Document not found! Please try again

Custom Linux Kernel Security Monitor Azure Sphere MCUs

1 downloads 132 Views 4MB Size Report
Redis Cache. CosmosDB. And more! Partner services. OpenShift. Pivotal Cloud. Foundry. Docker Enterprise. Edition. Mesosp
Developers

Open Source

Face-based logins

Polyglots

Increase focus on core value

Machine learning everywhere

Using AI/ML

Standardizes via code

AR & VR

Leveraging cloud

A great way to learn

Electric cars & drones

Relying on DevOps

Cope with rapid change

Space tourism

Going serverless

Scale beyond your team

Gene editing

Using containers

Share best practices with everyone in your value chain

Microsoft is a company by, of and for developers

Language

Platform

Data

DevOps

Infrastructure

Azure Sphere MCUs create a secured root of trust for connected, intelligence edge devices C O N N E C T E D with built-in networking S E C U R E D with built-in Microsoft silicon C Osecurity N N E C Ttechnology E D with built-in networking including the Pluton Security Subsystem S E C U R E D with built-in Microsoft silicon security technology Pluton Security Subsystem C R O S Sincluding O V E R the Cortex-A processing power brought to MCUs for the first time C R O S S O V E R Cortex-A processing power brought to MCUs for the first time

Microsoft Pluton

Network Connection

FLASH

Security Subsystem

Firewall

ARM Cortex-A

≥ 4MB

Wi-Fi in first chips

Firewall

Firewall

SRAM

ARM Cortex-M

≥ 4MB

Optimized for low power

For real-time processing

Firewall

Firewall

Firewall

Multiplexed I/O

GPIO

© Microsoft Corporation

PWM

TDM

I2S

UART

I2C

SPI

ADC

The Azure Sphere OS is optimized for IoT, Security and MCU agility Azure Sphere OS Architecture OS Layer 4

App Containers for POSIX (on Cortex-A)

App Containers for I/O (on Cortex-Ms)

OS Layer 3

On-chip Cloud Services

OS Layer 2

Custom Linux Kernel

OS Layer 1

Security Monitor

Hardware

Azure Sphere MCUs

© Microsoft Corporation

Secure Application Containers Compartmentalize code for agility, robustness & security

On-chip Cloud Services Provide update, authentication, and connectivity

Custom Linux kernel Empowers agile silicon evolution and reuse of code

Security Monitor Guards integrity and access to critical resources

The container advantage

Fast iteration

Agile delivery

For developers

Immutability

Cost savings

Efficient deployment

For IT

Elastic bursting

Kubernetes: the de-facto orchestrator

Portable

Extensible

Self-healing

Public, private, hybrid, multi-cloud

Modular, pluggable, hookable, composable

Auto-placement, auto-restart, auto-replication, auto-scaling

If you have a preferred container platform Pivotal Cloud Foundry  Kubernetes  Docker Enterprise Edition Red Hat OpenShift  Mesosphere DC/OS

We’ll help you bring it to Azure

Azure container ecosystem OSBA App Service

OpenShift

Azure services

PaaS

Partner services

Azure Container Registry (ACR)

SQL Database Azure Container Service (AKS)

Pivotal Cloud Foundry

Redis Cache

Docker Enterprise Edition

CosmosDB

Mesosphere DC/OS

And more!

Service Fabric

Batch Kubernetes Release Automation Tools

ACS Engine

Virtual kubelet

Azure Container Instances (ACI)

Azure Virtual Machines

Virtual Machine Scale Sets (VMSS)

IaaS

Azure

Azure Container Service (AKS)

Azure Container Service (AKS) A fully managed Kubernetes cluster

Azure Container Instances (ACI) • Managed control pane Managed Azure Container Registry

Application architect

• Cost savings

Applications

Kubernetes Infrastructure architect

Docker

Azure infrastructure services Release Automation Tools

• Easy cluster scaling • Self-healing

Operations Open Service Broker API (OSBA)

• Automated upgrades, patches

Azure Container Service (AKS)

Azure Container Instances (ACI)

PREVIEW

Easily run containers on Azure with a single command Azure Container Instances (ACI)

Azure Container Registry

Open Service Broker API (OSBA)

Release Automation Tools

Start using containers right away

Cloud-scale container capacity

Hyper-visor isolation

Azure Container Service (AKS)

Azure Container Instances (ACI) ACI Connector for Kubernetes

Azure Container Instances (ACI)

Azure Container Registry

Open Service Broker API (OSBA)

Release Automation Tools

Kubernetes provides rich orchestration capabilities

ACI provides infinite container-based scale

The ACI Connector for K8s brings them together

Azure Container Service (AKS)

Azure Container Instances (ACI) Virtual Kubelet

Azure Container Instances (ACI)

Azure Container Registry

Open Service Broker API (OSBA)

Release Automation Tools

Kubernetes API

Kubelet

Kubelet

Kubelet

Kubelet

Node

Node

Node

Node

Typical kubelets implement the pod and container operations for each node as usual.

virtual kubelet

Virtual kublet registers itself as a “node” and allows developers to program their own behaviors for operations on pods and containers.

Azure Container Service (AKS)

Release automation tools Simplifying the Kubernetes experience

Azure Container Instances (ACI)

Azure Container Registry

Open Service Broker API (OSBA)

Release Automation Tools

Streamlined Kubernetes development

The package manager for Kubernetes

Event-driven scripting for Kubernetes

Visualization dashboard for Brigade

Source Tools & artifacts

Community

Open

Roadmap

Dialogue

Design