Resource orchestration for multiple services
A method of orchestrating one or more radio resources among various services executing within a container. The method includes obtaining, by an orchestration engine executing on a network device, a request, from a first service of a plurality of services, for use of a physical/hardware resource that connects a container running on the network device to a network. The request from the first service has a particular priority. The plurality of services execute within the container. The method further includes determining whether to connect the first service to the network via the physical/hardware resource based on the priority and an availability status of the physical/hardware resource and establishing, at a kernel level, a connection between the first service and the physical/hardware resource based on the determining.
1. A method comprising:
obtaining, by an orchestration engine executing on a network device, a request, from a first service of a plurality of services that are executing within one of one or more containers, for use of a physical/hardware resource that connects the one or more containers running on the network device to a network, wherein the request includes a priority;
determining whether to connect the first service to the network via the physical/hardware resource based on the priority in the request; and
establishing, at a kernel level, a connection between the first service from among the plurality of services executing in the one or more containers and the physical/hardware resource based on determining to connect the first service.
2. The method of claim 1 , wherein the plurality of services include the first service executing in a first container and a second service executing in a second container.
3. The method of claim 2 , wherein establishing the connection includes:
generating a bridge, at the kernel level, between the first service and a virtual wire that connects the one or more containers to a host layer of the physical/hardware resource.
4. The method of claim 2 , wherein the physical/hardware resource is shared among the first service and the second service by injecting a virtual wire at the kernel level to establish the connection between a respective service from among the first service and the second service.
5. The method of claim 1 , further comprising:
generating, for each of the plurality of services, a container network interface to the orchestration engine such that the orchestration engine arbitrates a plurality of requests, from the plurality of services, for one or more physical/hardware resources of the network device, wherein the plurality of services include one or more of an application or a virtual container.
6. The method of claim 1 , wherein establishing, at the kernel level, the connection between the first service and the physical/hardware resource includes:
injecting the first service into a namespace that includes a set of signs to identify objects within the one or more containers.
7. The method of claim 1 , further comprising:
toggling a bridge to a virtual wire that connects the one or more containers to a host layer of the physical/hardware resource, from a second service executing in a second container to the first service executing in a first container based on a high priority of the request.
8. The method of claim 1 , further comprising:
obtaining, from the physical/hardware resource by the orchestration engine, an incoming traffic-mirroring request; and
generating a bridge from each of the plurality of services to a virtual wire that connects the one or more containers to a host layer of the physical/hardware resource.
9. The method of claim 1 , further comprising:
selecting the physical/hardware resource from one or more physical/hardware resources based on availability states of the one or more physical/hardware resources and the priority of the request.
10. An apparatus comprising:
a memory;
a network interface configured to enable network communications; and
a processor, wherein the processor is configured to perform operations comprising:
obtaining, by an orchestration engine executing on a network device, a request, from a first service of a plurality of services that are executing within one of one or more containers, for use of a physical/hardware resource that connects the one or more containers running on the network device to a network, wherein the request includes a priority;
determining whether to connect the first service to the network via the physical/hardware resource based on the priority in the request; and
establishing, at a kernel level, a connection between the first service from among the plurality of services executing in the one or more containers and the physical/hardware resource based on determining to connect the first service.
11. The apparatus of claim 10 , wherein the plurality of services include the first service executing in a first container and a second service executing in a second container.
12. The apparatus of claim 11 , wherein the processor is configured to perform the operation of establishing the connection by:
generating a bridge, at the kernel level, between the first service and a virtual wire that connects the one or more containers to a host layer of the physical/hardware resource.
13. The apparatus of claim 11 , wherein the physical/hardware resource is shared among the first service and the second service by the processor injecting a virtual wire at the kernel level to establish the connection between a respective service from among the first service and the second service.
14. The apparatus of claim 10 , wherein the processor is further configured to perform an additional operation comprising:
generating, for each of the plurality of services, a container network interface to the orchestration engine such that the orchestration engine arbitrates a plurality of requests, from the plurality of services, for one or more physical/hardware resources of the network device, wherein the plurality of services include one or more of an application or a virtual container.
15. The apparatus of claim 10 , wherein the processor is configured to perform the operation of establishing the connection between the first service and the physical/hardware resource by:
injecting the first service into a namespace that includes a set of signs to identify objects within the one or more containers.
16. The apparatus of claim 10 , wherein the processor is further configured to perform an additional operation comprising:
toggling a bridge to a virtual wire that connects the one or more containers to a host layer of the physical/hardware resource, from a second service executing in a second container to the first service executing in a first container based on a high priority of the request.
17. One or more non-transitory computer readable storage media encoded with instructions that, when executed by a processor, cause the processor to perform operations including:
obtaining, by an orchestration engine executing on a network device, a request, from a first service of a plurality of services that are executing within one of one or more containers, for use of a physical/hardware resource that connects the one or more containers running on the network device to a network, wherein the request includes a priority;
determining whether to connect the first service to the network via the physical/hardware resource based on the priority in the request; and
establishing, at a kernel level, a connection between the first service from among the plurality of services executing in the one or more containers and the physical/hardware resource based on determining to connect the first service.
18. The one or more non-transitory computer readable storage media according to claim 17 , wherein the plurality of services include the first service executing in a first container and a second service executing in a second container.
19. The one or more non-transitory computer readable storage media according to claim 18 , wherein the instructions cause the processor to establish the connection by:
generating a bridge, at the kernel level, between the first service and a virtual wire that connects the one or more containers to a host layer of the physical/hardware resource.
20. The one or more non-transitory computer readable storage media according to claim 18 , wherein the physical/hardware resource is shared among the first service and the second service by the processor injecting a virtual wire at the kernel level to establish the connection between a respective service from among the first service and the second service.