why pcf is the best platform for spring boot

Why PCF is the best platform for Spring Boot

2017-07-20 Toshiaki Maki (@making)

Who am I ?

Toshiaki Maki (@making) https://blog.ik.am Sr. Solutions Architect @Pivotal Japan Spring Framework 💖 Cloud Foundry 💖

Platform Spring Specific Comparison

AWS BeanStalk

Azure WebApps

Google AppEngine

Heroku OpenShift/k8s

PCF/ PWS

Spring Cloud Connector

Spring Cloud Connector Heroku

Spring Cloud Connector Cloud Foundry

Spring Boot Integration

* cloud profile * Apps Manager Spring Boot Actuator Support * Metric Forwarder

Spring Cloud Integration

Spring Cloud AWS

Spring Cloud GCP

* Spring Cloud Kubernetes * SCDF

* Spring Cloud Services * Trace Exporter * SCDF

Platform Spring Specific Comparison

AWS BeanStalk

Azure WebApps

Google AppEngine

Heroku OpenShift/k8s

PCF/ PWS

Spring Cloud Connector

Spring Cloud Connector Heroku

Spring Cloud Connector Cloud Foundry

Spring Boot Integration

* cloud profile * Apps Manager Spring Boot Actuator Support * Metric Forwarder

Spring Cloud Integration

Spring Cloud AWS

Spring Cloud GCP

* Spring Cloud Kubernetes * SCDF

* Spring Cloud Services * Trace Exporter * SCDF

Why PCF for Spring?

Because Pivotal Cloud Foundry gives us a lot of out-of-the-box features to manage / operate Spring Boot apps

Why PCF for Spring?

12 Factors Apps

Microservices

Security

Tracing

Metrics

Spring Support in PCF

• cloud profile • Spring Cloud Connectors • Spring Cloud Services • Trace Exporter • Spring Actuator Support in Apps Manager • Metrics Forwarder Service

"profile" in Spring

without PCF/PWS

myapp.foo=I am in local env.message=I am a default property.logging.level.com.example=DEBUG

myapp.foo=I am in AWS.message=I am a production propertylogging.level.com.example=INFO

application.properties

application-prod.properties

java -jar app.jar --spring.profiles.active=prod

cloud profile

with PCF/PWS

myapp.foo=I am in cloud foundry.message=I am a cloud property.logging.level.com.example=INFO

application-cloud.properties

java -jar app.jar --spring.profiles.active=cloud

cloud profile

with PCF/PWS

myapp.foo=I am in cloud foundry.message=I am a cloud property.logging.level.com.example=INFO

java -jar app.jar --spring.profiles.active=cloud

cloud profile is set by java-buildpack

Attach backend services

without PCF/PWS

spring.datasource.url=real-db.example.comspring.datasource.username=real-db-userspring.datasource.password=readl-db-password

spring.rabbitmq.addresses=real-rabbit.example.comspring.rabbitmq.username=real-rabbit-userspring.rabbitmq.password=real-rabbit-passwordspring.rabbitmq.virtual-host=real-vhost

without PCF/PWS

spring.datasource.url=${DB_URL}spring.datasource.username=${DB_USERNAME}spring.datasource.password=${DB_PASSWORD}

spring.rabbitmq.addresses=${RABBIT_URL}spring.rabbitmq.username=${RABBIT_USERNAME}spring.rabbitmq.password=${RABBIT_PASSWORD}spring.rabbitmq.virtual-host=${RABBIT_VHOST}

without PCF/PWS

spring.datasource.url=${DB_URL}spring.datasource.username=${DB_USERNAME}spring.datasource.password=${DB_PASSWORD}

spring.rabbitmq.addresses=${RABBIT_URL}spring.rabbitmq.username=${RABBIT_USERNAME}spring.rabbitmq.password=${RABBIT_PASSWORD}spring.rabbitmq.virtual-host=${RABBIT_VHOST}

export DB_URL=real-db.example.comexport DB_USERNAME=real-db-userexport DB_PASSWORD=real-db-password...

Spring Cloud Connectors

with PCF/PWS

@Profile("cloud")public class CloudConfig extends AbstractCloudConfig { @Bean public DataSource dataSource() { return connectionFactory().dataSource(); } @Bean public ConnectionFactory rabbitConnectionFactory() { return connectionFactory().rabbitConnectionFactory(); }}

with PCF/PWS

@Profile("cloud")public class CloudConfig extends AbstractCloudConfig { @Bean public DataSource dataSource() { return connectionFactory().dataSource(); } @Bean public ConnectionFactory rabbitConnectionFactory() { return connectionFactory().rabbitConnectionFactory(); }}

cf bind-service myapp mydbcf bind-service myapp myrabbit

with PCF/PWS

<dependency> <groupId>org.springframework.cloud</groupId> <artifactId>spring-cloud-spring-service-connector</artifactId></dependency><dependency> <groupId>org.springframework.cloud</groupId> <artifactId>spring-cloud-cloudfoundry-connector</artifactId></dependency>

• RDB • RabbitMQ • Redis • MongoDB • SMTP • Spring Cloud Services (Config Server, Eureka, Hystrix

Dashboard) [1] • Vault [2] • ....

with PCF/PWS

[1] ... https://github.com/pivotal-cf/spring-cloud-services-connector [2] ... https://github.com/pivotal-cf/spring-cloud-vault-connector

⚠ Do NOT use default datasource

with PCF/PWS

https://discuss.pivotal.io/hc/en-us/articles/221898227-Connection-pool-warning-message-maxIdle-is-larger-than-maxActive-setting-maxIdle-to-4-seen-in-PCF-deployed-Spring-app

org.apache.tomcat.jdbc.pool.ConnectionPool WARNING maxIdle is larger than maxActive, setting maxIdle to: 4

with PCF/PWS

https://discuss.pivotal.io/hc/en-us/articles/221898227-Connection-pool-warning-message-maxIdle-is-larger-than-maxActive-setting-maxIdle-to-4-seen-in-PCF-deployed-Spring-app

org.apache.tomcat.jdbc.pool.ConnectionPool WARNING maxIdle is larger than maxActive, setting maxIdle to: 4org.apache.tomcat.jdbc.pool.PoolExhaustedException: [...] Timeout: Pool empty. Unable to fetch a connection in 30 seconds, none available[size:4; busy:4; idle:0; lastwait:30000]

with PCF/PWS

@Profile("cloud")public class CloudConfig extends AbstractCloudConfig { @Bean public DataSource dataSource() { PooledServiceConnectorConfig.PoolConfig poolConfig = new PooledServiceConnectorConfig.PoolConfig( 5 /* min */, 30 /* max */, 3000 /* wait */); return connectionFactory() .dataSource(new DataSourceConfig(poolConfig, null)); }}

Microservices with Spring Cloud

without PCF/PWS

Spring Boot App

Service Registry (Eureka) Config ServerCircuit Breaker Dashboard

(Hystrix Dashboard)

You manage (deploy + security)

Spring Cloud Services

with PCF/PWS

Spring Boot App

Service Registry (Eureka) Config ServerCircuit Breaker Dashboard

(Hystrix Dashboard)

PCF manage (cf cs & cf bs)

Distributed Tracing with Zipkin

Spring Boot App

without PCF/PWS

Spring Boot App

Zipkin

You manage (deploy + security)

X-B3-SpaceId X-B3-TraceId

Distributed Tracing with Zipkin

spring.zipkin.url=my-zipkin.example.com

without PCF/PWS

Trace Exporter

Spring Boot App

PCF Metrics

with PCF/PWS

Trace Exporter

GoRouter

Spring Boot App

X-B3-SpaceId X-B3-TraceId

Trace Exporter

Spring Boot Actuator

/health, /info, /loggers, /dump

Secured by default since Spring Boot 1.5.

ROLE_ACTUATOR is required.

Secured by Default (since Spring Boot 1.5)

😛management.security.enabled=false

management.security.enabled=true

management.security.enabled=falseapplication.properties

Many users say ...

"Actuator is actually useful, but

it is not for production, right?"

Nooooooooooooooooo!!!!!

32 http://docs.spring.io/spring-boot/docs/current/reference/html/production-ready.html

Secure with Spring Security

without PCF/PWS

@EnableWebSecurity@Order(SecurityProperties.ACCESS_OVERRIDE_ORDER)public class ActuatorSecurityConfig extends WebSecurityConfigurerAdapter { @Override protected void configure(HttpSecurity http) throws Exception { http.antMatcher("/admin/**").authorizedRequests() .anyRequest().hasRole("ACTUATOR") .and().httpBasic() .and().csrf().disable(); } // ...}

management.context-path=/admin

Spring Actuator Support in Apps Manager

/cloudfoundryapplication/health, /cloudfoundryapplication/info, ...

Apps Manager

with PCF/PWS

Cloud Controller

tokenpermission

Endpoint Description Supported Version/dump Get thread dump 🆕 1.11~/env Get env variables, properties/metrics Get application's metrics/health Get the result of health checks ✅ 1.9~/info Get build information ✅ 1.9~/loggers Change logging level ✅ 1.9~/trace Get request trace log 🆕 1.11~/heapdump Download heap dump 🆕 1.11~

Apps Manager

/health

/loggers

/trace

/heapdump

Spring Boot Actuator Metrics

/metrics

Metrics Writer

/metrics

Metrics Writer TSDB or ...

/metrics

Redis, OpenTSDB, Statsd, JMX

/metrics

Dashboard

/metrics

DashboardYou configure

Metrics Writer

@Bean@ExportMetricWriterMetricWriter metricWriter(MetricExportProperties export){ return new RedisMetricRepository(connectionFactory, export.getRedis().getPrefix(), export.getRedis().getKey());}

docs.spring.io/spring-boot/docs/current/reference/html/production-ready-metrics.html#production-ready-metric-writers

without PCF/PWS

Metrics Forwarder Service

comes with java buildpack v3.18/4.2+

Enables Actuator's MetricsWriter to Metrics Forwarder Service automatically

https://github.com/cloudfoundry/java-buildpack-metric-writer

https://github.com/cloudfoundry/java-buildpack/blob/master/docs/framework-metric_writer.md

with PCF/PWS

Metrics WriterJava

k Metrics Forwarder

Service

bind TSDB

Dashboard

with PCF/PWS

cf bind-service myapp mf

cf cups mf -p '{"endpoint":"X","access_token":"X"}'

cf create-service metric-forwarder plan mf

with PCF/PWS

DEMO Scenario

Metrics WriterJava

k Metrics Forwarder

Service

Grafana

Prometheusscrape

works as * Metrics Forwarder Service * Service Broker * Prometheus Exporter

PromQL

Source code

https://github.com/making/prometheus-exporter-metrics-forwarder-service

Integration with PCF (Future)

Metrics WriterJava

k Metrics Forwarder

Service

bindPCF Metrics, Autoscalersend

will be provided as a "tile"

Why PCF is best platform for Spring ➡ a lot of out-of-the-box features

https://www.youtube.com/watch?v=9rPjLaOkEUo

why pcf is the best platform for spring boot

Technology

pcf installation guide

ipsec add-on for pcf - resources.docs.pivotal.iogoogle cloud...

pcf new plants 2016

lz4 compression and improving boot time · lz4 compression...

old, new, borrowed, blue: a perspective on the evolution...

platform security boot guide

images sampler for pcf

pcf partial completion form

employee handbook - pcf

seminar pcf “ lightscattering ”

retail pcf version 6.0.0

arm® platform security architecture trusted boot and

aerospace pcf comparision.xlsx

programming with pcf messages

chapter 2 homework pcf

volume 7 - nel · bethesda (katong) kindergarten pcf little...

improving platform security with uefi secure boot and uefi...

pcf world summit - program

pcf for education

althusser letter to pcf