous integration is similar to entrepreneurship and science, in comparing idealized versions to objective reality.

Speakers

Dan Kohn

General Manager, Linux Foundation Public Health, Linux Foundation

Tuesday June 26, 2018 11:20 - 12:00 CST
310

Cloud Native & Serverless & Microservices

Language English

11:20 CST

Introduction to the Zephyr Project - Ryan Qian, NXP & Kate Stewart, The Linux Foundation (slides attached)

The Zephyr OS is a small, scalable, open source RTOS designed for microcontroller class devices across multiple architectures, and includes networking, connectivity and security features necessary for IoT products. This talk will provide an introduction to the Zephyr Project, highlight key features, and share upcoming development plans, including our first LTS release.

Speakers

Jianghao QIAN

Software Engineer, NXP

Now I'm working on MCUX SDK development and NPI enablement for Kinetis & i.MXRT family. Also have worked on Windows Embedded/Linux BSP driver development and validation for i.MX family from 2006

Kate Stewart

Senior Director of Strategic Programs, Linux Foundation

L3C 20180626 Zephyr Overview Presentation pdf

Tuesday June 26, 2018 11:20 - 12:00 CST
306A

IoT & M2M

Language English
Experience Level Beginner

11:20 CST

Three-Hot Technologies and Their Usages at Huawei's Public Cloud - Liu Jinsong, & Huang Zhichao, Huawei (slides attached)

In this proposal, Liu Jinsong introduces Huawei's three-hot technologies: hot-fix, hot-replacement, and hot-migration (live migration). It firstly analyses the online-update needs coming from Huawei's cloud infrastructure, then discusses the different usage models of three-hot technologies. It then introduces some key technical points of three-hot technologies, for example, how to hot-replace qemu/network/storage components of Huawei's public cloud, how to reduce CPU downtime (under big memory pressure) and network breaktime (reduce VPC breaktime from several minutes to less then 100ms) of live migration, and how to ensure 100% VM alive when live migration fails.

After introducing Huawei's three-hot technologies, it shows some usage models of three-hot technologies at Huawei's public cloud. For example, how Huawei solved Intel's security holes recently by using three-hot technologies.

Speakers

Zhichao Huang

Senior Software Engineer, Huawei

Zhichao Huang is a senior software engineer from Huawei. He has 12 years working experience on Linux/Virtualization.

Jinsong Liu

Huawei

Three hot Technologies and Their Usages at Huawei's Public Cloud pptx

Tuesday June 26, 2018 11:20 - 12:00 CST
203AB

KVM

Language English
Experience Level Intermediate

13:30 CST

Istio - Weaving, Securing and Observing Microservices - Lin Sun, IBM & Wencheng Lu, Google

With the rapid adoption of microservices, Istio has become the de facto framework to load-balance, route, secure and monitor the traffic that flows between microservices. Istio provides a common networking, security, policy and telemetry substrate for services that we call a ‘Service-Mesh’. Come learn how the service-mesh helps with the transition to microservices, to empower operations teams, to adopt security best-practices and much more. We’ll also cover the state and ecosystem of the project, where it’s headed and how you can get involved.

Speakers

Wencheng Lu

Senior Staff Software Engineer, Google

Dr. Wencheng Lu is a senior staff software engineer at Google. He has been with Google for 12 years. He is currently a tech lead manager overseeing Istio Security.

Lin Sun

Senior Technical Staff Member, IBM

Lin has been working on container and cloud-native since 2014 from Docker to Kubernetes to Service Mesh. She is currently an Istio maintainer, a member of the Istio steering committee and technical oversight committee. She is passionate about new technologies and loves to play with... Read More →

Tuesday June 26, 2018 13:30 - 14:10 CST
309A

Cloud Native & Serverless & Microservices

Language English
Experience Level Beginner

13:30 CST

Kubernetes for Edge Computing across Inter-Continental Haier Production Sites - Julia Han & Jiyuan Tang, Caicloud (slides attached)

Cloud computing has become the de facto IT best practice and Kubernetes is defining the new norm to this end. Yet to the contrary, edge computing is creating buzz as it offloads processing from centralized server farms to peripheral devices closer to users, catering to enterprises with geographically distributed users.

Alas, edge computing involves heterogeneous and distant nodes causing mayhem for operators and a far cry from uniform management. Haier, a global manufacturer giant, is plagued by the pain as it delivers online services to inter-continental users via limp edge nodes at over a hundred sites, each incapable of running a Kubernetes cluster. We present an edge computing extension on top of Kubernetes with a success story in Haier, where we use one multi-tenant Kubernetes control plane to manage distributed satellite devices and nodes for efficient and unified management.

Speakers

Julia Han, Ph.D

COO 首席运营官, Caicloud

Julia is co-founder and COO at Caicloud that provides Kubernetes based toolings and K8s + ML platform for enterprises in production in China since 2015. As the very initial evangelist of Kubernetes in China, she has served as CNCF global ambassador and organized dozens of K8S meetups... Read More →

Jiyuan Tang

Technical Director, Caicloud

...

Kubernetes for Edge Computing across Inter Continental Haier Production Sites Julia Han & Jiyuan Tang pdf

Tuesday June 26, 2018 13:30 - 14:10 CST
307A

Infrastructure & Automation

Language English
Experience Level Any

13:30 CST

Moving Fast and Slow at the Same Time: Lifecycle Commitments Across Major OS Releases - Adam Samalik, Red Hat (slides attached)

Modularity brings multiple versions of applications and language stacks to Fedora — so you can choose the right version you need for your application. Multiple versions allow for life cycles that go beyond a single release of a distribution. This could allow you to stay on older versions across major versions of the underlying operating system.

Fedora 28 Server is the first deployment ready Fedora release including Modularity. Come and learn what it means and see how you can benefit from a server OS that gives you the ability to move both fast and slow at the same time. Containers included, but not required.

Speakers

Adam Samalik

Principal Software Engineer, Red Hat

Computer and automation enthusiast. Enjoys cooking, baking, and biking. Appreciates good coffee, clever design, and walkable cities. Tinkers with Linux for a living at Red Hat.

Moving Fast And Slow At The Same Time Lifecycle Commitments Across Major OS Releases Adam Samalik pdf

Tuesday June 26, 2018 13:30 - 14:10 CST
310

Infrastructure & Automation

Language English
Experience Level Any

13:30 CST

Pushing the Kubernetes Experience to IoT Devices - Erno Aapa, Eliot (slides attached)

Containers have changed how we develop, ship and manage software in the cloud. Now is time to take IoT to the next level. While building automated drone inspection solution, Erno faced the problem that current IoT device management tools are coming far behind comparing to nowadays cloud tools and best practices.

To make IoT development, shipping and management easy, he started a new open source project, called Eliot. It takes latest state-of-the-art container technology to the edge and provides Kubernetes like developer-friendly interface to make the device software management easy, fast and fun again!

Speakers

Erno Aapa

Founder/CTO, Eliot

Erno Aapa is a Co-Founder of Polar Squad, Founder of Eliot IoT container platform and founder of Finnish DevOps community with over ten years experience from development, operations, and team leading in the software industry and over five years from DevOps. He is constantly researching... Read More →

Eliot IoT China pdf

Tuesday June 26, 2018 13:30 - 14:10 CST
306A

IoT & M2M

Language English
Experience Level Intermediate

13:30 CST

Intel’s Next Generation Hardware Virtualization Technologies to Make Cloud more Secure and Scalable with High Performance - Yu Zhang, Intel (slides attached)

Intel’s upcoming processor is providing support for huge memory, more security enhancements, and extended performance tuning capabilities for cloud computing.

To support huge memory systems, the new platform is introducing 5-level paging in both hypervisor and VMs, which extends both the linear and physical address width for Intel's new memory technologies. For performance, Intel is delivering new instructions like AVX512 to accelerate AI computing. Meanwhile, features like Intel PT will empower VMs with advanced performance tuning capabilities, and can be used to enhance control flow integrity. For security, we are offering UMIP to prevent some sensitive instructions from user mode execution, as well as EPT-based SPP to allow fine-grained write-permission for VM introspection.

In this presentation, Yu will give an introduction to these fantastic features, their respective usage models, and current status.

Speakers

Yu Zhang

Virtualization Developer, Intel

Yu is a virtualization developer from Intel's virtualization team. He had 10+ years’ experiences in virtualization areas from I/O to CPU/memory virtualization, from performance tuning to security enhancements. Yu’s public presentation experience includes Xen summit/LC3 conference/Intel... Read More →

new virt features linuxconf pdf

Tuesday June 26, 2018 13:30 - 14:10 CST
203AB

KVM

Language English
Experience Level Intermediate

13:30 CST

Diary of a Drive by Coder: Tips and Tricks for Working with Upstream - James Bottomley, IBM (slides attached)

Most of the community talks emphasize how to join the community and become an ongoing part of it, but what if you simply want to get a feature upstream and then move on to the next task? This behavior is called "Drive by Coding" and can be seriously frowned on by some communities who value ongoing community participation, but at the same time, it's the essence of the open source "scratch your own itch" principle.

This talk will showcase the experiences of an experienced kernel developer trying to do ecosystem enabling for kernel features via what is effectively driven by coding in the projects that should consume the feature. We will start off by talking about our first Drive By coding experience: trying to get support in PulseAudio for using the UE Boom 2 Stick as a highly efficient conference phone and move on to our later work on TPM enabling the cryptography and key handling (ssh and gnupg) infrastructure in Linux. This talk will show a range of community behaviors varying from hostile to extremely welcoming, and detail the successes and sometimes spectacular failures. We'll derive lessons learned including how to smooth the path, how to get upstream to like you but also how to recognize when community hostility is intractable and what to do in this case.

Speakers

James Bottomley

Distinguished Engineer, IBM

James Bottomley is a Distinguished Engineer at IBM Research where he works on Cloud and Container technology. He is also Linux Kernel maintainer of the SCSI subsystem. He has been a Director on the Board of the Linux Foundation and Chair of its Technical Advisory Board. He went to... Read More →

Tuesday June 26, 2018 13:30 - 14:10 CST
307B

Linux Systems

Language English
Experience Level Any
Link to Presentation: https://www.hansenpartnership.com/Impress-Slides/LinuxCon-China-2018/

14:20 CST

A Day in the Java Developer’s Life, with a Taste of Kubernetes - Arun Gupta & Peter Dalbhanjan, AWS

Deploying your Java application in a Kubernetes cluster could feel like Alice in Wonderland. You keep going down the rabbit hole and don’t know how to make that ride comfortable. This no-slide and code-only session will explain how a Java application consisting of different microservices can be deployed in a Kubernetes cluster. Specifically, it will explain the following: -Show a Java application with three microservices -How this application is packaged as a Docker image -Create Kubernetes manifests -How Helm charts are created and hosted in a Helm repository -Test in a local environment such as minikube -Attach debugger (may need to find out if tooling exists in this area) -Install Istio in k8s, show service visibility -Install k8s on AWS -Migrate application from a local cluster to a cluster in the Cloud -Setup deployment pipeline -Use an Alexa skill to scale the application -Change application, show A/B using Istio

PLEASE VISIT: https://github.com/arun-gupta/java-k8s

Speakers

Peter Dalbhanjan

Arun Gupta

Head of the Open Source Program Office, Apple

Arun Gupta is head of the Open Source Program Office at Apple and chairperson of CNCF Governing Board. Previously, he worked at Amazon, partnering with multiple engineering teams to help define their open source strategy. He has spent over a decade at Sun Microsystems and Oracle... Read More →

Tuesday June 26, 2018 14:20 - 15:00 CST
309A

Cloud Native & Serverless & Microservices

Language English
Experience Level Any

14:20 CST

Comparisons of Cloud Native Communities - Swetha Repakula & Morgan Bauer, IBM (slides attached)

Day by day, the number of open source projects continues to increase. Each project has unique communities and practices different development methodologies. This talk will focus on the Docker, Kubernetes and Cloud Foundry cultures and outline their main differences and commonalities. The projects have different review processes from the pair programming model to the LGTM process, an interesting artifact of GitHub. Becoming a committer on CF relies on the Dojo, while Docker establishes a meritocracy of peers and Kubernetes behaves similarly with individual sponsors.

Morgan will share his journey of becoming a maintainer on the core Docker Engine and a founding member of the Kubernetes Service Catalog. Swetha will tell her story of becoming a contributor to the Diego team and what she has learned from Cloud Foundry. By sharing their experiences, they hope to encourage others to participate.

Speakers

Morgan

Sr Software Engineer, IBM

After contributing to Docker & Kubernetes for 3 years, Morgan has gained valuable insight into the varying culture around open source container technology. Pivoting towards blockchain technologies has landed Morgan in Hyperledger Fabric. Morgan is a maintainer on the core Docker Engine... Read More →

Swetha Repakula

Open Source Contributor, IBM

CloudNativeCommunities LC3 2018 pdf

Tuesday June 26, 2018 14:20 - 15:00 CST
306B

Emerging Technologies & Wildcard

Language English
Experience Level Beginner

14:20 CST

Kubernetes Security Best Practices - Ian Lewis, Google

Containers give developers the ability to isolate applications from one another, but that’s not enough. Resource isolation is much different than security isolation. How do we make applications deployed in containers more secure? How do we apply existing tools like SELinux and AppArmor, and seccomp to our containers running in Kubernetes? How can we apply the policy to our network and services to make sure applications only have access to what they need and nothing more?

In this talk, attendees will learn about the risks and attack surfaces and see tools like PodSecurityPolicy, SELinux, AppArmor, and seccomp in action to improve the security of containers deployed in Kubernetes. We’ll then go up the stack and learn how to apply network policy to containers to further improve security.

Speakers

Ian Lewis

Software Engineer, Google

Ian is an engineer at Google working on Supply Chain Security. Ian has been living in Tokyo since 2006 and has had various developer and operations roles throughout his career while staying active in the open-source developer community. Ian is a contributor to the SLSA framework and... Read More →

Tuesday June 26, 2018 14:20 - 15:00 CST
307A

Infrastructure & Automation

Language English
Experience Level Intermediate

14:20 CST

Accelerating NVMe I/Os in Virtual Machine via SPDK vhost - Ziye Yang & Changpeng Liu, Intel (slides attached)

SPDK (storage performance development kit, http://spdk.io) is an open source library used to accelerate the storage service (e.g., file, block) especially those service built on PCIe SSDs (e.g., 3D XPoint SSDs).

In this presentation, we would like to introduce SPDK user space vhost* solution (i.e., vhost-scsi/blk/NVMe), which can be used together with QEMU/KVM to accelerate virtio-scsi, virtio-blk and even emulated NVMe controller inside Guest OS for VMs. Relying on SPDK vhost* solution, the performance of I/Os inside VMs can be greatly improved compared (e.g., I/O IOPS increasing, I/O latency decreasing ) with an existing solution (e.g., original QEMU emulation solution, kernel vhost* solution). Moreover, SPDK vhost* solution is adopted by many cloud service providers (e.g., Alibaba).

Speakers

Changpeng Liu

Cloud Software Engineer, Intel

Changpeng is a Cloud Software Engineer in Intel. He has been working on Storage Performance Development Kit since 2014. Currently, Changpeng is a core maintainer for the SPDK. His areas of expertise include NVMe, I/O Virtualization, and storage offload on IPU.

Ziye Yang

Staff Cloud software engineer, Intel

Ziye Yang is a staff software engineer at Intel and is currently involved in cloud native related projects. Before that, Ziye worked at EMC for 4.5 years. Ziye is interested in system virtualization, file system and storage related research and development work. Ziye currently has... Read More →

Accelerating NVMe IOs in VMs via SPDK vhost pdf

Tuesday June 26, 2018 14:20 - 15:00 CST
203AB

KVM

Language English
Experience Level Any

14:20 CST

Multiple Networks and Isolation in Kubernetes - Michael Xie & Kaveh Shafiee, Huawei Technologies (slides attached)

Kubernetes currently only supports one network interface per pod, and the entire cluster has one flat network plane. In this presentation, we will share our implementation on enabling multiple networks and network isolation for NFV customers. Which includes physical network abstraction to enable the ability for pods to select physical network, and logical network for users to define network namespace and isolation. In addition, we enabled multiple plugin support at runtime, Kubernetes cluster can be deployed without binding to any specific network plugin, pods can choose network plugin in their own spec.

Speakers

Kaveh Shafiee

Cloud Architect, Huawei Technologies

Cloud architect at Huawei Seattle office. He has been involved in numerous open-source projects. His topics of interest are container networking, container orchestration frameworks, multi-tenancy, distributed development platforms. Prior to joining Huawei, he was an architect at WindRiver... Read More →

Haibin Michael Xie

Principal Architect, Huawei Technologies

Michael Xie is Principal Architect at Huawei PaaS team, working on container networking, container orchestration framework, PaaS platform and middleware services. Prior to joining Huawei he was a pricipal software engineer at AOL ads and senior software engineer at Microsoft working... Read More →

Multiple Networks and Isolation in Kubernetes Michael Xie pdf

Tuesday June 26, 2018 14:20 - 15:00 CST
311B

Networking & Orchestration

Language English
Experience Level Intermediate

15:30 CST

Cloudbursting with Kubernetes - Irfan Ur Rehman & Quinton Hoole, Huawei Technologies

Cloudbursting is one of the most useful features of cloud computing for applications with high traffic volumes during only some hours in a day, or only during some days in a month.
Kubernetes as of release 1.9 supports both application auto-scaling based on metrics such as CPU utilization and cluster node auto-scaling based on application workload (pods) needs.

Kubernetes also supports cluster federation, which enables binding of multiple clusters into a single observable unit from the point of view of a user.

This presentation will discuss how we’ve used these features to reliably burst from a priority/ low-cost cloud cluster to another, using Kubernetes. We’ll introduce a possible spec, a reference design, discuss the missing pieces and a provide a demo.

Speakers

Quinton Hoole

Technical Vice President, Futurewei

https://www.linkedin.com/in/quintonhoole/YouTube me for previous presentations.CNCF TOC Member

Irfan Ur Rehman

Sr. Software Engineer, Turbonomic

Tuesday June 26, 2018 15:30 - 16:10 CST
309A

Cloud Native & Serverless & Microservices

Language English
Experience Level Intermediate

15:30 CST

Panel Discussion: Real-life Case Studies of how Blockchain is being Adopted into the Real Economy in China - Moderated by Ling Shao, CTO, Easy Visible Supply Chain Management Co Ltd

You will hear firsthand from Dr. Yu Jianing, Director of The Institute of Industrial Economics at the Ministry of Industry and Information Technology, who authored the Information Center of the Ministry’s recently released Blockchain Industry White Paper. Dr. Yu will discuss the view of blockchain in China, where it is now and how it will develop in the coming years. You will also hear from industry experts involved in the development of leading permissioned blockchain applications in China about their progress, opportunities and challenges, and how blockchain is being integrated into many sectors.

Moderators

Ling Shao

Speakers

Dr. Yang Yue Feng

Dr. Yang Yue Feng is at the Bank of Jiangsu.

Hao Han

Dr. Yu Jianing

Dr. Yu Jianing is the director of The Institute of Industrial Economics at the Ministry of Industry and Information Technology

Hai Bo Sun

Hai Bo Sun is the Director of Blockchain R&D at JD.com.

Spark Zhang

Blockchain Strategic Expert, Huawei

张小军是华为区块链战略专家，在华为工作15年，从2003年加入华为工作。2003年-2005年主要在网络产品线做开发工作，负责路由器、防火墙的软件开发，2005年到2009年进入战略Marketing部门，负责网络解决方案的设计与营销，2009年进入华为公司战略部，并曾经做过两年日本区域战略部主任。张小军学士学位，毕业于华北电力大学 Xiaojun... Read More →

Tuesday June 26, 2018 15:30 - 16:10 CST
Plenary Hall B

Executive Leadership Forum

Language English
Experience Level Intermediate

15:30 CST

Containerized Monitoring: Adaption to Different Infrastructures and Verification Schemes - Yang (Gabriel) Yu, Huawei & Emma Foley, Intel

In this presentation, monitoring with its containerized solutions to different infrastructures and verification schemes are discussed which are developed in OPNFV community. Monitoring of the system behaviors establishes a common basis and provides standardized metrics sets for different applications. It helps developers, system maintainers, etc., to locate the root causes, to alarm for malfunctions, to analyze the system behaviors, etc. Containerized monitoring solutions are proved to be more isolated and more adaptive to different systems.

Demonstrations of how developing or configuring containerized monitoring adaptions to different OPNFV OpenStack deployments, different K8S applications, different verification schemes are presented. Questions about automation, visualizing bottlenecks, multi-dimension dashboarding, etc., are also discussed in the presentation.

Speakers

Emma Foley

Software Engineer, Intel

Emma is a Software Engineer in the Network Platforms Group in Intel. Emma has worked on Service Assurance, making more statistics available for the OpenStack cloud, by enabling collectd stats and events to be used in OpenStack. She is committer to the OPNFV Barometer project, and... Read More →

Yang (Gabriel) Yu

Project Manager, Huawei

Gabriel is a project manager on Open Source Development Team at Huawei. He is currently involved in LF Edge as SPC member and LF Networking as PTL of the OPNFV Bottlenecks project. His experience also includes leading testing working group and long duration testing initiative in OPNFV... Read More →

Tuesday June 26, 2018 15:30 - 16:10 CST
307A

Infrastructure & Automation

Language English
Experience Level Any

15:30 CST

Runtime VM Protection By Intel Multiple Key Total Memory Encryption - Kai Huang, Intel Corporation (slides attached)

Today cloud data protection is a critical requirement, and it will be even more important in the future as we have more in-depth and sensitive data in the cloud for new types of workloads (such as IoT and machine learning). Since VMs (Virtual Machines) are the key container of such data, it is crucial to protect VMs at rest (as in storage), in-transit (as in network), and during execution.

Encryption is considered as the foundation technology for VM protection, and there are established encryption technologies for VMs at rest and in-transit. Intel Multiple Key Total Memory Encryption (MK-TME) is Intel platform's new hardware feature which supports VM encryption during runtime, thus completes VM protection in VM's entire lifecycle. In this presentation, we give you an introduction to Intel MK-TME, including its hardware architecture, Linux/KVM design, and typical deployment in the cloud.

Speakers

Kai Huang

Software Engineer, Intel Corporation

Software engineer working on Linux/KVM enabling for Intel's latest virtualization technologies.

mktme lc3 2018 pdf

Tuesday June 26, 2018 15:30 - 16:10 CST
203AB

KVM

Language English
Experience Level Intermediate

15:30 CST

LKP-tests: A Comprehensive Performance Analysis Tool for Linux - Ying Huang, Intel Corporation

Nowadays there are many scattered benchmarks and tools for different Linux kernel sub-systems, which leads to a barrier to understanding the intricate details of the system. LKP-tests tool (LKP stands for Linux Kernel Performance) is an open source standalone tool, that allows to evaluate and analyze Linux kernel performance in a thorough way. It was originally used to run the benchmarks, analyze the results, and reproduce the issues in the famous 0-Day Linux kernel test service. Now, it helps us much in our Linux kernel performance optimization work. In this presentation, we will introduce the framework and main components of LKP-tests tool, how to use it to build, install, and run various benchmarks and test cases, and how to do analysis and comparison with various performance analysis tools. We will also illustrate how we use it to optimize performance for Linux kernel with examples.

Speakers

Ying Huang

Senior Software Engineer, Intel Corporation

Ying Huang is a senior software engineer in Intel's Open Source Technology Center (OTC). At Intel over 10 years, he's worked on Linux kernel, including x86 boot, kexec, RAS, etc. And now, he is working on 0day Linux kernel performance testing and memory management subsystem performance... Read More →

LKP tests LinuxCon 2018 pdf

Tuesday June 26, 2018 15:30 - 16:10 CST
307B

Linux Systems

Language English
Experience Level Intermediate

16:20 CST

Securing Your Serverless Endpoint with Webtask - Md. Shahbaz Alam, Mozilla / Auth0 (slides attached)

The way we write APIs is changing. SPA frameworks like Angular are shifting the paradigm of API consumption and to be effective developers we have to keep up. We often dedicate a lot of time in crafting powerful APIs that interact with many different clients but overlook proper security measures that can come back to haunt us.In this talk, we'll look at the proper way to secure our API's with JSON Web Tokens. We'll go from learning what JSON Web Tokens are, why they're the driving force in API security, and to put theory into practice actually build a real-world implementation using Node.js and Angular where we'll show common best practices.
Webtask allows you to build applications without thinking about infrastructure. Simply write your server-side logic, deploy your functions via the Webtask CLI, and access your serverless backend over HTTP.

Speakers

Md. Shahbaz Alam

Technical Evangelist, Auth0 / Mozilla

I am a co-founder of a Startup where we built products based on emerging technologies. Technical Evangelist at Mozilla and Auth0. Love spreading the knowledge. I am an open source enthusiast, volunteer for many organizations, Mozilla, Auth0, Brave, DuckDuckGo to name few. I believe... Read More →

Serverless China LC3 pdf

Tuesday June 26, 2018 16:20 - 17:00 CST
309B

Cloud Native & Serverless & Microservices

Language English
Experience Level Intermediate

16:20 CST

Using Scale-Out Data Replication for Disaster Recovery Planning at NTT - Luwei He, Huawei

Disaster Recovery (DR) planning is crucial to any business and especially service providers such as NTT, whose core business is based on SLA’s. Replication which is the simple concept of copying data from one system to another across sites, has matured over the years, providing better Recovery Time Objective (RTO) and Recovery Point Objective (RPO) for DR. In this session, we will show how OpenSDS is enabling replication for Kubernetes clusters across sites and can scale out to match the needs of cloud-native applications. Besides, we will talk about DR planning at NTT - architecture and design, RTO and RPO and other requirements, and consideration in adopting OpenSDS scale-out data replication and other replication technologies.

Speakers

Luwei He

Tuesday June 26, 2018 16:20 - 17:00 CST
309A

Cloud Native & Serverless & Microservices

Language English
Experience Level Beginner

16:20 CST

Convergence of Virtual Machines and Containers Orchestration using KubeVirt - Chunfu Wen, Red Hat (slides attached)

Whenever in order to implement and manage cloud: IASS and CASS, two separate orchestration tool, namely libvirt and Kubernetes respectively, are used.
Customers need to take care of both of them in two infrastructure stacks even sometimes they are built on each other.

Wouldn't it be better if we can manage VMs and containers using the same API? KubeVirt, a Kubernetes add-on to manage virtual machines, is one way to satisfy it.

This talk aims to introduce KubeVirt, a common ground for virtualization solutions on top of Kubernetes, its design, and implementation, and finally present one live demo.

Speakers

Chunfu Wen

principal software quality engineer, Red Hat

I am an open source contributor and promoter.I work at Red Hat, and have 17+ years working experiences in various companies such as:Oracle, Motorola, Siemens.

Convergence virtual machines and containers orchestration using KubeVirt pdf

Tuesday June 26, 2018 16:20 - 17:00 CST
307A

Infrastructure & Automation

Language English
Experience Level Beginner

16:20 CST

vhost Dataplane in Qemu - Jason Wang, Red Hat (slides attached)

Several limitations were spotted for the popular vhost-user protocol in recent years. Most are due to the design of a split device model which tries to offload datapath out of qemu: 1) the protocol was tightly coupled with virtio which brings extra complexity of implementing new features 2) datapath was offloaded completely which will lead poor performance (e.g the vIOMMU integration, 3) the increase of attack surface. So in this presentation, a new kind of vhost that was implemented through qemu IOThread was introduced to try to address all the above drawbacks. The talks will first discuss the design of vhost dataplane and how it addresses the above limitations. Then A prototype implementation and detailed comparison between vhost data plane vs vhost-user will be presented. At last the performance numbers and future work will be discussed.

Speakers

Jason Wang

Senior Principal Software Engineer, Red Hat

Co-maintainer of kernel virtio, vdpa and vhost drivers. Maintainer of Qemu networking subsystems. Author of vDPA support in Kernel.

vhost dataplane v2 pdf

Tuesday June 26, 2018 16:20 - 17:00 CST
203AB

KVM

Language English
Experience Level Intermediate

16:20 CST

Panel Discussion: Why Open Source Marketing Matters: For Projects, Users and Vendors - Moderated by Melissa Logan, Cloud Foundry Foundation

When people think of an open source “contributor” they are likely picturing the developers who contribute code. But open source projects require a variety of contributions--from development to documentation to release management to marketing. The role of marketing in open source is critical but often overlooked and misunderstood. Marketing underpins the success of many open source communities, and when marketing strategy is executed proficiently, it enables these open source communities to thrive. Successful open source marketing builds a stronger ecosystem that bolsters the success of all involved, including project, vendors, and users. In this panel, open source marketing leaders will discuss the role of marketing, provide examples of open source projects powered by marketing, and offer insight into how marketing teams from both enterprises and open source projects can partner together to achieve greater results.

Moderators

Melissa Logan

The Linux Foundation

The Linux Foundation has been leading the open source software revolution since 2000. Melissa Logan joined in 2012 and launched and lead marketing for the LF's first hosted open source project in 2013. Since then the LF has become the home to hundreds of open source projects that... Read More →

Speakers

Lingli Deng

Technical Manager, China Mobile

Lingli obtained her Doctorate in Computer Application Technology from the Institute of Software, Chinese Academy of Sciences and joined China Mobile in 2009.She is a core member of the Novonet project which drives SDN/NFV strategy for China Mobile, and has been working on evaluation... Read More →

Dee Kumar

Vice President, Developer Marketing, Linux Foundation

Dee Kumar has more than 15 years of cloud computing experience. Her work at CNCF is focused on working with the developer and IT pro communities to advance open source projects at scale. Most recently, Kumar was Director of Product Marketing at Docker where she built and launched... Read More →

Anni Lai

Head of Global Business Development, VP of Strategy & Business Development, Huawei

Tuesday June 26, 2018 16:20 - 17:00 CST
306A

Open Source Leadership

Language English
Experience Level Any

17:15 CST

BoF: Not One Size Fits All, How to Size Kubernetes Clusters - Guang Ya Liu & Sahdev Zala, IBM (Watson and Cloud Platform)

Sizing Kubernetes clusters, at best, can be compared to throwing darts at a dartboard, in the dark. However, our enterprise-tested rules and tips can shine a little light on the dartboard and help you have enough capacity for your apps. In this lightning talk, we will go over some tips to help you throw a bullseye for sizing your clusters. A unique demo will accompany this talk. Don't throw darts in the dark -- Kube at scale is possible.

Speakers

Guangya Liu

Senior Technical Staff Member, IBM

Guangya Liu is a Senior Technical Staff Member (STSM) for IBM Cloud Pak for Watson AIOps and ITOM (IT Operations Management). He is the technical leader driving the IBM Cloud Pak for Watson AIOps foundation development and customer support. He is also the open source leader for the... Read More →

Sahdev P. Zala

Senior Technical Staff Member, Open Source Developer, IBM

Sahdev Zala is a Senior Technical Staff Member at IBM Research. He is an open source developer for over a decade and currently contributes to the PyTorch and Kubernetes. He serves as a maintainer for the CNCF etcd project. Previously, Sahdev was a maintainer in the OpenStack project... Read More →

LC3 June262018 SahdevZala GuangYa pdf

Tuesday June 26, 2018 17:15 - 18:15 CST
307A

BoF

Language English
Experience Level Beginner

09:25 CST

Keynote: Shaping the Cloud Native Future - Abby Kearns, Executive Director, Cloud Foundry Foundation

Cloud Foundry is an integral part of the movement creating interoperability among the open source, cloud-native ecosystem. Complementary, interlocking open source technologies like Cloud Foundry, Kubernetes, and the Open Service Broker API are shifting the way industries function. These technologies weave together flexibility and application development for virtually any type of business.

What began as a grassroots movement among developers has mushroomed into a massive collaborative community. Linux laid the groundwork in 1991, and the Linux Foundation continues to host the world’s leading open source projects. Today projects like Cloud Foundry and Cloud Native Computing Foundation, as well as standards like the Open Container Initiative, effectively serve as the voice of the people. The developers creating these projects are defining the next generation of technology infrastructure.

In this talk, Abby Kearns will discuss the importance of interoperability, and how it is critical to the future success of technologies. Abby will also discuss the role that open source plays in cloud technologies -- delivering a flexible, scalable strategy to drive the future of business.

Speakers

Abby Kearns

Executive Director, Cloud Foundry Foundation

Wednesday June 27, 2018 09:25 - 09:45 CST
Plenary Hall B

Keynote

Language English
Experience Level Any

09:50 CST

Keynote: Simplify Multimodal IT: Bridge Traditional and Software-defined Infrastructure - Alan Clark, Director, CTO Office, SUSE

Many organizations find themselves undergoing a journey of IT transformation. They have a traditional IT infrastructure with physical servers or virtualized servers, running monolithic or N-tier applications and use waterfall development processes. As they transform, some of the on-premise workloads and servers get moved to the cloud. The legacy apps are containerized directly or get converted to microservices. As a result, the organization finds itself using a mix of traditional infrastructure and software-defined infrastructure, which is essentially a multimodal IT scenario.

During the keynote, we will look at Multimodal IT scenarios, the challenges and needs of Multimodal IT and open source architectures that can help derive benefits from today’s mixed-IT deployments.

Speakers

Alan Clark

CTO Office, SUSE

Wednesday June 27, 2018 09:50 - 10:05 CST
Plenary Hall B

Keynote

Language English
Experience Level Any

10:10 CST

Keynote: Spectre, Meltdown, & Linux - Greg Kroah-Hartman, Fellow, The Linux Foundation

This talk will give a brief overview of the recently announced Meltdown and Spectre security problems that were announced early in 2018. It will cover how the Linux kernel security community addressed these problems, and how all Linux users can be sure they are protected from problems like these with the latest security fixes.

Speakers

Greg Kroah-Hartman

Fellow, Linux Foundation

Wednesday June 27, 2018 10:10 - 10:40 CST
Plenary Hall B

Keynote

Language English
Experience Level Any

11:30 CST

Full scalable Media Cloud Solution with Kubernetes Orchestration on GPU - Zhenyu Wang & Xin (Owen) Zhang, Intel Corp. (slides attached)

Large portion of media workloads in network e.g video host service, live streaming and broadcast etc. require massive power for media encoding, decoding and transcoding support in cloud server. Intel GPU's media hardware and full open sourced "Media Server Studio" (MSS) software provide high performance media acceleration support which meet media processing requirement with great performance per energy.

This will show how we apply MSS software in cloud environment on GPU hardware with container and Kubernetes orchestration. It will show how to utilize GPU hardware in container for MSS media workload with resource control based on GPU cgroup. Also about device manager for Intel GPU which hook up to new Kubernetes device plugin for easy manage and schedule GPU on pods via Kubelet. Final results are presented for complete media cloud solution with full scalability and orchestration.

Speakers

Zhenyu Wang

Software engineer, Intel Corp.

Zhenyu Wang, from Open Source Technology Center of Intel Corp. He has been working on Intel open source graphics driver stack for many years, experience from low level hardware feature enabling to high level userspace 2D/3D drivers. And now focus more on how to fully apply GPU utilization... Read More →

Owen Zhang

Software Engineer, Intel

Zhang, Xin (Owen), Software engineer in Intel Data Center Group (DCG). Currently he works on media module driver development, and GPU container enablement for DCG customer deployment. He made one speaking for Container with Media Server Studio integration in DCG NPG Asia summit 2... Read More →

Full Scalable Media cloud solution with Kubernetes orchestration pptx

Wednesday June 27, 2018 11:30 - 12:10 CST
309A

Cloud Native & Serverless & Microservices

Language English
Experience Level Any

11:30 CST

Topology-aware Service Routing in Kubernetes Boots a Smarter Service Discovery - Jun Du, Huawei (slides attached)

It's a pain point for multi-zone clusters deployment since cross-zone network traffic being charged, while in-zone is not. In addition, cross-node traffic may carry sensitive metadata from other nodes. Therefore, users always prefer the service backends that close to them, e.g. same zone, rack and host etc. for security, performance and cost concerns.
Kubernetes scheduler can constraining a pod to only be able to run on particular nodes/zones. However, Kubernetes service proxy just randomly picks an available backend for service routing and this one can be very far from the user, so we need a topology-aware service routing solution in Kubernetes. Basically, to find the nearest service backend.
This talk will be a deep dive of how Huawei Cloud achieve this sort of topology guarantee in a generic and Kubernetes-native way, no matter what kind of topological level.

Speakers

Jun Du

Senior Software Engineer, Huawei

Jun Du is one of the CNCF TOC Contributors and the author of two books on cloud-native area, e.g. "docker--containers and cloud”and“etcd in-depth interpretation". He is the maintainer and owner of some notable features of Kubernetes, e.g. IPVS-based kube-proxy and pod traffic... Read More →

Breakout Session LC3 Jun Du Final (1) pptx

Wednesday June 27, 2018 11:30 - 12:10 CST
309B

Cloud Native & Serverless & Microservices

Language English
Experience Level Intermediate

11:30 CST

Intel® Scalable I/O Virtualization - Kevin Tian, Intel® (slides attached)

Intel® Scalable I/O Virtualization (Intel® Scalable IOV) is a new approach from Intel to hardware based I/O virtualization that enables highly-scalable and high-performance sharing of I/O devices across isolated domains (traditional VMs, containers, or application processes), while reducing their cost and complexity.
In this talk Kevin will first introduce the concept of Intel® Scalable IOV, specifically about a hybrid approach through innovations in both hardware and software components to achieve the advantages of both scalability, performance and composability. Following that comes an overview of Intel®Scalable IOV reference architecture in Linux, based on extensions to VFIO mediated device framework and IOMMU sub-system.

Speakers

Kevin Tian

Principal Engineer, Intel

Kevin is a virtualization veteran from Intel with 16 years experience in open source virtualization projects (KVM, Xen, etc.), including multiple presentations in associated conferences. He is currently a software architect in Open source Technology Center of Intel, with current focus... Read More →

LC3 SIOV final pdf

Wednesday June 27, 2018 11:30 - 12:10 CST
203AB

KVM

Language English
Experience Level Intermediate

13:30 CST

How Hypervisors Provide Security in a Containerized World - Stefano Stabellini, Xen Project

Containers are the new industry standard for server applications. While traditional techniques to run container apps are under scrutiny due to their less-than-ideal isolation properties, thanks to the OCI specifications, now we have clear guidelines on the container packaging format and runtime environment. It is easier than ever to write new container runtimes able to interact with Kubernetes and the Docker Hub.

This talk will introduce a new approach to secure containers based on virtualization. It will go into details on the design and will show how it compares to traditional hypervisors and Linux namespaces regarding security, overhead, and performance. The presentation will explain why it is critical to monitor containers and will introduce a new paravirtualized protocol which allows detailed auditing of network traffic from the apps without compromising performance.

Speakers

Stefano Stabellini

Principal Engineer, Xilinx

Stefano Stabellini serves as system software architect and virtualization lead at Xilinx, the world's largest supplier of FPGA solutions. Previously, at Aporeto, he created a virtualization-based security solution for containers and authored several security articles. As Senior Principal... Read More →

Wednesday June 27, 2018 13:30 - 14:10 CST
309A

Cloud Native & Serverless & Microservices

Language English
Experience Level Any

13:30 CST

Operators: Extending Kubernetes with Custom Resources - Ian Lewis, Google

Kubernetes is a container orchestration system that provides a lot of built in functionality to deploy and manage applications using containers. But many types of applications, like stateful applications, require the ability to extend Kubernetes functionality to work in a dynamic environment.

In this talk, attendees will learn the concept of custom resources and how to use them to extend Kubernetes. We will walk through designing an operator for memcached that reacts automatically when memcached clusters change. Attendees will learn about the architecture of operators and how to use the Kubernetes Go client library to begin developing their own operators.

Speakers

Ian Lewis

Software Engineer, Google

Wednesday June 27, 2018 13:30 - 14:10 CST
307A

Infrastructure & Automation

Language English
Experience Level Advanced

13:30 CST

Accelerating VM Networking through XDP - Jason Wang, Red Hat (slides attached)

Compared to userspace networking data-path like dpdk, the performance of kernel datapath is poor. XDP was then invented to be a separated light weight data path for networking in kenrel. This talk will focues on using the XDP infrastructure to accelerate the VM networking. Firstly, the design and implementation of XDP will be described. Then the talk will discuss the idea of using XDP to accelreate VM networking which contains the design and implementation of XDP in both tun/tap and virtio-net. The performance numbers and future work will be then discussed at the end of the talk.

Speakers

Jason Wang

Senior Principal Software Engineer, Red Hat

Co-maintainer of kernel virtio, vdpa and vhost drivers. Maintainer of Qemu networking subsystems. Author of vDPA support in Kernel.

accelerating XDP v3 pdf

Wednesday June 27, 2018 13:30 - 14:10 CST
203AB

KVM

Language English
Experience Level Intermediate

13:30 CST

Experience OPNFV on Arm - Yibo Cai, Arm (slides attached)

Arm server, as an emerging force in data center, takes OPNFV as an important frontier to impact the industry.
Compass4NFV is an official OPNFV installer which supports both OpenStack and Kubernetes.
Arm is collaborating with Compass4NFV project to make the experience of deploying OPNFV on Arm awesome.
This presentation introduces our work to support Arm for Compass4NFV and current status of OPNFV on Arm servers.

Speakers

Yibo Cai

Principal Software Engineer, Arm

Yibo is staff software engineer from Arm. He has been working in IT industry for 17 years, and he has rich experience in OpenStack and OPNFV development on Arm. Yibo presented "OpenStack on AArch64" at LinuxCon ContainerCon CloudOpen China, Jun-2017.

Experience OPNFV on Arm pdf

Wednesday June 27, 2018 13:30 - 14:10 CST
311B

Networking & Orchestration

Language English
Experience Level Any

14:20 CST

Disaster Recovery and Data Protection for Kubernetes Persistent Volumes - Xing Yang, Huawei Technologies & Rakesh Jain, IBM (slides attached)

Your storage hosting the persistent volumes serving the Kubernetes cluster is damaged by a fire. How do you recover from such a disaster?

In this session, we will provide some strategies on how to protect the critical data. We will discuss how to use OpenSDS, an open source Software Defined Storage project under Linux Foundation, to provision persistent volumes for Kubernetes using the CSI plugin, how to use a policy engine to periodically and asynchronously create snapshots as point-in-time protection for the Kubernetes persistent volumes, and how the array-based and host-based replication feature in OpenSDS can help protect the data residing on the persistent volumes in the case of a disaster.

Speakers

Rakesh Jain

STSM and Researcher, SODA TOC Co-Chair, IBM

Rakesh Jain is an Architect and Researcher with IBM Almaden Research Center in San Jose CA. He is an expert in Cloud automation, Internet of Things, Storage Management and High Availability & Disaster Recovery technologies. He is also involved in the development of IBM's storage management... Read More →

Xing Yang

Tech Lead, VMware by Broadcom

Xing Yang is a Tech Lead in the Cloud Native Storage team at VMware by Broadcom. She is a co-chair of CNCF Storage TAG, a co-chair of the Kubernetes Storage SIG, a co-chair of the Data Protection WG, and a maintainer in Kubernetes CSI. Before joining VMware, Xing was the Lead Architect... Read More →

Disaster Recovery and Data Protection for Kubernetes Persistent Volumes Xing Yang & Rakesh Jain pdf

Wednesday June 27, 2018 14:20 - 15:00 CST
309B

Cloud Native & Serverless & Microservices

Language English
Experience Level Intermediate

14:20 CST

Device Assignment with Nested Guests and DPDK - Peter Xu, Red Hat (slides attached)

I/O virtualization is one of the most important aspect of virtualization technology. Generally speaking we can have three types of I/O devices in a virtual machine: emulated, para-virtualized, and device assignment. Here device assignment plays a vital role in performance critical scenarios, which allows a guest to seamlessly manipulate a real hardware device. However that was never safe to run DPDK with such a device, and even impossible for nested virtualization. In this presentation, Peter Xu will introduce his work on QEMU/KVM vIOMMU to enable these scenarios. It will contain not only how new users can start using the new feature, but also technical details and challenges on the project.

Speakers

Peter Xu

Senior Software Engineer, Red Hat

Peter Xu works for Red Hat virtualization team. He is working on QEMU/KVM project with vIOMMUs, migrations, interrupts and other miscelleneous stuff. He has given a talk in KVM Forum 2016 together with Wei Xu on vhost DMA Remapping.

LC3 qemu vfio iommu pdf

Wednesday June 27, 2018 14:20 - 15:00 CST
203AB

KVM

Language English
Experience Level Advanced

14:20 CST

Xen Project: After 15 years, What's Next? - George Dunlap, Citrix Systems R&D UK Ltd (slides attached)

The Xen Hypervisor is 15 years old, but like Linux, it is still undergoing significant upgrades and improvements. This talk will cover recent and upcoming developments in Xen on the x86 architecture, including the newly-released 'PVH' guest virtualization mode, the future of PV mode, qemu deprivileging, and more. We will cover why these new features are important for a wide range of environments, from cloud to embedded.

Speakers

George Dunlap

Principal Software Engineer, Citrix Systems R&D UK Ltd

George Dunlap worked with the Xen project while a graduate student at the University of Michigan before receiving his PhD in 2006, then worked as a core Xen developer for many years for Citrix's open-source team in Cambridge, England. He is now community manager and chairman of the... Read More →

Xen Project After 15 years, What's Next? George Dunlap pdf

Wednesday June 27, 2018 14:20 - 15:00 CST
307B

Linux Systems

Language English
Experience Level Beginner

14:20 CST

FPGA and Virtualization Technology in DPDK to Accelerating and Scaling the Cloud Networking - Tianfei Zhang & Rosen Xu, Intel (slides attached)

Many china e-market companies using cloud computing infrastructure to accelerate their business, and SDN and NVF are more popular deployed in internet companies. But how to make a software network scale to an era of 40/50+ Gigabit networks and provide great performance for network applications in cloud computing like Alibaba double 11 shopping spree?

In this presentation, we will introduce a new FPGA software framework using Intel Xeon+A10 FPGA to accelerating Linux workloads using SRIOV and virtualization technology. We will introduce OPAE (Open Programmable Acceleration Engine), and its integration with DPDK. We have developed SmartNICs which using OPAE and virtualization technology to accelerating cloud networking.

In the end, we will discuss the status of integration with DPDK community with OPAE to help accelerating and scaling the rapidly growing cloud networking.

Speakers

Rosen Xu

Senior Software Engineer, Intel

Rosen(Weihua) Xu is a senior software engineer at Intel Network Platforms Group (NPG). He has over ten years of experience in Linux Kernel, FPGA design, system virtualization and CPU acceleration.

天飞张

senior software engineer, Intel

FPGA and Virtualization technology in DPDK to accelerating and scaling the cloud networking v2 pdf

Wednesday June 27, 2018 14:20 - 15:00 CST
311B

Networking & Orchestration

Language English
Experience Level Advanced

15:10 CST

Orchestrating Multi-service Applications on Kubernetes - Michael Hrivnak, Red Hat, Inc.

Many applications consist of multiple services, such as a database, API service, and frontend. Provisioning them as a single application in Kubernetes can be a challenge, especially if one or more services runs outside your cluster.

The Service Catalog provides a new way to publish, provision, and manage applications on Kubernetes through the use of Service Brokers. The Automation Broker allows users to leverage Ansible Automation to orchestrate simple to complex multi-service deployments.

In this session you will learn:
- How to provision a multi-service application on Kubernetes using the Automation Broker.
- How to include external service provisioning in your application’s deployment.
- How to package Ansible Playbooks into a single meta-container for orchestrating the deployment of your application.
- How to publish your own applications in the Kubernetes Service Catalog.

Speakers

Michael Hrivnak

Principal Software Engineer, Red Hat, Inc.

Michael Hrivnak is a Principal Software Engineer at Red Hat. During his time as Team Lead for the Pulp project, he became involved in solving real-world container orchestration problems. He now works in that domain as part of the Automation Broker project. With experience in both... Read More →

Wednesday June 27, 2018 15:10 - 15:50 CST
309B

Cloud Native & Serverless & Microservices

Language English
Experience Level Beginner

15:10 CST

Building a Serverless Container Cloud with OpenStack and Kubernetes - Kevin Zhao, Arm

Kubernetes makes it easier to deploy, manage and scale clusters of containers. However, running Kubernetes on OpenStack still requires users to manage the underlying infrastructure such as a cluster of virtual servers, and users need to take care of the initial capacity planning and the maintenance of the server clusters.

The emerging serverless container (zero server management) technologies such as AWS Fargate, Azure Container Instance (ACI) and OpenStack Zun can reduce such infrastructure management overhead. They provide a viable alternative to run containers on the cloud, which allows users to run containers without pre-creating or managing their own server (virtual machine) clusters.

In this presentation, we will talk about what serverless conainer cloud is, why it matters and how to implement serverless container cloud on top of OpenStack using Zun and Kubernetes.

Speakers

Kevin Zhao

Software Engineer, Arm

Kevin Zhao is currently a Software Engineer in Arm Limited. Now, he is serving as the Core Reviewer for OpenStack Zun project. He is also an active contributor in Kolla and Nova, mainly focusing on making OpenStack work fine on AArch64. His expertise including container and Kubernetes... Read More →

LC3 Serverless container cloud pptx

Wednesday June 27, 2018 15:10 - 15:50 CST
307A

Infrastructure & Automation

Language English
Experience Level Beginner

15:10 CST

Shared Virtual Memory in KVM - Yi Liu, Intel China Ltd Beijing Branch (slides attached)

Shared Virtual Memory in KVM (Liu Yi, Intel) - Shared Virtual Memory is a hardware extension which allows directly access CPU virtual address, thus enables fast workload submission on accelerators. This feature goes with PCI sig Process Address Space ID (PASID). Many hardware vendors (Intel, AMD, ARM, etc.) have made it a key feature in their platform. It has become a hot area about bringing aforementioned feature to a virtualized environment, which brings flexibility to the accelerator deployment in data center.

In this presentation, Yi Liu will first introduce basic concept of SVM and the hardware requirement of SVM. Then, the session would focus on the SVM virtualization(vSVM) and architecture design in KVM solution. There would be detail technical introduction to the overall flow of vSVM and IOMMU API extensions(new APIs like bind_pasid_tbl/sva_tlb_invalidate and general in-kernel fault report framework). In the end, there would be an update of the vSVM status in community and future work.

Speakers

Yi Liu

Senior Software Engineer, Intel Corporation

Yi is a senior software engineer from Intel OTC. He focuses on I/O virtualization(Intel® VT-d) and is responsible for virtual IOMMU upstreaming work within Intel OTC VMM enabling team. As a well-recognized contributor, he represents Intel on IOMMU virtualization related discussions... Read More →

LC3 vSVM yiliu pdf

Wednesday June 27, 2018 15:10 - 15:50 CST
203AB

KVM

Language English
Experience Level Any

15:10 CST

Lessons Learned from Leading an Open-Source Project Supporting 30+ Programming Languages - William Cheng, REST United

Swagger Codegen, which is an open-source code generator for REST API, has become very popular in recent years. Many companies, from start-ups to IT conglomerates such as Cisco, IBM, VMWare, are using it in production to streamline the development process. The project covers a wide range of programming languages and server-side frameworks. How the project grows from less than 50 contributors to 850+ contributors from all around the world with 10000+ commits in 4 years? William Cheng, the top contributor of Swagger Codegen, will share the journey the community went through and the lessons learned from building a vibrant developer community.

Speakers

William Cheng

Core team and founding member of OpenAPI Generator, OpenAPITools.org

William Cheng is an experienced IT professional with 10+ years of experience in IT startups, academic research, a leading semiconductor equipment manufacturer and a top-tier global investment bank. He is also an entrepreneur, eBook author, conference speaker, and active open-source... Read More →

Wednesday June 27, 2018 15:10 - 15:50 CST
306B

Open Source Leadership Compliance Strategy & Governance

Language English
Experience Level Any

16:00 CST

Distributing Stateful Workloads across Hybrid Clouds - Irfan Ur Rehman & Quinton Hoole, Huawei Technologies

Kubernetes Statefulsets are a great option for applications that need persistent stores and durable, unique identities for their replicas. However, Statefulsets are limited to a single cluster and cannot span multiple cloud providers.
Our team has been working on an approach to allow stateful replicas of such applications to span multiple, and even hybrid, cloud clusters. The capability, called Federated Statefulsets, is already in the roadmap of kubernetes federation project.
This talk will explain Federated Statefulsets use cases, discuss design alternatives considered, and describe the proposed solution. The presentation will also demonstrate the new feature solving some hard problems and discuss possible future enhancements.

Speakers

Quinton Hoole

Technical Vice President, Futurewei

https://www.linkedin.com/in/quintonhoole/YouTube me for previous presentations.CNCF TOC Member

Irfan Ur Rehman

Sr. Software Engineer, Turbonomic

Wednesday June 27, 2018 16:00 - 16:40 CST
309B

Cloud Native & Serverless & Microservices

Language English
Experience Level Advanced

16:00 CST

Use Hyper-V Enlightenments to Increase KVM VM Performance/Density - Chao Peng, Intel (slides attached)

Hyper-V designed a set of ‘enlightenments’ to reduce virtualization overhead. Some of the enlightenments has been implemented in KVM so KVM VM can also benefit from it. Recently Hyper-V added some more enlightenments for the VM-based so-called ‘Hyper-V containers’. However, till now these enlightenments are only available on Hyper-V and Windows. In this talk Chao will present we can implement the same enlightenments in KVM and the cooperative change in Linux, so not only Windows but also Linux can take advantages of these enlightenments when running on top of KVM. Especially, we can achieve similar effect for VM-based Linux container (e.g. increase the performance/density for Kata Containers).

Speakers

Chao Peng

Senior Software Engineer, Intel

Chao Peng is a senior software engineer in Intel virtualization team. His responsibilities include enabling various hardware virtualization features in open source VMM/OS, as well as developing new usages models in virtualization and cloud environment. He was speaker in KVM forum/Xen... Read More →

Increase KVM Guest Performance and Density with Hyper V Memory Enlightenments Interface pdf

Wednesday June 27, 2018 16:00 - 16:40 CST
203AB

KVM

Language English
Experience Level Any

16:00 CST

Challenges and Opportunities for SD-WAN in China - Ziyi Lu, Tethrnet Technology (slides attached)

Recently, SD-WAN market have seen significant growth in the US and other countries, but there're several challenges in China market.
The first challenge is the communication quality of inter service providers, this makes endpoint to endpoint internet overlay tunnel communication unreliable (e.g. China Telecom endpoint to China Mobile endpoint), also missing public IP at endpoint puts additional difficulty on creating end to end overlay tunnel.
Secondly, China service provider expects seamless integration between traditional MPLS and internet based solution, i.e. branches may have both MPLS and internet access, or only one of them. SDWAN solution has to exchange routing information between traditional MPLS and internet based network.
This presentation provides solutions to these challenges. The solutions have been validated and deployed by several China service providers.

Speakers

Ziyi Lu

CTO, Tethrnet Technology

Ziyi Lu is a cofounder and CTO of Tethrnet Technology Inc., who is focusing on innovative networking solution for enterprise and service provider – data center fabric, data center inter-connect fabric, WAN and cloud networking. He had authored number of US Patents regarding networking... Read More →

Challenges and Opportunities for SD WAN in China Ziyi Lu pdf

Wednesday June 27, 2018 16:00 - 16:40 CST
311B

Networking & Orchestration

Language English
Experience Level Any

16:00 CST

Automatically Backup Module against Ransomware Attack - Kazuki Omo, SIOS Technology, Inc. (slides attached)

Automatically Backup Module against Ransomware Attack (Kazuki Omo) -

Ransomware attack is on-going nowadays, and lots of user is having trouble in Critical infrastructure. Not only Windows, but also Linux is facing from Ransomware threat. In Enterprise system, Linux is used as File Sharing server and facing Ransomware threat through NFS / Windows CIFS, and so on. In this presentation, Kazuki Omo will suggest several way to protect important file from Ransomware with developed Linux Security Module, and demonstrate it.

Speakers

Kazuki Omo

Executive Officer, SIOS Technology Inc.

Over 20 years experience in Unix/Linux/Windows system and many of Security related product. Working for OSS community over 15 years. - Published SELinux and related security articles from 2004-2018. - Presentation on Open Source Summit Japan 2017 "OSS CVE Trends". - Presentation on... Read More →

Automatically Backup Module Against Ransomeware 20180602 pdf

Wednesday June 27, 2018 16:00 - 16:40 CST
307B

Open Source Leadership

Language English
Experience Level Intermediate

16:00 CST

Disclosure Policies in the World of Cloud: A Look Behind the Scenes - Lars Kurth, Citrix / Xen Project (slides attached)

The tech world does not live in silos: security vulnerabilities can impact an entire ecosystem (case in point Meltdown and Spectre). How do open source projects and companies alike ensure that their security disclosure policies are up to standards, especially in the world of cloud computing?

This session will introduce different patterns for managing the disclosure of security vulnerabilities in use today and explore their trade-offs and limitations. We will look at the interaction of open source projects and downstreams (distros, product vendors, cloud providers or a combination of them) from the discovery of a vulnerability to it being fixed. This talk will give you a glimpse into a quite extensive machinery which kicks into gear across different organisations when security vulnerabilities are discovered and fixed behind the scenes.

Speakers

Lars Kurth

Director Open Source / Project Chairperson The Xen Project , Citrix Systems UK Ltd.

Lars Kurth is a highly effective, passionate community manager with strong experience of working with open source communities (Symbian, Symbian DevCo, Eclipse, GNU) and currently is the community manager for the Xen Project. Lars has 12 years of experience building and leading engineering... Read More →

Disclosure Policies in the World of Cloud A Look Behind the Scenes pdf

Wednesday June 27, 2018 16:00 - 16:40 CST
306B

Open Source Leadership

Language English
Experience Level Beginner