<div><div dir="auto">Not sure about OpenSIPS specifically, but I would assume it has been implemented in docker just as much as kamailio and freeSWITCH/Asterisk.</div><div dir="auto"><br></div><div dir="auto">This is done all over the world. Docker is not an emulator or a virtual machine host. When you run something on docker, its speed is (almost) exactly the same as running it on the host itself, since there’s no OS overhead, it works by separating processes via Cgroups, no by virtualizing or emulating hardware.</div><div dir="auto"><br></div><div dir="auto">Quote:</div><div dir="auto"><br></div><div dir="auto"><span style="font-family:RedHatText,Overpass,Overpass,Helvetica,Arial,sans-serif;color:rgb(21,21,21)">The Docker technology uses the </span><a href="https://www.redhat.com/en/topics/linux/what-is-the-linux-kernel" style="box-sizing:border-box;text-decoration:none;font-family:RedHatText,Overpass,Overpass,Helvetica,Arial,sans-serif;color:rgb(0,102,204);background-position:0px 0px">Linux kernel</a><span style="font-family:RedHatText,Overpass,Overpass,Helvetica,Arial,sans-serif;color:rgb(21,21,21)"> and features of the kernel, like </span><a href="https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/Resource_Management_Guide/ch01.html" style="box-sizing:border-box;text-decoration:none;font-family:RedHatText,Overpass,Overpass,Helvetica,Arial,sans-serif;color:rgb(0,102,204);background-position:0px 0px">Cgroups</a><span style="font-family:RedHatText,Overpass,Overpass,Helvetica,Arial,sans-serif;color:rgb(21,21,21)"> and </span><a href="https://lwn.net/Articles/528078/" style="box-sizing:border-box;text-decoration:none;font-family:RedHatText,Overpass,Overpass,Helvetica,Arial,sans-serif;color:rgb(0,102,204);background-position:0px 0px">namespaces</a><span style="font-family:RedHatText,Overpass,Overpass,Helvetica,Arial,sans-serif;color:rgb(21,21,21)">, to segregate processes so they can run independently. This independence is the intention of containers‐the ability to run multiple processes and apps separately from one another to make better use of your infrastructure while </span><a href="https://www.redhat.com/en/topics/security" style="box-sizing:border-box;text-decoration:none;font-family:RedHatText,Overpass,Overpass,Helvetica,Arial,sans-serif;color:rgb(0,102,204);background-position:0px 0px">retaining the security</a><span style="font-family:RedHatText,Overpass,Overpass,Helvetica,Arial,sans-serif;color:rgb(21,21,21)">you would have with separate systems.</span><br></div></div><div dir="auto"><br></div><div><div dir="auto">So in simple terms, docker simply separates processes.</div><div dir="auto"><br></div><div dir="auto">There ARE, nonetheless, some problems with dockerizing everything. I have read issues like If the network traffic is way way way too high, you may encounter issues like dropped packets, etc. but this is a problem on the networking side, I.e: the iptables rules. Also the natting related to using docker can be cumbersome, but once you’re over that, it’s home free. </div><div dir="auto"><br></div><div dir="auto">So, as long as you manage your infrastructure well, you shouldn’t have problems.</div><div dir="auto"><br></div><div dir="auto">In terms of troubleshooting a failing container. All logging should be sent to some log server, and you can do your troubleshooting there. Also, don’t kill a failing container so you can access it (via ssh or attach or exec) and troubleshoot it.</div><div dir="auto"><br></div><div dir="auto">The pros of using docker/k8s greatly outweighs the cons, in my opinion.</div><div dir="auto"><br></div><div dir="auto">Hope this help.</div><div dir="auto"><br></div><div dir="auto">David</div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Sat, 2 May 2020 at 11:33, H Yavari via Users <<a href="mailto:users@lists.opensips.org">users@lists.opensips.org</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-style:solid;padding-left:1ex;border-left-color:rgb(204,204,204)"><div><div style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif;font-size:13px"><div style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif"></div>
<div dir="ltr" style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif">Thank you Johan,</div><div dir="ltr" style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif"><br></div><div dir="ltr" style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif">When your infrastructure goes to run with k8s or other same platforms, it's hard to make some exceptions.</div><div dir="ltr" style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif">Also softwares like opensips that are working just with DB, can run very smoothly. <br></div><div dir="ltr" style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif"><br></div><div dir="ltr" style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif">Although I haven't seen any problem yet after moving it to containers, but I am interested in hearing from others and developers team.</div><div dir="ltr" style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif"><br></div><div dir="ltr" style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif"><br></div><div dir="ltr" style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif">Regards,</div><div dir="ltr" style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif">HY<br></div><div dir="ltr" style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif"><br></div><div dir="ltr" style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif"><br></div><div style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif">--------<br></div>
</div></div><div><div id="m_3211529236503319823ydpa5d46026yahoo_quoted_9395098427">
<div style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif;font-size:13px;color:rgb(38,40,42)">
<div style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif">
On Saturday, May 2, 2020, 12:51:51 PM GMT+4:30, johan <<a href="mailto:johan@democon.be" target="_blank" style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif">johan@democon.be</a>> wrote:
</div>
<div style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif"><br></div>
<div style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif"><br></div>
<div style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif"><div id="m_3211529236503319823ydpa5d46026yiv4517330760" style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif"><div style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif">
<p style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif">First of all, I am not aware of a production kubernetes cluster.
<br clear="none">
</p>
<p style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif">Using containers has advantages : fast install, easy to move.
The annoying thing is that if it goes wrong, it is not easy to
troubleshoot. Secondly, you add an extra abstraction layer,
abstraction (most of the time) reduces speed and decreases
capacity. <br clear="none">
</p>
<p style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif">In short : it all depends on the size of your system. In ip4 I
don't see the advantage. What could be a nice scalable system, is
to deploy on ip6 with anycast. <br clear="none">
</p>
<p style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif">Just my thoughts ... <br clear="none">
</p>
<div id="m_3211529236503319823ydpa5d46026yiv4517330760yqt12388" style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif"><div style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif">On 2/05/2020 07:49, H Yavari via Users
wrote:<br clear="none">
</div>
<blockquote type="cite" style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif">
</blockquote></div></div><div id="m_3211529236503319823ydpa5d46026yiv4517330760yqt28477" style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif"><div style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif"><div style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif;font-size:13px">
<div style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif">Hi to all,</div>
<div style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif"><br clear="none">
</div>
<div dir="ltr" style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif">As you know docker and K8s,
are growing quickly. So we dockerized Asterisk and OpenSIPS
also.<br clear="none">
</div>
<div dir="ltr" style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif">But I see some community
members are against it. They have some reasons like NAT, RTP
ports and performance.</div>
<div dir="ltr" style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif"><br clear="none">
</div>
<div dir="ltr" style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif">Do you agree with them ? <br clear="none">
</div>
<div dir="ltr" style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif">Is there any successful large
scale OpenSIPS cluster based on K8s ?</div>
<div dir="ltr" style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif"><br clear="none">
</div>
<div dir="ltr" style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif"><br clear="none">
</div>
<div dir="ltr" style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif">Thanks for sharing your
experiences.</div>
<div dir="ltr" style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif"><br clear="none">
</div>
<div dir="ltr" style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif"><br clear="none">
</div>
<div dir="ltr" style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif">Regards,</div>
<div dir="ltr" style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif">HY<br clear="none">
</div>
</div>
<br clear="none">
<fieldset style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif"></fieldset>
<pre style="font-family:monospace">_______________________________________________
Users mailing list
<a shape="rect" href="mailto:Users@lists.opensips.org" rel="nofollow" target="_blank" style="font-family:monospace">Users@lists.opensips.org</a>
<a shape="rect" href="http://lists.opensips.org/cgi-bin/mailman/listinfo/users" rel="nofollow" target="_blank" style="font-family:monospace">http://lists.opensips.org/cgi-bin/mailman/listinfo/users</a>
</pre>
</div></div></div><div id="m_3211529236503319823ydpa5d46026yqt83325" style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif">_______________________________________________<br clear="none">Users mailing list<br clear="none"><a shape="rect" href="mailto:Users@lists.opensips.org" rel="nofollow" target="_blank" style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif">Users@lists.opensips.org</a><br clear="none"><a shape="rect" href="http://lists.opensips.org/cgi-bin/mailman/listinfo/users" rel="nofollow" target="_blank" style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif">http://lists.opensips.org/cgi-bin/mailman/listinfo/users</a><br clear="none"></div></div>
</div>
</div></div>_______________________________________________<br>
Users mailing list<br>
<a href="mailto:Users@lists.opensips.org" target="_blank">Users@lists.opensips.org</a><br>
<a href="http://lists.opensips.org/cgi-bin/mailman/listinfo/users" rel="noreferrer" target="_blank">http://lists.opensips.org/cgi-bin/mailman/listinfo/users</a><br>
</blockquote></div></div>-- <br><div dir="ltr" class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div>Regards,</div><div><br></div>David Villasmil<div>email: <a href="mailto:david.villasmil.work@gmail.com" target="_blank">david.villasmil.work@gmail.com</a></div><div>phone: +34669448337</div></div></div>