real time, secure collaboration - people.gnome.orgmichael/data/2017-09-21-owncloud.pdf · owncloud...

28
1 / 28 Michael Meeks General Manager at Collabora Productivity [email protected] www.CollaboraOffice.com @CollaboraOffice Skype - mmeeks, G+ - [email protected] Real Time, Secure Collaboration

Upload: haanh

Post on 20-Aug-2018

226 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: Real Time, Secure Collaboration - people.gnome.orgmichael/data/2017-09-21-owncloud.pdf · ownCloud Conference 2017, Nuremburg| Michael Meeks 1 / 28 Michael Meeks General Manager at

1 / 28 ownCloud Conference 2017, Nuremburg| Michael Meeks

Michael MeeksGeneral Manager at Collabora Productivity

[email protected]

www.CollaboraOffice.com@CollaboraOffice

Skype - mmeeks,G+ - [email protected]

Real Time, Secure Collaboration

Page 2: Real Time, Secure Collaboration - people.gnome.orgmichael/data/2017-09-21-owncloud.pdf · ownCloud Conference 2017, Nuremburg| Michael Meeks 1 / 28 Michael Meeks General Manager at

2

Current Version 2.1.3

● High fidelity, WYSIWYG rendering

● Document Support:● DOC, DOCX, PPT, PPTX, XLS, XLSX + ODF.● Import/View Visio, Publisher, + 100 more

● Document Collaboration:● Basic Collaborative editing● Rich Collaborative editing coming.→

Page 3: Real Time, Secure Collaboration - people.gnome.orgmichael/data/2017-09-21-owncloud.pdf · ownCloud Conference 2017, Nuremburg| Michael Meeks 1 / 28 Michael Meeks General Manager at

3 / 28 LibreOffice Conference 2016, Brno | Michael Meeks

Why Collabora online ?● On-premise – control of your data● On-premise – control of your CPU & network● Secure

– encrypted file support

– elsewhere: disable print, download, edit, comment, water-marking etc.

Bonus features● A reduced feature-set sphere – can win.

– light editing use-cases to match competition

● Document Formats – less relevant:

– “in the cloud”

● Server / Certification / Revenue model ...

Page 4: Real Time, Secure Collaboration - people.gnome.orgmichael/data/2017-09-21-owncloud.pdf · ownCloud Conference 2017, Nuremburg| Michael Meeks 1 / 28 Michael Meeks General Manager at

4

CODE ...

● CODE – grab the latestDocker image and/or packages● http://collaboraoffice.com/code● 1 million+ Docker pulls

● A simple ownCloudextension● No core changes

required, easy todeploy

Page 5: Real Time, Secure Collaboration - people.gnome.orgmichael/data/2017-09-21-owncloud.pdf · ownCloud Conference 2017, Nuremburg| Michael Meeks 1 / 28 Michael Meeks General Manager at

Demo / what it looks like

Page 6: Real Time, Secure Collaboration - people.gnome.orgmichael/data/2017-09-21-owncloud.pdf · ownCloud Conference 2017, Nuremburg| Michael Meeks 1 / 28 Michael Meeks General Manager at

Demo / what it looks like #2

Page 7: Real Time, Secure Collaboration - people.gnome.orgmichael/data/2017-09-21-owncloud.pdf · ownCloud Conference 2017, Nuremburg| Michael Meeks 1 / 28 Michael Meeks General Manager at

Node Architecture

Page 8: Real Time, Secure Collaboration - people.gnome.orgmichael/data/2017-09-21-owncloud.pdf · ownCloud Conference 2017, Nuremburg| Michael Meeks 1 / 28 Michael Meeks General Manager at

Security: the onion ...

● Layered approach to protecting infrastructure ...

Virtual Machine / Docker Container

Document Data Isolation into chroots

seccomp-bpf ~no bad syscalls ...extremely sparse filesystemchroot per document / user ...

systematic load crash testingIndustry beating coverity score.

LibreOfficeKit rendering instance

Page 9: Real Time, Secure Collaboration - people.gnome.orgmichael/data/2017-09-21-owncloud.pdf · ownCloud Conference 2017, Nuremburg| Michael Meeks 1 / 28 Michael Meeks General Manager at

https://collaboraoffice.com

What we did together in the last year

( since 1.0.5 )

Page 10: Real Time, Secure Collaboration - people.gnome.orgmichael/data/2017-09-21-owncloud.pdf · ownCloud Conference 2017, Nuremburg| Michael Meeks 1 / 28 Michael Meeks General Manager at

10

ownCloud / integration wins:

● Server-side Encrypted file support

● Conflict / timestamp detection & re-load in 2.1.3

● Groups:

Test &Edit

● OOXML

● RTF &TXT

Page 11: Real Time, Secure Collaboration - people.gnome.orgmichael/data/2017-09-21-owncloud.pdf · ownCloud Conference 2017, Nuremburg| Michael Meeks 1 / 28 Michael Meeks General Manager at

11

Collabora Online 2.0 – Dec 2016

● Collaborative Editing● As demo’d last-year:● Multi-user, multi-cursor, etc.

● Followed up witha large number ofimprovements inregular minorpoint releases ...

Page 12: Real Time, Secure Collaboration - people.gnome.orgmichael/data/2017-09-21-owncloud.pdf · ownCloud Conference 2017, Nuremburg| Michael Meeks 1 / 28 Michael Meeks General Manager at

12

Collabora Online 2.0.x

● UI extras:● Insert → Footnotes, EndNotes, Page-

breaks, column breaks● Format → Page size / Orientation

● I18n● Noto fonts● basic Input

Method support.

Page 13: Real Time, Secure Collaboration - people.gnome.orgmichael/data/2017-09-21-owncloud.pdf · ownCloud Conference 2017, Nuremburg| Michael Meeks 1 / 28 Michael Meeks General Manager at

13

Collabora Online 2.0.x

Responsivedesigntabletsand/orphones

Page 14: Real Time, Secure Collaboration - people.gnome.orgmichael/data/2017-09-21-owncloud.pdf · ownCloud Conference 2017, Nuremburg| Michael Meeks 1 / 28 Michael Meeks General Manager at

14

Collabora Online 2.1 ...

● Upgrade to common code with Collabora Office 5.3

● Performance:● Memory reduction – reduce guidance 50% + OOM● CPU perf. wins + anti-aliased rendering● B/W reduction – avoiding un-changed tile updates

● Collaboration:● client-side JS / animated commenting● Change tracking / commenting

● Internal design / out of control threading

● Calc – 500k rows re-work.

Page 15: Real Time, Secure Collaboration - people.gnome.orgmichael/data/2017-09-21-owncloud.pdf · ownCloud Conference 2017, Nuremburg| Michael Meeks 1 / 28 Michael Meeks General Manager at

15

Collabora Online 2.1 ...

● Internal re-design: simplifying threading

● Security Improvements● seccomp-bpf: pre-emptive kernel API sub-setting● Content Security Policy / header improvements● stronger admin password hashing

● Calc● 500k rows re-work.● Active cell reference

Page 16: Real Time, Secure Collaboration - people.gnome.orgmichael/data/2017-09-21-owncloud.pdf · ownCloud Conference 2017, Nuremburg| Michael Meeks 1 / 28 Michael Meeks General Manager at

16

Collabora Online 2.1.x

● Avatar support● with optional ‘verbs’:

– call / chat etc.

● Improved Admin Console● View

byusers

● Modified?

Page 17: Real Time, Secure Collaboration - people.gnome.orgmichael/data/2017-09-21-owncloud.pdf · ownCloud Conference 2017, Nuremburg| Michael Meeks 1 / 28 Michael Meeks General Manager at

17

Collabora Online 2.1.x

● Chart sub-objectediting & position

● New platforms● RHEL6● SLES11SP4● Debian 9

● Config expansion● rlimits, memory handling, etc.

Page 18: Real Time, Secure Collaboration - people.gnome.orgmichael/data/2017-09-21-owncloud.pdf · ownCloud Conference 2017, Nuremburg| Michael Meeks 1 / 28 Michael Meeks General Manager at

18

Collabora Online 2.1.<next>

● Coming rather soon now:● Multi-language spell checking underlines

● Save As – support● PAM integration for admin-console● Watermarked tiles:

– Document as pixelswith watermarks.

Page 19: Real Time, Secure Collaboration - people.gnome.orgmichael/data/2017-09-21-owncloud.pdf · ownCloud Conference 2017, Nuremburg| Michael Meeks 1 / 28 Michael Meeks General Manager at

19

Come see us in Rome ...

● Lots of workfrom diversecommunity

● Rome:October11-13th ...

0

200

400

600

800

1000

1200

1400

1600

1800

2000

Commits per month by affiliation

RedHatCollaboraAssignedCIBTDFPeralexSILMunichCanonicalApache VolunteerLinagoraNou & OffSUSE

Ubuntu LTS RoadmapA 10k user survey.“Help Ubuntu set the Default Apps”

Page 20: Real Time, Secure Collaboration - people.gnome.orgmichael/data/2017-09-21-owncloud.pdf · ownCloud Conference 2017, Nuremburg| Michael Meeks 1 / 28 Michael Meeks General Manager at

https://collaboraoffice.com

In-development:for Collabora Online 3.0

Page 21: Real Time, Secure Collaboration - people.gnome.orgmichael/data/2017-09-21-owncloud.pdf · ownCloud Conference 2017, Nuremburg| Michael Meeks 1 / 28 Michael Meeks General Manager at

21

Next: Rich Editing

2.1.x … “Save As”

Your feature here … ?

Page 22: Real Time, Secure Collaboration - people.gnome.orgmichael/data/2017-09-21-owncloud.pdf · ownCloud Conference 2017, Nuremburg| Michael Meeks 1 / 28 Michael Meeks General Manager at

22

Ongoing work for 3.0 & beyond

● Interoperability● inherited from LibreOffice● Big chunks of file-format fixing● PPTX export work → 2.1.x● Pivot Table export wins → 2.1.x● New Pivot Charts feature → 3.x

● EMF+/EMF rendering → 3.x

● Import/export performance, threading

● Latency & Bandwidth● Much improved tile compression …

● And more ...

Page 23: Real Time, Secure Collaboration - people.gnome.orgmichael/data/2017-09-21-owncloud.pdf · ownCloud Conference 2017, Nuremburg| Michael Meeks 1 / 28 Michael Meeks General Manager at

https://collaboraoffice.com

Deployment bits

Page 24: Real Time, Secure Collaboration - people.gnome.orgmichael/data/2017-09-21-owncloud.pdf · ownCloud Conference 2017, Nuremburg| Michael Meeks 1 / 28 Michael Meeks General Manager at

24

Hardware Sizing

● Guidelines:● 10 active users / CPU thread● 50Mb RAM / active user● 100kbit/s / active user

● Capacity factor not a hoster …→

● 5000 ‘users’ diversity 500 concurrent users:→ →● 50 CPU threads● 25 Gb of RAM● 50 Mbit of bandwidth

● Can setup today on a single large machine.

Page 25: Real Time, Secure Collaboration - people.gnome.orgmichael/data/2017-09-21-owncloud.pdf · ownCloud Conference 2017, Nuremburg| Michael Meeks 1 / 28 Michael Meeks General Manager at

25

HA / setup ...

● HA setup more fun● Split into three 8 CPU machines, 8GB each

UsersHA balancer of

choice: ha-proxy, or F5

Key attribute is to ensure that all traffic related to the same document goes to the same worker – all collaborators end up in the same address space. Balancing on WOPISrc

https://http://

Collabora OnlineWorker Nodes

Page 26: Real Time, Secure Collaboration - people.gnome.orgmichael/data/2017-09-21-owncloud.pdf · ownCloud Conference 2017, Nuremburg| Michael Meeks 1 / 28 Michael Meeks General Manager at

https://collaboraoffice.com

Why Collabora ?

Page 27: Real Time, Secure Collaboration - people.gnome.orgmichael/data/2017-09-21-owncloud.pdf · ownCloud Conference 2017, Nuremburg| Michael Meeks 1 / 28 Michael Meeks General Manager at

27

What you get ...

● Customer Portal access● Access to Collabora

Online binaries &update channels.

● Full Technical Docs– Setup, deployment,

– User manual

● Support ticketingsystem – file & fix.

● Product Managementinteraction.

Page 28: Real Time, Secure Collaboration - people.gnome.orgmichael/data/2017-09-21-owncloud.pdf · ownCloud Conference 2017, Nuremburg| Michael Meeks 1 / 28 Michael Meeks General Manager at

28 28 / 28 ownCloud Conference 2017, Nuremburg | Michael Meeks

Conclusions

Georgeous, interoperable, ownCloudintegrated, document collaboration

“make user conflict resolution a thing of the past”

Continuous, improvement based on a deepcustomer & partner discussion

Services & Support from Collabora

The driving force behind LibreOffice Online.

Thanks also - to all those who support & develop LibreOffice – much appreciated.

Oh, that my words were recorded, that they were written on a scroll, that they were inscribed with an iron tool on lead, or engraved in rock for ever! I know that my Redeemer lives, and that in the end he will stand upon the earth. And though this body has been destroyed yet in my flesh I will see God, I myself will see him, with my own eyes - I and not another. How my heart yearns within me. - Job 19: 23-27