Oracle Cloud Native Application Development (Meetup, 20th January 2020)

Oracle Cloud
Native
Application
Development
Developer MeetUp: Oracle Cloud Native Application Development
Developer MeetUp – 20th January
Lucas Jellema, CTO & Architect AMIS, Oracle Groundbreaker Ambassador

What is Cloud Native?
• Born in Cloud
• No explicit Infrastructure (serverless) & Fully Managed Platform
components
• Quick Ramp Up
• Scalable/Elastic
• Pay per Use
• Automation
• Infrastructure/Platform as Code (automation)
• Automated CI/CD [pipelines]

Cloud Capabilities for Cloud Native development
• Functions
• API Gateway
• Events
• Data Persistence
• Cache
• Security
• Network access
• Web Application Firewall (DDOS & more)
• Authentication & Authorization
• Key Management
• Monitoring
• Metrics, notification, logging
• Auditing
• Cost Control
• Automation – CI/CD & DevOps Pipelines
API
Gateway
Function
Event Topic
Data Storage Cache
Monitoring
Security(WAF,Network,Authorization
CI/CD & DevOps Pipelines

Introducing Oracle Cloud Infrastructure

Oracle Cloud Infrastructure
• Generation 2 Cloud
• Main themes:
• Competitive Pricing
• Secure by Design
• Open
• Enterprise (Technology)
• Access through Console, CLI, REST API
• Trials – 30 days, $300 credits

Oracle Cloud Infrastructure – Always Free Tier
• Always Free Tier
• Autonomous Database/Data Warehouse (two instances)
• Compute VMs (two instances)
• Block, Object and Archive Storage
• Load Balancer and Data Egress
• Monitoring and Notifications

Cloud Native on Oracle Cloud Infrastructure
API
Gate-
way
Function
Function pushOCI
Streaming
Stream
Function
Function
Function
OCI
Monitoring
Healthcheck
Object
Storage
Integration
Cloud
Any App
“Cache”
WebApplicationFirewall,
IdCS,KeyManagement,CASB

Serverless Functions
• Project Fn
• Open Source
• Docker based
• Development done with a CLI and a local Server
• Out of the box support for various runtimes
• Java, JavaScript, Python, Go, Ruby
• Support for any Docker Image
• Every Function is built upon deployment into a Docker Container Image
• Function instances are running containers based such images
• Triggered by HTTP requests
• Clusters functions in applications
• Support Configuration Settings on Functions and Applications
• Provided to function as environment variable

Fn Functions – request handling
Function
Implementation
(Node, Java, Go,
Python,…)
FDK
Function
HTTP Request
With method, headers, query
parameters, url path, body
input – derived from body
ctx – raw HTTP request
components

Serverless Functions
• Functions on OCI – based on Fn
• Oracle is one of the Fn providers
• Function Container Images are stored
in OCI Container Registry
• Triggers can be:
• HTTP Requests
• OCI Events
• API Gateway calls
• OCI gathers logs (on OCI Object Storage) and metrics
• A function instance will be removed after 5-10 minutes of inactivity
• Note: an instance can handle multiple requests

OCI Functions - Pricing

Function
Application
Container
Image for
Function
OCIR
My Windows 10 Laptop
Ubuntu 18.04 Guest (on Virtual Box)
OCI CLI
Project Fn
Docker 19.03.5
OCI
Config
Docker
Container
with Function
& Runtime
deploy
invoke
invoke
oci fn function invoke …
oci raw-request …

API Gateway
• Handle HTTP calls:
• Authorize
• Route
• Map
• Monitor/ Audit
• GA was
Mid December 2019
API
Gateway
Any 3rd party HTTP
endpoint
Function
Stock
Any HTTP
Endpoint
on OCI
OIC
OKE
VM
…
Any Service
Invoker
Expose private endpoints publicly
Stable (public) endpoints
Routing (verb & wildcard based)
Parameter and Header mapping
Request Policies
Rate limiting (per client & general)
CORS (for direct web client access)
Metrics Monitoring & Logging
Authentication & Validation

API Gateway
Authorizer Function
API
Gateway
Any
backendAny Service
Invoker
Any backend – HTTP
destination, Oracle
Function, Stock Response
– can be subject to an
authorizer function
Authorizer
Function
Authorizer Function
that allows or denies
access based on
Header [Token]
Invoke API, provide token
in header
Authorizer Function can be
configured on Route or on
API Deployment
API deployment
/path
JSON returned by
Authorizer Function is
embedded in request to
backend

OCI API Gateway - Pricing

Object Storage
• Object Storage service
• “an internet-scale, high-performance storage platform that offers reliable
and cost-efficient data durability. The Object Storage service can store an
unlimited amount of unstructured data of any content type, including
analytic data and rich content, like images and videos.”
• Organized in Buckets (similar to Folders)
• Max Object Size is 10TB
• Object Storage is Always Free eligible
• Object Storage provides
• Durability – multiple copies, automatically maintained
• Encryption - 256-bit Advanced Encryption Standard (AES-256)
• S3 Compatible REST API
• Pre-authorized requests for time-limited, direct access
• Life Cycle Rules

OCI Object Storage - Pricing

OCI Events Service
• Is not what you might expect
• OCI Events
• Cloud Events produced by OCI
upon administrative actions
• For example: Creation, Update, Deletion of
Service Instances
• Object Storage publishes events
when Objects are created, updated or deleted

Events can trigger a Notification, Function and Streaming
Event

OCI Events - Pricing
• Part of OCI - No Additional Charge

OCI Streaming Service
• Kafka Like – Event Queue
• Support for partitions and consumer groups
• Events are Published and Consumed through
REST API calls
• Java SDK available
• No Push to Consumer!
Listener
OCI
Streaming
Stream
Publisher
On prem
Listener
Listener
3rd Party
Cloud

OCI Streaming Service
• Message retrieval is
done through a Cursor
• Similar to a (long running) query
• Cursor indicates where to read from Stream
• Earliest, latest, at offset, from offset, from time
• No Filter to apply upon reading
• Message Retention: 7 days
• Max throughput: 1 MB/s
• Max message size: 1 MB
Listener
OCI
Streaming
Stream
Publisher
On prem
Listener
Listener
3rd Party
Cloud
cursor

OCI Streaming Service – DIY Push
API
Gateway
Function
Integration
Cloud
Function
App
Function Message
Listener
push
OCI
Streaming
Stream
OCI Monitoring
Healthcheck
Trigger Listener
Function
Function

Asynchronous Function Interaction
API
Gateway
Function
Integration
Cloud
Function
App
API
Gateway
Fire and Forget
Message Drop Off
Decoupled, (deferred) Forwarding of
Request; no response is returned (but
one could be forwarded)

Asynchronous Function Interaction
API
Gateway
Function
Integration
Cloud
Function
App
Function Message
Listener
pushOCI
Streaming
Stream
OCI Monitoring
Healthcheck
Trigger Listener
Function
Function

OCI Streaming - Pricing

Monitoring
• Metrics
• Analyze number and performance of actions
• Alarms
• Trigger notification when condition is observed
• Notifications
• Send email or call WebHook
• Triggered by Alarm or by direct API call

Monitoring – Health Checks
• Verify through the eyes of an external client
if endpoints are available
and respond quick and well
• Periodic or Adhoc call to an endpoint
• HTTP(S) or Ping
• Specify Headers
• Specify Interval
• From selected Vantage Points
• 3rd party clouds, geographic location
• Health Check results can be inspected through the Monitor

Monitoring – Health Checks
• OCI does not currently have a way to schedule jobs
• Health Checks are scheduled HTTP(S) requests
API
Gateway
/fn
Function
hello
API deployment
/hello
OCI Monitoring
Healthcheck
Check Hello

OCI Monitoring - Pricing

OCI Notifications - Pricing

Logging
• Currently in Preview
• All OCI Log Files are collected and retained
• At least 90 days
• Log Files can be combined and searched
• Similar to Elastic Search

Cache
• There currently is no cache on OCI
• However:
• Function instances live while they are busy (and 5-10 minutes of
inactivity) – so they are a little stateful
• Functions can write to
and read from
Object Storage
or Autonomous
Database
API
Gateway
Function
Object Storage
Autonomous
Database
State inside Function is retained
during lifetime of container
A container is started when the function is
first invoked. After X minutes of idleness,
the container is killed off
State can be read from and
persisted to a backend persistence
mechanism
When traffic load increases, multiple
instance of the function container can be
started; these do not share state with
each other

DIY Cache
API
Gateway
Function
cache
Object Storage
State inside Function is retained during
lifetime of container. It can periodically/after
changes be saved to Object Storage
A container is started when the function
is first invoked. After X minutes of
idleness, the container is killed off
Cache contents are read from file on
Object Storage when the function
initialized upon first invocation.
OCI Monitoring
Healthcheck
Trigger Listener
Health Check provides
heartbeat (once per 3 min) to
keep function and its state alive
Any service invoker (with
access) can put values in cache
and read values from cache

API
Gateway
Function
cache
Object Storage
State inside Function is retained during
lifetime of container. It is periodically
refreshed from Object Storage
Cache contents are read from file on
Object Storage when the function
initialized upon first invocation – and
also every X seconds to gather
changes in the cache contents.
OCI Monitoring
Healthcheck
Trigger Listener
Health Check provides
heartbeat (once per 3 min) to
keep function and its state alive
Any service invoker (with
access) can put values in cache
and read values from cache
Function
cache-writer
Cache updates are
written to the file Object
Storage
The cache-writer is truly stateless. It
writes cache updates to the file on Object
Storage – thus persisting the change and
making it available to the cache function
put
get
DIY Cache – CQRS to support scalable, multi instance cache function

Lab Environment in an OCI Tenancy
Oracle Cloud Infrastructure - Tenancy
Compartment – lab-compartment
VCN
vcn-lab
Group
lab-participants
API Gateway
lab-apigw
Stream
lab-stream
Public Subne
t-vcn-lab
Private Subn
et-vcn-lab
IGW
Dynamic Group
lab-apigw-
dynamic-group
User
lab-user
policies

Workshop Scenarios
• Introducing serverless functions with Project Fn
• Functions on Oracle Cloud Infrastructure
• API Gateway on OCI
• Functions, Object Storage and API Gateway
• OCI Event Streaming, API Gateway
and Functions
Sources: http://bit.ly/oci-meetup

Oracle Cloud Native Application Development (Meetup, 20th January 2020)

More Related Content

What's hot (20)

Similar to Oracle Cloud Native Application Development (Meetup, 20th January 2020) (20)

More from Lucas Jellema (20)

Recently uploaded (20)

Oracle Cloud Native Application Development (Meetup, 20th January 2020)

Editor's Notes